last executing test programs:

19m12.066568813s ago: executing program 4 (id=889):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="8800000020000100ffffffff00000000811420000000000712000000080006000080000014000200ff010000000000000000000000000001140002060000000000000000000000000000000114000200fe8000000000000000000000000000bb14000200fe880000000000000000000000000101140001"], 0x88}, 0x1, 0x0, 0x0, 0x20000811}, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

19m11.13644158s ago: executing program 4 (id=891):
socket$netlink(0x10, 0x3, 0x15)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x20000000, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0xfe, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)

19m10.938434984s ago: executing program 4 (id=892):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0x200000000000000}, 0x0)

19m10.781264615s ago: executing program 4 (id=893):
syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00')
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x20000000000008, 0x400000, 0x10000, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x200000000005, 0x7, 0x4000, 0x3, 0x4, 0xefffffffffffffff, 0x99e, 0x0, 0x2000000, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, r5, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0xf}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "62c5e2d4af08ff83f8ab6bff98559029"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "2921590afdca7865a11bcbd5fe02285e"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a364a33ff0d34bb744c36b326da52193"}, @NL80211_ATTR_PMK={0x14, 0xfe, "1fcdb04b71caad6c1d1f53cc45ac71bb"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "188b46b569d580c0f045e2e645adbd65"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24005800}, 0x800)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
unshare(0x2c020400)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r8, &(0x7f0000004940))
move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r9, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='k'}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac00}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_usb_connect(0x1, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x42, 0x68, 0xc8, 0x40, 0x12d1, 0x1c22, 0x80ab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xff, [{{0x9, 0x4, 0x9c, 0x0, 0x0, 0xff, 0x1, 0x65, 0x6}}]}}]}}, 0x0)

19m7.402138264s ago: executing program 4 (id=915):
syz_emit_ethernet(0xfc0, &(0x7f0000002700)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a00000000000000000000e0ff000012000000fe8000000000000000000000000000aa840040"], 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
munmap(&(0x7f0000ff5000/0x9000)=nil, 0x9000)
set_mempolicy_home_node(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002b715f08e11d02c1894d0000000109021200010000006c0904"], 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x40500, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0)=0x10001, 0x12)
getdents64(r1, 0x0, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x3cfa, 0x8000, 0xffffffff, 0x69}, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000))
close_range(r2, r2, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0xca602, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000000)=@s={0x5, @generic=0x73, 0xfe, 0x5})
write$tcp_congestion(r1, &(0x7f0000000140)='illinois\x00', 0xfcc9)

19m7.054245927s ago: executing program 4 (id=918):
socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
getsockname$inet(r0, 0x0, &(0x7f0000000100))
writev(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x1a1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e220000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000193001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0)

19m6.876640864s ago: executing program 32 (id=918):
socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
getsockname$inet(r0, 0x0, &(0x7f0000000100))
writev(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x1a1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e220000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000193001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0)

18m50.335660225s ago: executing program 5 (id=919):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) (async)
capset(&(0x7f0000000080)={0x19980330}, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000a40), 0x6, 0x98000)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000000)={0x0, 0xe1d, &(0x7f0000019600)=""/4096}) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r4, &(0x7f0000000140)='J', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async, rerun: 64)
r5 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 64)
syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="431000002ce66b222755"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r5, 0x0, 0x0)
syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="0007005400002dd4e0f8230aa9628ff01eb8469e16761e29a28b15a405ca7c81d8b04ab98d9b6481ec4cbbd68d741a311934ca0cd495f3e03b4a8b43367f9007b7181d4ebcbe8e9ba8a1bb8a9f7ceb7df475241f4174eb44151ef1fb8e341b4ea166fc"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
listen(r4, 0xda90) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r7 = epoll_create1(0x80000) (async, rerun: 64)
r8 = epoll_create1(0x0) (rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000140)={0xa000000d}) (async)
r9 = epoll_create1(0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000300)={0x10000000})
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000600)) (async, rerun: 64)
accept4(r4, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, 0x80000) (async, rerun: 64)
syz_io_uring_setup(0x3802, &(0x7f00000002c0)={0x0, 0x2000a853, 0x8000, 0x8, 0x120}, &(0x7f0000000100), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)

18m48.726149235s ago: executing program 5 (id=966):
syz_open_dev$evdev(0x0, 0x2, 0x903d01)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}})
set_mempolicy(0x3, &(0x7f0000000000)=0xfff, 0x6)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x1}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, 0x0)
ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x3})
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0)
write$vga_arbiter(r5, &(0x7f0000000a40)=ANY=[@ANYBLOB="746172676574205043493a303a383a316b2e31006039eda267739f1ef79d0000a35afa6a5543557c9c42e8a0ed2ad5ebdb14cb5dc2ae1d897046138674d23130847813c73a9d1237d796f566fff037bb7f6a90d1515ca58e9e4ed6d53dfe50"], 0x14)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)

18m45.291893081s ago: executing program 5 (id=981):
r0 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0xffffffff})
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226)
move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000003c0)='./file0\x00', 0x231)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x38ff, &(0x7f0000000480)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3})
io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r8 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0)
r9 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000180)="5e73663bf4082f7c1a9ecbf09d6dd7be5a06dfd645630500c15abd43b1da111b5a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112c50cc", 0x0, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="0201000202ffff948ebd700000000000"], 0x10}, 0x19}, 0x0)
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0xc0, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x7, 0x1e, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x5, 0x7f}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x23, 0xfa, 0x0, 0xff, 0x8}, 0x11f, &(0x7f0000000240)={0x5, 0xf, 0x11f, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0xb, 0x0, 0x0, [0xff0000, 0xcf]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x5, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xbf, "66fd2a6e59e94488bbffe5d210e1ee97"}, @generic={0xe1, 0x10, 0x2, "beae9c49f9b30bf2b2b8825e316a18808c26f8345831aba003f8723ff7cbf1ff333ef41968e8075ea7d55315947b8464b63e3a68f8378391b37acbe9d9f2415ae97a9aadfad785b635bdaf5e70a9dc1553a225e41aec48fe6a19ba633d90bf746809fa46f940b4960ed2de04d3773ad327cc4d1cfc4e779cb6e825e80e832334e198f79c27e47aff678acf5400138e71cbdc323e668d9244b00aa64b41ab7f642d1cc385e99279629d20711f757c6f1df26b7b91b0198ce069050d11ced10d545c0a885e0f5f302bf4a34424adf2a0351e3dab0e894edfa7975c8313577f"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x9}]}, 0x6, [{0x3e, &(0x7f0000000380)=@string={0x3e, 0x3, "e7882645c6c39f9bf72ab3dc9757a523a8b1e7cb0f8426d5c073ce076c19e707f3dc5405e254b193d2bf87078528eba9baefbd52bad085e0f34557ee"}}, {0x2f, &(0x7f0000000500)=@string={0x2f, 0x3, "526b37ed77190b8aea4a262356c7b9e194772a343427ddb8d30374cca0363e7f0376ddd24ab81fc71dcc236a64"}}, {0xf, &(0x7f0000000540)=@string={0xf, 0x3, "042a1a495ef66c125e9b74ec58"}}, {0x87, &(0x7f0000000580)=@string={0x87, 0x3, "3b0a2fa9feca0c0611526d77713785dd302fa84339ecc3f2b426499466065bed2f3f4505447455213f8853d7f24b791c040eaa8a17d64cf71cf4b5cdb0e125ea3fc1eaebb5ef2267be0684cdf1f9f9e3776c9a9d8f251383a5e652eab668616f590bf01736688243da812218f02c49cf368d8c338864c51a2236482814b9b88f610ca7035a"}}, {0xe6, &(0x7f0000000640)=@string={0xe6, 0x3, "0d0dccb2615fdceafd37a5b906cb70a872534964f4b29f83ed20232f29dd069616c8c3912cb8818da90e492bec3b053be8085cc33c4be6c6946e449fbdecb5019a95bdda2736d2492aec798288b26884e5e7cd4c35d9d17d2091c3c6b52c4efe67a898830203cb7e115072bdcf1bdca3ae02b4243c431f34b147fdcaba33ee8a81d4d27fcdf3aba303672c8f7d86d1fa2b5fb8cb21ff77de2a7fc9f02181a21396f2707b59fe131459314d43de6fdca2c5e49767b383174a08eb3eade41fd620c72c088308f2375bbe386251a50a8ca71508f126db92da13947f188e8c9e52f9e6667928"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1407}}]})
close_range(r0, 0xffffffffffffffff, 0x0)
fchdir(r10)

18m44.044871324s ago: executing program 5 (id=984):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000095e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

18m43.750552922s ago: executing program 5 (id=989):
r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040))

18m42.257148328s ago: executing program 33 (id=989):
r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040))

17m54.172469513s ago: executing program 1 (id=1171):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_usb_connect(0x2, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x9e, 0xc4, 0x5e, 0x20, 0x9fb, 0xebbe, 0x395d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0xd, 0xa0, 0x0, [{{0x9, 0x4, 0xb1, 0x0, 0x1, 0x55, 0xf8, 0x6, 0xff, [], [{{0x9, 0x5, 0x1, 0xc, 0x8, 0x3, 0x1}}]}}]}}]}}, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)={0x1, r1})

17m52.686262751s ago: executing program 1 (id=1183):
r0 = socket(0x2, 0x3, 0xff)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="189772100048f5c56a6aeb00ffffffff0bd87cc6fcc9b76b030000000000fd00", 0x20}], 0x1, 0x0, 0x0, 0x4000}}, {{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20040000}}], 0x2, 0x20000000)

17m52.309917518s ago: executing program 1 (id=1185):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$kcm(0x10, 0x3, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x79, 0x8d, &(0x7f00000000c0))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
sysinfo(&(0x7f00000004c0)=""/31)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
syz_80211_join_ibss(0x0, &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x2)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dbdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e00000/0x3000)=nil, 0x3000, &(0x7f0000000000)='/dev/adsp1\x00')
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003340)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000850)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x3c, r9, 0x431, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000)
mmap(&(0x7f0000e01000/0x1000)=nil, 0x1000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)

17m51.480687936s ago: executing program 1 (id=1188):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00')
listen(0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000022c0)={0x13, 0x6, {0x80000000, @usage=0x9, 0x0, 0x6, 0x1, 0x3, 0x7, 0x200, 0xc4, @struct={0x4, 0x5}, 0xffffffff, 0x690, [0xc9, 0x1, 0x6, 0x9, 0x1, 0x80]}, {0xffffffff, @struct={0x6, 0x4}, 0x0, 0x90e, 0x2, 0x583, 0x1000, 0x1, 0x48, @usage=0x5, 0xfffffff8, 0x5, [0x5, 0x7, 0x4, 0x2, 0x3]}, {0x3, @struct={0x3, 0x9}, <r3=>0x0, 0x7, 0x3, 0x7, 0xfffffffffffffffb, 0x3, 0x80, @usage=0x8, 0x1616, 0x4, [0x3, 0x5, 0x6e66d01, 0x101, 0x4, 0x3]}, {0x5, 0x4, 0x6}})
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000002900)={0xf, 0x5, {0x9, @usage=0x7fffffff, 0x0, 0x3908, 0x8, 0xff, 0x2, 0x80000001, 0x450, @struct={0xfffffff7, 0x5}, 0x2, 0x9d, [0xabd, 0x3, 0x9, 0x6a, 0x2, 0x1]}, {0x2, @usage=0xacb, 0x0, 0xc, 0x4, 0xffffffffffffff01, 0xab3, 0x7, 0x193, @struct={0x7, 0xdc4}, 0x8, 0x4, [0x8, 0x5cf, 0x7fff, 0x0, 0x8ab1, 0x4]}, {0xffffffff, @usage=0x4, r3, 0x7, 0x61, 0x3, 0x9a, 0x7, 0x10, @struct={0x6, 0x4}, 0x5, 0x3b24, [0xb736, 0xe, 0x4, 0xd, 0x1, 0x5]}, {0x8000000000000001, 0x84, 0x5}})
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8806, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="c351726f75705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0)
pread64(r1, &(0x7f0000000600)=""/4099, 0x1003, 0x110)
socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006081000418e00000004fcff", 0x58}], 0x1)
read$char_usb(r0, &(0x7f0000000240)=""/9, 0x9)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x37, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(0xffffffffffffffff, 0x1, 0x0)
fchdir(r6)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
close(r6)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
sendto$inet6(r4, &(0x7f00000000c0)="4cf09c5844029bf25990607f6f64816858eff5e6a4baf0686de7", 0x1a, 0x4, &(0x7f0000000100)={0xa, 0x4e24, 0x1, @local, 0xfffff9a9}, 0x1c)
syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007f, 0x200800)

17m51.162150455s ago: executing program 1 (id=1189):
r0 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0xffffffff})
r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00')
read$FUSE(r3, &(0x7f00000042c0)={0x2020}, 0x2020)
r4 = syz_io_uring_setup(0x38ff, &(0x7f0000000480)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1})
io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0)
r8 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a00)=@newchain={0x840, 0x64, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xfff1, 0x2}, {0xffed, 0x3}}, [@f_rsvp6={{0xa}, {0x810, 0x2, [@TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xe1c9, 0x6, 0x69, 0x0, 0x4, 0xe, 0x7fff, 0x8, 0x1, 0x7, 0x0, 0x1, 0x4, 0x8, 0x30000, 0x81, 0xfffffff2, 0x8, 0x6, 0x0, 0x4, 0x8, 0x1a80, 0x4, 0x80000000, 0x0, 0xf, 0x100, 0x3, 0x7fff, 0x3ff, 0x8000, 0x5, 0x7ff, 0x5, 0x1, 0xfffffffe, 0x11, 0x1, 0x69b6e8d4, 0x5, 0x8, 0x5, 0x0, 0x4, 0xd2d, 0xfffffff7, 0x0, 0x8, 0xfffffb87, 0x3, 0xbac, 0x3, 0x22, 0x2, 0x0, 0x80000001, 0x4, 0x3, 0x6, 0xb, 0x4, 0x5, 0x5, 0x4fa, 0x5, 0x80, 0x0, 0xa, 0x97f, 0x6, 0x2, 0x5, 0x46, 0x8a, 0x6, 0x7, 0x7fffffff, 0x10000, 0x5, 0xffff, 0x10000, 0x2, 0x40, 0x239, 0x80, 0x7, 0xa55c, 0x8, 0xe4c, 0x4, 0x80000000, 0xfffffff7, 0x0, 0x9, 0x7fff, 0x2, 0x87, 0x3, 0x7fffffff, 0x100000, 0xd416, 0x2, 0x8, 0x4, 0x346, 0x8, 0xfffffff5, 0x8, 0x0, 0x8, 0xffff, 0x6, 0x1, 0xd, 0x5, 0x800, 0x4, 0x5, 0xffff, 0x5, 0x5, 0x2, 0x5, 0x80, 0x0, 0x4, 0x73, 0x8001, 0x2f, 0x400, 0x95f8, 0x7, 0xfffffffc, 0x7b, 0x9, 0x6, 0x101, 0x6, 0x392bc097, 0x3, 0x1e6d0, 0xfffffff8, 0x1, 0x3, 0x38, 0xc9, 0xd03d, 0x3, 0x2, 0xb, 0x0, 0xe, 0x8, 0xa8, 0x6a09, 0xffffffff, 0x80, 0x101, 0x6, 0x5, 0x9, 0x5, 0x8, 0x2d, 0x0, 0x87e, 0x8c8, 0x5, 0xaf, 0x1, 0x65, 0x8, 0x2, 0x3, 0x6, 0x565, 0xfffffff7, 0xd, 0x5, 0x6, 0x4, 0x101, 0x3, 0x8, 0x9, 0x754712d7, 0x8, 0x0, 0x800, 0x6, 0x8001, 0x1, 0x80000001, 0x401, 0x40, 0x7, 0x7ff, 0x80000001, 0x10, 0x4, 0x5, 0x5, 0x5, 0x0, 0x6, 0xe, 0x2, 0x1ff00, 0x1, 0x87, 0x7, 0xfff, 0x100, 0x8, 0x3, 0x1ff, 0x5, 0xffff, 0x5, 0x7, 0x3, 0x2, 0x5, 0xd, 0x3ab3ebed, 0x0, 0x294, 0x100, 0x0, 0xdce8, 0x1, 0x0, 0x8, 0x8, 0x9, 0x1ff, 0x100, 0xfd000000, 0x0, 0xd, 0x5, 0x6, 0x491, 0x1, 0x7, 0x81, 0x2, 0x8, 0x6, 0xc9, 0x1b7, 0x9, 0x1, 0x81000000, 0x2558]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x6, 0x9, 0x6, 0x1, 0x3, 0xff, 0x8001, 0xffffffff, 0x2, 0x4, 0x2, 0x7fff, 0x101, 0x3, 0xffffa6c5, 0x3, 0x2, 0xd, 0x3424, 0x0, 0x800, 0x0, 0x5, 0x5, 0x0, 0x7, 0x101, 0xffffffff, 0x4, 0xee40, 0x8, 0x9, 0x9, 0x7ff, 0x2, 0xffff3d8d, 0x1, 0x6, 0x6, 0xa, 0x5, 0x4, 0x7, 0xe, 0x1000, 0x8e, 0x8, 0xc, 0x1, 0x4, 0x1, 0xfffffffc, 0x6, 0x0, 0x3, 0x4, 0x8001, 0x3, 0x3ff, 0x10001, 0x6, 0x6, 0x6, 0x5, 0x0, 0xb, 0x83e1, 0x4, 0x1, 0x4b02, 0x4, 0x9, 0x3, 0xeaae, 0xb67, 0x9, 0x2, 0x15af, 0x8001, 0xfffffffc, 0x7fffffff, 0x9, 0xffffffff, 0x4, 0xd7b, 0x6, 0x9, 0x2, 0x3acc449a, 0x7, 0x9e4, 0x5, 0x1, 0xe, 0xa2a, 0x2, 0xb25, 0x1, 0x3, 0x1, 0x45, 0x101, 0x1a7, 0x1, 0x0, 0xffff, 0xd1f, 0x7, 0xe7af, 0x9, 0x7, 0x200, 0x3, 0x7, 0x771536ba, 0x80000000, 0xff, 0x4, 0xb, 0x5, 0x9, 0x0, 0x1ff, 0x6, 0xb2be, 0x2, 0x1, 0x953, 0x7, 0xeaa, 0x6, 0x1, 0x9e, 0x2, 0x5, 0x7, 0x1, 0xf2, 0xc, 0x8001, 0xa3, 0x9, 0x4, 0x6, 0x9, 0x2, 0x8001, 0x0, 0x6924, 0x8000, 0x7, 0x5, 0x7, 0x7f, 0x2, 0x7, 0x1, 0x7fffffff, 0x6, 0x6e1e7dd8, 0x8, 0xe387, 0x9d3, 0x6, 0x8, 0x8, 0x101, 0x8, 0x10001, 0xfffffff8, 0x6, 0x9, 0x0, 0x7, 0x18, 0x10000, 0xfffffffe, 0x7, 0x5, 0x4, 0x34fc, 0x4, 0xc, 0x74800, 0x4, 0x9, 0x9, 0xffff, 0x6, 0xffffffff, 0x8, 0x5, 0x1, 0x1, 0xc2c5, 0xffff, 0x5, 0x9, 0x9, 0x8, 0x1000, 0x2, 0x4, 0x7ff, 0x6, 0x4, 0x4, 0x1, 0x2, 0x1, 0xf74, 0x7, 0x1000, 0x6, 0x5, 0x810a, 0x4, 0x7, 0x4, 0x8, 0x0, 0x2, 0xa7f, 0x97, 0x8, 0x6, 0x1bc2e981, 0x80000001, 0x3, 0x3, 0x4, 0x80000000, 0xe3a, 0x1, 0x8, 0xf, 0x7, 0x80000001, 0x2, 0x6, 0x8da, 0x6, 0x3, 0xb, 0x4, 0x41, 0xffff1de5, 0x81, 0x7, 0x1, 0x8, 0x6, 0x80000001, 0x5, 0x3]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0xc1}, 0x4000)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000200)=ANY=[@ANYRES16=r9, @ANYRES16=r12, @ANYRES32=r12, @ANYRESOCT=r12, @ANYBLOB="a1ec6c215f93c31452473f47affabf2ecf117f37d0301fb07a02520816f685a34f9577a3e2729fa6a9157f604edda901cc"], 0x32600)
bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x2, 0x4}}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0)
preadv2(r9, &(0x7f0000000580)=[{&(0x7f0000000280)=""/241, 0xf1}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f00000005c0)=""/56, 0x38}, {&(0x7f0000000540)=""/30, 0x1e}], 0x4, 0x5, 0x8, 0x1)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000180)="5e73663bf4082f7c1a9ecbf09d6dd7be5a06dfd645630500c1a30343b1da111b5a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112c50cc", 0x0, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}}, 0x0)
r13 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r13, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="0201000202ffff948ebd700000000000"], 0x10}, 0x19}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

17m50.443764204s ago: executing program 1 (id=1192):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100}, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="14005a800c"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x0)

17m50.076364213s ago: executing program 34 (id=1192):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100}, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="14005a800c"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x0)

10m32.743355485s ago: executing program 6 (id=2962):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000600000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

10m32.414353085s ago: executing program 6 (id=2964):
r0 = socket$inet(0xa, 0x801, 0x9)
listen(r0, 0x8)
accept4(r0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0x4, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7})
sched_setattr(0x0, 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000a40), 0x6, 0x98000)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r7, 0xc01064ac, &(0x7f0000000000)={0x0, 0xe1d, &(0x7f0000019600)=""/4096})
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r8, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x208c, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0)
listen(r8, 0xda90)

10m31.398423468s ago: executing program 6 (id=2966):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x1300}, 0x4)

10m31.074734975s ago: executing program 6 (id=2969):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000009000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0)

10m30.57431788s ago: executing program 6 (id=2973):
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="73b67cefcc29d59d9cfdb6dec68ede2d1d"])
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594", 0xf}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r5 = userfaultfd(0x80001)
socket$inet(0x2, 0xa, 0x0)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

10m28.678624358s ago: executing program 6 (id=2978):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000680)=@get={0x1, &(0x7f0000000600)=""/101, 0x8})
removexattr(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="9fcb0613e5054d95a27bf32ef4c7a1886600008ba31265b9e3d99114647a6fd29df8b945f5d5f74ed2e808617461e9e1401d9d1f23ff623e6a31e006c56b236ab09e4408de720f4a5d52a9c8e9ee7b28aa8814677eb52a266b0fdd60b9d07fb16469331716c1ef8dce2968fb9d30fb725b609a369012f77cf6e8c14fc597f84b865cdaef9a68"])
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
syz_io_uring_setup(0x38d3, &(0x7f00000007c0)={0x0, 0xac71, 0x10000, 0x3, 0x2ef}, &(0x7f0000000000), &(0x7f0000000380))
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64=0x0])
read$FUSE(r2, &(0x7f0000002980)={0x2020, 0x0, <r3=>0x0}, 0x2020)
ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000300)={0x0, 0x2, 0x5, '\x00', 0x0})
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x2024, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x5}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0a00010000000000005a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r4 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r5, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f00000005c0))
syz_fuse_handle_req(r2, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x143000, 0x0)
writev(r6, &(0x7f0000000280)=[{&(0x7f00000049c0)="a1ff7625c4a67c2ce177313091a4b00b3e712e", 0x13}], 0x3f)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010000104000500"/20, @ANYRES32, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32], 0x48}}, 0x0)
r8 = ioctl$USERFAULTFD_IOC_NEW(r6, 0xaa00)
ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000000000/0x2000)=nil, 0x2000}, 0x2})
close(r2)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206050000040000000000090073797a3107000000051400077ffb00114000fe1a00050015000e00000011000300686173683a6e65742c6ec14928a44012726574000000000000"], 0x60}}, 0x0)

10m28.011059095s ago: executing program 35 (id=2978):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000680)=@get={0x1, &(0x7f0000000600)=""/101, 0x8})
removexattr(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="9fcb0613e5054d95a27bf32ef4c7a1886600008ba31265b9e3d99114647a6fd29df8b945f5d5f74ed2e808617461e9e1401d9d1f23ff623e6a31e006c56b236ab09e4408de720f4a5d52a9c8e9ee7b28aa8814677eb52a266b0fdd60b9d07fb16469331716c1ef8dce2968fb9d30fb725b609a369012f77cf6e8c14fc597f84b865cdaef9a68"])
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
syz_io_uring_setup(0x38d3, &(0x7f00000007c0)={0x0, 0xac71, 0x10000, 0x3, 0x2ef}, &(0x7f0000000000), &(0x7f0000000380))
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64=0x0])
read$FUSE(r2, &(0x7f0000002980)={0x2020, 0x0, <r3=>0x0}, 0x2020)
ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000300)={0x0, 0x2, 0x5, '\x00', 0x0})
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x2024, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x5}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0a00010000000000005a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r4 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r5, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f00000005c0))
syz_fuse_handle_req(r2, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x143000, 0x0)
writev(r6, &(0x7f0000000280)=[{&(0x7f00000049c0)="a1ff7625c4a67c2ce177313091a4b00b3e712e", 0x13}], 0x3f)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010000104000500"/20, @ANYRES32, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32], 0x48}}, 0x0)
r8 = ioctl$USERFAULTFD_IOC_NEW(r6, 0xaa00)
ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000000000/0x2000)=nil, 0x2000}, 0x2})
close(r2)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206050000040000000000090073797a3107000000051400077ffb00114000fe1a00050015000e00000011000300686173683a6e65742c6ec14928a44012726574000000000000"], 0x60}}, 0x0)

10m8.567345902s ago: executing program 3 (id=3038):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x20000001, &(0x7f00000000c0)={0xa, 0x4e23, 0x7fffffff, @local, 0x7}, 0x1c) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f1e6ffffffff0000000013000000ee000000", @ANYRES32=r2, @ANYBLOB="04001300060012000200000006001000df0000000a000600ffffffffffff00000c0081000500020051000000"], 0x48}, 0x1, 0x0, 0x0, 0x4814}, 0x8050) (async)
dup2(r0, r0) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000100)=0x4) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x248}, 0x1, 0x0, 0x0, 0x4011}, 0x0) (async)
r5 = socket$inet(0x2, 0x3, 0x3)
setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)

10m4.378459129s ago: executing program 3 (id=3045):
mmap$IORING_OFF_SQ_RING(&(0x7f000052f000/0x1000)=nil, 0x1000, 0x200000e, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[])
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r3, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r4, 0x0, 0x310)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x7133})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

10m1.953489575s ago: executing program 3 (id=3051):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0)
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
write(r2, &(0x7f0000000180)="01010101", 0x4)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
close(r3)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0xfffe)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0)

10m1.710167107s ago: executing program 3 (id=3052):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000040))
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000400001000000000000100c41000000030014"], 0x68}}, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)

10m0.705421807s ago: executing program 3 (id=3054):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0xffffffef}, 0x800)

10m0.320510026s ago: executing program 3 (id=3058):
add_key$keyring(&(0x7f0000000380), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0xd541f000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0)
write$binfmt_elf32(r3, &(0x7f0000000f00)=ANY=[], 0x66)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xf0, 0xa0, 0x1000, 0x1000000, 0x20, 0x0, {0x0, 0x9416, 0xfffffffe}, {0x350, 0xfffffffd}, {0xf4ef}, {0x2, 0x4, 0xffe}, 0x1, 0x100, 0x0, 0x292, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x4, 0x2, 0xb})
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, 0x0)
r5 = fcntl$getown(r0, 0x9)
getpriority(0x0, r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00'], 0x38}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x20000000000002b4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff56, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x210000, 0x1)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r8, r8, 0x0, 0x200000)

9m59.650820191s ago: executing program 36 (id=3058):
add_key$keyring(&(0x7f0000000380), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0xd541f000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0)
write$binfmt_elf32(r3, &(0x7f0000000f00)=ANY=[], 0x66)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xf0, 0xa0, 0x1000, 0x1000000, 0x20, 0x0, {0x0, 0x9416, 0xfffffffe}, {0x350, 0xfffffffd}, {0xf4ef}, {0x2, 0x4, 0xffe}, 0x1, 0x100, 0x0, 0x292, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x4, 0x2, 0xb})
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, 0x0)
r5 = fcntl$getown(r0, 0x9)
getpriority(0x0, r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00'], 0x38}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x20000000000002b4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff56, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x210000, 0x1)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r8, r8, 0x0, 0x200000)

13.438208738s ago: executing program 2 (id=5790):
syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x40, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @generic={0x13, 0xb, "60418ec1e40da6e70b"}, @exp_fastopen={0xfe, 0x4}]}}, {"ccbc26a2"}}}}}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
pipe(&(0x7f00000000c0))
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40080)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x80882)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

12.795836044s ago: executing program 7 (id=5793):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000c76000/0x2000)=nil, 0x2000}, 0x1})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0x1a, r3, 0xc, &(0x7f0000000000))
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r5, &(0x7f0000002800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
socket$nl_route(0x10, 0x3, 0x0)
pipe(0x0)
syz_emit_ethernet(0x4a, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500003c00000000000190780a010102ac1414aa05c39078e0000002480000000000000000110000ac141400ac1414aa440c0001000000004e2100"], 0x0)
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[<r7=>0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000640)=[r7], 0x1, 0x800})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0})

10.334993235s ago: executing program 0 (id=5800):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fspick(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xa)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0)
ftruncate(r4, 0x200004)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r4], 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000180))
write$apparmor_exec(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8)
sendfile(r3, r4, 0x0, 0x80001d00c0d1)

9.803755527s ago: executing program 2 (id=5801):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6})
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

9.650765603s ago: executing program 7 (id=5802):
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x4008018)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x339)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000002060103000000000000000803000000"], 0x14}}, 0x0)
close(r3)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000e3ba3a8740f227d7c0defea36d0a074098cfe12a421cb7db24182415ad37272da4fff067ad712fe010c9aa74a52656d01a3ff98de4fd5371a03fd4f67f", @ANYRES16=r7, @ANYBLOB="010027bd7000fedbdf258900000008000300", @ANYBLOB="10001d800c000080060005001500000014b7a1188ff167f1b4828d"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[<r9=>0x0]})
r10 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'dummy0\x00', <r11=>0x0})
setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, r11, 0x267a4e37}, 0xc)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r8, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0, r9})
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x5)
sendto$inet(r5, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0)

8.110249907s ago: executing program 8 (id=5804):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20008005, 0x0, 0x0)
shutdown(r0, 0x1)
recvfrom(r0, 0x0, 0xfffffffffffffd1e, 0x40000002, 0x0, 0x19)

7.762022117s ago: executing program 8 (id=5806):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e1a, 0x8, @loopback, 0x3}], 0x1c)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xc) (async)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8faa"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8faa"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000201010400000000000000000a001200440001802c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280"], 0xb4}}, 0x0)

7.283941741s ago: executing program 2 (id=5807):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0)
fanotify_init(0xa00, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x1, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r6, 0x0, 0xffffffffffffffff, 0x4001})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r6, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000})
r7 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$sysctl(r7, &(0x7f0000000300)='0\x00', 0x2)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01000000000008000000030000005800018044000400200001000a000004000000020000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a3100000000"], 0x6c}}, 0x0)
r8 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'gre0\x00', <r10=>0x0})
sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000300e000000200000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r10, @ANYBLOB="04"], 0xc4}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
sendfile(r8, r8, 0x0, 0x4800000009)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x3c, r1, 0x1, 0x1000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x3ff}]}]}]}, 0x3c}}, 0x0)

7.144797128s ago: executing program 8 (id=5808):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x1000, 0x10009, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0x4})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r6, &(0x7f0000000280), 0x0}, 0x20)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
dup(r2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

6.840345157s ago: executing program 7 (id=5809):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x28040600)
r3 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00')
fallocate(r3, 0x3, 0x1ff, 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f6, 0x0)
getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000001c0), 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000900000024000480130001006272"], 0x38}, 0x1, 0x0, 0x0, 0x4042080}, 0x0)
remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x7, 0x5, 0xa, 0x9, 0x6, 0x2, 0x1041, 0x4, 0x0, 0x33a, 0x3, 0xffffffff, 0x4, 0x9, 0x800005, 0x6c], 0x2000, 0x1000d6})
mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004050}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, 0x0, 0x0)

6.58226552s ago: executing program 8 (id=5810):
r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='\x00', r0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0xd541f000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0)
write$binfmt_elf32(r3, &(0x7f0000000f00)=ANY=[], 0x66)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xf0, 0xa0, 0x1000, 0x1000000, 0x20, 0x0, {0x0, 0x9416, 0xfffffffe}, {0x350, 0xfffffffd}, {0xf4ef}, {0x2, 0x4, 0xffe}, 0x1, 0x100, 0x0, 0x292, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x4, 0x2, 0xb})
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, 0x0)
getpriority(0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00'], 0x38}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, 0x0, 0x4)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x20000000000002b4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff56, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x210000, 0x1)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r7, r7, 0x0, 0x200000)

6.54583289s ago: executing program 0 (id=5811):
socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
getsockname$inet(r0, 0x0, &(0x7f0000000100))
writev(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x1a1, 0x0)
socket$kcm(0x29, 0x7, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e220000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000003000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0)

5.866524909s ago: executing program 0 (id=5812):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001e40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x11c4, &(0x7f0000001ec0)={[{0x84, 0x4e00, "54169c9fcdbfa8ea0659a5a01e9e411d91dcee3f9bbfd97c167aa12ff78c2725393c923a4f8e696c991b005bf4833445c2b7f04b2ed921977d3a49d877d49ed03a28bd39a115c4af37a65f99d88e699677a98b5e573b3b9a1ce4c33c230cc004a00ad47ebb73c66e82bbb1c31bc7c746d45587b4763f1a948c2a5053e33dcbde8dfc84cf"}, {0x1000, 0x4e00, "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"}, {0x80, 0x4e00, "a4f2a12a85f2d8549f8e05c763773fb643cefb578834e8a2518518397d89b1820f20e7c8ddeb0a84cd4497dca80573db80dc73d2fa0af9d163dcf6896decc26aba0835544d4f50ff84e4626ad5b589f404ee9225f3a65c980e1a6798abdf126c6a5f872dd057da78243b7ae3a6951d12ecc5c9a5e7ae71f8689f9f68bc1a58d3"}, {0x1e, 0x4e00, "de0e7fe7a42041af4a1f7cb6998f7c9d21fd172e93139e8d9916c4acd3b4"}, {0x8b, 0x4e00, "13a29ef36ddb0e84c41b5e1feeb3f5a67ce905ee2b37b5a6cef8527ea9673c51eafca056fe851e8f5cf8289bd0cb7c8828ba58574c014ae41f0fa55aa82074ad42f3c655321712507fa898b87379a3fb4b23104cbd6d513cd67b387a405e87c4b1db590be436ecdd44c13f6d7535ee48d5dc77334a53cf60b7ec6e2d36b832a1827f770a8605763fc51aab"}]})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000001cc0)=ANY=[@ANYBLOB='*@\x00N'])
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000009)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x1b8, 0x3})
fcntl$lock(r2, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd})
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000001dc0)=[{{&(0x7f0000000140)=@caif, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/255, 0xff}], 0x1}, 0x1}, {{&(0x7f0000000340)=@qipcrtr, 0x80, &(0x7f0000001d00)=[{&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000740)=""/102, 0x66}, {&(0x7f00000007c0)=""/229, 0xe5}, {&(0x7f00000008c0)=""/185, 0xb9}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/137, 0x89}, {&(0x7f0000001a40)=""/133, 0x85}, {&(0x7f0000001b00)=""/13, 0xd}, {&(0x7f0000001b40)=""/196, 0xc4}, {&(0x7f0000001c40)=""/60, 0x3c}], 0xa, &(0x7f0000001c80)=""/55, 0xfffffddc}, 0xe18}], 0x2, 0x0, 0x0)
fcntl$lock(r2, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x3})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000006c0)={[{}]})

5.557633181s ago: executing program 7 (id=5813):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0)
fanotify_init(0xa00, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x1, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r4, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01000000000008000000030000005800018044000400200001000a000004000000020000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a3100000000"], 0x6c}}, 0x0)
r5 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0)
sendfile(r5, r5, 0x0, 0x4800000009)

4.041699054s ago: executing program 9 (id=5814):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4050000150000007196140000000000bc2029000000000095000000000000005faa29f81189290e3c9bf80bbc91378c01a708663b59495dcc8fac"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
renameat(r4, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000080)='./file0\x00')

3.85980606s ago: executing program 2 (id=5815):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf59e}}}}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x38}}, 0x40040d0)

3.812870013s ago: executing program 7 (id=5816):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x10000, 0x0, 0x1, 0x1}, 0x20)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000001040)=0x2, 0x4)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001880)={'wg0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r7, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x40, r7, 0x1, 0x0, 0xfffffffc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x40}}, 0x0)
r8 = syz_open_dev$rtc(0x0, 0x0, 0x0)
ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x12, 0x3a, 0xe, 0xa, 0x7, 0x5, 0x1, 0x8010000, 0xe755a3d832dace16}})
syz_usb_connect(0x0, 0x227, &(0x7f0000001100)={{0x12, 0x1, 0x0, 0x2, 0x94, 0x5d, 0x20, 0xcf3, 0x1006, 0xefb8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x215, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8d, 0x0, 0x3, 0x2d, 0xd2, 0xba, 0x0, [@generic={0x60, 0x10, "a7ac99922a9b82807e8a6176d31d7b9f1ec208dd964a02bc808acd16dacd1e753530fab1518870297c4dd036184346b1a7a676fcdec3406bef9999149ab1284f3f69271ffe0b46bf2ef293ce630819d3323181b219b014024add1674c910"}, @uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0x40, "8d2046", "90"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xd8, 0x2, 0x0, 0x7, "fd54da", "c5"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xfb, 0x3, 0x7, 0x73}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x847, 0x6, "f15f0ceb19119893"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x80, "c81739"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x4, "994e2aa3"}]}], [{{0x9, 0x5, 0x80, 0x0, 0x8, 0x5, 0x4, 0x0, [@generic={0x5a, 0x31, "6762c2a3c3291dc5cb6dd0de9f2f8e415c692d86e4f6d7a73920413cda9a4f6486081eb83cc10479d538fb58e548009c238ea905c10c3c5073829676b30bbf131e67dd0862f1d8034a275434ee9fbfe18137cd0a8024970e"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0xb, 0xa, 0x1}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x9, 0x4, 0x8, [@generic={0x6a, 0x24, "04f93870e43d986d3e2fc673ce894604281d95757574a9aaf463f7b874a64e4a14afd505b978ae2354f140b074a00af9a3fa9c865f98db86edf99e8e9c4cf94cf690bdd4e001002f014b45f5a38d9fd1caf4b230c8b311b31bc5c8d25ef5b10d69ab3750b853d1b8"}, @generic={0x7b, 0x11, "495962ef41c9a040b7dc86eaa386fd37be1c443c9dd99c68d23afd83300047eba26084b39d077aec4083ba4c89f3d3e84ac7668ba8646ba051fefe8f1fafaeac6e918d701cc09b98e895d48b40aea7d8a9cd4af3e717975c63cdc52d4481e3f92284808d7c850dc2460a37485a4adfdcc124109fc13f25b6d9"}]}}]}}]}}]}}, 0x0)
socket$netlink(0x10, 0x3, 0x400000000000004)
socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x100000000}, 0x18)
r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r9, 0xc0603d0f, &(0x7f0000000040))

3.781587397s ago: executing program 2 (id=5817):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fspick(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xa)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0)
ftruncate(r4, 0x200004)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r4], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000180))
write$apparmor_exec(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8)
sendfile(r3, r4, 0x0, 0x80001d00c0d1)

3.473973268s ago: executing program 8 (id=5818):
landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x1, 0x1}, 0x18, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0)
r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800})
poll(&(0x7f00000000c0)=[{r3, 0xe7d4c009da6c1985}, {r3, 0x201}], 0x2, 0x4)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
signalfd(r4, &(0x7f0000000140)={[0x1]}, 0x8)
dup(r5)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r4, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0x8c1})
socket$nl_route(0x10, 0x3, 0x0)

2.326497926s ago: executing program 9 (id=5819):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x3c, r1, 0x300, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x80000000}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x6}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0xcc}]}, 0x3c}}, 0x20000000)
keyctl$set_reqkey_keyring(0xe, 0x2)

2.245701332s ago: executing program 9 (id=5820):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000020006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0)

2.190673667s ago: executing program 0 (id=5821):
unshare(0x22020600)
r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x6766, 0x40, 0x3}, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x5e2, &(0x7f0000000600)={0x0, 0x0, 0x864, 0x0, 0x0, 0x0, r0}, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r3=>0x0})
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054)
setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@remote, r3}, 0x14)

1.450307102s ago: executing program 9 (id=5822):
modify_ldt$write(0x1, &(0x7f0000000100)={0xe, 0xc363ac0399f6d33e, 0x400, 0x1, 0x2, 0x1, 0x1}, 0x10)
modify_ldt$read(0x0, &(0x7f0000000000)=""/250, 0xfa)
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x401, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x1, 0x3, 0x4, 0x0, 0x40})
sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3a6e3ab531103d957d639d0454ea975a9b81fda96ad758837426328f3511e79545203c08adfac433de5f45cb96d4dd67c33fd1f9c572660573b16d498ae3502f4773e0708760cbe0b98187b81793f592d9028ed92aa55fb0b24eeab8d1519dc2dda09614404a22a10119", @ANYRES16=r3], 0x2c}, 0x1, 0xffffff7f}, 0x84)

1.40012811s ago: executing program 2 (id=5823):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x4)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x10000, 0x0, 0xffffffff, 0x0, 0xfffffffe}, [@TCA_NETEM_RATE={0x14, 0xe, {0x80000002}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x4, 0x0, 0x7}}]}}}]}, 0x8c}}, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x487, 0x0, 0x9}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r10 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r11)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r10, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908})
syz_io_uring_setup(0x6482, &(0x7f0000000100)={0x0, 0x7a53, 0x2000, 0x3, 0x73}, &(0x7f0000000180)=<r12=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x10c, &(0x7f0000000200)=0x4, 0x0, 0x4)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6})
r13 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x18, 0x5, 0x5, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50)
write$P9_RSTATu(r13, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r10, @ANYRES32=0x0], 0x2c2)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006)

1.288236472s ago: executing program 0 (id=5824):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000004000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

1.041933642s ago: executing program 0 (id=5825):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000540)={0x0, 0xaee2, 0x1, 0xa, 0xbf9ffffc}, 0x0, &(0x7f0000000280))
io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r7, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x4, 0x8}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1e, 0x45, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @broadcast}, {0x4f20, 0x4e22, 0x31, 0x0, @wg=@data={0x4, 0x1, 0x3c, "85fcdde5f46853a2da2210c818bab23450c6f22f25cce55223"}}}}, 0x53)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r9], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000240)={0x6})
socket$inet6_mptcp(0xa, 0x1, 0x106)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000002, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a23, 0x1000, 0x8, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x200, 0x7ffffffd, 0x1, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x400, 0x1, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0xc, 0x0, 0xffffffff, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x9, 0x2, 0x7, 0x7, 0x6, 0xfffffffa, 0x81, 0x8, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x9, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x11], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x9, 0x0, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x1000, 0x5, 0x2, 0x15, 0x8000, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0xb0634729341f9d1a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0)

1.041666398s ago: executing program 9 (id=5826):
r0 = socket(0x2, 0x3, 0xff)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="189772100048f5c56a6aeb00ffffffff0bd87cc6fcc9b76b030000000001f400", 0x20}], 0x1, 0x0, 0x0, 0x4000}}, {{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20040000}}], 0x2, 0x20000000)

853.484684ms ago: executing program 8 (id=5827):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000c76000/0x2000)=nil, 0x2000}, 0x1})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)

831.769914ms ago: executing program 9 (id=5828):
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0xfdff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x53, 0xffffffffffffffff, 0x0)
socket(0xa, 0x800, 0xfffffffb)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
listen(r2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x9, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x2009, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5e, 0x1, 0x3, 0x5, 0x1, 0x1f461e2c, 0x4, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xa, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x3010, 0x3, 0x9, 0x1, 0x7, 0x3, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x7, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x201, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYRESHEX])

0s ago: executing program 7 (id=5829):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@loopback, 0xfffd, 0x1, 0x0, 0x0, 0xa}, {0x2, 0x6, 0x6, 0x0, 0x7, 0x4, 0x1}, {0x4000000005c, 0x7, 0xfffffffffffffff9, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in6=@mcast2, 0xffffffde, 0x0, 0x2, 0x7f, 0x7}}, 0xe8)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r2, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000fc0), 0x20000, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, &(0x7f0000001000))
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}, 0x1c)
sendto$inet6(r2, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4)

kernel console output (not intermixed with test programs):

 rcu_is_watching+0x15/0xb0
[ 1264.518138][T26174]  ? do_syscall_64+0xbe/0x3b0
[ 1264.518155][T26174]  do_syscall_64+0xfa/0x3b0
[ 1264.518168][T26174]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1264.518181][T26174]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1264.518194][T26174]  ? clear_bhb_loop+0x60/0xb0
[ 1264.518210][T26174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1264.518223][T26174] RIP: 0033:0x7fbae738eec9
[ 1264.518237][T26174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1264.518249][T26174] RSP: 002b:00007fbae81fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1264.518264][T26174] RAX: ffffffffffffffda RBX: 00007fbae75e6090 RCX: 00007fbae738eec9
[ 1264.518275][T26174] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[ 1264.518283][T26174] RBP: 00007fbae81fb090 R08: 0000000000000000 R09: 0000000000000000
[ 1264.518292][T26174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1264.518300][T26174] R13: 00007fbae75e6128 R14: 00007fbae75e6090 R15: 00007fbae770fa28
[ 1264.518322][T26174]  </TASK>
[ 1265.246667][T26181] netlink: 'syz.7.5381': attribute type 4 has an invalid length.
[ 1265.391821][T26181] netlink: 'syz.7.5381': attribute type 4 has an invalid length.
[ 1265.415600][T26181] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5381'.
[ 1265.616870][T26186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5380'.
[ 1266.166977][   T30] kauditd_printk_skb: 22 callbacks suppressed
[ 1266.166997][   T30] audit: type=1326 audit(1758763664.509:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26189 comm="syz.7.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1266.390608][   T30] audit: type=1326 audit(1758763664.509:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26189 comm="syz.7.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1266.468432][   T30] audit: type=1326 audit(1758763664.509:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26189 comm="syz.7.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1266.535263][T18721] usb 9-1: new high-speed USB device number 67 using dummy_hcd
[ 1266.580110][   T30] audit: type=1326 audit(1758763664.509:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26189 comm="syz.7.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1266.602653][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1266.625759][   T30] audit: type=1326 audit(1758763664.509:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26189 comm="syz.7.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1266.813126][T18721] usb 9-1: Using ep0 maxpacket: 32
[ 1266.826935][T18721] usb 9-1: config 0 has an invalid interface number: 188 but max is 0
[ 1266.837533][T18721] usb 9-1: config 0 has no interface number 0
[ 1266.856574][   T30] audit: type=1326 audit(1758763664.509:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26189 comm="syz.7.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1266.880077][T18721] usb 9-1: config 0 interface 188 altsetting 7 bulk endpoint 0x5 has invalid maxpacket 64
[ 1266.983785][T18721] usb 9-1: config 0 interface 188 altsetting 7 endpoint 0x8 has invalid wMaxPacketSize 0
[ 1267.004716][T18721] usb 9-1: config 0 interface 188 altsetting 7 bulk endpoint 0x8 has invalid maxpacket 0
[ 1267.019447][   T30] audit: type=1326 audit(1758763664.509:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26189 comm="syz.7.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1267.044247][ T6002] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[ 1267.070153][T18721] usb 9-1: config 0 interface 188 altsetting 7 has a duplicate endpoint with address 0xA, skipping
[ 1267.070330][T18721] usb 9-1: config 0 interface 188 altsetting 7 endpoint 0xF has invalid maxpacket 1040, setting to 64
[ 1267.070356][T18721] usb 9-1: config 0 interface 188 altsetting 7 has a duplicate endpoint with address 0x3, skipping
[ 1267.071598][T18721] usb 9-1: config 0 interface 188 altsetting 7 bulk endpoint 0xC has invalid maxpacket 32
[ 1267.071624][T18721] usb 9-1: config 0 interface 188 altsetting 7 has a duplicate endpoint with address 0x4, skipping
[ 1267.071646][T18721] usb 9-1: config 0 interface 188 altsetting 7 has a duplicate endpoint with address 0x83, skipping
[ 1267.071670][T18721] usb 9-1: config 0 interface 188 has no altsetting 0
[ 1267.110976][T18721] usb 9-1: New USB device found, idVendor=045e, idProduct=0401, bcdDevice=5d.17
[ 1267.111006][T18721] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1267.111027][T18721] usb 9-1: Product: syz
[ 1267.111041][T18721] usb 9-1: Manufacturer: syz
[ 1267.111056][T18721] usb 9-1: SerialNumber: syz
[ 1267.113962][T18721] usb 9-1: config 0 descriptor??
[ 1267.162195][T26197] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1267.163091][T26197] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1267.223042][   T30] audit: type=1326 audit(1758763664.509:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26189 comm="syz.7.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1267.223088][   T30] audit: type=1326 audit(1758763664.509:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26189 comm="syz.7.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1267.223125][   T30] audit: type=1326 audit(1758763664.509:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26189 comm="syz.7.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1267.430380][ T6002] usb 10-1: Using ep0 maxpacket: 32
[ 1267.452147][ T6002] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219
[ 1267.476304][ T6002] usb 10-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[ 1267.476335][ T6002] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1267.476355][ T6002] usb 10-1: Product: syz
[ 1267.476369][ T6002] usb 10-1: Manufacturer: syz
[ 1267.476384][ T6002] usb 10-1: SerialNumber: syz
[ 1267.479689][ T6002] usb 10-1: config 0 descriptor??
[ 1267.480443][T26203] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1267.487305][ T6002] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[ 1267.617365][T26197] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1267.689363][   T92] usb 9-1: USB disconnect, device number 67
[ 1267.728037][ T6002] usb 10-1: USB disconnect, device number 50
[ 1267.856851][ T8089] udevd[8089]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1268.072505][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1268.154866][   T92] usb 8-1: new high-speed USB device number 100 using dummy_hcd
[ 1268.213025][ T5987] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1268.322938][   T92] usb 8-1: Using ep0 maxpacket: 16
[ 1268.330872][   T92] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1268.354023][   T92] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1268.376409][ T5987] usb 3-1: Using ep0 maxpacket: 8
[ 1268.379631][   T92] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1268.404373][   T92] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1268.415090][ T5987] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 1268.423558][ T5987] usb 3-1: config 179 has no interface number 0
[ 1268.429852][ T5987] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1268.431648][   T92] usb 8-1: Manufacturer: syz
[ 1268.461240][   T92] usb 8-1: config 0 descriptor??
[ 1268.499651][ T5987] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1268.542384][ T5987] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1268.570394][ T5987] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1268.604466][ T5987] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1268.643364][ T5987] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1268.677140][ T5987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1268.703923][T26219] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1268.962806][ T5987] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input81
[ 1269.258902][ T5987] usb 3-1: USB disconnect, device number 8
[ 1269.258967][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1269.259026][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1269.560376][T26240] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5398'.
[ 1269.710024][T26238] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5400'.
[ 1270.356946][T26249] ptrace attach of "./syz-executor exec"[25737] was attempted by "./syz-executor exec"[26249]
[ 1270.495412][T26249] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1270.739132][T26260] syzkaller0: entered promiscuous mode
[ 1270.749342][T26260] syzkaller0: entered allmulticast mode
[ 1271.203132][T26259] vcan0: entered promiscuous mode
[ 1272.142967][ T5987] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 1273.256688][T26289] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5410'.
[ 1273.267235][ T5987] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 1273.282871][ T5987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1273.805455][ T5987] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[ 1273.863013][ T5987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1274.252199][ T5987] usb 1-1: Product: syz
[ 1274.256553][ T5987] usb 1-1: Manufacturer: syz
[ 1274.261201][ T5987] usb 1-1: SerialNumber: syz
[ 1274.354699][ T5987] usb 1-1: config 0 descriptor??
[ 1274.436723][ T5987] powermate: unknown product id 0240
[ 1274.459581][ T5987] powermate: Expected payload of 3--6 bytes, found 11 bytes!
[ 1274.517869][ T5987] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input82
[ 1274.582416][    C0] powermate: config urb returned -71
[ 1274.588236][    C0] powermate: config urb returned -71
[ 1274.593964][    C0] powermate: config urb returned -71
[ 1274.599315][    C0] powermate: config urb returned -71
[ 1274.636252][T26297] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5412'.
[ 1274.666683][ T5987] usb 1-1: USB disconnect, device number 31
[ 1274.672660][    C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[ 1275.000242][T26307] netlink: 'syz.0.5413': attribute type 13 has an invalid length.
[ 1275.095970][T26307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1275.587034][T26315] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5416'.
[ 1275.599076][T26315] netlink: 'syz.8.5416': attribute type 7 has an invalid length.
[ 1275.638212][T26315] netlink: 'syz.8.5416': attribute type 8 has an invalid length.
[ 1275.720237][T26315] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5416'.
[ 1276.601997][T26315] ip6gretap0: entered promiscuous mode
[ 1276.651729][T26315] batadv_slave_1: entered promiscuous mode
[ 1276.667340][T26315] erspan0: entered promiscuous mode
[ 1277.493108][   T92] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1279.899034][   T92] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1279.922443][   T92] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1279.966642][   T92] usb 3-1: can't read configurations, error -71
[ 1280.198711][   T30] kauditd_printk_skb: 28 callbacks suppressed
[ 1280.198728][   T30] audit: type=1326 audit(1758763678.619:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26370 comm="syz.2.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1280.228241][ T5987] usb 9-1: new high-speed USB device number 68 using dummy_hcd
[ 1280.314377][T26375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1280.330715][   T30] audit: type=1326 audit(1758763678.659:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26370 comm="syz.2.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1280.355310][T26375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1280.364210][   T30] audit: type=1326 audit(1758763678.669:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26370 comm="syz.2.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1280.396845][   T30] audit: type=1326 audit(1758763678.679:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26370 comm="syz.2.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1280.420009][   T30] audit: type=1326 audit(1758763678.679:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26370 comm="syz.2.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1280.423294][ T5987] usb 9-1: Using ep0 maxpacket: 8
[ 1280.442474][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1280.443226][   T30] audit: type=1326 audit(1758763678.729:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26370 comm="syz.2.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1280.476113][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1280.590199][   T30] audit: type=1326 audit(1758763678.809:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26370 comm="syz.2.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1280.707740][   T30] audit: type=1326 audit(1758763678.809:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26370 comm="syz.2.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1280.792402][   T30] audit: type=1326 audit(1758763678.939:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26370 comm="syz.2.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1280.848492][   T30] audit: type=1326 audit(1758763678.939:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26370 comm="syz.2.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1280.978157][ T5987] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64
[ 1280.994353][ T5987] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1281.006657][ T5987] usb 9-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[ 1281.019176][ T5987] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1281.027379][ T5987] usb 9-1: Product: syz
[ 1281.031655][ T5987] usb 9-1: Manufacturer: syz
[ 1281.102973][ T6002] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[ 1281.106848][ T5987] usb 9-1: SerialNumber: syz
[ 1281.127086][ T5987] usb 9-1: config 0 descriptor??
[ 1281.144146][ T5987] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found
[ 1281.274780][ T6002] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1281.285524][ T6002] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[ 1281.333400][ T6002] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1281.336030][ T5987] snd_usb_toneport 9-1:0.0: cannot get proper max packet size
[ 1281.359200][ T6002] usb 1-1: config 0 descriptor??
[ 1281.362419][ T5987] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1281.395413][ T5987] snd_usb_toneport 9-1:0.0: probe with driver snd_usb_toneport failed with error -22
[ 1281.556912][ T5987] usb 9-1: USB disconnect, device number 68
[ 1281.646300][T26395] netlink: 'syz.9.5437': attribute type 13 has an invalid length.
[ 1281.745315][T26395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1282.007100][T26403] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5439'.
[ 1282.073311][ T5987] usb 9-1: new high-speed USB device number 69 using dummy_hcd
[ 1282.270826][ T5987] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1282.282769][ T5987] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1282.394085][ T5987] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1282.449697][ T5987] usb 9-1: config 0 descriptor??
[ 1282.492959][T18721] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1282.653470][T18721] usb 3-1: Using ep0 maxpacket: 32
[ 1282.665905][T18721] usb 3-1: config 0 has an invalid interface number: 141 but max is 0
[ 1282.676062][T18721] usb 3-1: config 0 has no interface number 0
[ 1282.691107][T18721] usb 3-1: config 0 interface 141 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1282.719131][T18721] usb 3-1: config 0 interface 141 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64
[ 1282.740804][T18721] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1006, bcdDevice=ef.b8
[ 1282.756234][T18721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1282.765606][T18721] usb 3-1: Product: syz
[ 1282.768821][ T5987] usbhid 9-1:0.0: can't add hid device: -71
[ 1282.776456][ T5987] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1282.785757][T18721] usb 3-1: Manufacturer: syz
[ 1282.790586][T18721] usb 3-1: SerialNumber: syz
[ 1282.804823][ T5987] usb 9-1: USB disconnect, device number 69
[ 1282.879347][T18721] usb 3-1: config 0 descriptor??
[ 1282.905663][T18721] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones
[ 1283.008267][T26412] netlink: 'syz.7.5441': attribute type 1 has an invalid length.
[ 1283.113484][T18721] usb 3-1: USB disconnect, device number 11
[ 1283.263176][ T5987] usb 9-1: new high-speed USB device number 70 using dummy_hcd
[ 1283.442512][ T5987] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1283.460112][ T5987] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1283.477191][ T5987] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1283.496224][ T5987] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1283.550773][ T5987] usb 9-1: config 0 descriptor??
[ 1284.233108][T26430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1284.261455][T26430] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1284.321872][ T6002] usbhid 1-1:0.0: can't add hid device: -71
[ 1284.330331][ T6002] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1284.354382][ T6002] usb 1-1: USB disconnect, device number 32
[ 1284.898397][T26435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5448'.
[ 1285.884185][T26444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1285.907001][ T5987] usbhid 9-1:0.0: can't add hid device: -71
[ 1285.913657][ T5987] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1285.938037][ T5987] usb 9-1: USB disconnect, device number 70
[ 1285.992032][T26444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1286.201470][T26449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1286.210480][T26449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1287.579442][T26478] netlink: 'syz.0.5459': attribute type 13 has an invalid length.
[ 1287.618865][T26478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1288.152986][T18721] usb 9-1: new high-speed USB device number 71 using dummy_hcd
[ 1288.305040][T18721] usb 9-1: Using ep0 maxpacket: 32
[ 1288.322726][T18721] usb 9-1: config 0 has an invalid interface number: 141 but max is 0
[ 1288.335938][T18721] usb 9-1: config 0 has no interface number 0
[ 1288.346406][T18721] usb 9-1: config 0 interface 141 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1288.503441][T18721] usb 9-1: config 0 interface 141 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64
[ 1288.518445][T18721] usb 9-1: New USB device found, idVendor=0cf3, idProduct=1006, bcdDevice=ef.b8
[ 1288.528458][T18721] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1288.536964][T18721] usb 9-1: Product: syz
[ 1288.545729][T18721] usb 9-1: Manufacturer: syz
[ 1288.557193][T18721] usb 9-1: SerialNumber: syz
[ 1288.573210][T18721] usb 9-1: config 0 descriptor??
[ 1288.591015][T18721] usb 9-1: ath9k_htc: Device endpoint numbers are not the expected ones
[ 1288.735711][   T30] kauditd_printk_skb: 21 callbacks suppressed
[ 1288.738721][   T30] audit: type=1326 audit(1758763687.049:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26482 comm="syz.9.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1288.839245][T19767] usb 9-1: USB disconnect, device number 71
[ 1288.889796][   T30] audit: type=1326 audit(1758763687.049:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26482 comm="syz.9.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1289.143372][   T30] audit: type=1326 audit(1758763687.049:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26482 comm="syz.9.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1289.169131][   T30] audit: type=1326 audit(1758763687.049:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26482 comm="syz.9.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1289.224045][   T30] audit: type=1326 audit(1758763687.049:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26482 comm="syz.9.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1289.255360][   T30] audit: type=1326 audit(1758763687.049:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26482 comm="syz.9.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1289.381056][   T30] audit: type=1326 audit(1758763687.049:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26482 comm="syz.9.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1289.591149][   T30] audit: type=1326 audit(1758763687.049:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26482 comm="syz.9.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1289.700837][   T30] audit: type=1326 audit(1758763687.049:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26482 comm="syz.9.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1289.811862][   T30] audit: type=1326 audit(1758763687.049:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26482 comm="syz.9.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1290.033699][T26501] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5463'.
[ 1290.672213][T26505] netlink: 'syz.8.5464': attribute type 13 has an invalid length.
[ 1290.777830][T26505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1292.898649][T26514] FAULT_INJECTION: forcing a failure.
[ 1292.898649][T26514] name failslab, interval 1, probability 0, space 0, times 0
[ 1292.931447][T26514] CPU: 0 UID: 0 PID: 26514 Comm: syz.7.5467 Not tainted syzkaller #0 PREEMPT(full) 
[ 1292.931463][T26514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1292.931470][T26514] Call Trace:
[ 1292.931475][T26514]  <TASK>
[ 1292.931480][T26514]  dump_stack_lvl+0x189/0x250
[ 1292.931497][T26514]  ? __pfx____ratelimit+0x10/0x10
[ 1292.931511][T26514]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1292.931523][T26514]  ? __pfx__printk+0x10/0x10
[ 1292.931545][T26514]  should_fail_ex+0x414/0x560
[ 1292.931563][T26514]  should_failslab+0xa8/0x100
[ 1292.931579][T26514]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1292.931593][T26514]  ? sctp_add_bind_addr+0x8c/0x370
[ 1292.931605][T26514]  sctp_add_bind_addr+0x8c/0x370
[ 1292.931617][T26514]  sctp_copy_local_addr_list+0x30b/0x4e0
[ 1292.931635][T26514]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 1292.931650][T26514]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1292.931666][T26514]  ? sctp_v6_is_any+0x64/0x80
[ 1292.931678][T26514]  ? sctp_copy_one_addr+0x93/0x360
[ 1292.931689][T26514]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1292.931699][T26514]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1292.931715][T26514]  sctp_connect_new_asoc+0x2e0/0x690
[ 1292.931728][T26514]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1292.931741][T26514]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 1292.931753][T26514]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 1292.931764][T26514]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 1292.931776][T26514]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1292.931788][T26514]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1292.931803][T26514]  sctp_sendmsg+0x155c/0x2810
[ 1292.931821][T26514]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1292.931835][T26514]  ? aa_sk_perm+0x81e/0x950
[ 1292.931853][T26514]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1292.931870][T26514]  ? sock_rps_record_flow+0x19/0x410
[ 1292.931887][T26514]  ? inet_sendmsg+0x2f4/0x370
[ 1292.931900][T26514]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1292.931912][T26514]  __sock_sendmsg+0x19c/0x270
[ 1292.931931][T26514]  ____sys_sendmsg+0x505/0x830
[ 1292.931947][T26514]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1292.931965][T26514]  ? import_iovec+0x74/0xa0
[ 1292.931980][T26514]  ___sys_sendmsg+0x21f/0x2a0
[ 1292.931995][T26514]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1292.932026][T26514]  ? __fget_files+0x2a/0x420
[ 1292.932035][T26514]  ? __fget_files+0x3a0/0x420
[ 1292.932050][T26514]  __x64_sys_sendmsg+0x19b/0x260
[ 1292.932064][T26514]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1292.932081][T26514]  ? __pfx_ksys_write+0x10/0x10
[ 1292.932094][T26514]  ? rcu_is_watching+0x15/0xb0
[ 1292.932108][T26514]  ? do_syscall_64+0xbe/0x3b0
[ 1292.932121][T26514]  do_syscall_64+0xfa/0x3b0
[ 1292.932131][T26514]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1292.932142][T26514]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1292.932151][T26514]  ? clear_bhb_loop+0x60/0xb0
[ 1292.932167][T26514]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1292.932177][T26514] RIP: 0033:0x7f4dae58eec9
[ 1292.932187][T26514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1292.932196][T26514] RSP: 002b:00007f4daf4e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1292.932208][T26514] RAX: ffffffffffffffda RBX: 00007f4dae7e5fa0 RCX: 00007f4dae58eec9
[ 1292.932216][T26514] RDX: 0000000000000054 RSI: 0000200000000540 RDI: 0000000000000004
[ 1292.932223][T26514] RBP: 00007f4daf4e1090 R08: 0000000000000000 R09: 0000000000000000
[ 1292.932229][T26514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1292.932236][T26514] R13: 00007f4dae7e6038 R14: 00007f4dae7e5fa0 R15: 00007f4dae90fa28
[ 1292.932252][T26514]  </TASK>
[ 1293.278666][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1293.740313][T26539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5472'.
[ 1293.761127][T26527] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1293.971679][T26534] netlink: 'syz.7.5470': attribute type 1 has an invalid length.
[ 1296.395094][T26568] syzkaller1: entered promiscuous mode
[ 1296.414727][T26568] syzkaller1: entered allmulticast mode
[ 1296.530644][T26576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1296.594679][T26576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1296.633379][ T6002] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1296.871362][T26583] Set syz1 is full, maxelem 65536 reached
[ 1297.282014][ T5987] usb 9-1: new high-speed USB device number 72 using dummy_hcd
[ 1297.423036][ T5987] usb 9-1: device descriptor read/64, error -71
[ 1297.487869][T26597] netlink: 'syz.0.5490': attribute type 1 has an invalid length.
[ 1297.575552][T26597] FAULT_INJECTION: forcing a failure.
[ 1297.575552][T26597] name failslab, interval 1, probability 0, space 0, times 0
[ 1297.593756][T26597] CPU: 0 UID: 0 PID: 26597 Comm: syz.0.5490 Not tainted syzkaller #0 PREEMPT(full) 
[ 1297.593782][T26597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1297.593790][T26597] Call Trace:
[ 1297.593795][T26597]  <TASK>
[ 1297.593800][T26597]  dump_stack_lvl+0x189/0x250
[ 1297.593817][T26597]  ? __pfx____ratelimit+0x10/0x10
[ 1297.593833][T26597]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1297.593853][T26597]  ? __pfx__printk+0x10/0x10
[ 1297.593881][T26597]  ? __pfx___might_resched+0x10/0x10
[ 1297.593903][T26597]  ? fs_reclaim_acquire+0x7d/0x100
[ 1297.593923][T26597]  should_fail_ex+0x414/0x560
[ 1297.593941][T26597]  ? alloc_netdev_mqs+0xa3/0x11b0
[ 1297.593958][T26597]  should_failslab+0xa8/0x100
[ 1297.593974][T26597]  __kvmalloc_node_noprof+0x161/0x5f0
[ 1297.593995][T26597]  ? alloc_netdev_mqs+0xa3/0x11b0
[ 1297.594015][T26597]  ? irqentry_exit+0x74/0x90
[ 1297.594037][T26597]  alloc_netdev_mqs+0xa3/0x11b0
[ 1297.594057][T26597]  ? __pfx_ipvlan_link_setup+0x10/0x10
[ 1297.594077][T26597]  rtnl_create_link+0x31f/0xd10
[ 1297.594096][T26597]  rtnl_newlink_create+0x25c/0xb00
[ 1297.594110][T26597]  ? __lock_acquire+0xab9/0xd20
[ 1297.594128][T26597]  ? __pfx_rtnl_newlink_create+0x10/0x10
[ 1297.594150][T26597]  ? __pfx___mutex_lock+0x10/0x10
[ 1297.594180][T26597]  ? ns_capable+0x8a/0xf0
[ 1297.594203][T26597]  rtnl_newlink+0x16d6/0x1c70
[ 1297.594222][T26597]  ? netlink_sendmsg+0x805/0xb30
[ 1297.594240][T26597]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1297.594263][T26597]  ? kasan_quarantine_put+0xdd/0x220
[ 1297.594275][T26597]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1297.594295][T26597]  ? nlmon_xmit+0xb0/0x100
[ 1297.594313][T26597]  ? kmem_cache_free+0x18f/0x400
[ 1297.594341][T26597]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1297.594359][T26597]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1297.594375][T26597]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1297.594384][T26597]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1297.594396][T26597]  ? __dev_queue_xmit+0x27b/0x3b50
[ 1297.594409][T26597]  ? __dev_queue_xmit+0x27b/0x3b50
[ 1297.594421][T26597]  ? __dev_queue_xmit+0x27b/0x3b50
[ 1297.594439][T26597]  ? __dev_queue_xmit+0x1d79/0x3b50
[ 1297.594466][T26597]  ? __lock_acquire+0xab9/0xd20
[ 1297.594515][T26597]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1297.594526][T26597]  rtnetlink_rcv_msg+0x7cc/0xb70
[ 1297.594539][T26597]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1297.594548][T26597]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1297.594557][T26597]  ? ref_tracker_free+0x63a/0x7d0
[ 1297.594567][T26597]  ? __asan_memcpy+0x40/0x70
[ 1297.594580][T26597]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1297.594608][T26597]  netlink_rcv_skb+0x205/0x470
[ 1297.594629][T26597]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1297.594649][T26597]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1297.594673][T26597]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1297.594687][T26597]  netlink_unicast+0x82c/0x9e0
[ 1297.594708][T26597]  ? __pfx_netlink_unicast+0x10/0x10
[ 1297.594723][T26597]  ? netlink_sendmsg+0x642/0xb30
[ 1297.594738][T26597]  ? skb_put+0x11b/0x210
[ 1297.594762][T26597]  netlink_sendmsg+0x805/0xb30
[ 1297.594790][T26597]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1297.594812][T26597]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1297.594825][T26597]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1297.594836][T26597]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1297.594848][T26597]  __sock_sendmsg+0x21c/0x270
[ 1297.594865][T26597]  ____sys_sendmsg+0x505/0x830
[ 1297.594891][T26597]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1297.594923][T26597]  ? import_iovec+0x74/0xa0
[ 1297.594948][T26597]  ___sys_sendmsg+0x21f/0x2a0
[ 1297.594969][T26597]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1297.595001][T26597]  ? __fget_files+0x2a/0x420
[ 1297.595010][T26597]  ? __fget_files+0x3a0/0x420
[ 1297.595027][T26597]  __x64_sys_sendmsg+0x19b/0x260
[ 1297.595051][T26597]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1297.595083][T26597]  ? __pfx_ksys_write+0x10/0x10
[ 1297.595102][T26597]  ? rcu_is_watching+0x15/0xb0
[ 1297.595120][T26597]  ? do_syscall_64+0xbe/0x3b0
[ 1297.595134][T26597]  do_syscall_64+0xfa/0x3b0
[ 1297.595147][T26597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1297.595156][T26597]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1297.595166][T26597]  ? clear_bhb_loop+0x60/0xb0
[ 1297.595184][T26597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1297.595201][T26597] RIP: 0033:0x7f33fcb8eec9
[ 1297.595218][T26597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1297.595233][T26597] RSP: 002b:00007f33fda7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1297.595252][T26597] RAX: ffffffffffffffda RBX: 00007f33fcde5fa0 RCX: 00007f33fcb8eec9
[ 1297.595264][T26597] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[ 1297.595270][T26597] RBP: 00007f33fda7e090 R08: 0000000000000000 R09: 0000000000000000
[ 1297.595276][T26597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1297.595282][T26597] R13: 00007f33fcde6038 R14: 00007f33fcde5fa0 R15: 00007f33fcf0fa28
[ 1297.595299][T26597]  </TASK>
[ 1298.074066][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1298.485665][ T5987] usb 9-1: new high-speed USB device number 73 using dummy_hcd
[ 1298.575960][T26605] netlink: 'syz.0.5491': attribute type 17 has an invalid length.
[ 1298.634444][ T5987] usb 9-1: device descriptor read/64, error -71
[ 1298.719960][T26607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5492'.
[ 1298.863972][ T5987] usb usb9-port1: attempt power cycle
[ 1299.157987][ T5920] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 1299.385359][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1299.397601][ T5920] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1299.411094][ T5920] usb 1-1: can't read configurations, error -61
[ 1299.430210][ T5987] usb 9-1: new high-speed USB device number 74 using dummy_hcd
[ 1299.484082][ T5987] usb 9-1: device descriptor read/8, error -71
[ 1299.543025][ T5920] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 1299.723179][ T5987] usb 9-1: new high-speed USB device number 75 using dummy_hcd
[ 1299.731168][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1299.741950][T26611] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[ 1299.759158][ T5987] usb 9-1: device descriptor read/8, error -71
[ 1299.771449][ T6002] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1299.797841][ T5920] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1299.814408][ T6002] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1299.832435][ T5920] usb 1-1: can't read configurations, error -61
[ 1299.843187][ T6002] usb 3-1: can't read configurations, error -71
[ 1299.849462][   T30] kauditd_printk_skb: 93 callbacks suppressed
[ 1299.849472][   T30] audit: type=1326 audit(1758763698.269:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.2.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1299.883304][ T5987] usb usb9-port1: unable to enumerate USB device
[ 1299.900725][ T5920] usb usb1-port1: attempt power cycle
[ 1299.942988][   T30] audit: type=1326 audit(1758763698.269:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.2.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1300.191907][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.216444][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.283276][ T5920] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 1300.327068][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1300.337297][ T5920] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1300.345490][ T5920] usb 1-1: can't read configurations, error -61
[ 1300.360194][   T30] audit: type=1326 audit(1758763698.269:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.2.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1300.507109][   T30] audit: type=1326 audit(1758763698.269:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.2.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1300.532269][T26620] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 1300.540549][ T5920] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1300.673068][T26620] CPU: 0 UID: 0 PID: 26620 Comm: syz.8.5495 Not tainted syzkaller #0 PREEMPT(full) 
[ 1300.673096][T26620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1300.673108][T26620] Call Trace:
[ 1300.673117][T26620]  <TASK>
[ 1300.673126][T26620]  dump_stack_lvl+0x189/0x250
[ 1300.673159][T26620]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1300.673182][T26620]  ? __pfx__printk+0x10/0x10
[ 1300.673212][T26620]  ? kernfs_path_from_node+0x2f/0x290
[ 1300.673235][T26620]  ? kernfs_path_from_node+0x250/0x290
[ 1300.673253][T26620]  ? kernfs_path_from_node+0x2f/0x290
[ 1300.673279][T26620]  sysfs_warn_dup+0x8e/0xa0
[ 1300.673299][T26620]  sysfs_do_create_link_sd+0xc0/0x110
[ 1300.673322][T26620]  device_add_class_symlinks+0x1cf/0x240
[ 1300.673349][T26620]  device_add+0x475/0xb50
[ 1300.673376][T26620]  wiphy_register+0x1ba6/0x28d0
[ 1300.673417][T26620]  ? __pfx_wiphy_register+0x10/0x10
[ 1300.673434][T26620]  ? minstrel_ht_alloc+0x6dd/0x7e0
[ 1300.673462][T26620]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[ 1300.673489][T26620]  ieee80211_register_hw+0x3484/0x4100
[ 1300.673525][T26620]  ? ieee80211_register_hw+0x14a1/0x4100
[ 1300.673552][T26620]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1300.673581][T26620]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1300.673610][T26620]  ? __hrtimer_setup+0x187/0x210
[ 1300.673628][T26620]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1300.673646][T26620]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[ 1300.673692][T26620]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1300.673712][T26620]  ? trace_kmalloc+0x1f/0xd0
[ 1300.673729][T26620]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[ 1300.673748][T26620]  ? kstrndup+0xbf/0x160
[ 1300.673775][T26620]  hwsim_new_radio_nl+0xea4/0x1b10
[ 1300.673798][T26620]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1300.673826][T26620]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1300.673856][T26620]  ? __nla_parse+0x40/0x60
[ 1300.673874][T26620]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1300.673905][T26620]  genl_family_rcv_msg_doit+0x215/0x300
[ 1300.673930][T26620]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1300.673959][T26620]  ? bpf_lsm_capable+0x9/0x20
[ 1300.673977][T26620]  ? security_capable+0x7e/0x2e0
[ 1300.674003][T26620]  genl_rcv_msg+0x60e/0x790
[ 1300.674027][T26620]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1300.674048][T26620]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1300.674068][T26620]  ? __asan_memcpy+0x40/0x70
[ 1300.674085][T26620]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1300.674105][T26620]  netlink_rcv_skb+0x205/0x470
[ 1300.674118][T26620]  ? __lock_acquire+0xab9/0xd20
[ 1300.674138][T26620]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1300.674157][T26620]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1300.674193][T26620]  ? down_read+0x1ad/0x2e0
[ 1300.674211][T26620]  genl_rcv+0x28/0x40
[ 1300.674227][T26620]  netlink_unicast+0x82c/0x9e0
[ 1300.674256][T26620]  ? __pfx_netlink_unicast+0x10/0x10
[ 1300.674279][T26620]  ? netlink_sendmsg+0x642/0xb30
[ 1300.674292][T26620]  ? skb_put+0x11b/0x210
[ 1300.674316][T26620]  netlink_sendmsg+0x805/0xb30
[ 1300.674339][T26620]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1300.674358][T26620]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1300.674374][T26620]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1300.674389][T26620]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1300.674405][T26620]  __sock_sendmsg+0x21c/0x270
[ 1300.674427][T26620]  ____sys_sendmsg+0x505/0x830
[ 1300.674454][T26620]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1300.674479][T26620]  ? import_iovec+0x74/0xa0
[ 1300.674500][T26620]  ___sys_sendmsg+0x21f/0x2a0
[ 1300.674520][T26620]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1300.674572][T26620]  ? __fget_files+0x2a/0x420
[ 1300.674589][T26620]  ? __fget_files+0x3a0/0x420
[ 1300.674612][T26620]  __x64_sys_sendmsg+0x19b/0x260
[ 1300.674633][T26620]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1300.674660][T26620]  ? rcu_is_watching+0x15/0xb0
[ 1300.674681][T26620]  ? do_syscall_64+0xbe/0x3b0
[ 1300.674700][T26620]  do_syscall_64+0xfa/0x3b0
[ 1300.674716][T26620]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1300.674733][T26620]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1300.674747][T26620]  ? clear_bhb_loop+0x60/0xb0
[ 1300.674764][T26620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1300.674778][T26620] RIP: 0033:0x7fbae738eec9
[ 1300.674793][T26620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1300.674805][T26620] RSP: 002b:00007fbae821c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1300.674822][T26620] RAX: ffffffffffffffda RBX: 00007fbae75e5fa0 RCX: 00007fbae738eec9
[ 1300.674833][T26620] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003
[ 1300.674843][T26620] RBP: 00007fbae7411f91 R08: 0000000000000000 R09: 0000000000000000
[ 1300.674854][T26620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1300.674865][T26620] R13: 00007fbae75e6038 R14: 00007fbae75e5fa0 R15: 00007fbae770fa28
[ 1300.674891][T26620]  </TASK>
[ 1301.147355][   T30] audit: type=1326 audit(1758763698.269:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.2.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1301.170798][   T30] audit: type=1326 audit(1758763698.269:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.2.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1301.194465][   T30] audit: type=1326 audit(1758763698.269:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.2.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1301.216858][   T30] audit: type=1326 audit(1758763698.269:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.2.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1301.239370][   T30] audit: type=1326 audit(1758763698.269:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.2.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1301.262011][   T30] audit: type=1326 audit(1758763698.269:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26612 comm="syz.2.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1301.682062][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1301.894866][ T5920] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1301.924367][ T5920] usb 1-1: can't read configurations, error -71
[ 1302.153026][ T5920] usb usb1-port1: unable to enumerate USB device
[ 1302.674406][T26639] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1302.787681][T26641] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1303.425712][T26639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5500'.
[ 1303.425731][T26639] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[ 1304.375854][T26646] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1305.554178][T26658] netlink: 'syz.9.5505': attribute type 12 has an invalid length.
[ 1305.562121][T26658] netlink: 9472 bytes leftover after parsing attributes in process `syz.9.5505'.
[ 1305.973510][T19767] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 1306.253140][   T30] kauditd_printk_skb: 15 callbacks suppressed
[ 1306.253190][   T30] audit: type=1326 audit(1758763704.679:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.2.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1306.325573][   T30] audit: type=1326 audit(1758763704.719:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.2.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1306.552389][   T30] audit: type=1326 audit(1758763704.719:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.2.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1306.857796][   T30] audit: type=1326 audit(1758763704.719:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.2.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1306.883590][   T30] audit: type=1326 audit(1758763704.719:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.2.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1307.030851][   T30] audit: type=1326 audit(1758763704.719:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.2.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1307.304490][   T30] audit: type=1326 audit(1758763704.719:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.2.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1307.341931][   T30] audit: type=1326 audit(1758763704.719:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.2.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1307.716871][   T30] audit: type=1326 audit(1758763704.719:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.2.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1308.015900][   T30] audit: type=1326 audit(1758763704.719:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26663 comm="syz.2.5506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1308.245037][T26676] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1308.912982][T19767] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1308.952218][T19767] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1308.994591][T19767] usb 1-1: can't read configurations, error -71
[ 1309.153204][T26686] usb 8-1: USB disconnect, device number 100
[ 1310.749799][T19767] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[ 1311.170612][T19767] usb 10-1: too many configurations: 151, using maximum allowed: 8
[ 1311.281044][T26720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5519'.
[ 1311.290393][T26720] netlink: 'syz.0.5519': attribute type 7 has an invalid length.
[ 1311.323072][T26720] netlink: 'syz.0.5519': attribute type 8 has an invalid length.
[ 1311.370193][   T30] kauditd_printk_skb: 69 callbacks suppressed
[ 1311.370206][   T30] audit: type=1326 audit(1758763709.789:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26707 comm="syz.7.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1311.447259][T26720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5519'.
[ 1311.459946][T19767] usb 10-1: unable to read config index 0 descriptor/start: -61
[ 1311.514573][T26720] ip6gretap0: entered promiscuous mode
[ 1311.526723][T26720] batadv_slave_1: entered promiscuous mode
[ 1311.569050][T26720] erspan0: entered promiscuous mode
[ 1311.597771][T19767] usb 10-1: can't read configurations, error -61
[ 1311.641099][   T30] audit: type=1326 audit(1758763709.789:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26707 comm="syz.7.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1311.689869][T26720] debugfs: 'hsr2' already exists in 'hsr'
[ 1311.730281][T26720] Cannot create hsr debugfs directory
[ 1311.749092][T26716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1311.766596][T26720] hsr2: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1311.777687][   T30] audit: type=1326 audit(1758763709.789:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26707 comm="syz.7.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1311.800519][T19767] usb 10-1: new high-speed USB device number 52 using dummy_hcd
[ 1311.800992][T26716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1312.025148][T19767] usb 10-1: too many configurations: 151, using maximum allowed: 8
[ 1312.038002][   T30] audit: type=1326 audit(1758763709.819:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26707 comm="syz.7.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1312.094307][T19767] usb 10-1: unable to read config index 0 descriptor/start: -61
[ 1312.179397][T19767] usb 10-1: can't read configurations, error -61
[ 1312.213394][T19767] usb usb10-port1: attempt power cycle
[ 1312.248236][   T30] audit: type=1326 audit(1758763709.819:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26707 comm="syz.7.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1312.271232][   T30] audit: type=1326 audit(1758763709.819:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26707 comm="syz.7.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1312.297245][   T30] audit: type=1326 audit(1758763710.009:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26707 comm="syz.7.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1312.321093][   T30] audit: type=1326 audit(1758763710.009:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26707 comm="syz.7.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1312.353022][   T30] audit: type=1326 audit(1758763710.019:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26707 comm="syz.7.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1312.482702][   T30] audit: type=1326 audit(1758763710.019:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26707 comm="syz.7.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1312.593077][T19767] usb 10-1: new high-speed USB device number 53 using dummy_hcd
[ 1312.617841][T19767] usb 10-1: too many configurations: 151, using maximum allowed: 8
[ 1312.663273][T19767] usb 10-1: unable to read config index 0 descriptor/start: -61
[ 1312.671057][T19767] usb 10-1: can't read configurations, error -61
[ 1312.831838][T19767] usb 10-1: new high-speed USB device number 54 using dummy_hcd
[ 1312.864834][T19767] usb 10-1: too many configurations: 151, using maximum allowed: 8
[ 1312.875759][T19767] usb 10-1: unable to read config index 0 descriptor/start: -61
[ 1312.909615][T19767] usb 10-1: can't read configurations, error -61
[ 1312.920064][T19767] usb usb10-port1: unable to enumerate USB device
[ 1313.033362][ T5987] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1313.567336][T26736] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1315.066703][T26747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5525'.
[ 1315.735161][T26750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1315.990887][T26750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1316.271564][ T5987] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1316.280312][ T5987] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1316.307261][ T5987] usb 3-1: can't read configurations, error -71
[ 1316.759819][   T30] kauditd_printk_skb: 17 callbacks suppressed
[ 1316.759833][   T30] audit: type=1326 audit(1758763715.169:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26759 comm="syz.2.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1316.890474][   T30] audit: type=1326 audit(1758763715.169:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26759 comm="syz.2.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1316.912946][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1317.004673][T26770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5532'.
[ 1317.349083][   T30] audit: type=1326 audit(1758763715.169:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26759 comm="syz.2.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1317.600688][   T30] audit: type=1326 audit(1758763715.169:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26759 comm="syz.2.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1317.833638][   T30] audit: type=1326 audit(1758763715.169:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26759 comm="syz.2.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1317.863180][   T30] audit: type=1326 audit(1758763715.169:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26759 comm="syz.2.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1317.913382][   T30] audit: type=1326 audit(1758763715.169:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26759 comm="syz.2.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1317.936448][   T30] audit: type=1326 audit(1758763715.169:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26759 comm="syz.2.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1318.181496][   T30] audit: type=1326 audit(1758763715.169:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26759 comm="syz.2.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1318.388257][T26780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1318.461038][   T30] audit: type=1326 audit(1758763715.169:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26759 comm="syz.2.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996338eec9 code=0x7ffc0000
[ 1318.553680][T26780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1318.891395][T26788] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1319.006701][T26791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5535'.
[ 1319.019247][T26791] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[ 1319.137796][T26794] fuse: Bad value for 'fd'
[ 1319.981869][T26794] ip6erspan0: entered promiscuous mode
[ 1321.070243][T26814] ptrace attach of "./syz-executor exec"[18298] was attempted by "./syz-executor exec"[26814]
[ 1321.302587][T26812] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1323.448715][T26835] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5545'.
[ 1325.454041][T26848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1325.564822][T26848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1325.737004][T26856] kvm: emulating exchange as write
[ 1325.769142][T26857] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1328.023556][ T5962] usb 9-1: new high-speed USB device number 76 using dummy_hcd
[ 1328.126719][T26886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5559'.
[ 1328.180211][T26886] sctp: [Deprecated]: syz.0.5559 (pid 26886) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1328.180211][T26886] Use struct sctp_sack_info instead
[ 1328.223825][ T5962] usb 9-1: Using ep0 maxpacket: 8
[ 1328.228571][T26899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1328.255762][ T5962] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1328.270093][ T5962] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1328.296950][ T5962] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1328.310966][T26899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1328.335786][ T5962] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1328.397285][ T5962] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1328.451349][ T5962] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1328.482068][ T5962] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1328.723374][ T5962] usb 9-1: usb_control_msg returned -32
[ 1328.731493][T26884] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5558'.
[ 1328.749942][ T5962] usbtmc 9-1:16.0: can't read capabilities
[ 1329.013113][   T92] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1329.163010][   T92] usb 3-1: Using ep0 maxpacket: 32
[ 1329.172666][   T92] usb 3-1: config 0 has an invalid interface number: 141 but max is 0
[ 1329.199954][   T92] usb 3-1: config 0 has no interface number 0
[ 1329.217149][   T92] usb 3-1: config 0 interface 141 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1329.248643][   T92] usb 3-1: config 0 interface 141 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64
[ 1329.295637][   T92] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1006, bcdDevice=ef.b8
[ 1329.305301][   T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1329.316713][   T92] usb 3-1: Product: syz
[ 1329.321382][   T92] usb 3-1: Manufacturer: syz
[ 1329.332256][   T92] usb 3-1: SerialNumber: syz
[ 1329.365667][   T92] usb 3-1: config 0 descriptor??
[ 1329.392351][   T92] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones
[ 1329.596902][   T92] usb 3-1: USB disconnect, device number 16
[ 1330.214375][T26909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5561'.
[ 1330.743250][T26915] netlink: 'syz.2.5562': attribute type 10 has an invalid length.
[ 1330.767340][ T5987] usb 9-1: USB disconnect, device number 76
[ 1330.857721][T26913] netlink: 'syz.2.5562': attribute type 10 has an invalid length.
[ 1330.938793][T26913] .`: (slave dummy0): Enslaving as an active interface with an up link
[ 1331.422952][ T6002] usb 9-1: new high-speed USB device number 77 using dummy_hcd
[ 1331.738890][T26938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1331.764956][T26938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1332.715646][T26948] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1334.041037][T26957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5571'.
[ 1335.404678][ T6002] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1335.413284][ T6002] usb 9-1: unable to read config index 0 descriptor/start: -71
[ 1335.420932][ T6002] usb 9-1: can't read configurations, error -71
[ 1335.733307][   T30] kauditd_printk_skb: 88 callbacks suppressed
[ 1335.739951][   T30] audit: type=1326 audit(1758763734.149:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26960 comm="syz.9.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1335.800685][   T30] audit: type=1326 audit(1758763734.149:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26960 comm="syz.9.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1336.136770][T26970] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5575'.
[ 1336.477081][   T30] audit: type=1326 audit(1758763734.149:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26960 comm="syz.9.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1336.570815][   T30] audit: type=1326 audit(1758763734.149:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26960 comm="syz.9.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1336.657009][   T30] audit: type=1326 audit(1758763734.149:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26960 comm="syz.9.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1336.915142][T26981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5577'.
[ 1336.967609][T26982] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5578'.
[ 1337.123091][   T30] audit: type=1326 audit(1758763734.149:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26960 comm="syz.9.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1337.267556][   T30] audit: type=1326 audit(1758763734.159:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26960 comm="syz.9.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1337.383439][   T30] audit: type=1326 audit(1758763734.159:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26960 comm="syz.9.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1337.492411][   T30] audit: type=1326 audit(1758763734.159:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26960 comm="syz.9.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1337.713560][   T30] audit: type=1326 audit(1758763734.159:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26960 comm="syz.9.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1337.763086][ T6002] usb 9-1: new high-speed USB device number 79 using dummy_hcd
[ 1337.915923][ T6002] usb 9-1: Using ep0 maxpacket: 32
[ 1337.927021][ T6002] usb 9-1: config 0 has an invalid interface number: 141 but max is 0
[ 1337.935401][ T6002] usb 9-1: config 0 has no interface number 0
[ 1337.957059][ T6002] usb 9-1: config 0 interface 141 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1337.961774][T26996] program syz.9.5581 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1338.019845][T26998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1338.022539][ T6002] usb 9-1: config 0 interface 141 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64
[ 1338.068179][ T6002] usb 9-1: New USB device found, idVendor=0cf3, idProduct=1006, bcdDevice=ef.b8
[ 1338.078239][ T6002] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1338.086414][ T6002] usb 9-1: Product: syz
[ 1338.110355][ T6002] usb 9-1: Manufacturer: syz
[ 1338.143414][ T6002] usb 9-1: SerialNumber: syz
[ 1338.161279][ T6002] usb 9-1: config 0 descriptor??
[ 1338.271284][T27010] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1338.281193][ T5962] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1338.990554][T27007] ptrace attach of "./syz-executor exec"[18282] was attempted by "./syz-executor exec"[27007]
[ 1339.110771][ T6002] usb 9-1: can't set config #0, error -71
[ 1339.162099][ T6002] usb 9-1: USB disconnect, device number 79
[ 1339.440090][T27004] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1339.607736][T27004] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1339.624978][T27004] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[ 1339.651967][T27019] netlink: 'syz.8.5585': attribute type 13 has an invalid length.
[ 1339.714474][T27004] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[ 1339.751580][T27004] kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[ 1339.773597][T27019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1339.789094][T27004] kvm: requested 129904 ns i8254 timer period limited to 200000 ns
[ 1339.789389][T27004] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1339.814471][T27004] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[ 1339.913365][T27004] kvm: requested 170133 ns i8254 timer period limited to 200000 ns
[ 1339.927756][T27004] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1340.762885][T27031] program syz.0.5587 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1342.418816][T27043] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5590'.
[ 1343.066124][T27045] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5589'.
[ 1344.234935][ T5962] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1344.284773][ T5962] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1344.302919][ T5962] usb 3-1: can't read configurations, error -71
[ 1344.379017][T27053] FAULT_INJECTION: forcing a failure.
[ 1344.379017][T27053] name failslab, interval 1, probability 0, space 0, times 0
[ 1344.463047][T27053] CPU: 0 UID: 0 PID: 27053 Comm: syz.2.5593 Not tainted syzkaller #0 PREEMPT(full) 
[ 1344.463072][T27053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1344.463084][T27053] Call Trace:
[ 1344.463092][T27053]  <TASK>
[ 1344.463100][T27053]  dump_stack_lvl+0x189/0x250
[ 1344.463125][T27053]  ? __pfx____ratelimit+0x10/0x10
[ 1344.463145][T27053]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1344.463165][T27053]  ? __pfx__printk+0x10/0x10
[ 1344.463192][T27053]  ? __pfx___might_resched+0x10/0x10
[ 1344.463209][T27053]  ? fs_reclaim_acquire+0x7d/0x100
[ 1344.463232][T27053]  should_fail_ex+0x414/0x560
[ 1344.463259][T27053]  should_failslab+0xa8/0x100
[ 1344.463284][T27053]  __kmalloc_noprof+0xcb/0x4f0
[ 1344.463307][T27053]  ? esp6_init_state+0x6de/0x1140
[ 1344.463333][T27053]  esp6_init_state+0x6de/0x1140
[ 1344.463351][T27053]  ? pfkey_sendmsg+0xbfb/0x1090
[ 1344.463369][T27053]  ? __sock_sendmsg+0x21c/0x270
[ 1344.463394][T27053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1344.463420][T27053]  ? __pfx_esp6_init_state+0x10/0x10
[ 1344.463459][T27053]  ? xfrm_state_get_afinfo+0x2e/0x1b0
[ 1344.463489][T27053]  ? __xfrm_init_state+0x7ef/0x13f0
[ 1344.463517][T27053]  __xfrm_init_state+0xa73/0x13f0
[ 1344.463537][T27053]  ? __xfrm_init_state+0x7ef/0x13f0
[ 1344.463565][T27053]  xfrm_init_state+0x18/0xa0
[ 1344.463585][T27053]  pfkey_add+0x1d38/0x2e00
[ 1344.463622][T27053]  ? __pfx_pfkey_add+0x10/0x10
[ 1344.463639][T27053]  ? kmem_cache_free+0x18f/0x400
[ 1344.463674][T27053]  pfkey_sendmsg+0xbfb/0x1090
[ 1344.463710][T27053]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 1344.463756][T27053]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1344.463782][T27053]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1344.463801][T27053]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 1344.463821][T27053]  __sock_sendmsg+0x21c/0x270
[ 1344.463848][T27053]  ____sys_sendmsg+0x505/0x830
[ 1344.463879][T27053]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1344.463910][T27053]  ? import_iovec+0x74/0xa0
[ 1344.463936][T27053]  ___sys_sendmsg+0x21f/0x2a0
[ 1344.463957][T27053]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1344.464013][T27053]  ? __fget_files+0x2a/0x420
[ 1344.464028][T27053]  ? __fget_files+0x3a0/0x420
[ 1344.464056][T27053]  __x64_sys_sendmsg+0x19b/0x260
[ 1344.464084][T27053]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1344.464116][T27053]  ? __pfx_ksys_write+0x10/0x10
[ 1344.464145][T27053]  ? do_syscall_64+0xbe/0x3b0
[ 1344.464168][T27053]  do_syscall_64+0xfa/0x3b0
[ 1344.464186][T27053]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1344.464204][T27053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1344.464221][T27053]  ? clear_bhb_loop+0x60/0xb0
[ 1344.464243][T27053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1344.464260][T27053] RIP: 0033:0x7f996338eec9
[ 1344.464277][T27053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1344.464291][T27053] RSP: 002b:00007f9964146038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1344.464311][T27053] RAX: ffffffffffffffda RBX: 00007f99635e5fa0 RCX: 00007f996338eec9
[ 1344.464324][T27053] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[ 1344.464336][T27053] RBP: 00007f9964146090 R08: 0000000000000000 R09: 0000000000000000
[ 1344.464346][T27053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1344.464357][T27053] R13: 00007f99635e6038 R14: 00007f99635e5fa0 R15: 00007f996370fa28
[ 1344.464386][T27053]  </TASK>
[ 1345.074188][T27065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5596'.
[ 1345.402923][   T30] kauditd_printk_skb: 25 callbacks suppressed
[ 1345.402941][   T30] audit: type=1326 audit(1758763743.799:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27067 comm="syz.8.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1345.567327][T27077] ptrace attach of "./syz-executor exec"[18716] was attempted by "./syz-executor exec"[27077]
[ 1345.697065][   T30] audit: type=1326 audit(1758763743.799:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27067 comm="syz.8.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1345.891782][T27076] create_pit_timer: 3 callbacks suppressed
[ 1345.891880][T27076] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1345.893867][   T30] audit: type=1326 audit(1758763743.799:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27067 comm="syz.8.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1346.021400][   T30] audit: type=1326 audit(1758763743.799:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27067 comm="syz.8.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1346.046665][   T30] audit: type=1326 audit(1758763743.799:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27067 comm="syz.8.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1346.138655][   T30] audit: type=1326 audit(1758763743.799:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27067 comm="syz.8.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1346.169054][T27077] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1346.208719][T27077] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[ 1346.259114][T27077] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[ 1346.309097][   T30] audit: type=1326 audit(1758763743.799:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27067 comm="syz.8.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1346.379394][   T30] audit: type=1326 audit(1758763743.799:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27067 comm="syz.8.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1346.441548][   T30] audit: type=1326 audit(1758763743.799:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27067 comm="syz.8.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1346.821602][   T30] audit: type=1326 audit(1758763743.799:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27067 comm="syz.8.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1347.164534][T27090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1347.192366][T27090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1348.274934][T27096] FAULT_INJECTION: forcing a failure.
[ 1348.274934][T27096] name failslab, interval 1, probability 0, space 0, times 0
[ 1348.335229][T27096] CPU: 1 UID: 0 PID: 27096 Comm: syz.8.5603 Not tainted syzkaller #0 PREEMPT(full) 
[ 1348.335247][T27096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1348.335254][T27096] Call Trace:
[ 1348.335259][T27096]  <TASK>
[ 1348.335265][T27096]  dump_stack_lvl+0x189/0x250
[ 1348.335282][T27096]  ? __pfx____ratelimit+0x10/0x10
[ 1348.335295][T27096]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1348.335306][T27096]  ? __pfx__printk+0x10/0x10
[ 1348.335321][T27096]  ? __lock_acquire+0xab9/0xd20
[ 1348.335341][T27096]  should_fail_ex+0x414/0x560
[ 1348.335359][T27096]  should_failslab+0xa8/0x100
[ 1348.335375][T27096]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 1348.335389][T27096]  ? skb_clone+0x212/0x3a0
[ 1348.335405][T27096]  skb_clone+0x212/0x3a0
[ 1348.335419][T27096]  __netlink_deliver_tap+0x404/0x850
[ 1348.335437][T27096]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1348.335453][T27096]  netlink_deliver_tap+0x19c/0x1b0
[ 1348.335464][T27096]  netlink_unicast+0x7fa/0x9e0
[ 1348.335484][T27096]  ? __pfx_netlink_unicast+0x10/0x10
[ 1348.335500][T27096]  ? netlink_sendmsg+0x642/0xb30
[ 1348.335510][T27096]  ? skb_put+0x11b/0x210
[ 1348.335523][T27096]  netlink_sendmsg+0x805/0xb30
[ 1348.335538][T27096]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1348.335551][T27096]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1348.335563][T27096]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1348.335574][T27096]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1348.335585][T27096]  __sock_sendmsg+0x21c/0x270
[ 1348.335602][T27096]  ____sys_sendmsg+0x52d/0x830
[ 1348.335618][T27096]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1348.335635][T27096]  ? import_iovec+0x74/0xa0
[ 1348.335651][T27096]  ___sys_sendmsg+0x21f/0x2a0
[ 1348.335664][T27096]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1348.335699][T27096]  ? __might_fault+0xb0/0x130
[ 1348.335715][T27096]  __sys_sendmmsg+0x227/0x430
[ 1348.335731][T27096]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1348.335742][T27096]  ? __mutex_unlock_slowpath+0x1a1/0x740
[ 1348.335767][T27096]  ? ksys_write+0x22a/0x250
[ 1348.335782][T27096]  ? __pfx_ksys_write+0x10/0x10
[ 1348.335794][T27096]  ? rcu_is_watching+0x15/0xb0
[ 1348.335808][T27096]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1348.335822][T27096]  do_syscall_64+0xfa/0x3b0
[ 1348.335832][T27096]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1348.335842][T27096]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1348.335852][T27096]  ? clear_bhb_loop+0x60/0xb0
[ 1348.335865][T27096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1348.335874][T27096] RIP: 0033:0x7fbae738eec9
[ 1348.335884][T27096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1348.335893][T27096] RSP: 002b:00007fbae821c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1348.335904][T27096] RAX: ffffffffffffffda RBX: 00007fbae75e5fa0 RCX: 00007fbae738eec9
[ 1348.335911][T27096] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[ 1348.335918][T27096] RBP: 00007fbae821c090 R08: 0000000000000000 R09: 0000000000000000
[ 1348.335924][T27096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1348.335930][T27096] R13: 00007fbae75e6038 R14: 00007fbae75e5fa0 R15: 00007fbae770fa28
[ 1348.335946][T27096]  </TASK>
[ 1348.645029][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1349.250315][T27116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5608'.
[ 1350.163324][ T5920] usb 10-1: new high-speed USB device number 55 using dummy_hcd
[ 1350.935540][ T5920] usb 10-1: config 0 has no interfaces?
[ 1350.944398][ T5920] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1350.954734][ T5920] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1350.967404][ T5920] usb 10-1: Product: syz
[ 1351.015294][ T5920] usb 10-1: Manufacturer: syz
[ 1351.064854][ T5920] usb 10-1: SerialNumber: syz
[ 1351.086330][ T5920] usb 10-1: config 0 descriptor??
[ 1351.525213][T27126] input: syz1 as /devices/virtual/input/input83
[ 1353.361365][T27130] Bluetooth: hci5: command 0x0406 tx timeout
[ 1354.193408][ T5962] usb 10-1: USB disconnect, device number 55
[ 1355.515396][T27177] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5623'.
[ 1356.218549][   T30] kauditd_printk_skb: 27 callbacks suppressed
[ 1356.218569][   T30] audit: type=1326 audit(1758763754.519:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27181 comm="syz.8.5625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1356.288313][T27191] loop8: detected capacity change from 0 to 1
[ 1356.314149][T27191] Dev loop8: unable to read RDB block 1
[ 1356.319754][T27191]  loop8: unable to read partition table
[ 1356.443856][   T30] audit: type=1326 audit(1758763754.519:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27181 comm="syz.8.5625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1356.472550][T27191] loop8: partition table beyond EOD, truncated
[ 1356.493209][T27191] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[ 1356.502591][   T30] audit: type=1326 audit(1758763754.519:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27181 comm="syz.8.5625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1356.555963][   T30] audit: type=1326 audit(1758763754.519:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27181 comm="syz.8.5625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1356.809156][   T30] audit: type=1326 audit(1758763754.519:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27181 comm="syz.8.5625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1357.293201][   T30] audit: type=1326 audit(1758763754.519:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27181 comm="syz.8.5625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1357.361040][T27196] vivid-009: kernel_thread() failed
[ 1357.434789][   T30] audit: type=1326 audit(1758763754.519:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27181 comm="syz.8.5625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1358.215886][   T30] audit: type=1326 audit(1758763754.519:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27181 comm="syz.8.5625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1358.332523][   T30] audit: type=1326 audit(1758763754.519:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27181 comm="syz.8.5625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1358.364347][   T30] audit: type=1326 audit(1758763754.519:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27181 comm="syz.8.5625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1359.595968][T27217] sch_tbf: burst 9 is lower than device lo mtu (18) !
[ 1360.215890][T27226] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1360.484683][T27229] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5636'.
[ 1361.532429][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.538955][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.602158][T27238] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5638'.
[ 1361.624393][T27238] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5638'.
[ 1362.395373][   T30] kauditd_printk_skb: 113 callbacks suppressed
[ 1362.395386][   T30] audit: type=1326 audit(1758763760.809:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27241 comm="syz.9.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1362.435300][   T30] audit: type=1326 audit(1758763760.809:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27241 comm="syz.9.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1362.487384][   T30] audit: type=1326 audit(1758763760.809:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27241 comm="syz.9.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1362.633115][   T30] audit: type=1326 audit(1758763760.809:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27241 comm="syz.9.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1362.803845][   T30] audit: type=1326 audit(1758763760.809:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27241 comm="syz.9.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1362.926613][   T30] audit: type=1326 audit(1758763760.809:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27241 comm="syz.9.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1362.948877][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1363.017316][T27247] ptrace attach of "./syz-executor exec"[17879] was attempted by "./syz-executor exec"[27247]
[ 1363.067706][   T30] audit: type=1326 audit(1758763760.809:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27241 comm="syz.9.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1363.095895][T27247] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1363.318690][T27162] Set syz1 is full, maxelem 65536 reached
[ 1363.371915][T27247] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1363.457856][   T30] audit: type=1326 audit(1758763760.809:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27241 comm="syz.9.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1363.588417][   T30] audit: type=1326 audit(1758763760.809:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27241 comm="syz.9.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1363.735779][   T30] audit: type=1326 audit(1758763760.809:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27241 comm="syz.9.5639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1363.880453][T27261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1363.950756][T27261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1365.286710][T27282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5649'.
[ 1365.586697][T27285] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5650'.
[ 1365.637409][T27285] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5650'.
[ 1366.108742][T27297] ipvlan0: entered promiscuous mode
[ 1367.096374][T27313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5656'.
[ 1368.207515][T27319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5657'.
[ 1368.872722][   T30] kauditd_printk_skb: 66 callbacks suppressed
[ 1368.872738][   T30] audit: type=1326 audit(1758763767.289:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1368.901639][ T5920] usb 10-1: new high-speed USB device number 56 using dummy_hcd
[ 1369.372981][ T5920] usb 10-1: Using ep0 maxpacket: 16
[ 1369.439807][ T5920] usb 10-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1369.484520][ T5920] usb 10-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[ 1369.502540][   T30] audit: type=1326 audit(1758763767.289:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1369.588206][ T5920] usb 10-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1369.663079][ T5920] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1369.669944][   T30] audit: type=1326 audit(1758763767.349:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1369.700287][   T30] audit: type=1326 audit(1758763767.349:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1369.727571][   T30] audit: type=1326 audit(1758763767.349:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1369.750237][   T30] audit: type=1326 audit(1758763767.389:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1369.773201][   T30] audit: type=1326 audit(1758763767.389:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1369.796843][   T30] audit: type=1326 audit(1758763767.389:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1369.820419][ T5920] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1369.867768][ T5920] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1369.867797][ T5920] usb 10-1: Product: syz
[ 1369.867813][ T5920] usb 10-1: Manufacturer: syz
[ 1369.867827][ T5920] usb 10-1: SerialNumber: syz
[ 1369.965336][   T30] audit: type=1326 audit(1758763767.389:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1369.965408][   T30] audit: type=1326 audit(1758763767.389:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1370.436217][T27351] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1370.615200][ T5920] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[ 1371.604806][T27364] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5669'.
[ 1371.822994][  T982] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[ 1372.055485][  T982] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1372.065904][  T982] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1372.570770][  T982] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 1372.675252][  T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1372.863342][ T5962] usb 10-1: USB disconnect, device number 56
[ 1372.881965][  T982] usb 3-1: SerialNumber: syz
[ 1372.927891][ T5962] usblp0: removed
[ 1372.956386][  T982] usb 3-1: unknown interface protocol 0xd, assuming v1
[ 1372.978904][  T982] usb 3-1: 0:2 : does not exist
[ 1373.178651][ T5962] usb 3-1: USB disconnect, device number 19
[ 1373.213141][T27385] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5674'.
[ 1374.032988][T27385] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5674'.
[ 1374.351856][T27389] netlink: 'syz.8.5676': attribute type 16 has an invalid length.
[ 1374.607331][T27398] netlink: 'syz.2.5679': attribute type 16 has an invalid length.
[ 1374.700265][T27401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1374.957880][T27401] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1374.990775][T27403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5681'.
[ 1375.553172][   T30] kauditd_printk_skb: 49 callbacks suppressed
[ 1375.555263][   T30] audit: type=1326 audit(1758763773.899:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27404 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fcb8eec9 code=0x7ffc0000
[ 1375.852047][   T30] audit: type=1326 audit(1758763773.899:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27404 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fcb8eec9 code=0x7ffc0000
[ 1375.852543][T27412] netlink: 'syz.2.5682': attribute type 1 has an invalid length.
[ 1375.874553][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1375.961561][   T30] audit: type=1326 audit(1758763773.899:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27404 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f33fcb8eec9 code=0x7ffc0000
[ 1376.094239][   T30] audit: type=1326 audit(1758763773.899:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27404 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fcb8eec9 code=0x7ffc0000
[ 1376.157324][   T30] audit: type=1326 audit(1758763773.899:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27404 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fcb8eec9 code=0x7ffc0000
[ 1376.193329][   T30] audit: type=1326 audit(1758763773.899:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27404 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f33fcb8eec9 code=0x7ffc0000
[ 1376.216402][   T30] audit: type=1326 audit(1758763773.899:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27404 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fcb8eec9 code=0x7ffc0000
[ 1376.223428][T27414] FAULT_INJECTION: forcing a failure.
[ 1376.223428][T27414] name failslab, interval 1, probability 0, space 0, times 0
[ 1376.239816][   T30] audit: type=1326 audit(1758763773.899:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27404 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f33fcb8eec9 code=0x7ffc0000
[ 1376.254156][T27414] CPU: 1 UID: 0 PID: 27414 Comm: syz.2.5682 Not tainted syzkaller #0 PREEMPT(full) 
[ 1376.254181][T27414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1376.254192][T27414] Call Trace:
[ 1376.254200][T27414]  <TASK>
[ 1376.254209][T27414]  dump_stack_lvl+0x189/0x250
[ 1376.254234][T27414]  ? __pfx____ratelimit+0x10/0x10
[ 1376.254253][T27414]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1376.254273][T27414]  ? __pfx__printk+0x10/0x10
[ 1376.254301][T27414]  ? __pfx___might_resched+0x10/0x10
[ 1376.254317][T27414]  ? fs_reclaim_acquire+0x7d/0x100
[ 1376.254339][T27414]  should_fail_ex+0x414/0x560
[ 1376.254368][T27414]  should_failslab+0xa8/0x100
[ 1376.254393][T27414]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[ 1376.254414][T27414]  ? __d_alloc+0x36/0x7a0
[ 1376.254437][T27414]  __d_alloc+0x36/0x7a0
[ 1376.254461][T27414]  d_alloc_parallel+0xe5/0x15e0
[ 1376.254492][T27414]  ? __lock_acquire+0xab9/0xd20
[ 1376.254521][T27414]  ? __pfx_d_alloc_parallel+0x10/0x10
[ 1376.254545][T27414]  ? __raw_spin_lock_init+0x45/0x100
[ 1376.254567][T27414]  ? __init_waitqueue_head+0xa9/0x150
[ 1376.254599][T27414]  __lookup_slow+0x116/0x3d0
[ 1376.254622][T27414]  ? __pfx___lookup_slow+0x10/0x10
[ 1376.254652][T27414]  ? d_lookup+0x8a/0xa0
[ 1376.254669][T27414]  ? lookup_noperm+0x112/0x220
[ 1376.254692][T27414]  simple_start_creating+0xfd/0x1e0
[ 1376.254709][T27414]  ? __pfx_simple_start_creating+0x10/0x10
[ 1376.254738][T27414]  start_creating+0x10f/0x180
[ 1376.254763][T27414]  __debugfs_create_file+0x79/0x4f0
[ 1376.254791][T27414]  debugfs_create_file_full+0x3f/0x60
[ 1376.254818][T27414]  ref_tracker_dir_debugfs+0x14e/0x270
[ 1376.254835][T27414]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[ 1376.254879][T27414]  ? rcu_is_watching+0x15/0xb0
[ 1376.254895][T27414]  ? alloc_netdev_mqs+0xa3/0x11b0
[ 1376.254921][T27414]  ? __raw_spin_lock_init+0x45/0x100
[ 1376.254943][T27414]  alloc_netdev_mqs+0x26f/0x11b0
[ 1376.254963][T27414]  ? __pfx_ipvlan_link_setup+0x10/0x10
[ 1376.254989][T27414]  rtnl_create_link+0x31f/0xd10
[ 1376.255017][T27414]  rtnl_newlink_create+0x25c/0xb00
[ 1376.255043][T27414]  ? __mutex_lock+0x5bb/0x1350
[ 1376.255066][T27414]  ? __pfx_rtnl_newlink_create+0x10/0x10
[ 1376.255090][T27414]  ? __pfx___mutex_lock+0x10/0x10
[ 1376.255126][T27414]  ? ns_capable+0x8a/0xf0
[ 1376.255151][T27414]  rtnl_newlink+0x16d6/0x1c70
[ 1376.255171][T27414]  ? netlink_sendmsg+0x805/0xb30
[ 1376.255202][T27414]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1376.255244][T27414]  ? kasan_quarantine_put+0xdd/0x220
[ 1376.255263][T27414]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1376.255287][T27414]  ? nlmon_xmit+0xb0/0x100
[ 1376.255304][T27414]  ? kmem_cache_free+0x18f/0x400
[ 1376.255333][T27414]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1376.255350][T27414]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1376.255368][T27414]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1376.255384][T27414]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1376.255406][T27414]  ? __dev_queue_xmit+0x27b/0x3b50
[ 1376.255427][T27414]  ? __dev_queue_xmit+0x27b/0x3b50
[ 1376.255446][T27414]  ? __dev_queue_xmit+0x27b/0x3b50
[ 1376.255467][T27414]  ? __dev_queue_xmit+0x1d79/0x3b50
[ 1376.255494][T27414]  ? __lock_acquire+0xab9/0xd20
[ 1376.255541][T27414]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1376.255558][T27414]  rtnetlink_rcv_msg+0x7cc/0xb70
[ 1376.255579][T27414]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1376.255602][T27414]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1376.255618][T27414]  ? ref_tracker_free+0x63a/0x7d0
[ 1376.255635][T27414]  ? __asan_memcpy+0x40/0x70
[ 1376.255653][T27414]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1376.255680][T27414]  netlink_rcv_skb+0x205/0x470
[ 1376.255700][T27414]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1376.255720][T27414]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1376.255750][T27414]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1376.255776][T27414]  netlink_unicast+0x82c/0x9e0
[ 1376.255809][T27414]  ? __pfx_netlink_unicast+0x10/0x10
[ 1376.255835][T27414]  ? netlink_sendmsg+0x642/0xb30
[ 1376.255850][T27414]  ? skb_put+0x11b/0x210
[ 1376.255873][T27414]  netlink_sendmsg+0x805/0xb30
[ 1376.255901][T27414]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1376.255923][T27414]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1376.255943][T27414]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1376.255960][T27414]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1376.255979][T27414]  __sock_sendmsg+0x21c/0x270
[ 1376.256006][T27414]  ____sys_sendmsg+0x505/0x830
[ 1376.256033][T27414]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1376.256063][T27414]  ? import_iovec+0x74/0xa0
[ 1376.256088][T27414]  ___sys_sendmsg+0x21f/0x2a0
[ 1376.256111][T27414]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1376.256169][T27414]  ? __fget_files+0x2a/0x420
[ 1376.256185][T27414]  ? __fget_files+0x3a0/0x420
[ 1376.256212][T27414]  __x64_sys_sendmsg+0x19b/0x260
[ 1376.256235][T27414]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1376.256265][T27414]  ? __pfx_ksys_write+0x10/0x10
[ 1376.256292][T27414]  ? do_syscall_64+0xbe/0x3b0
[ 1376.256314][T27414]  do_syscall_64+0xfa/0x3b0
[ 1376.256331][T27414]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1376.256348][T27414]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1376.256365][T27414]  ? clear_bhb_loop+0x60/0xb0
[ 1376.256385][T27414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1376.256402][T27414] RIP: 0033:0x7f996338eec9
[ 1376.256419][T27414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1376.256434][T27414] RSP: 002b:00007f99615d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1376.256452][T27414] RAX: ffffffffffffffda RBX: 00007f99635e6180 RCX: 00007f996338eec9
[ 1376.256466][T27414] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[ 1376.256477][T27414] RBP: 00007f99615d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1376.256488][T27414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1376.256499][T27414] R13: 00007f99635e6218 R14: 00007f99635e6180 R15: 00007f996370fa28
[ 1376.256529][T27414]  </TASK>
[ 1377.172756][   T30] audit: type=1326 audit(1758763773.899:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27404 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fcb8eec9 code=0x7ffc0000
[ 1377.215670][   T30] audit: type=1326 audit(1758763773.899:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27404 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f33fcb8eec9 code=0x7ffc0000
[ 1377.253315][ T5920] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1377.278237][T27430] ptrace attach of "./syz-executor exec"[18298] was attempted by "./syz-executor exec"[27430]
[ 1377.308957][T27430] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1377.336676][T27434] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1378.081067][T27430] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1378.132981][ T5920] usb 3-1: Using ep0 maxpacket: 16
[ 1378.563134][ T5920] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1378.577194][ T5920] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[ 1378.587127][ T5920] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1378.664222][ T5920] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1378.954406][ T5920] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1378.966636][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1378.979229][ T5920] usb 3-1: Product: syz
[ 1378.986862][ T5920] usb 3-1: Manufacturer: syz
[ 1379.423889][ T5920] usb 3-1: SerialNumber: syz
[ 1379.895631][ T5920] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[ 1381.012942][T27461] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5692'.
[ 1381.071285][T27461] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5692'.
[ 1381.080492][   T30] kauditd_printk_skb: 33 callbacks suppressed
[ 1381.080517][   T30] audit: type=1326 audit(1758763779.499:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27447 comm="syz.7.5690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1381.333466][   T30] audit: type=1326 audit(1758763779.499:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27447 comm="syz.7.5690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1381.427139][   T30] audit: type=1326 audit(1758763779.599:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27447 comm="syz.7.5690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1381.550835][   T30] audit: type=1326 audit(1758763779.599:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27447 comm="syz.7.5690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1381.637357][   T30] audit: type=1326 audit(1758763779.599:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27447 comm="syz.7.5690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1381.681378][T27468] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5695'.
[ 1381.690592][T27468] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5695'.
[ 1381.709484][   T30] audit: type=1326 audit(1758763779.599:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27447 comm="syz.7.5690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1381.736321][   T30] audit: type=1326 audit(1758763779.599:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27447 comm="syz.7.5690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1381.759627][   T30] audit: type=1326 audit(1758763779.599:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27447 comm="syz.7.5690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1381.784101][   T30] audit: type=1326 audit(1758763779.599:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27447 comm="syz.7.5690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4dae58d710 code=0x7ffc0000
[ 1381.807054][T18721] usb 10-1: new high-speed USB device number 57 using dummy_hcd
[ 1381.822649][   T30] audit: type=1326 audit(1758763779.609:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27447 comm="syz.7.5690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4dae58d710 code=0x7ffc0000
[ 1381.964884][T18721] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1381.971966][  T982] usb 3-1: USB disconnect, device number 20
[ 1381.983734][T18721] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1381.993578][  T982] usblp0: removed
[ 1382.053160][   T92] usb 9-1: new high-speed USB device number 80 using dummy_hcd
[ 1382.079633][T18721] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1382.127203][T18721] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1382.170466][T18721] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1382.192949][T18721] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1382.201710][T18721] usb 10-1: Product: syz
[ 1382.210029][T18721] usb 10-1: Manufacturer: syz
[ 1382.221496][T18721] usb 10-1: SerialNumber: syz
[ 1382.228010][   T92] usb 9-1: device descriptor read/64, error -71
[ 1382.249843][T18721] usb 10-1: config 0 descriptor??
[ 1382.474545][   T92] usb 9-1: new high-speed USB device number 81 using dummy_hcd
[ 1382.735536][T18721] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[ 1382.812095][   T92] usb 9-1: device descriptor read/64, error -71
[ 1382.838260][T27466] usb 10-1: Couldn't submit interrupt_out_urb -90
[ 1382.856599][T18721] usb 10-1: USB disconnect, device number 57
[ 1382.880310][T27487] ptrace attach of "./syz-executor exec"[17879] was attempted by "./syz-executor exec"[27487]
[ 1382.933395][   T92] usb usb9-port1: attempt power cycle
[ 1383.274669][   T92] usb 9-1: new high-speed USB device number 82 using dummy_hcd
[ 1383.422590][   T92] usb 9-1: device descriptor read/8, error -71
[ 1383.722994][   T92] usb 9-1: new high-speed USB device number 83 using dummy_hcd
[ 1383.749397][T27491] ptrace attach of "./syz-executor exec"[18716] was attempted by "./syz-executor exec"[27491]
[ 1383.777279][T27491] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1383.792011][   T92] usb 9-1: device descriptor read/8, error -71
[ 1383.879828][T27491] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1383.906357][T27491] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[ 1383.915404][   T92] usb usb9-port1: unable to enumerate USB device
[ 1384.333147][T19767] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1384.490909][T27502] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5704'.
[ 1384.525917][T27502] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5704'.
[ 1385.694840][T27515] syzkaller0: entered promiscuous mode
[ 1385.719763][T27515] syzkaller0: entered allmulticast mode
[ 1385.837236][T27519] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5706'.
[ 1387.063931][   T30] kauditd_printk_skb: 26 callbacks suppressed
[ 1387.063950][   T30] audit: type=1326 audit(1758763785.359:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27526 comm="syz.9.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1387.476242][   T30] audit: type=1326 audit(1758763785.359:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27526 comm="syz.9.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1387.498730][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1387.534847][   T30] audit: type=1326 audit(1758763785.359:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27526 comm="syz.9.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1387.673163][   T30] audit: type=1326 audit(1758763785.359:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27526 comm="syz.9.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1387.883292][   T30] audit: type=1326 audit(1758763785.359:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27526 comm="syz.9.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1388.263153][   T30] audit: type=1326 audit(1758763785.359:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27526 comm="syz.9.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1388.285615][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1388.384597][   T30] audit: type=1326 audit(1758763785.359:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27526 comm="syz.9.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1388.428866][   T30] audit: type=1326 audit(1758763785.359:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27526 comm="syz.9.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1388.516181][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1388.572558][T19767] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1388.615052][T19767] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1388.648719][T19767] usb 3-1: can't read configurations, error -71
[ 1388.655314][   T30] audit: type=1326 audit(1758763785.359:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27526 comm="syz.9.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1388.680477][   T30] audit: type=1326 audit(1758763785.359:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27526 comm="syz.9.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1388.702922][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1389.009179][T27554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5714'.
[ 1389.110737][   T92] IPVS: starting estimator thread 0...
[ 1389.217342][T27556] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1389.688527][T27564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1389.813543][T27564] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1390.174362][T27571] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1391.541836][ T5987] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1391.576001][T27587] ptrace attach of "./syz-executor exec"[25737] was attempted by "./syz-executor exec"[27587]
[ 1391.778979][ T5987] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1391.788240][ T5987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1391.805825][ T5987] usb 1-1: Product: syz
[ 1391.832513][ T5987] usb 1-1: Manufacturer: syz
[ 1391.846647][ T5987] usb 1-1: SerialNumber: syz
[ 1391.929793][T27581] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1392.054747][T27581] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1392.313405][   T92] usb 9-1: new high-speed USB device number 84 using dummy_hcd
[ 1392.495247][T27577] netlink: 'syz.0.5723': attribute type 1 has an invalid length.
[ 1392.870074][ T5987] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[ 1392.883773][ T5987] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1392.911889][ T5987] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1392.935847][ T5987] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[ 1392.955868][ T5987] usb 1-1: USB disconnect, device number 39
[ 1396.131877][   T92] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1396.147963][   T92] usb 9-1: unable to read config index 0 descriptor/start: -71
[ 1396.169410][   T92] usb 9-1: can't read configurations, error -71
[ 1397.804300][T27667] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5748'.
[ 1397.836161][T27667] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5748'.
[ 1398.786426][   T30] kauditd_printk_skb: 50 callbacks suppressed
[ 1398.786445][   T30] audit: type=1326 audit(1758763797.199:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.8.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1398.937350][   T30] audit: type=1326 audit(1758763797.199:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.8.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1398.993383][   T30] audit: type=1326 audit(1758763797.199:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.8.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1399.110659][   T30] audit: type=1326 audit(1758763797.199:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.8.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1399.295673][   T30] audit: type=1326 audit(1758763797.199:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.8.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1399.503118][   T30] audit: type=1326 audit(1758763797.199:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.8.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1400.051496][   T30] audit: type=1326 audit(1758763797.199:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.8.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1400.326726][   T30] audit: type=1326 audit(1758763797.199:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.8.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1400.389512][   T30] audit: type=1326 audit(1758763797.199:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.8.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1400.497325][   T30] audit: type=1326 audit(1758763797.199:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.8.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1403.580753][T27735] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.5763'.
[ 1403.748658][T27732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1403.756929][T27732] syzkaller0: entered promiscuous mode
[ 1403.819273][T27741] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5762'.
[ 1403.898072][T27732] syzkaller0: entered allmulticast mode
[ 1404.414542][T27732] netlink: 2 bytes leftover after parsing attributes in process `syz.9.5764'.
[ 1404.434974][T27746] tipc: Resetting bearer <eth:syzkaller0>
[ 1404.469285][T27731] tipc: Resetting bearer <eth:syzkaller0>
[ 1404.793920][T27731] tipc: Disabling bearer <eth:syzkaller0>
[ 1405.296684][T27753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5765'.
[ 1405.504957][   T30] kauditd_printk_skb: 93 callbacks suppressed
[ 1405.504980][   T30] audit: type=1326 audit(1758763803.909:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27754 comm="syz.9.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1405.687011][   T30] audit: type=1326 audit(1758763803.909:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27754 comm="syz.9.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1405.761467][   T30] audit: type=1326 audit(1758763803.909:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27754 comm="syz.9.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1406.102427][   T30] audit: type=1326 audit(1758763803.909:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27754 comm="syz.9.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1406.124857][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1406.395546][   T30] audit: type=1326 audit(1758763803.909:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27754 comm="syz.9.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1406.526963][   T30] audit: type=1326 audit(1758763803.909:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27754 comm="syz.9.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1406.657363][T27771] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1407.854541][   T30] audit: type=1326 audit(1758763803.909:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27754 comm="syz.9.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1408.013027][   T30] audit: type=1326 audit(1758763803.909:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27754 comm="syz.9.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1408.064100][T27777] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5771'.
[ 1408.163079][   T30] audit: type=1326 audit(1758763803.909:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27754 comm="syz.9.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1408.163757][T27777] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5771'.
[ 1408.295413][   T30] audit: type=1326 audit(1758763803.919:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27754 comm="syz.9.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8ca8f8eec9 code=0x7ffc0000
[ 1408.518469][T27786] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5773'.
[ 1408.527662][T27786] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[ 1408.548377][T27784] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1409.199151][T27793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5775'.
[ 1409.208344][T27793] netlink: 'syz.2.5775': attribute type 7 has an invalid length.
[ 1409.216869][T27793] netlink: 'syz.2.5775': attribute type 8 has an invalid length.
[ 1409.225073][T27793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5775'.
[ 1409.245614][T27793] ip6gretap0: entered promiscuous mode
[ 1409.338288][T27793] batadv_slave_1: entered promiscuous mode
[ 1409.346620][T27793] erspan0: entered promiscuous mode
[ 1409.352638][T27793] debugfs: 'hsr1' already exists in 'hsr'
[ 1409.358588][T27793] Cannot create hsr debugfs directory
[ 1411.127539][T27811] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5778'.
[ 1411.819550][T27825] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5781'.
[ 1413.083031][   T92] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1413.099877][T27833] netlink: 452 bytes leftover after parsing attributes in process `syz.8.5784'.
[ 1413.256894][   T92] usb 1-1: Using ep0 maxpacket: 16
[ 1413.277575][   T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9
[ 1413.360004][   T92] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1413.609230][   T30] kauditd_printk_skb: 19 callbacks suppressed
[ 1413.609248][   T30] audit: type=1326 audit(1758763811.999:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27834 comm="syz.7.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1413.651820][   T30] audit: type=1326 audit(1758763811.999:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27834 comm="syz.7.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1413.805316][   T30] audit: type=1326 audit(1758763811.999:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27834 comm="syz.7.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1413.828152][   T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1413.830838][   T92] usb 1-1: config 0 descriptor??
[ 1413.853832][T27839] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1413.866665][T27839] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode
[ 1413.875828][T27839] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode
[ 1413.937287][T27840] netlink: 2 bytes leftover after parsing attributes in process `syz.8.5786'.
[ 1414.043466][   T30] audit: type=1326 audit(1758763811.999:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27834 comm="syz.7.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1414.132740][   T30] audit: type=1326 audit(1758763811.999:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27834 comm="syz.7.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1414.200984][   T30] audit: type=1326 audit(1758763811.999:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27834 comm="syz.7.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1414.329739][   T30] audit: type=1326 audit(1758763811.999:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27834 comm="syz.7.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1414.777174][   T30] audit: type=1326 audit(1758763811.999:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27834 comm="syz.7.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1414.937416][T27851] netlink: 'syz.9.5789': attribute type 1 has an invalid length.
[ 1414.963620][T27851] netlink: 'syz.9.5789': attribute type 2 has an invalid length.
[ 1414.995241][T27852] netlink: 'syz.9.5789': attribute type 1 has an invalid length.
[ 1415.022760][   T30] audit: type=1326 audit(1758763811.999:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27834 comm="syz.7.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1415.059462][T27852] netlink: 'syz.9.5789': attribute type 2 has an invalid length.
[ 1415.561418][   T30] audit: type=1326 audit(1758763811.999:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27834 comm="syz.7.5785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae58eec9 code=0x7ffc0000
[ 1416.249870][T27864] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5792'.
[ 1416.337462][   T92] usbhid 1-1:0.0: can't add hid device: -71
[ 1416.347111][   T92] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1416.436485][   T92] usb 1-1: USB disconnect, device number 40
[ 1416.529960][T27868] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5794'.
[ 1416.698267][T27884] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1416.747886][T27884] netlink: 2 bytes leftover after parsing attributes in process `syz.8.5797'.
[ 1422.054294][T27938] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1422.264174][T27942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5807'.
[ 1422.273933][T27942] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[ 1422.608176][T27943] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5809'.
[ 1423.000698][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.010045][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.712978][   T92] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 1424.798378][   T92] usb 1-1: no configurations
[ 1424.865456][   T92] usb 1-1: can't read configurations, error -22
[ 1425.061629][   T92] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 1425.233826][   T92] usb 1-1: no configurations
[ 1425.238496][   T92] usb 1-1: can't read configurations, error -22
[ 1426.201678][   T92] usb usb1-port1: attempt power cycle
[ 1426.462491][T27972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1426.491851][T27972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1427.149876][T27985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5821'.
[ 1427.420078][T27964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1427.503401][T27964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1427.659999][T27991] netlink: 'syz.2.5823': attribute type 14 has an invalid length.
[ 1428.212102][T28005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5825'.
[ 1428.221507][T28005] netlink: 'syz.0.5825': attribute type 7 has an invalid length.
[ 1428.229418][T28005] netlink: 'syz.0.5825': attribute type 8 has an invalid length.
[ 1428.271989][   T30] kauditd_printk_skb: 79 callbacks suppressed
[ 1428.272007][   T30] audit: type=1326 audit(1758763826.669:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28000 comm="syz.8.5827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1428.310058][   T30] audit: type=1326 audit(1758763826.669:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28000 comm="syz.8.5827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1428.609533][T28005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5825'.
[ 1428.640785][   T30] audit: type=1326 audit(1758763826.669:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28000 comm="syz.8.5827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1428.902389][   T30] audit: type=1326 audit(1758763826.669:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28000 comm="syz.8.5827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1429.045978][T28014] ==================================================================
[ 1429.054084][T28014] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[ 1429.061972][T28014] Read of size 1 at addr ffff888027ff9cb0 by task syz.7.5829/28014
[ 1429.069843][T28014] 
[ 1429.072150][T28014] CPU: 1 UID: 0 PID: 28014 Comm: syz.7.5829 Not tainted syzkaller #0 PREEMPT(full) 
[ 1429.072163][T28014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1429.072171][T28014] Call Trace:
[ 1429.072175][T28014]  <TASK>
[ 1429.072181][T28014]  dump_stack_lvl+0x189/0x250
[ 1429.072196][T28014]  ? __kasan_check_byte+0x12/0x40
[ 1429.072212][T28014]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1429.072224][T28014]  ? lock_release+0x4b/0x3e0
[ 1429.072239][T28014]  ? __virt_addr_valid+0x4a5/0x5c0
[ 1429.072252][T28014]  print_report+0xca/0x240
[ 1429.072262][T28014]  ? xfrm_state_find+0x2cf2/0x5400
[ 1429.072273][T28014]  kasan_report+0x118/0x150
[ 1429.072287][T28014]  ? xfrm_state_find+0x2cf2/0x5400
[ 1429.072299][T28014]  xfrm_state_find+0x2cf2/0x5400
[ 1429.072316][T28014]  ? xfrm_state_find+0x1da/0x5400
[ 1429.072327][T28014]  ? __pfx_xfrm_state_find+0x10/0x10
[ 1429.072339][T28014]  ? __rt6_find_exception_rcu+0x127/0x4c0
[ 1429.072349][T28014]  ? is_bpf_text_address+0x26/0x2b0
[ 1429.072366][T28014]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[ 1429.072386][T28014]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[ 1429.072399][T28014]  ? __lock_acquire+0xab9/0xd20
[ 1429.072418][T28014]  ? xfrm_sk_policy_lookup+0x9d/0x750
[ 1429.072434][T28014]  ? xfrm_sk_policy_lookup+0x9d/0x750
[ 1429.072448][T28014]  ? ip6_dst_lookup_tail+0x2ca/0x1510
[ 1429.072461][T28014]  ? xfrm_expand_policies+0x41f/0x6a0
[ 1429.072475][T28014]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[ 1429.072488][T28014]  ? ip6_dst_lookup_tail+0x2ca/0x1510
[ 1429.072503][T28014]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[ 1429.072517][T28014]  ? sk_dst_check+0x25/0x480
[ 1429.072527][T28014]  xfrm_lookup_route+0x3c/0x1c0
[ 1429.072541][T28014]  ip6_sk_dst_lookup_flow+0x790/0x980
[ 1429.072556][T28014]  ? udpv6_sendmsg+0x1656/0x24b0
[ 1429.072570][T28014]  udpv6_sendmsg+0x183b/0x24b0
[ 1429.072585][T28014]  ? __pfx_udplite_getfrag+0x10/0x10
[ 1429.072600][T28014]  ? __pfx_udpv6_sendmsg+0x10/0x10
[ 1429.072614][T28014]  ? __lock_acquire+0xab9/0xd20
[ 1429.072631][T28014]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1429.072640][T28014]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1429.072650][T28014]  ? inet_send_prepare+0x1b9/0x270
[ 1429.072664][T28014]  ? inet_send_prepare+0x1b9/0x270
[ 1429.072678][T28014]  ? inet6_sendmsg+0xe4/0x120
[ 1429.072690][T28014]  __sock_sendmsg+0xe5/0x270
[ 1429.072705][T28014]  ____sys_sendmsg+0x52d/0x830
[ 1429.072717][T28014]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1429.072730][T28014]  ? import_iovec+0x74/0xa0
[ 1429.072743][T28014]  ___sys_sendmsg+0x21f/0x2a0
[ 1429.072755][T28014]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1429.072772][T28014]  ? __fget_files+0x2a/0x420
[ 1429.072781][T28014]  ? __fget_files+0x3a0/0x420
[ 1429.072791][T28014]  __sys_sendmmsg+0x227/0x430
[ 1429.072803][T28014]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1429.072814][T28014]  ? do_futex+0x395/0x420
[ 1429.072841][T28014]  ? rcu_is_watching+0x15/0xb0
[ 1429.072859][T28014]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1429.072878][T28014]  do_syscall_64+0xfa/0x3b0
[ 1429.072893][T28014]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1429.072902][T28014]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1429.072911][T28014]  ? clear_bhb_loop+0x60/0xb0
[ 1429.072921][T28014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1429.072931][T28014] RIP: 0033:0x7f4dae58eec9
[ 1429.072943][T28014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1429.072952][T28014] RSP: 002b:00007f4daf4e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1429.072964][T28014] RAX: ffffffffffffffda RBX: 00007f4dae7e5fa0 RCX: 00007f4dae58eec9
[ 1429.072971][T28014] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004
[ 1429.072978][T28014] RBP: 00007f4dae611f91 R08: 0000000000000000 R09: 0000000000000000
[ 1429.072984][T28014] R10: 00000000040040d4 R11: 0000000000000246 R12: 0000000000000000
[ 1429.072991][T28014] R13: 00007f4dae7e6038 R14: 00007f4dae7e5fa0 R15: 00007f4dae90fa28
[ 1429.073002][T28014]  </TASK>
[ 1429.073005][T28014] 
[ 1429.453483][T28014] Allocated by task 26407:
[ 1429.457872][T28014]  kasan_save_track+0x3e/0x80
[ 1429.462528][T28014]  __kasan_slab_alloc+0x6c/0x80
[ 1429.467379][T28014]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 1429.472821][T28014]  xfrm_state_alloc+0x24/0x2f0
[ 1429.477572][T28014]  __find_acq_core+0x8a7/0x1c00
[ 1429.482403][T28014]  xfrm_find_acq+0x78/0xa0
[ 1429.486819][T28014]  xfrm_alloc_userspi+0x6b3/0xc90
[ 1429.491841][T28014]  xfrm_user_rcv_msg+0x7a0/0xab0
[ 1429.497199][T28014]  netlink_rcv_skb+0x205/0x470
[ 1429.501967][T28014]  xfrm_netlink_rcv+0x79/0x90
[ 1429.506629][T28014]  netlink_unicast+0x82c/0x9e0
[ 1429.511380][T28014]  netlink_sendmsg+0x805/0xb30
[ 1429.516124][T28014]  __sock_sendmsg+0x21c/0x270
[ 1429.520784][T28014]  ____sys_sendmsg+0x505/0x830
[ 1429.525527][T28014]  ___sys_sendmsg+0x21f/0x2a0
[ 1429.530184][T28014]  __x64_sys_sendmsg+0x19b/0x260
[ 1429.535102][T28014]  do_syscall_64+0xfa/0x3b0
[ 1429.539588][T28014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1429.545460][T28014] 
[ 1429.547763][T28014] Freed by task 5962:
[ 1429.551718][T28014]  kasan_save_track+0x3e/0x80
[ 1429.556379][T28014]  kasan_save_free_info+0x46/0x50
[ 1429.561387][T28014]  __kasan_slab_free+0x5b/0x80
[ 1429.566131][T28014]  kmem_cache_free+0x18f/0x400
[ 1429.570876][T28014]  xfrm_state_gc_task+0x52d/0x6b0
[ 1429.575885][T28014]  process_scheduled_works+0xae1/0x17b0
[ 1429.581412][T28014]  worker_thread+0x8a0/0xda0
[ 1429.585989][T28014]  kthread+0x70e/0x8a0
[ 1429.590040][T28014]  ret_from_fork+0x439/0x7d0
[ 1429.594609][T28014]  ret_from_fork_asm+0x1a/0x30
[ 1429.599364][T28014] 
[ 1429.601666][T28014] The buggy address belongs to the object at ffff888027ff9980
[ 1429.601666][T28014]  which belongs to the cache xfrm_state of size 928
[ 1429.615622][T28014] The buggy address is located 816 bytes inside of
[ 1429.615622][T28014]  freed 928-byte region [ffff888027ff9980, ffff888027ff9d20)
[ 1429.629398][T28014] 
[ 1429.631704][T28014] The buggy address belongs to the physical page:
[ 1429.638106][T28014] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027ff9980 pfn:0x27ff8
[ 1429.648156][T28014] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1429.656636][T28014] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1429.664157][T28014] page_type: f5(slab)
[ 1429.668121][T28014] raw: 00fff00000000040 ffff8880226a5500 dead000000000122 0000000000000000
[ 1429.676681][T28014] raw: ffff888027ff9980 00000000800f000b 00000000f5000000 0000000000000000
[ 1429.685247][T28014] head: 00fff00000000040 ffff8880226a5500 dead000000000122 0000000000000000
[ 1429.693897][T28014] head: ffff888027ff9980 00000000800f000b 00000000f5000000 0000000000000000
[ 1429.702548][T28014] head: 00fff00000000002 ffffea00009ffe01 00000000ffffffff 00000000ffffffff
[ 1429.711202][T28014] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 1429.719850][T28014] page dumped because: kasan: bad access detected
[ 1429.726239][T28014] page_owner tracks the page as allocated
[ 1429.731929][T28014] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 15489, tgid 15479 (syz.7.2293), ts 654561630878, free_ts 654453907527
[ 1429.751376][T28014]  post_alloc_hook+0x240/0x2a0
[ 1429.756129][T28014]  get_page_from_freelist+0x21e4/0x22c0
[ 1429.761656][T28014]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1429.767456][T28014]  alloc_pages_mpol+0x232/0x4a0
[ 1429.772294][T28014]  allocate_slab+0x8a/0x370
[ 1429.776779][T28014]  ___slab_alloc+0xbeb/0x1420
[ 1429.781443][T28014]  kmem_cache_alloc_noprof+0x283/0x3c0
[ 1429.786885][T28014]  xfrm_state_alloc+0x24/0x2f0
[ 1429.791637][T28014]  xfrm_state_find+0x37d4/0x5400
[ 1429.796582][T28014]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[ 1429.802732][T28014]  xfrm_lookup_with_ifid+0x58a/0x1a70
[ 1429.808090][T28014]  xfrm_lookup_route+0x3c/0x1c0
[ 1429.812935][T28014]  inet6_sk_rebuild_header+0x514/0xc60
[ 1429.818381][T28014]  tcp_connect+0x1ff/0x4ef0
[ 1429.822868][T28014]  tcp_v6_connect+0x11f7/0x1870
[ 1429.827703][T28014]  __inet_stream_connect+0x2ae/0xe80
[ 1429.832974][T28014] page last free pid 15483 tgid 15479 stack trace:
[ 1429.839452][T28014]  __free_frozen_pages+0xbc4/0xd30
[ 1429.844553][T28014]  stack_depot_save_flags+0x436/0x860
[ 1429.849916][T28014]  kasan_save_track+0x4f/0x80
[ 1429.854584][T28014]  __kasan_kmalloc+0x93/0xb0
[ 1429.859160][T28014]  __kvmalloc_node_noprof+0x30d/0x5f0
[ 1429.864518][T28014]  nf_hook_entries_grow+0x27c/0x710
[ 1429.869699][T28014]  __nf_register_net_hook+0x2c9/0x930
[ 1429.875056][T28014]  nf_register_net_hook+0xb2/0x190
[ 1429.880150][T28014]  nf_register_net_hooks+0x44/0x1b0
[ 1429.885329][T28014]  nf_defrag_ipv6_enable+0x87/0x120
[ 1429.890516][T28014]  nf_ct_netns_do_get+0x1e7/0x5a0
[ 1429.895523][T28014]  nft_synproxy_do_init+0x1d1/0x4c0
[ 1429.900713][T28014]  nf_tables_newrule+0x178f/0x2890
[ 1429.905813][T28014]  nfnetlink_rcv+0x1132/0x2520
[ 1429.910565][T28014]  netlink_unicast+0x82c/0x9e0
[ 1429.915316][T28014]  netlink_sendmsg+0x805/0xb30
[ 1429.920073][T28014] 
[ 1429.922376][T28014] Memory state around the buggy address:
[ 1429.927988][T28014]  ffff888027ff9b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1429.936038][T28014]  ffff888027ff9c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1429.944079][T28014] >ffff888027ff9c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1429.952121][T28014]                                      ^
[ 1429.957730][T28014]  ffff888027ff9d00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[ 1429.965770][T28014]  ffff888027ff9d80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 1429.973809][T28014] ==================================================================
[ 1429.981865][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1430.032994][   T30] audit: type=1326 audit(1758763826.669:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28000 comm="syz.8.5827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbae738eec9 code=0x7ffc0000
[ 1430.058153][T28014] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1430.065343][T28014] CPU: 0 UID: 0 PID: 28014 Comm: syz.7.5829 Not tainted syzkaller #0 PREEMPT(full) 
[ 1430.074696][T28014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1430.084734][T28014] Call Trace:
[ 1430.087993][T28014]  <TASK>
[ 1430.090902][T28014]  dump_stack_lvl+0x99/0x250
[ 1430.095474][T28014]  ? __asan_memcpy+0x40/0x70
[ 1430.100050][T28014]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1430.105231][T28014]  ? __pfx__printk+0x10/0x10
[ 1430.109831][T28014]  vpanic+0x281/0x750
[ 1430.113798][T28014]  ? preempt_schedule+0xae/0xc0
[ 1430.118658][T28014]  ? __pfx_vpanic+0x10/0x10
[ 1430.123171][T28014]  ? preempt_schedule_common+0x83/0xd0
[ 1430.128635][T28014]  ? preempt_schedule+0xae/0xc0
[ 1430.133497][T28014]  ? __pfx_preempt_schedule+0x10/0x10
[ 1430.138870][T28014]  panic+0xb9/0xc0
[ 1430.142573][T28014]  ? __pfx_panic+0x10/0x10
[ 1430.146985][T28014]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 1430.152887][T28014]  ? xfrm_state_find+0x2cf2/0x5400
[ 1430.158002][T28014]  check_panic_on_warn+0x89/0xb0
[ 1430.162943][T28014]  ? xfrm_state_find+0x2cf2/0x5400
[ 1430.168065][T28014]  end_report+0x78/0x160
[ 1430.172308][T28014]  kasan_report+0x129/0x150
[ 1430.176796][T28014]  ? xfrm_state_find+0x2cf2/0x5400
[ 1430.181893][T28014]  xfrm_state_find+0x2cf2/0x5400
[ 1430.186816][T28014]  ? xfrm_state_find+0x1da/0x5400
[ 1430.191844][T28014]  ? __pfx_xfrm_state_find+0x10/0x10
[ 1430.197107][T28014]  ? __rt6_find_exception_rcu+0x127/0x4c0
[ 1430.202825][T28014]  ? is_bpf_text_address+0x26/0x2b0
[ 1430.208024][T28014]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[ 1430.214176][T28014]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[ 1430.220746][T28014]  ? __lock_acquire+0xab9/0xd20
[ 1430.225652][T28014]  ? xfrm_sk_policy_lookup+0x9d/0x750
[ 1430.231023][T28014]  ? xfrm_sk_policy_lookup+0x9d/0x750
[ 1430.236395][T28014]  ? ip6_dst_lookup_tail+0x2ca/0x1510
[ 1430.241775][T28014]  ? xfrm_expand_policies+0x41f/0x6a0
[ 1430.247136][T28014]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[ 1430.252519][T28014]  ? ip6_dst_lookup_tail+0x2ca/0x1510
[ 1430.257877][T28014]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[ 1430.263676][T28014]  ? sk_dst_check+0x25/0x480
[ 1430.268291][T28014]  xfrm_lookup_route+0x3c/0x1c0
[ 1430.273129][T28014]  ip6_sk_dst_lookup_flow+0x790/0x980
[ 1430.278488][T28014]  ? udpv6_sendmsg+0x1656/0x24b0
[ 1430.283410][T28014]  udpv6_sendmsg+0x183b/0x24b0
[ 1430.288176][T28014]  ? __pfx_udplite_getfrag+0x10/0x10
[ 1430.293462][T28014]  ? __pfx_udpv6_sendmsg+0x10/0x10
[ 1430.298558][T28014]  ? __lock_acquire+0xab9/0xd20
[ 1430.303396][T28014]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1430.308754][T28014]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1430.314470][T28014]  ? inet_send_prepare+0x1b9/0x270
[ 1430.319566][T28014]  ? inet_send_prepare+0x1b9/0x270
[ 1430.324659][T28014]  ? inet6_sendmsg+0xe4/0x120
[ 1430.329321][T28014]  __sock_sendmsg+0xe5/0x270
[ 1430.333901][T28014]  ____sys_sendmsg+0x52d/0x830
[ 1430.338649][T28014]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1430.343915][T28014]  ? import_iovec+0x74/0xa0
[ 1430.348421][T28014]  ___sys_sendmsg+0x21f/0x2a0
[ 1430.353082][T28014]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1430.358265][T28014]  ? __fget_files+0x2a/0x420
[ 1430.362833][T28014]  ? __fget_files+0x3a0/0x420
[ 1430.367498][T28014]  __sys_sendmmsg+0x227/0x430
[ 1430.372158][T28014]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1430.377333][T28014]  ? do_futex+0x395/0x420
[ 1430.381661][T28014]  ? rcu_is_watching+0x15/0xb0
[ 1430.386410][T28014]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1430.391245][T28014]  do_syscall_64+0xfa/0x3b0
[ 1430.395744][T28014]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1430.400923][T28014]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1430.406972][T28014]  ? clear_bhb_loop+0x60/0xb0
[ 1430.411637][T28014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1430.417526][T28014] RIP: 0033:0x7f4dae58eec9
[ 1430.421923][T28014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1430.441512][T28014] RSP: 002b:00007f4daf4e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1430.449908][T28014] RAX: ffffffffffffffda RBX: 00007f4dae7e5fa0 RCX: 00007f4dae58eec9
[ 1430.457861][T28014] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004
[ 1430.465814][T28014] RBP: 00007f4dae611f91 R08: 0000000000000000 R09: 0000000000000000
[ 1430.473768][T28014] R10: 00000000040040d4 R11: 0000000000000246 R12: 0000000000000000
[ 1430.481739][T28014] R13: 00007f4dae7e6038 R14: 00007f4dae7e5fa0 R15: 00007f4dae90fa28
[ 1430.489716][T28014]  </TASK>
[ 1430.493010][T28014] Kernel Offset: disabled
[ 1430.497316][T28014] Rebooting in 86400 seconds..