last executing test programs: 27m13.544403502s ago: executing program 2 (id=1507): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x20000000000, {0x0, 0xf0}}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0xfffffffffffffffd}, 0x18) sendmmsg$inet(r5, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000030007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xc, 0xffff}, {0xffe0, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x2000c0c1) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x1ffffffffffff) 27m11.682970971s ago: executing program 32 (id=1513): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x840, 0x8e) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000580)={0x10800, 0x0, 0x87}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="20000280", @ANYRES32=r5, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r7], 0x58}}, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r8, 0x4611, 0x4) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRES32, @ANYRES16=r8, @ANYRES32=0x0, @ANYBLOB="040000000000000000000000fdffffffffffffff000000d200"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) syz_usb_connect(0x3, 0x24, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f7001020301090212000100000000090401"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 27m11.65663889s ago: executing program 2 (id=1516): process_vm_readv(0xffffffffffffffff, &(0x7f0000000140), 0x0, &(0x7f0000001780)=[{&(0x7f0000001680)=""/231, 0xe7}], 0x1, 0x0) r0 = userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x24) close(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0xc45f3000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) shutdown(r7, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000400)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r7 = epoll_create1(0x0) r8 = dup3(r6, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000009000000000000000400000018110000", @ANYRES32=r8, @ANYRES64=r3], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000002840)=""/4101}, 0x94) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') io_uring_register$IORING_REGISTER_BUFFERS(r9, 0xffffffff80000000, 0x0, 0x1e) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r4, @ANYRES16=0x0, @ANYBLOB="0800bd7000fbdb250b000000001d07e7f24652471df4e2cdbbc6fcd79f32a4c10f33e5462d66918c56f65cb8d921"], 0x14}, 0x1, 0x0, 0x0, 0x4045}, 0x50840) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd) 27m3.909113258s ago: executing program 2 (id=1532): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000180000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000138007baaf8ff00000480b5090800821300007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000004602010076001e00bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27m3.899316038s ago: executing program 0 (id=1533): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f00000002c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000600)=""/237, 0xed}, {&(0x7f0000000700)=""/97, 0x61}, {&(0x7f0000000780)=""/235, 0xeb}, {&(0x7f0000000880)=""/214, 0xd6}, {&(0x7f0000000980)=""/119, 0x77}, {&(0x7f0000000a00)=""/227, 0xe3}, {&(0x7f0000000dc0)=""/267, 0x10b}, {&(0x7f0000000c00)=""/158, 0x9e}, {&(0x7f0000000340)=""/62, 0x3e}], 0xa, &(0x7f0000000d40)=""/73, 0x49}, 0x9}], 0x1, 0x163, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10b, &(0x7f00000004c0)={0x0, 0xf341, 0x400, 0x1, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0x8c}) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x450080, 0x0) io_uring_enter(r2, 0x13516, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[], 0x80}}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x8000b) r10 = openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000240)=ANY=[], 0x8) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000)) openat$misdntimer(0xffffff9c, &(0x7f00000000c0), 0x420001, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a40000000160a010800000000000000000200000a0900020073797a30000000000c00054000000000000000020900010073797a3100000000080007400000000214000000020a010100000000000500000000000520000000020a010300000000000000000a0000020900010073797a3000000000140000001100010000000000000000000300000a"], 0x9c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40050) socket$vsock_stream(0x28, 0x5, 0x28) 27m2.451971474s ago: executing program 2 (id=1534): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x80000006, 0x4000) r2 = socket$netlink(0x10, 0x3, 0xb) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000001c0), 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f00000002c0), 0x1, 0x0) socket(0x1e, 0x2, 0xe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @local, 0xf}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8810) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES64=r5, @ANYRES16=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000200)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 27m2.004571929s ago: executing program 33 (id=1534): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x80000006, 0x4000) r2 = socket$netlink(0x10, 0x3, 0xb) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000001c0), 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f00000002c0), 0x1, 0x0) socket(0x1e, 0x2, 0xe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @local, 0xf}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8810) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES64=r5, @ANYRES16=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000200)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 27m1.976965143s ago: executing program 0 (id=1536): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)}, 0x102) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f046}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_VENDOR(r1, 0x0, 0x800) 27m0.942546288s ago: executing program 0 (id=1540): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x59, &(0x7f0000000080)={@remote, @empty, @val={@val={0x88a8, 0x6}, {0x8100, 0x4, 0x1, 0x3}}, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "c19a3e", 0x1b, 0x6, 0x0, @local, @loopback, {[], @payload_conn={{{0x1b, 0x0, 0x1, 0x0, 0x1, 0x6, 0x0, 0x2, 0xfff8, 0x0, 0x3, 0x9, 0x5, 0x0, 0xf65, 0x5, 0x4, 0x4e21, 0x4e21}}, [0x0, 0x0, 0x0]}}}}}}, 0x0) readv(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2) 26m59.832216637s ago: executing program 0 (id=1542): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000000)=0x7, 0x3) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0x5b}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x7) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) setsockopt$sock_int(r5, 0x1, 0x1b, &(0x7f0000000600)=0xdfa, 0x4) 26m58.919448757s ago: executing program 0 (id=1544): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYBLOB="51d02dbd70"], 0x14}, 0x1, 0x0, 0x0, 0x94}, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) ioctl$KVM_RUN(r3, 0xae80, 0x2000000) 26m58.287299458s ago: executing program 0 (id=1545): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x402, 0x20}, 0xc) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000000580)="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", 0x106, 0x0) keyctl$dh_compute(0x17, &(0x7f00000006c0)={r3, r4, r4}, &(0x7f0000001380)=""/4101, 0x1005, 0x0) close(r0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6], 0x0, 0x260b, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)='\x00\x00\x00\x00\x00', 0x5}], 0x1}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000800)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000001d80)={{r2}, r8, 0x0, @inherit={0x58, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000020000000000000071050000000000000700000000000000010000000000000000000000000000000600000000000000ff03338367fea284a61900000000000000000000000000000500000000000000"]}, @devid}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) sendto$inet6(r5, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000f00)="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", 0xe5c}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x1f}], 0x5, 0x0, 0x0, 0x48044}, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001696fd1c52806d7f0d73ea0300b35048a4e8457e42304c7c7a16a9a2fded47513fed3e09d5c17210265b86acc61d8a51efd568de0b8c49671e606e759806d5bfd0094dee4d4c9fc244a8c7219658fc9e506ff9fb085b06a35dc61404099b92d32961c2129bb67529af1793dbfc30d9bcefad741f9336ad4485fd6dffefa13a3245dc774c9083b082e8460398ee9051b6aa922326968f13260e25eeb44bf05e1b35363692e78b5e", @ANYRES32=0x0, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x4044064}, 0x24008004) 26m57.923468619s ago: executing program 34 (id=1545): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x402, 0x20}, 0xc) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000000580)="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", 0x106, 0x0) keyctl$dh_compute(0x17, &(0x7f00000006c0)={r3, r4, r4}, &(0x7f0000001380)=""/4101, 0x1005, 0x0) close(r0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6], 0x0, 0x260b, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)='\x00\x00\x00\x00\x00', 0x5}], 0x1}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000800)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000001d80)={{r2}, r8, 0x0, @inherit={0x58, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000020000000000000071050000000000000700000000000000010000000000000000000000000000000600000000000000ff03338367fea284a61900000000000000000000000000000500000000000000"]}, @devid}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) sendto$inet6(r5, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c7408000000000000006c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2047770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e0946664e0762d12282252b8bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04405d2fdab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe5c}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x1f}], 0x5, 0x0, 0x0, 0x48044}, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001696fd1c52806d7f0d73ea0300b35048a4e8457e42304c7c7a16a9a2fded47513fed3e09d5c17210265b86acc61d8a51efd568de0b8c49671e606e759806d5bfd0094dee4d4c9fc244a8c7219658fc9e506ff9fb085b06a35dc61404099b92d32961c2129bb67529af1793dbfc30d9bcefad741f9336ad4485fd6dffefa13a3245dc774c9083b082e8460398ee9051b6aa922326968f13260e25eeb44bf05e1b35363692e78b5e", @ANYRES32=0x0, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x4044064}, 0x24008004) 18m42.366196295s ago: executing program 5 (id=3976): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) r1 = syz_io_uring_setup(0x890, &(0x7f0000000440)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)="0084ce", 0x3}, {&(0x7f0000004000)="0424344dd3", 0x5}], 0x2, 0x7fff, 0x1) 18m42.275329699s ago: executing program 5 (id=3977): arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x5) (async) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) (async) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x5) (async) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x5) (async) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x5) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x5) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x5) (async) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) (async) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) (async) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x1) (async) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x1) (async) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) (async) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x5) (async) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x2) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) r0 = socket$inet(0x2, 0x2, 0xfffffff9) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@loopback, @rand_addr=0x64010101, 0x1, 0x6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @empty, @private=0xa010101]}, 0x28) (async) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) (async) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) (async) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x5) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0x80000001, 0x40) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) (async) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x1) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x1) (async) sendmmsg$inet(r1, &(0x7f0000003340)=[{{&(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000180)="9323b27a7128087196f1a56728d68284", 0x10}, {&(0x7f00000001c0)="a5fdd10b168605f83b876d95ace10dae6ad8538055db8eb9", 0x18}, {&(0x7f0000000200)="d32bbdea9b9549a0bd918668c2de5e37f42e2db0b6e3a2198a3844a3a76ba9380c60bbfba330cf38d58171360142fe7b577b6933e7c46c8f0990e0567e9d4bbfed1ab81ab038cd6379", 0x49}, {&(0x7f0000000280)="719d06fc61e3747b0a98d1695205776e335631859a8cd5043a0620649f6c568fa228f53c9f4b9b04493cf044bce57b14d0f60a831629154e5295dc2f5bda89fda190ac76be25cbf14f492755b97a9c805836d0298d718b8613da59c97dfa04045444240359ef8c83b4f584e5bc020f450951eaeeb1c339a6719bf20542297ceb1e2e3ad6a8a8245269a72691c74b6d1b16c9f0a21362bdcc550f0c61fd835afc933c2ab21783f93511d611e6d85b81f62b3cffbc4122a61d3478ecdb6e930ef80d8f69c16b9643e9c12f", 0xca}, {&(0x7f0000000380)="b568e22b5009fe8b06e4386ae5ee92c8cf741335331e72880c875e3f1b376629d9e133a9f6fb7dca7a0327483e7d4c564c51ef82293bbc5c1f34f0d774a76ceb8de22696e5b8f3c0d71297ae10826ec99debb2ea91425d89e81f0e235d9c1ed785699ca6bb0ec671196942ca4300c6e2d34a0abd94196a4d8212627e94528f141854ad4d4a11565e433978c6d9f45243945e3dcbf26a3d7d8a798aade2115d692cd2d6a581bbae1b7b4f95e68b2f5ecab4ed4330eb28e8e68d14e1732806c621a6a6cac5c95f5065b746ac7d071960c3f8b950045fd5a7df006433e6a4f4", 0xde}, {&(0x7f0000000480)="48ba61bc2233d54be6442f3cba4f7be0b0a6230fa316c7de881909cbdbf5274af9fd85d7d5c62ef75fb1cba97a1ce4be67d7ab7cb49a0f1e2996b2dc0df7045fc0197b5d0aa1f629e8a0033dec427cafdfd96f30639129ac87b1912191fea132da0b323b720fe81a0ad085201565fe72f6a505f51dac22ed87c97a512a0ca70d40931d94ca4ebe44e3c23ef39572a049bb6adfa4376642da4d500637d20a56c229c8a709540785069dc39b4cf8cbef70e3c54b5446723ad3bf441198424757ba", 0xc0}, {&(0x7f0000000540)="fd7805ca538eb390ce47b1cac0bb75fe9bbe5bfab67f99d2d6d0ec4446c9bd3a3a6f3f12fcdc67774f5862a1aba4485a72401e7531a995f5a55dd3db60781286d58863186b86770e406e722421c59dff86c07c2262ce9a39b42177528a26baf80dfe55d90085fab4fcd11d1fa435182cc0ad7e6e5349c959f13a416851d97ea19b1fc8fcccea7fa6bf3d0a7a5f5b5455a60f2125", 0x94}], 0x7, &(0x7f0000000640)=[@ip_retopts={{0x64, 0x0, 0x7, {[@cipso={0x86, 0x44, 0x3, [{0x0, 0x6, "bc2a7efd"}, {0x1, 0xc, "fddea62b04cbff0b00f3"}, {0x6, 0x2}, {0x0, 0xc, "c73c06525b46a223dd76"}, {0x7, 0xd, "84832956a8b2abf1e3c5b1"}, {0x6, 0x11, "e359d2977aab044807494d6a6e5493"}]}, @ra={0x94, 0x4}, @generic={0x82, 0xc, "1e36345c61310d612f74"}, @noop, @noop, @noop]}}}], 0x64}}, {{&(0x7f00000006c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000700)="de6c7bf558f1926bc99e62afaa706feaf7a168399d4404f11306ed92f5345a209ed79ef7f76a1ebb35dbf772f8b4266912ec2c3fcd57a520f6e4e3eee2f823bbc2f3c3c66efbe18b101235b400c7d17352fe3a22a1dedd7643fec86000d0249ae95acbc21abd1178d9e56d0b338d3631649fa54fa4c81ab984b5833de9d388057324498cadb0bf70632cd505ddcf747928e4b1823eff9eaba803c6dc9dd8cebb60e8519d349cd3d1defc7b43e6a661c9b9d66d2b5beb96c56d4baf69f793b62082245b31b3e5e664f2ad", 0xca}, {&(0x7f0000000800)="7c954da8b65550789d6fc8b16af5d016e5bf7ea0ae1926d78a81ee251946d1aca0a5a69f8d67f29f3c066974a409c1b5ff81afddf375e857f890a55a2ac35fe8faa6f495cedd5ebba345d9de047221f3bb08b1324f5c6bcb31417cf6dd597c468602a1d168985a6df506dc163092770bca8bf6555633f5fd0891156008e0bf555a477b1d639e680ec86e", 0x8a}, {&(0x7f00000008c0)="43df4af66c2f472e5fb23428b466da5c694fd80e11930d0e7b90601944d1f4fb473ba66d4158a8b729cc099dd6180f5eb608379dcf592392c87fa4d9706ceed27f1ecf36c0afbb91368b00e09abd73a5cfb15c43980bc6db47adf18a42e2f303ecda3d5dbc848f58d41336705a8369211b79252111b41f15d487194e81e44298d9d0fc8988", 0x85}, {&(0x7f0000000980)="1daa726eab637064701bc2c54fa3717cc93b9c9ec78840805fe9f58917fe65ec0ee4570018286b55e90b57448304d8349b279349db565781e5bad4203d5fd8eea175d966a88de02751dc8f474f0ebd1792c958ef089c7ee4c7bb2e57b4efbf079df5bb9e03680c8b948bc1e89e28a914e5837c4e5b36d2212d3f1a512426e89959f659a13437c00c35ed4fb9e164d0af68fcf73819c76cc7ee5f83322eaf6bab0672fb7ed479adeb6e3ff0cdd65445d4f6f723afbecdfcf24c98005a59924ce758377a", 0xc3}, {&(0x7f0000000a80)="7e248780e6a1aa13aef5b4d769de57debc3c06cf8280de8266919e626a02021cc8600f2067748e212435a779dc502adf38ed5e054cad2785d869a18137d8bfe510179eb69f7003b17bf2465ca9111a546637410df39081af8cc219fed76f6fa585bcc446905653d0d5d31769d0eec586731bbee19f0e64062934654f0c7aaecd04", 0x81}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="10c2faba93c631951b8776a8d3873dc02609a0c9ea6df4b5d8fbb317b400973ab9cdc1bb93b6dfc9294b6a7fe2a1d11a57687040ffcb575ca0cf7f19aa80c2a684bf05358a53d5447cef5f23c4f92f06471b49c193bf507bc619f3309522c8c00a371c9d5d3dddfe317914ccb64b8f4ad480d678fde88c5ec7f80d514216c7185b673f0eaf06a9a027844a5b492c0dd996560d258fa38cfcb76ad35bae49d5b4abbc54250859a7176d72d80e", 0xac}], 0x7, &(0x7f0000001c40)=[@ip_ttl={{0x10, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x5f}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x8}}, @ip_ttl={{0x10, 0x0, 0x2, 0xfffffff7}}], 0x40}}, {{&(0x7f0000001c80)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001cc0)="1443a2004ad92c4cb6d135467e6e7c51ce9518589962f5ffc138c69d37287cafbec114c19c2a039392236f4637e44e078f8f63eff8ce94282f954ff0a14cbc9a93fe", 0x42}, {&(0x7f0000001d40)="65ed5059eabc9cd13f89d98f40f2b684f6adcb425df53b2885a17d419f214c6e3f0fd11372da90dd74e9524aaf8e6b58f29e6581611ea0de10b12e1702275fde9b4b63e033", 0x45}, {&(0x7f0000001dc0)="0a386604277c18966d94369f88a1ec104881c0a4c68b34eceba467f068c27b8e1ee5d385c6a692d9e339817c132f62be05de6dba55e6ce3d446ea2ad7174db104bda7166af8e130c8b089dbd1857f19f19cf6d92a51ddc367c809fc9482070d2c171cd2677c873aeae19c7f0558e82146623cc26d641576f1d1a4487b20acaf7f030f46dd902de64c7e03a7f67c773c0228647c675d58b16e5ccbefe5ad5055c5fdce853643b19cd4972fd3d3223a6938767658ded10ae0d9b81bbac67a22b50e4770481786933dc71f3", 0xca}, {&(0x7f0000001ec0)="0798b66e21524ccbe015762b289b5fb1d1b088e0fa0d2a18e19269c45c54703da186a19f6ea3e511e02487e0684638089fdfc6e8b07a1884f6dc37d94f6317e1ca7b0398ccf4faba064641e2d714184059bc4379", 0x54}], 0x4, &(0x7f0000002040)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @private=0xa010101, @remote}}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002080)="f3d087be75b34555fcc6811a4cd69fee9cef44ccac8808134992e65a2468b690884a4d89bbecba50278fcdf59129ac3f63f13014a1f4ccc70f58b954cde8933a3a4ca0f85141278b482379b40d08bda9d1919b860632c0efe8642379776b2ae9d3264f09d9048fb9cf3eda7dbc6c58ef77df84d96a", 0x75}, {&(0x7f0000002100)="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", 0xfe}, {&(0x7f0000002200)="0a58a7c72f6a96219b861760d25534ec43f70e7574d7b4ff7fb34925a28803bbe261b6ad352585fe546c330adbdfbe271402e7b6648a0dcc43be05613cf22012427325518338ffbcd272a3a94d8b847fab10ccd346f466cd5c43dc0af7d421ea9904115e4e44d1fa9df31c9d0b12a828a592fd05d1edd57fb7b23831a208a1052cdd85dcd306a8eb660e5aeb7bcc6a60e20ecec29030fae9cc7628fcbb97d9a845a42cf8bb1db46f219b91e073c7f34f93181f13462bc965af96a504d5c45f17ebe3124b6076e95fe8e286584cac360ee8589eaf9c2102baf8598cafee0e1dbb028fbf03635c20eb74048c4b2ed7315be7644fb41adce02c5564b2e3b1a0c3194b1814a214d4b2739033e69823061473ebffead1736ecd8852af280c2d99648ca698c4f709ae1201a077058b4d2ed02735966fbf6bdef61799da7366cacbc8224b8e7a53e14e5e331b4d980af1f5c15eecbf2f92a973b0df40acdd93504cbecd7f8404e8dcded0eec79d6e608c3a4d4ec5d5453788f791a57739aea90f6847959931ceecb3ec5fe3fc38f31d279c6982c1b805696b523694ed6fed438aea9657a5d5ec7cf055ee5effeebc8304213a0082caa30db3d4f02c8926dbb08ee0663f0bb612f8d08589bf5b6880ece66ad355c70a4b5ae1dbb18dba86393766d2f35acde2a4726311aa42391bc684871cad5f53a3123d80024388970c0fdd70daddbd35750aa52976e4d40d39492fd94c592a8868efb9a993ad5b2eb07e135204cf037667a395c21004befb962aedcd1f38b53ccf0bab24249b5719386187c0e1941a2a12125d02a8f08e1cf58300e15130861386ecbe7d0a91085ec7b54ef7d513ccb794865efc40944b65570dafe8843802c58efa78bf91de4fa211c211e88ff630b07c837b5c0ef5e612ab438a88cd905c9881e73377c0b8a3a2019a301048afabf5e70a88a16a0f090790193bcf0f69416871a9337056234ba2dbf8b458250cd3049329f15184cf8d1fa5c4e7c237080cd108bce4e6a5054071939923f4876fff334ce71e618ac6189c1572b503d133d5689ca534a35efb77b96217821c60c4f204809ccd5b3471642429ec82a4632a70d5548950d0f2dc946bb33e1ff33963450d9ab3503092f3963db509cac08812b85b14163fb7c4cafd18884518fceadb3a45fbd36e084510105ca684905ff23d7c7f79c72c39e3d546f3cfd934a0a46a7c9f28280193307d223b455fd8550b48ffcba165facdc9c8e7fb8e633a494d10de9a89850327d2937fc7a79c0f40b9b72bc71f3bee5a52258fc185120e5551f0dbea12d5c981d6f3d4f03a0b8c25d2a79c6b2579b4fb524a4fb5e42369878ddde9c66c5986124145eae8103b84eea674d1a94acab2e8e32a47c7cd4fd34f09cda23da0f56fd04588017965b1c1bf5d0931b838b65271981fb4888a58fd9f9928d8ab5419968992bcfa6576e61ca4566146bda78e4fa24c60fa8affd97b630ba23627e84d59d65ab237fceb9f248ac78f2a5058f5952be220ae1d77ec6f9db3e2e09b00877a5162070418df0ccd34a94a2fdd573953714bcda81c6b83f46a3caf73f18a1ff0a31eb7e2803cfeb281facff2e58ee2d195408cacd2ba58b1dd240fbf666f37270bd188c47d257c315981024daea535a927c329acb8282e5cf1d4d4e13ed97c3e974ae142844485f35f86d70362d7d152d313df529ba5890261399e5e30f28375f4909db0a7c2940cedc08fa278c0e51917f090e7fbab222414e5d6244d2cc527c0dec93cf20b57d8a0df66652425d36d3089e82a031495c2096f09ff18c2c158bc80a12644a1c5280c09db9049548889edacdd5ed65e2a3e42b12a66dae799e0d471da7fa04ee69cb36b18743fe3cc33fedb9b24cb960e93acf9c6c2773777561ff2fabcc38f2cf040d0884b7c40352bd84cd9c1672f62292ef89c4eaf7a249587e3aff2d109ed275895ad85c87adbefe380b22295be5cf2ebe440dc8d98de126488d7ca61db84183af0dd6bd47daeeeecd6cfa04cc33d781b35bc484982143def38d386523db88d4f2f51535b0606b6216c90d4125d792698ca03762c8ad8648351361b98fa7ede0eaa386aff95ec513ebc77993e0bfcdd59fe9e2a2cfdc30cebaa70578f98bb62ddcb119d44891a207ae66e8bc10519ac2991bb5078f9ee5543235dd9640ea0bb95b00c74249176bdaa07d0560b680b4db5eaf3a1fda3da9acb3297c56f11e319e4b682d3b1a59981c4feb8a14df02136a6810e551434529d7886dd14897c57cef1b52a7ffb2d89e9ee3ea683471c8ccb8a68a933a095d6bebd95463f374d4b07808f3f5af63ec9c6e1e8de39f1ab855033fbcbd46d15d3b14a95b7af0e35e3e6b97a0f9135822e0af48536f4414e4b21cc1cd0786b5bf8ff50f4dbe7805990712265649a9f82d68588bde0f0f1d53223cafea242de7af6a9d4d84f10111010fa2167bce8050e5c6ea50ffd09d5f0ac5c031e699fd936bdf723c780f5beba3c565f5c4c4dcf61a7ebcf15572980bdf5ad37b1ad5077c0c7b26a5b29f2d047f8793300951d28494cc2692376f97fee1102f4330f3c66a8066a4e48b777189f74f80d458d6b62e2bcf28a5c1a92709136f7ffbbdbd00077cc5a608d3babaca4c8c2160ce6327be8a2832761b0e0291f3f613efab44241bd86466a9065eb250c4499d565f9f288281fc36b9af41d9d628c8db8aaf619418f1e9d38bb687e88d84738bc4b6f0bb83a48d18de5b983451cc98fe0803d87c8add94dfcef42fa836e3e8bf254684db8a187d04c29b54217e282be6abeb41414c3175e6838afb1f9defd8ab877836bbcb96ad92987fbe5cf6d03fcdf62444981e421c0f67cd95ee55a09e64de0893d1c8825a9cef268cdb8fb33588b1ba495d0e39f9623a39ba966384b44dc880508567d77e81efb2f3b50496d91443677c1a700aecf139f3e0ef3fecc1fac2d9e0ed253f94527c5e1f583157dcdf7ab6fb96825eea89cfbb4a92b2cf313c311581f591b974641ce19fdb0c651f153d15d5f2b6a3de6a7843a15eec9dbd4124a6fd8d4b87a304d3ae671543059fa83c807f69662c2eaf6025f632f817b70443b7ea7bedb11e29cf05cb56eaa0fedbacaa183400bd7c1576af943009debba450bff39b55296c88ca37389170f3ac9f39b8708e28f5f44669369ed9062e9024eaa18aa52de8af9464671a15d7e2f3185844cf180906ab46ee136091ab354bc77eff37accafee15462d701aac307cd6031d59f5991488759ea9dae826496d55bef0b64318a668285304938c7f985c15427fcae3834d264cc16d0c414c60448ff9001e7ccf046e54de10a814ffa05ad03d15cd78458f4b1d0ca7bb9fb0c06bdd2a43f93e1b0f11bebdf325346720d92bc57061d0e021cd01a16ac1e944a93f84f1e9ef85a9772ca7091d7dba0300cbd0082186d580da23c87805b2ff10c829663f113369d852554d471095d0f565787a2b200c7e1e8b357270d79c0859376d25f9a1fd1d6ce28efe23084a22623fff29b5fa4d41f63b990058f28e98955ba90f2fed8e10300252cade5ab0064f1cf0a2ad45c45a3a717bc2b4aec5fa7aa4b7ec7df58f052bc961f79928657c26e343343db477bc27a5fdea058827f488ebbb6e2a6b6b119621e5d49f53ebf1cba908d8147205ca073004d16002b58c6b7c23148dc6ea879cee2650d3bc52dbaf4f5c24f13d4aa060f0c565d0b76f8e6e0986a7b1c753e9006a39190f7475739be418f7f9ced9c922bba53561589d8b6db264b5b3ca79b84d5709ebfcd1a61133b23a84bb68aa978557463f46482c71b8d02077fda63059297a204a8e5afb35148e962112afca9c8fc7fbf148fbbac0fce9793c8b843f669ab5d1764089d44dceab28c1f756002887a9c835835e1e39ec3e13117325d222fa706ce73b3f63e2c8ef562dd837e32472f2ed49cd3ebedf87cb8d35de2cec82354b5418b3116334a4899172b71e78cf10028bb962936b6519129e883f3ded2c0ebe6e8a8d78113f04c3b5af0ab2734da0f6654b6808417b54b5ab57832d1d57a891294b17d1a3130b9baea999dab76b1707a295320ac66d8f030cd313e4b7164f4f060b9341d21bbeeadf8ac50abcedfe89e0d7c2e95d9bbd093ad7e7af11f1708ae3f939f5e51c24c9c8a7357eaefd0574a3ca590913f37277413384dae57a9bf4ab2550ef5c2b1212a15e8dca1f76e874972cf249f9abf6806cc0650ceee6aba186b8e56d2f21e0d6143eaded54208767b773e1027319f60e301aaae6dba9a0b451d15301182139b80e1c33fafb53fc1d39e4ecee3e74abf255963e0ba0bc77c73f345a620fb3440046b855eaab0b0e6bbdc5ef4f1abd6b12ae8b13b43ce4b29f01afc2acb6cea5183c54828d7ee368a8bfc67c1c11a69aadd2e49c98c2a450f3c144a6180f90984457599c478857c92454defadccc1db7c3872b9e29dfe33479ff3cbd9786ed50d23849888aa0dfbc4d390c93bb365b077a590af6301c530ee45e7f2baeda2845c5e24f49ec791821755b43fbef81509948de566d1f064aeb2cc57787ace4c242cf9b3371cf7a466b605a7cdcbf7ecb3598ba5325e1b420e0218da7a168bd95900e77658e3ed510a151d6e81183f99cd4448bc80927a5a2779053b4458813a6cc3192eb83547d6101e7f4971a7f72d1f259300cc2635324ce1c68c83ee72453034113684509a8308372b9882f14230c9cbe3cd23d955045c1dfe1fe4fc49ce86993d3a6e213ddc38e7ad4840de0e5a30cb82ab07955af7954d48ffb05e0feda96f1dbaa1b80bd35973d3d8e8364f7975b257a358588cabda31e3c07ef5d1171a749363e4917f9f0e5c03361d028fd9f00ef5a788676b7af9e2ad7c785a4fa3a1ebd2963bc6a7ebd497430c6876c292eddf01c657c674422aa4bc073159f028dec47f17730258a1d528ec2f7814e1a74c64ea3af1729e5ca95716cedbeafdb3cb51523805de2cfb3a9c1f84f91fe037a9fcae55f14a030469b844b10ddf6a01e659debc046b724ab161b5badbd587b861e0d6517c668cf1956ad0c448777ab84e393b8bdd7e2d93c9866495b1238931ad36f02787433f054d10a2b9ff65e3603e2b1fceabf91b5d7ac7853c300c2de93f799ae7d8cbebd7d78df4c278526021f5b1ad45daa74a9ac978eb97be94454aacceb8719b6bc3c34fdd77297f192173c97a1decf203094d82861e32c56091b7c8356d549f385fcab8fe76ff50d86f6a2b83c43dd05055a1f575df154e4964b95e8f1a1c6fb7f0eceb10ab8d6de96fdc273344ab8ad04bf0e46fe29ba50e1bdba5173728fa11009bf9751ca7f8f073b6b46fe982b3ab809a117cf7effa8f40be3b70f1f19b07a35de98084023fd6c26484081192f4c8eb951bbf6c747005f47396643f359e04c0110d8db92e25aa21bbd55b941d7e640ae3a7ab129e9040542e01d9ee6dd9f8c02ba5d250deac3d0ce23284bd491b64a4391a6a8f23c23f0fb0b486e79051165332d68002d984b1468aac48a8531d20a20be646c7766a7f8f7f4798b2797c0fe9977c9ff56f8630d9757ebdf54cd235eedc0a7b75fa1ab149fb4fad4741b65717555b80a5f32f1f3f2841056fcb75cd0498a26646c7cd6f329035be2ecbd32b57eaff4e758f634e371e186c39bbd46b8b5a50cee993b3ad62e59e7ee6acf4177c2622c820518186152640387b2bca69b00ef7fcab39aa88ca73c5aa1761ea2f168a7ccef9703a4a22f2aa0e072dc832f377f53c8cec890279b03395ce7969791b0639d7b6adce602ed338157bb237f6a6a54", 0x1000}], 0x3, &(0x7f0000003280)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0xc}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x20, [@rand_addr=0x64010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}]}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x5, 0xd, "db883149fe7a9a3b31dd12"}]}, @end]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xfe}}], 0x94}}], 0x4, 0x4008104) 18m42.116069016s ago: executing program 5 (id=3979): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r3, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x6c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000040}, 0x24000800) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 18m40.896528066s ago: executing program 5 (id=3981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x288, 0x24, 0x4ee4e6a52ff56545, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x1, 0x8, 0xb, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x6, 0xb1, 0x2, 0x3, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x5, 0x200, 0x7ff, 0x2, 0x0, 0x7, 0x4}}, {0xc, 0x2, [0x8, 0x1f03, 0x8, 0x401]}}]}, @qdisc_kind_options=@q_gred={{0x9}, {0x1b8, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x6, 0x7, 0x6, 0x1000, 0x7, 0x3, 0x0, 0x7ff, 0x3, 0x19, 0x20, 0x15, 0xff, 0x6, 0x534d}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}, @TCA_GRED_LIMIT={0x8}, @TCA_GRED_DPS={0x10, 0x3, {0x9, 0x10, 0x0, 0x6}}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0xfffeffff, 0xd0c, 0xd, 0x2, 0x7, 0x4, 0x29, 0x0, 0x6, 0x0, 0x5, 0x17, 0x69, 0xa, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0xf, 0x10, 0x1, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0xd, 0x3, 0x1, 0x8}}, @TCA_GRED_STAB={0x104, 0x2, "1e714bc81342598f9107ea965f35d707ce7e3acc0495d0d9411fec39b9361a93d817bcb6a54cca86d99e789441e8f2f0c83b817cfb69973af4161e4f2e9bdd86d08c7ae5bb19299231cede8927d9cdd88763e3590d3e3070dbf9b9eca235cd289f485e051ed8cae972dcc245b7fb70455cc3e6aca51454454ecd7eb2f03dcd044feb6c7ad200f1951a1fdf35348ffc0a386c04a96ec69d63e1b4a4eba786da8422e27bbfa889254668ad86f46e77749dbaca57dce48b8eaec385a1de056891a22374c6efc5cae1ed20ee4d70ec561c7e98cc2ab50e049b597feda130e5c0c1f3a083b2cb74573eefe20fe2b25fc9ece058ff0e2747c796601c34b77dd2a59ea6"}]}}]}, 0x288}}, 0x0) 18m40.614845566s ago: executing program 5 (id=3986): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$loop(&(0x7f0000000140), 0x4, 0x280000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x14) openat$rfkill(0xffffff9c, &(0x7f0000000280), 0x10900, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040)={r6, 0x1}, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000100), 0x4) r7 = fcntl$dupfd(r3, 0x406, r3) write$binfmt_aout(r7, &(0x7f0000000840)={{0xcc, 0x1, 0x55, 0x37a, 0x26b, 0x6, 0xe4, 0x4}, "", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x520) read$FUSE(r7, &(0x7f0000002540)={0x2020}, 0x115c) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) 18m39.171386272s ago: executing program 5 (id=3990): socket$netlink(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0xc) syz_io_uring_setup(0x475b, &(0x7f0000000300)={0x0, 0xfffffffe, 0x0, 0x0, 0x35b}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) (async) close(0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0xa0701, 0x0) pwritev2(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)='W', 0x1}], 0x2, 0x0, 0x0, 0x0) (async) pwritev2(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)='W', 0x1}], 0x2, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x4040000) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x4040000) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) write$char_usb(r5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, 0x0, 0x0) (async) write$char_usb(r4, 0x0, 0x0) 18m23.341735899s ago: executing program 35 (id=3990): socket$netlink(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0xc) syz_io_uring_setup(0x475b, &(0x7f0000000300)={0x0, 0xfffffffe, 0x0, 0x0, 0x35b}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) (async) close(0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0xa0701, 0x0) pwritev2(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)='W', 0x1}], 0x2, 0x0, 0x0, 0x0) (async) pwritev2(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)='W', 0x1}], 0x2, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x4040000) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x4040000) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) write$char_usb(r5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, 0x0, 0x0) (async) write$char_usb(r4, 0x0, 0x0) 15m55.525017636s ago: executing program 8 (id=4562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x4, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x17, 0xcb}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x4000080) 15m55.157465115s ago: executing program 8 (id=4564): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x20, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0x18}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0xc4}}}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 15m54.777885158s ago: executing program 8 (id=4567): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) r1 = epoll_create(0x10d74f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xfec, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006e8000/0x1000)=nil, 0x1000, 0x13) sigaltstack(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000540)={{0x3, 0x2, 0x8, 0x6}, 'syz0\x00', 0x16}) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r4, &(0x7f0000000840)=[{&(0x7f0000000100)=""/245, 0xf5}, {0x0}], 0x2) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x40d5c4}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000300)) epoll_pwait2(r1, &(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0x30002019}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2faa, 0x4000, 0x2, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x5, 0x0, 0x0}) 15m51.173146751s ago: executing program 8 (id=4577): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x1, 0x4000, r0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x4000001, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x7, 0xf001, 0x8, 0x2, 0xb676, 0xc}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x3, 0x9, 0x8, 0x0, 0x4, 0x8}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="000100001200000429bd7000fcdbdf251e06000c4e204e210500000016a20000090000000e0000000300000008000000e4c10000f6ffffff", @ANYRES32=r7, @ANYBLOB="ff0300005b3b00004b7555b6382ab3727e76569f0000000e000000b20001009b74802c1272d568acf2daa1c4bc894febe338f07cb151b531ec0845e632260fc0dff9c68e76d885abd407e56a2e115c65cdfc7e67c5a36ac2f83bc1c9d0474920bae02568e0ea3eb25ab1229c5765b21f5314ce9dd79afa7082d7ec29187ed4878eaefd59641219d6050a8d37fae826d66129d4a752c084f02f75719f08a7817a8df4f4f354c58fb1e0891506fe208718d393d0af6bca00efa777276893dbf02343d2d37e"], 0x100}, 0x1, 0x0, 0x0, 0x20008840}, 0x20048800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRES32=r2, @ANYBLOB="1b726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB="2c301c8a1ac6a094885f85be78a0705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r10 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x2, 0x33424752, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r8, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r11, 0x0, 0x20000) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x21, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0cc5605, &(0x7f0000000100)={0x2, @pix_mp={0x9, 0x5, 0x34324258, 0x8, 0x6, [{0x2, 0x20008}, {0x7, 0x104}, {0x6, 0x3}, {0x10001, 0x3}, {0x8, 0x9}, {0x8, 0x9}, {0xd097, 0xfffffffe}, {0x2, 0x3159}], 0x9, 0xa, 0x3, 0x1, 0x2}}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x80000002]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) 15m48.71220564s ago: executing program 8 (id=4583): r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r0}}}], 0x28, 0x4010}, 0xfe00}], 0x2, 0x20008000) 15m48.472089075s ago: executing program 8 (id=4585): r0 = syz_io_uring_setup(0x604e, &(0x7f0000000140)={0x0, 0xee9a, 0x0, 0x0, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_clone3(&(0x7f0000000380)={0x200, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0), {0x35}, &(0x7f00000001c0)=""/68, 0x44, &(0x7f0000000480)=""/238, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) pidfd_getfd(r3, r0, 0x0) process_mrelease(r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6}}, &(0x7f0000000780)=0xe4) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000600, r5, &(0x7f00000007c0)={0x3, 0x91a9, 0x1, 0x7}) write$cgroup_int(r4, &(0x7f0000000080)=0x1c0, 0x12) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x6ab7, &(0x7f0000000580)={0x0, 0x4031, 0x1, 0x0, 0x1f}, &(0x7f0000000300)=0x0, &(0x7f0000000400)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000640)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, r4, 0x0, &(0x7f0000000600)='./file0\x00', 0x84, 0x18b081, 0x23456, {0x0, r7}}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0xe, 0x0, @fd, 0x3, {}, 0xa2, 0x1}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0xc260, 0x20000) ioctl$MON_IOCX_MFETCH(r8, 0xc00c9207, &(0x7f0000000100)={0x0, 0x0, 0xbc}) 15m33.027069799s ago: executing program 36 (id=4585): r0 = syz_io_uring_setup(0x604e, &(0x7f0000000140)={0x0, 0xee9a, 0x0, 0x0, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_clone3(&(0x7f0000000380)={0x200, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0), {0x35}, &(0x7f00000001c0)=""/68, 0x44, &(0x7f0000000480)=""/238, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) pidfd_getfd(r3, r0, 0x0) process_mrelease(r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6}}, &(0x7f0000000780)=0xe4) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000600, r5, &(0x7f00000007c0)={0x3, 0x91a9, 0x1, 0x7}) write$cgroup_int(r4, &(0x7f0000000080)=0x1c0, 0x12) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x6ab7, &(0x7f0000000580)={0x0, 0x4031, 0x1, 0x0, 0x1f}, &(0x7f0000000300)=0x0, &(0x7f0000000400)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000640)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, r4, 0x0, &(0x7f0000000600)='./file0\x00', 0x84, 0x18b081, 0x23456, {0x0, r7}}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0xe, 0x0, @fd, 0x3, {}, 0xa2, 0x1}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0xc260, 0x20000) ioctl$MON_IOCX_MFETCH(r8, 0xc00c9207, &(0x7f0000000100)={0x0, 0x0, 0xbc}) 8m13.649830773s ago: executing program 1 (id=6019): socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0xc01, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8050) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) writev(r5, &(0x7f0000000280), 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000090ff00007110af000000000006000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f00000031c0)=ANY=[@ANYBLOB="58000000020601040000e0000000000005000003140007800500140080ff00000800084000000018050001000700000005000400040000000900020073797a300000000005000500020000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) (rerun: 32) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) (async, rerun: 32) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) (rerun: 32) write(r9, &(0x7f00000000c0), 0x0) (async) ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000080)={0xf0f046}) 8m12.660501897s ago: executing program 1 (id=6023): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f009, 0x6}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000740)=ANY=[], 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x2, r4, 0x0, 0x0, 0x200000000004}]) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x2, 0xfe, 0xfffff024}, {0x80000006}]}, 0x8) unshare(0x20000400) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff, 0x6bb3}}, './file0\x00'}) bind$inet6(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x134c, &(0x7f0000001380)=ANY=[@ANYBLOB="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"]) 8m9.381128312s ago: executing program 1 (id=6036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}, 0x1, 0x0, 0x6000000}, 0x0) 8m9.161424139s ago: executing program 1 (id=6038): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x4, 0x8, 0x8, 0x8, 0xe, 0x4, 0x6, 0x4, 0x1, 0xf, 0x1, 0x9}, {0xaf, 0x6, 0x6, 0x7, 0x2, 0x4, 0x9, 0x7, 0x0, 0xee, 0xfd, 0x4, 0x1}, {0x9, 0xfff2, 0x9, 0x1, 0xff, 0x63, 0x6, 0x5, 0x1, 0x9, 0x7f, 0x1, 0x870}], 0xc2}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0xfffffffffffffffc, 0xfff, 0x8000000000000000, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x800000000d890, 0xfffffffffffffffd, 0x68ff, 0x5, 0x100000000, 0x8000000000004, 0xb3, 0xfffffffffffffffd], 0x8000000, 0x16d2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8m7.992602919s ago: executing program 1 (id=6040): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x2c}}, 0x18) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x814) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) close(r2) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000600)=[{0x0}], 0x1}}], 0x1, 0x2400c042) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0xf, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x806, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x800, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0xc, 0x4, 0x80000000, 0x242, 0x3, 0x100000e, 0x0, 0x8b, 0x7, 0x19, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x4, 0x10001, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8005, 0x5, 0xfffffff5, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6ca, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0x2, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x1, 0x5, 0x76f2, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x9, 0x9, 0x0, 0x47, 0x8000, 0x1, 0xfe000000, 0x7e78, 0xa, 0x4, 0x9, 0x3, 0x5, 0x2, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9fa3, 0x5, 0x6, 0x0, 0x5, 0x200b, 0x4, 0x4, 0x7fffffff, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x1, 0xb, 0x2, 0xa, 0x2, 0x3, 0x20000008, 0x4, 0x2, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x542c5705, 0xbf, 0xb, 0x803, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0x1b9, 0xce7, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x10000, 0xfff, 0x7fff, 0xffff, 0xa61e, 0x1, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x4, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r6 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$VIDIOC_S_JPEGCOMP(r6, 0x408c563e, &(0x7f0000000100)={0x800, 0xc, 0xf, "908161b3252fb1c9fb3f8b56abbb153287406d93c8f2e823b10f9bb4cffd243043d7044265a248ee5c391cf1f273881bc039575e0adb47b492c5c22f", 0x1d, "24e30b374535db4ca406094126da931aef1d4dda045555f2c3d72f00dfa11b688f9975ca78f4b2b220d1dfdce354f0f6d20771b074c3f0aaedb7f4b5", 0x8}) ioctl$SG_GET_NUM_WAITING(r6, 0x227d, &(0x7f0000002080)) write$6lowpan_enable(r6, &(0x7f00000021c0)='1', 0x1) r7 = syz_open_dev$vcsn(&(0x7f00000020c0), 0xb, 0x80c00) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc0bc5351, &(0x7f0000002100)={0x67, 0x2, 'client1\x00', 0x1, "a71d675ffc074caa", "aa023fddea2023850c6fa8c6f7057d2ded0784ad701497935ddbd9bf713352e2", 0x6, 0xc2}) 8m7.612020809s ago: executing program 1 (id=6043): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1236, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r1, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0x1a83}], 0x2, 0x100, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000100)={0x0, 0x10, 0x5, {0x5, 0x6, "4156fb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8m6.660959665s ago: executing program 37 (id=6043): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1236, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r1, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0x1a83}], 0x2, 0x100, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000100)={0x0, 0x10, 0x5, {0x5, 0x6, "4156fb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15.923084024s ago: executing program 3 (id=8040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0xff84) 15.600290827s ago: executing program 3 (id=8042): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x800, 0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 14.923943025s ago: executing program 3 (id=8044): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) r1 = syz_usb_connect$cdc_ncm(0x4, 0x91, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x12, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "382d92"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x6, 0x9}, {0x6, 0x24, 0x1a, 0x9, 0x32}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x1}, @mdlm={0x15, 0x24, 0x12, 0xb}, @acm={0x4, 0x24, 0x2, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0xe, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2d, 0x3, 0xe3}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x1, 0x49, 0x8, 0xff, 0x5}, 0x102, &(0x7f0000000380)={0x5, 0xf, 0x102, 0x3, [@generic={0xde, 0x10, 0x3, "0a045911f4a2369b7edb158975bfb8c609b1c840eb5bbb5d29a54848ff527de3ec240d67c0996d11e4d64acd1aa9cb8e2df1066289b6ac3baf0ca7a4538f77a617ecc4c4c026b36f872a0bf5a3582b937f250284627788fb48c7dc7025b3b5aceafe14228376484f38f75de548c6f97aad6bccc2e691f85865d109b8fab1c593707a6fdd097b3ab4ea81d89fd2ee577b136c6f09aa774c786526ba56272a9019f98b6d5d5ac39140ce40ecfc1d08f77822696b74b8bb0af95daed97ff215affe3f6a55b77da28cfef10863b6df259ed420579a2a795f3f22e4307d"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x6, 0x1a, 0x100, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "dd720845434c150c4382857e639108e5"}]}, 0x1, [{0xbe, &(0x7f00000004c0)=@string={0xbe, 0x3, "db443f82019bd89e62c6462eb2514445e2bc2860b7829faaec92e8ae9a6a9e6e1c4f843b6c84385a8a89d69fe63f4f078f6f15345254f16a370046d2fc0eb15dd7910b5edef6e7b6495e254fba49331af997aa38c3cdae5334f90345cbd9cf48bd1f0bd85d0aaf38c1611aa2f4b2f29caeef580ea151d81f9b7d244d0b899f451a36d0e5b6a49c9bd9b21c4516b6c120a23c994e62f8a152b71a3e60d34c705768b4de5f625fff4ecd4d80b335cd689d0fbdd39e0a7f01d29600a756"}}]}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0xc1, 0x66, 0xa0, 0x10, 0x483, 0x1234, 0xff76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0xe4, 0xa8}}]}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x181) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000010c0)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) modify_ldt$write(0x1, &(0x7f0000000040)={0x1}, 0x10) modify_ldt$read(0x0, &(0x7f00000001c0)=""/205, 0xcd) syz_usb_ep_read(r0, 0x10, 0x99, &(0x7f0000000100)=""/153) unshare(0x20000400) socket$kcm(0x2d, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x810042, 0x0, 0x1, 0x0, 0x0) unshare(0x40880) setxattr$incfs_id(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, 0x0, 0x1) listxattr(&(0x7f00000019c0)='./file0/../file0\x00', &(0x7f0000001a00)=""/1, 0x1) connect$unix(r4, 0x0, 0x0) 11.335629945s ago: executing program 3 (id=8060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000008000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x8, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x6, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffe7fff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x80005, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0x8, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0xfffffeff, 0x5, 0x2, 0x2, 0x7, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x100, 0x7, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xb, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x7, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0x4e8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendfile64(r0, r6, &(0x7f00000001c0)=0x1, 0x154) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x14000b54, &(0x7f0000000200)={0x11, 0x86dd, r9, 0x1, 0x97}, 0x14) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f0000000140)={0x7}, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 6.80001243s ago: executing program 9 (id=8088): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000240)={0x2, 0x7, 0xfffffffc, 0x7f, 0x3, 0xd, 0xeb, 0x4, 0xb8, 0x0, 0x5f, "524c1fd19aae1954056de34ee64a76c1e61dc873e28886b0a3f1cd5f345a9806"}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$vim2m(0x0, 0x1000, 0x2) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x5}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) r5 = syz_open_dev$media(&(0x7f00000003c0), 0x80000000, 0x3c0) ppoll(&(0x7f0000000040)=[{r5, 0x4205}], 0x1, 0x0, 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, 0x0, 0x0) ioctl$UI_SET_PHYS(r4, 0x4008556c, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) syz_io_uring_setup(0x422, &(0x7f00000000c0)={0x0, 0x20079af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r8 = socket$kcm(0x2, 0x3, 0x2) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r8, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0, 0x801}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r9 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r9, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) 6.408747176s ago: executing program 6 (id=8091): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000033666a"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) sendmmsg$unix(r3, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 5.716537772s ago: executing program 9 (id=8096): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000004dc0), 0x41, 0x0) writev(r0, &(0x7f0000000700)=[{0x0, 0xff89}, {&(0x7f0000000000)="8f7c50a9a2f278247d596c9f72347eec89d0301bbe28723f4cde82d50f1613b3c66b56b46fee98badc9b35a12e1122ec453e271cdbd2729924044d431e227256bbdd36d2f4321f94d53a155dfb6635467f1d3acda55d16a8d58abd40571fc9f3d636f35b78ef7ea998fc2c8cde4fdc7f571e2b8f489660a96708e880ca4d728b4541e144153d1af5d3cfcf1a9d981116bcfbe702adc0a889273fefdd3026578b0e", 0xa1}], 0x2) 5.358345691s ago: executing program 7 (id=8098): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000004dc0), 0x41, 0x0) writev(r0, &(0x7f0000000700)=[{0x0, 0xff89}, {&(0x7f0000000000)="8f7c50a9a2f278247d596c9f72347eec89d0301bbe28723f4cde82d50f1613b3c66b56b46fee98badc9b35a12e1122ec453e271cdbd2729924044d431e227256bbdd36d2f4321f94d53a155dfb6635467f1d3acda55d16a8d58abd40571fc9f3d636f35b78ef7ea998fc2c8cde4fdc7f571e2b8f489660a96708e880ca4d728b4541e144153d1af5d3cfcf1a9d981116bcfbe702adc0a889273fefdd3026578b0e", 0xa1}], 0x2) (fail_nth: 2) 4.560604347s ago: executing program 9 (id=8099): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x1, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xff}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept4(r3, &(0x7f0000000180)=@caif, &(0x7f0000000200)=0x80, 0x80800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_io_uring_setup(0x13f8, &(0x7f0000000280)={0x0, 0x8471, 0x80, 0x0, 0x2b9}, &(0x7f0000000300), &(0x7f00000003c0)) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000400)=r7, 0x1) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f00000001c0)={0x1d, r9}, 0x10) sendmsg$can_raw(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0x18, 0xf9, &(0x7f0000000000)="301dcd5e441a4ef348b10bfe71d5e7aec0621145b4577765", &(0x7f0000000200)=""/249, 0xd, 0x0, 0x68, 0x77, &(0x7f0000000300)="b2211e6e3bf071e2358b4b18b9a81d666bb9124a1d8fc8f7e40d82a4d01337945c5964c9ea71f6868947f720fc45bd6c610b8b99932516a321dff222a8dad9bd1b5fa35daae0f46aa45de4a81d7217f883fc3db88c83812a81d7895fb2e387fb102f8e0d01f56d0f", &(0x7f0000000380)="567f3270ed52ce489d2214ea381ef9de1758c1974558636cc354eb731d2787f4f26dbbad25ee7a9cd3e5dbe0971dd474b0702995219a7ffe853d7dafb86da932748bad669fef09da9037e45a7bf1afbf71e69e6f40639f16891375438aef5d949080c2131e2ff99312e5af9b30d89691e5c18f33110ee8", 0x1, 0x0, 0x42a4}, 0x4c) preadv2(r1, &(0x7f0000000480)=[{&(0x7f0000000840)=""/189, 0xbd}], 0x1, 0xfffffffe, 0x4, 0x1) 4.488017896s ago: executing program 7 (id=8100): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000180000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000138007baaf8ff00000000b5090800821300007baaf0ff00640000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000004602010076001e00bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.362479415s ago: executing program 7 (id=8101): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000002010102000000000000218e1e00000002fffd"], 0x14}, 0x1, 0x0, 0x0, 0x80051}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0xfffffffffffffffe, r2, {0x7, 0x24, 0x0, 0x28001000, 0xffff, 0x40, 0xf7, 0xfffffffd, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="1827dacb7cd53e01b4852de2d748e21fa033071acb841f449efc23d452101807ae5c485596338a6d31388444ae8ade7b60a85a37d3db29ef19ae4c4d4db9c2c82c7908debb2e2b5ebef336aad77bef942d064955079af4e914f372cec8ed0440f6ee0bded3c565283bdb75124011227712d5f01e8c1eb86cf69205a8b5b374edee58ebaf09d62191cf41190260c30a719bbc9bc29be0d60c678791de6b236c9b5a057247c281937c2b2ae747c858532113e0a1e7af49298ef54f15572301d3c907b02529bc470beab8f9208cf92b17a9df99ceff90a1e384d6bda3fe823d8eff0e2229a43c31781935de69466b1082c0f88d3716f234e1d6e17e1360f6621e686d661af20eaf08cc97c261590ac3291667a87bbf66f86d9005f034ea5517b2187b6dfecebc1cb8fc4dab511a2890a68ed185483c548168803f353520cc6f820d1349ac985e12a3ff6e8a78b29ed97213962fca3ba7d04d1ab4dbcfe93a88831f784ed278d079eb3e2e69d3161600fc7b0dae825b510a59c14315fc6ca0ce68dafd088f02a92ae0ab3f15ca1a863b640e8e4a89407a8b8d752892e1f8b0e793d430c3ec46cbe2b6a4bdad728c34e734864aeac2b6b2eb51c3a2f9e6773c5834166511086dc35847cfa17974889795ed305353d41c9399bb95936a3c1be1099f21795cfc04d9699929eca65a0edcae5d4e564404e5292dc15f40d78d94be9e8dca92983bc71729ab30a70455bbfd5a98d97cab9778d9b7b69fb20019e7e7c7bc17c84da1dab53a187a116ac229e00312c95b1074afff18a8771a4ab47be2205745836dc3cc1ce531fe697e9a734698fb2343b331ad9f13214d1d7d511dc646fb8b3b70fb4611e6d102a0e2bda6311ca824537f699efdefbd8a3a523e26272f07abd75504188edc788af9c75aabf77f4ac883573f63ded319fa5a8b6317d4490391879629446fa5ea4c695f3db9739f7bc1da7a19f3e1c0ccca98307b3a7a38272b7455c8957b17138c9e170c27895fcf47eb5530948b7cc43d61a621293b0c83dc893f02def2b42a8bd7ad6c9cdfeb7a3bde141e98e5af7500b07d85c6314949b754c88cc666bdaaec89271f56ec11bfa0aa337feb1140b8a07fbd5c79bdd0239f8aa1d454c0e5a16e99d38d1212ff709bb1964c317c98bfef37b56944666f0320ec85b5b1e07731de5584901f8c65e14fd2ba83b500fdbb137c7cdf91d66400688a5da6405ca7e0b8107ed65be0ef5c6234b62f613e7e76d6f3d5cc12bde4342391524e25bab6ec0a358c6c66b7cdbdd9301f91589af65cb7c02fe8271a798c5e122fef9e7581d28884d33d01f0475c9ac052d2d014bdc09e2738487742f7bff40facf2e96dcdfefa336c46923b77b334daf7b01a9fd5d957a29b83adf6f23acc507a58dabe6b2804532bc1a865a01b1126127f7c6a8029531db8a51d8472c0abffca5be97b9b5433ad220ab9ad65cf94a1167f3fb2b8804ce66f9f5cae212724b2b3a04343580f5919f446f40eaa0177f25ebe68ee7c7a35d9d5ef6e1cb220eaf8ad9b269b15c2ab9692c345f3c3bd5965f06adfdfa2d672b5e3184ebe192f73e70e829adfac2e6318d238dceb6e3d7d1422d57ff7124793b92966bd229c0725b0d591e59c57f98841b5ffad16d0ae903406014d3e632d0654e9084f870e124046f3ebae3ecbf5c5365aa32ebf169ccf1243dc8fb296cef006d5f00447ecd2980abb98e3b6e6bf6181e5df7994ea1c1273784af0d92a57394c71926dc143228a8ade103ff61860d21ffd467b2c41bbbd2490dd36add865828fb64396f16831a3a74f57ee2254cc93b25b7219bc00339a2518be3caa4765ed63295c84f1d59144e96aacfb57c6441f64f29729bb7d68127ae2472bbf089570003b1e820191878ab6f53db01c180751e34672cf5a96edfefe164580d6101672281b59f58f3c7b1222f2b6d19c8a8e5f9ad539045f7dbadaa767f993da974dae20744bf5ad0e0ec71ee97696659981e067463c78bd9337b8bcfc070e7e5b47303eaaf9651c19f19a15eab8e2c47041828be50994b5695ee5fbc9a9ecacf9de714215eb7992c07f262db8843937934fdf6fdd31d0f3a44f074f3a1dd6622dbdb3364df79d5ec90ead64c29e05a6c5358cc6b9d8493b7e1c53a91c37aa3653cf2002072461f4b99fcdec142e53b87f61ea55cdb834dd4e03f2f57a206cabe2f3f3cbfad3b4117bf4434718022b09a8419959a9bb97fba50a6b3b9a844cd1301de7bae89f8d1bf549b88dd2bd0697e70ce89cc2e383221ca2ae9d3671a730466c250a8963f6411a42ecc85a00c01b2b43c39432d5065a5fd11c29a23169891cd674cf3a31e82587a26c8d48aa3debeaf067a26669599fae850126dd516512e0cf5ab556b5582add7d2f665723a2244007ddc302f0ec29da73578a80c998849be2f766a334c7ade4dd46f37d648899da5cf7437af2d6e8d03d934903387c4c7e260909d59b546dfac9ffdce11fb92e5bb6ff6836fa0e6d0c5942b4660fdd68d3cc8a76ce0960584dbf634695ca75752b19067ba535e4779189b111c9a3e0ea877067c046d10021b0e60eae8d5dd7536b4474d8ab74679e2d8e68bc9208db5561e28d0bec177cda1e2f944a4cd97b6432033ce40063cbced6b36e486b096adffd699c9fdf58d5ec54bf4afdf52493fbfcd91e807da31ff675b567058697aa088118a6ecf1b7c7dceba3ba87d59d882fce3b3b676763ed658e991c4fd5746946815af0a2c1e96aeb27383cf6638d6d7e1932b3a028250fee18db7c46acd7fab33ab22ff91cf78029a4ed96494151652213fb7dcca0a8944568bf84aded113e20e6897d6b8f6f9fe5f6975c7cbf999d15ce5f8d50454d58e7a5b285fce4ef9d14758cf4a9619b17275fa66f2c6c48d44da95657708062bec9b633ba2df082766f549c5c1b661fc8a5f7b8b6699503da733a66df44f116c4a470b73648cb64bf04101e7bc1d048d230addbf22a5b98aea08beda847e33552faf771d9b181f610ce34530543096257856ea3a08276bec1ea40e7bf6957143623ef47b5c41e61d076eef0a5195431b49beab9fd7f07b1a153491a7250a889b26ce657df550b226fb94cb5f52306f47ee3af4627ef0cdc0c50536af7b386440b878ed5d672670abdb3ea3e3c3c031e67293104a4d6476cf325f6fe4762ce2351dffac116387baadb82f987cab7fe88ce1be7d44ccd572bfd29114d2ce4d5e90f4d6bf7be39ce25ab7de52815e4059d783564d518dd208714de1c524ff69a4ec5f29bb631eff605cc6f30a0bcfba44810a3a6fc263891791b51cb4be0d60d3d0798e38b01b9a21150589a436fb4df4584bf6e7094176884921bbb0f87b1bcdfb6df8aef8f58393800816c15647650448da0ba5bb76f7bf76c3be83aceab79eedae80e1fb46a2557a9485aa7a8053a5835e609fdf54222f5b43cba63c9508dbbd0e22953768f88e2070236d7255f682464d09c7ba12b2e8787a1bc889af686d2c355961d8f92f877bb09baef09d70b5b306047d8d3cb97fb06ba8d09bfbae02314dddf98092b6ef275743e9deb391995003d83b549ecd604daa9bd34ef311aeced5db504242241c0717f8302efedcd3fd43686a7ee21c73ba3c5af98c93d09158c9011e11bc4b51a3a4e904c4b6ced1a786adf310073405c27df6aae6d5da4398d78622ba9144ad09902da49b77046ad22fd303f07c1533f271eb82794b402382d2971f46c7907069907a7afb9e94dd4071685f91cfca10d86aad7c385e4d90f0d44d37588a8f1f267c1d8445634ca4194d1a0c5894a6d00cae3af3aec991cfefda59e3f46c0a6e2fac55b35259a9960ec7dbd1c7dd128368393f0de1e0994ba1f5b41762c22213f56bbf4c2cca458dd5731f9379f0651ba61fbf17a5861eb417e20a7fc9df12c6771f5ab322213ec95beff96dc1811dd0f45be8fb1ed93c2cc01e694620b550e45bd265fb357f52699cf9ca3ddf331fe4d11c5e97bb57631d9c7620b5c19562c85ef8e04ecd5cd5b713fbd94b6b76331a83f304cd8ae1a903ffa722cf5697b1e1bde206735656ce57254744daff8013f47f9aa4f062d8c5956fa8df5ee79d6e6ffbc0c47cd0c99517a6d92fe8ad18c001be4b55af7a6533712c6a2ccb7e813016e7cb74a94bf2a2ce9b3b440faae19210d43320cb81a6472d1da775ca27f2b5bbe5964271eefccdfa0bd6b163357af4539fdb5d5e2e7e1795040776d4d75b70928b8efa954556f4d225bd9b6f9e5a71a8e7a3ef5c36d459233c66650ada1c55dfa02bca3997f93b92028881d9c3ec0e7e1a42c587482b0cfbc77e8520c6ca0f3e5127c96b41056b7279d9e62358e39dc95e779affaaaddc8e9ee66ba336feca8b957ccb4f352c0d162390e3bde27b15132407c97c3a6b5f1704e1e559ee12655a71d7dce3711c8af907d7d2875e2407ff8c59c5457678058d3d00a7971d239c1b1c67dac3ff3fbcc2d8c8035e31040118ac46ba5110a16aedd0b7f731a4f86a63a697501a664946eaf7da6d3cc2a296f294ee765b8f26363ba6116e0ea0ef8eabb0f1e7cc429611194cf0bb66463d26a82dd118cbbd3f1040dca2f5f82ac5eb5df41a4658fcb34b68066c5708a4a16c48fd290b32e392e7f5b662f4e3fa2d79a814f52824cf737872604672bdaf80fc527deb1f690339c92b6c6c6c8635de5a2e1a7ff617d0f1c11bc3a3504d0de94d77678025ab5bea511d783df148e58b0793251db3b7b9e03bb201be89d5939c0a60ab548460d543d015082e00ad9d05418c327ebafbad7924aaf70e5fa6eb0be359b65ac2fbbcad495b17712e033cbf1853d1e2450ac4c8d19287074e76ca3d087d376b0f861b525d4949098dd4e3a3cc50118c8587adf6587ed9aa0352b7d812fe66bb64eb0c0f4d46822aa9c3d4848454d49b61cca24d7d6b82fafc5d8eb4e40e3665f24a95182b70b22c5f9303a49d1278f25de9855246c729fc8ba300fad799a949b9b0ce303477d22337d599d4c8441461d25725965183210a729fc59c4e5ddb45c0b9db06a09619e6009aa0653cd1e8b06d0e55c133d5022dcf91f12a21e9f977de2485f886c5133a8837987e7bc90662156b0250cc76cb03ad9fa36733ef371479ea9c1313682866b963f1f96bba8c658e2c6a10e5e29d8a07d4999b735bdef7f60326aa64fc198c3f2670fa4a44717fc613f1282fc324fd9476e6da7866cb6ce1efa8a1577088f2aa757584b8ade9f2ba34a2287870da2cc7704008b6e057eaf8bfe2fd0d6d60cf03e1751d2284c6439ee6079708451e64b1f7e7dc8400ae99e0d834a7daba6c3a8219812adff0760129e18a41eb0448c57a909714cd395933436e9ae040277f213e30ab7b6e7e3109642ffa051b3c423f6ffa7830c75d229acd617d6bc1f7948f09238f5437ff4fb302034fec1fed96c55c46c7d70d6ab3018c1a3d76120077f815fa67ec8815f44fd0cae7d1509d217a432ce904c778f201a508fdea4672e9cff797bd1d0f58d46f39396e148573ae9b2468e4ee5bd9a5abce8166333c524f0a104da2e3c99ddbc51fc6f4e7c628af79c93d0fbe61b1c4a72b11fe423597f126467a01ee6dad848f24abdfe453592f02c84e017fe553f27e639f88824d70aeeaca54758184f95f12d696291798046bb075fefd6876e8ef893f5b9340e21fc63c67feb6f03055f2f394a591164a61b1aab14c468998175b75974543e79b241dc69a6e346374dec5eebae154e36f29d17273e608ce69d539a5e4702f474bad66fbf3348f0c859bf884576faeeac754e290ec97e863526e55420da72b6b6cd209e6685ffb64e9865d00eb017c843d3c0cf3ab26f53f76316fbe009f0b2c4932b0694fecf1a148dbead458ca9f5f6d678d6c6fbd23fb6aea9e951914300eaaaf69bf35d4ce11c0349a02aa14529a083e701eac0177d4ddb305a9f9a5cf8bacd96327a161bb8b877813ea022d62bac8f0ab9eb5e9d145dda4b1fe79c0bee34c8bbfe866ba376d3a71b9809adda06e64eafaa6cf53fff8ed63e15525fd409e13b1809ae6e6e937acf858a59d2073b304171d5ab35ec92f66fbb2d4e34d46e886c3546c1026d0ff27821a15aa397dbc686540d546ea66fb43dcb9beaeadde6250cfe8e563f9033b432018c88bec07279c6a0228f3eb11031d3435d95c9c1789a5338f74aa6db2c853c87f8f2397f9067fa59774770f64b8ae42b9a07f85f1bcabbc6d3b3456a253bdb73ad3de0aa416589b722053c81db90e7b66a835d636615701e6869fef016bfaba9da0a869005ffc3174b605fdabdb8c7346262ce78a64aa7036960913edfffad202d664d1771018de43b6548a6672f48979b8e30017a93da2c093266306e09eb203fb37d7d54466fb26d4414ba88346d02d8811f100dcb0a3e50ae46247b986b928f12c1ad506c6b33b49d7e6955ae9619f73c79b72a95b053d53c4c54d36dceb8ae780b321aa41b5d61caa21a6c65329f08da522bbbb3d07501b39cc6bfbe4a2ef8054d7c57666bc805ed451517a1432b958141f3ce94752a67a17aadb41590037da8efdb251eb56de30b0e0e75adfbf4e06d4777f843a8d7c31e2ab62d98764217491d46960d67d3ee1213d150c28e75d1f440d41ffc3cf876554e2d4a354f70fce17e4c0fdc64992c32e785263ca4ffcab57d3d46d220627ed05f1628551e9843137996bc7a0b773e1ccfe5364216a8003757ffdc052d93793a3463baf4eef5dd283826f8510bb1f20505a6e61cb3d571d0f77e67ff3c0aa5ca91f6d68c7e0d2d79c649b091b30b2911c5c47157c9c531296eba681e039eaecab83722cc2fd5b91913a463ba9f693e34da60b1adb8ee9f4a83fa67e25f19e4cd6e19ed1381cba8b5b4591109637ae1f7f29b5495fc5f8057da565d937e7577735bd98fe626ce8568897d240f054ad69c8e0ca424d1be51b17d5e639253fb2fe6791e01edcf9c4f8404233d7f98b52c31c4996b6b63112d0126036ca20cf52a2da2478683c41bfd8fb5b34de59d5e87b5075e5e1d78ad06c6a2f6e662145be3d30d140b62c49df203350ea4412c97aaeec7aaa00d81b89f3b7295607840de2a8386f52012b5c4e6e0e1986565bc4f99b6bc10f3a2ab59783a8b9f3c696f741af0f51b6592c68ddff861fc7d2b16876b05a54eae9ec0e170fbf26d9358941c6cba50a5c41e77f72c7f41e0bbf6023f04f7701f676a64cb63ea1a8d373ee6a99ba56449699ccdf8a11dc7d840d695cd5ef987f74e5b16594cc8c6c2251c47b429281b6e34c0288c7242052ac3c9c63213f6ddb08726001e0afe1fb312d463db8722f1617972dc7f365de498027ef0b5c6d100e583348cd777a2afbfd60ef59969c8f88358b6995c177a7d7e69d86b11e36f42bae8c9af599d3f828447c31004000163bb74ef20f656f6a1c8159bd0f867f2e283c10656a40a397b2e514c19efb5d5a5f54316509801bd8208a2c84b2ef13e54d7b8af8787b826b50095a15e33a5e8e306454312a83af7869b7ba0039ca601751b580a9190435d35a8ce9d8e9558ca1bcea3cc3604f4e991aee79fd0d2393b9f87e8dac7782e837e1de5e88a7c79385a2b14556041f49c1113df43efd8aea14c4b651d713fc9989b2fd77ce13a98efef5e83cc6843d313117753d82870c5efec8cc6fd855ab6e0fc6d48c66874fdcb2d007db7fbb9371da3836eb23da1106283a20e32617bcaba574b7b6298d48334eaeef905ff348c2bfbc1c83a88d6915b644d1854161ab4f1d1db12e74de2853e48d1a10f9835c226bca6944d0de6a18e0e07df45ad72a7d354045a6997ffdee010e37091a3a5280e5db8aeea0245217a6f1160a6287d9a28c0eeabaebe755b9485da5b7ccb85166ed902e63200e5e8ac464124bef0196eddee6cfe90fce770b416817e1ca78494786bdaeafa3538841f74bbdb2585d63f667ef227287efa56c030c0999e9ead590f1ce383a138233235494ecec0aed97c803b4d7c4fb80ac9a3bcb1dd2bab51382a94195bee034c3f3d3d9efc44add83ec580a5cfe8f5942b1694b0ab3ef4b2d9f7c0b8634b056c6b6eeb946be1825fa452abdbc1545cd94774abed3fdc2b0399929298221030f6cd0a2b38490f5e4bfd53ee20de10eeb2ffacca980d40e0885cb91c94a4d81a61d863efd0f7a12da233e1dacf7af728950892ef887abcc5e4d08c6b57834a1e5dd1dfc69418fc681b47d8cd34c6a3846b0e1afdc7c7f9033ff817a72ac617c0a1e59e4e6ea40bd668c499f221c5f63700e74b68ba3045b4460f0fa60308cf8964d95237d888d5c1b1be0fa7bd2703eaeb0d2914b8d22cbd8693c16f21bb72566f38aa97e86f212557d40e10b285e1d4de0b153c8f91e168e9d0031bb7ee7fec5f0c3fbf15bc6fbceeae6dd363b7e9835b175b0be16a3348a2c2d07468449fbb2fcfca9e7d8b72b623355715a6a1edc87ea4c699ffeacb2277fbb5658a1eb12d0a7a93bf100ab11cf49b35c16a14044ac8e5bd69af05b252325f0eca41f90681b4a1ec399096939a96685926655a0c4d172d06646c87f35b65c0d7654882b79838f78c35febbdb378f9f28d7e6ba1c1fa191bbcdbf991731f546439a966e4f7a15c77367161bde14b731c9f2b91114fa46e02e70f07d3c40988e8140866ed3dcd98ef5524700deb75c1a6414016da0ce6845e936a8692b7beac01bc855a72a490c667c3b755ffaaa57af54af1bd07ae7b203be85f3653aa63cc5ae10f6e585c7bd8a5257604e82fad6c7be6f1a47eb665c1422c03d3263f351671a48bd5eed22077b8c16e706f009880941c29b90c29a11ef008a371b29200f32523b9847d911fab4ee1468bf98a49ff73703e2d9d7bbf6ae37459c3cb502541f304e1d5918518a06225b65f3b38b91f8e0b49a29ef9aacca369ce5cf8b45738e29118ab06078b885189acf4d0a5200b86cb2269dde90dfada27975dbe6ded12232c0faf7ea12ecacbdf416cff8632e48346478a75c0279c1920b7556fc6670704d5d97912c75d3a9cffe6891abdf747a6850ba7d9668e56c7e7ecc03c5c388e886bc984c8bfd9f470b7e4ea4d146c3c28e4f8ff82b9558266343036e6239a26f567f7633911ccc51522c29ff3ca36ad5b8cfd6ec1c86ae08f30d87a503c909e66dc278e9d14f3fae4bfa4813f315b1610ed76fc149d92f319044e813c3769d4978637e0ee732d3bb86e9fa584181f41d4304c07a1cb71d10f07da649288275a213eff161c536c7366d4c010cf9a4b1c2f2940607dc7468e51204c6983c554d616d48f93ae51e6a7769b3285785ae7bcba3cfb27879df1d7f1f18849a70814eb51df6d1d8cbe80b736cb38326f7db7a06e49cd4fe41b3f7a9156cfac9222ac23d13765e7f2910a365fb23a208f192cfca97b2b8a3de44a2d90d3c865bec109f4bdfb1d37216cf5f71a27c39a83b5562b0c06d76b46b2d8f5b15cb1765d6c78d065d24bedf72405dcb8e795fe183196a6b620f918a2dd7fdfac142aa653fd431ec153e3daac8f615a45b3a0d665d5fe36efb6e2f18b8399429e4f363748eddd5cd2a637e9a0a553fac6d05a3e2bd1b26f2f99433f8f59a3691417a4f35ff7d46a22e39e94641d942706850cb2843ff4a34122e37dcc8224ae9f6ab7f64ff4a0bcb0aaff2f429e4f0f5fcf90ab6a2c45e8f2408d9bbd4f60d6b01a0cf527895e1cd063b178b8973930b9488d81d3f0f7985b900d0a894c29642b809ef39294bfaaa5401f5ed50cbb91a047b60ad54b323a2f2ada04d19d6dbda02e0f22d4d6520f9db2263181c97c9bb74dd8a90adedc80bfd064eb103f67d02ea17571f870c779470bb6460c658da4c502b9a10c8050fc26ad5cc1ae1eb02f0d703d05b48f48ab8c9f9a1bd000181ccf929d45544b44e9a3cd0bcd412ad639323283ed229e5486a2a93babb165880a0a7329834bb51a0631cba5caa30637ca3f07074051c608b7c7170c8c415c2eb88bd6a798bd86953ff71052506ccf0e2357deff6cef24de5b7f68a17082c08d096e43fbe727ab0ab1aa27a703ccd58168039e50dce2d400ed7f2a217c1eea7b29455fbf910d36db324d1c6b53343a78484883ad100a0b5b28c74ab6296df5bf8048fb916e8ddda0ded3f5b08d262b9b1cb1ecb149c02a21490ebebe8856c844d448d2a3878dcc930c3c88d9addf73917e9d3f878fb12fba3e602cfde199a0e69eab56e3d4ffa01135b3145baa613be01f0b94af5bd3b8b432339c954f52b8551fd13790bc1ee18be226b819d8001a3da8e097f84c166e4002e4c1043d3a3721f05105cd17a278b9509d7a04826e8a5b4956bbf976ffb4857fd88da99cfea8d2e0a1c4f52f71f87cbee8c02fbf59b12bdaccb67d0b95f0a56693eafafeefce1953d708b56532ed5bbe12626a3d041c031b48a47b34c504f7dd57e21147b920c058385ddc8cbea5332086c269b0d5c2439f30fa431f88d1a10e25eba0df70d8617ecd5546314ffeae9c4baab872ab82a45eeaf0e1e1533e8a6189c324f31b652aeadc52981b66161313999c5a7bd7c79ef4ee55c7cb00ebd9637ffe01924508a44ab72ab16b70b8b815ce7d27772db315122f4a5a7679af5ac685c26320a71cdd8066b19f749705e2e35d1d9166ecb066053dd05a759270e119944cf99b918cb5e4e6c931031ae2eeffe349ac246c92174091c687c58879e1f05c43b010f7ec3f204c106cf60740b0bc2d355f57bbaec7d060dedab9aebaa4094e72ebffbf61cdfb7d69fbd146daea59339fa83c19c5f75b866af5e7f387740e675e1e2ba29c261d9e7237c6e9ef1b39a8fdacb44de0eaff5f4f9e3e42b75d0a37834eab0cf47acf65e882f0962e01982e783c0dae7efbc95dccb235562e5a2e04fd2b4b43388c0292e6e8198c6df0348920d6e1c8acdd2e892d3f7aef7703824dbb08695642f0e444ade6c4f1ec1e267feb5135cccd50fcde643acb66dbd18f507496957ced435e0db0a8e8441a8e2ebc365f995c32399f7d180b6faeb85ee1921b95f82f3194bed7d157e842257d2da26dfac90f32fb53147e48e232d5115f1cd12b45c55330b29775ab776599afa504b7fe114cd7fb3ab4eb6c30becb82f448b284b20010bea918019af99b2a9ccab1585aec19fd1abe8365a6023f96dddf1a37cce2734bb6585143729850bcd811787bd07cb5fdd57cc987f9278b7f5ef3c7529a9b6d20d18cc4446f1036cf7635da6732986c38df4785e2e428f14b84957319772bdbb7d2d2d20321e522b1ec6c807f3a3f575643d4b71e1bbd1e843b5816aa68900298f5058c65a9fe1022978a44a77bde2b99e221de97cd7fa6a2ea440220bac20e3e4c1e4224958aca15681d3a18f74218114c3e5eefa1fc16de8c07f1d1297b0e772d05f205337175c1dbe88dfc876dcfce367304afac68c41b98ed2ba3f04fd1b37db27dd5d9c9aafaeadfcc44585908ea655ffce1fc2516b060256777e8953e2a6861ec4460034691aed001ea2971627615fc7972773d6a8c343117bae3fc68cfd1f187c478c0f52e86b118c65c39848a8c582ed908fb1242ad3455288cc858e52e119d368e00783c2b8c2916ba564a3501326baefe1dcadac8b4b8b666f20a3a245ca171b43af", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x1, {0x1, 0x1, 0x20000000, 0x8000000000001, 0xfffffffd, 0x1, {0x6, 0xfffffffffffffffc, 0x7, 0x7, 0x8, 0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, r3, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndpcmp(0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 4.202978856s ago: executing program 6 (id=8102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) (async) syz_clone(0xc1003000, 0x0, 0x0, &(0x7f00000014c0), 0x0, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) (async) r7 = timerfd_create(0x0, 0x80000) timerfd_settime(r7, 0x3, &(0x7f0000000540)={{}, {0x77359400}}, 0x0) (async) close(r7) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r6, 0x2, 0x26, 0xa}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x20, 0x40, 0x7, 0x7, {{0xf, 0x4, 0x2, 0x1, 0x3c, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}, {[@timestamp={0x44, 0x28, 0x8b, 0x0, 0x7, [0xd, 0x7, 0x800, 0x10, 0x0, 0xd, 0xfffffffe, 0x6dca, 0x1]}]}}}}}) sendmsg$xdp(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x8, r8, 0x3d}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="628248fe5d9f6dba4b8e2191bbacce73fc118b55d15a1af7ee457af0bbb6db97635283b04627d27bb65a63484fae76f828", 0x31}, {&(0x7f0000000140)="18d5ae48c9f355248a8388f9be24f815c1d0f9a060ab67fec6c0b152c7f0eb922ee57e86c5baaf17b0a2db896de5941aecf77b9bde4c8a2ae6bb61ff19ec0fac95ed95ce1bfba9fa0709b077bf7f7e987a0f497d4a10c3a20e6f0ae44f8dd1fb6329d0477a85d36f145ea7b293d191b8914b33d6269cc70604b36aedc11669aab8fc1ee94d2c8d025643", 0x8a}, {&(0x7f0000000200)="888ac907c767f11fcd92587eee7c3b3e34b8350e851b915307fbe29f1facf4c4d1038b496e2ed513d0bfa0d84cb7debb7c1a2f88318a483287a929298fbb8ec719c8753e85078c94a45ed56417222b1d2352532ee5c093ad36b801a6a35b2b8a82c8a925e02a4fa38abb", 0x6a}], 0x3, 0x0, 0x0, 0x8814}, 0x4c881) 3.980718104s ago: executing program 4 (id=8103): r0 = openat$zero(0xffffff9c, &(0x7f00000001c0), 0x541600, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_vlan\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, 0x2, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_ID={0x0, 0x5, 0x1, 0x0, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0xa, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000000)=0x3f7, 0x4) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/48, 0x30}, 0x8000000}], 0x1, 0x10042, 0x0) getsockname$unix(r1, &(0x7f0000000140), &(0x7f00000000c0)=0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x9c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40e8, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0x6}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5d, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x2}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20045808}, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000600)={0x3, 0x2}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa7f084dd5657bbb1, 0x14}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_clone(0x24000, &(0x7f0000000380)="290643db8778a8b46ee37fff9330fe8132418aa5346ab1ca5523731eb053f8664143b7d1647524ae90db30ace6402d707d51965736ca3cb159578cb99695b25021906c4508f0c9ba0c34e16f37c7b5757be1545f24cd3d1357011f326eabf6fa21803a20998f88c0ffa5500296656a2f21174cc4797939ee93f6948f1f80bc14e4fcb23f9330a95153b284d2351cf1b4353484c679b89679088f616582b3ca8856b6a6ee2e68d87634332a35222659b3c1961fba785003ca4e93052bd5b19eac33", 0xc1, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="86c1a3826fc8c126b63f7ffcfc42b7d0839c0bdc7503e97c73f30fad432bc3c024f7fe412ed15f67e879723f5a35201eeb45d033f77f2041b2dc77dbdb7af58d6f05b75236a917ffdd55372af937bb0d7e3a8b820ee31b0f5bbb01de4eb5a73dda6138bddc81eff331d46c8cfd0f4aa2dff6162bfcd30bfe95e8ece45e766da91eb53d772644875004a383d9a7b887712063c6e5c3c41eceb044b371307a1747b2bba17e9d673dca766e31e8603e86c067934f189e2f81ca820b7b987ade732e4a7631dda64b27357b120d20452169710639429ed783be1e99603e7c3f52f3e13fe7695b") ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x0, 0x2}}, './file0\x00'}) 3.67275317s ago: executing program 6 (id=8104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x4, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc}, {{0x18, 0x1, 0x1, 0x500, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x17, 0xcb}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.437626004s ago: executing program 6 (id=8105): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) capset(&(0x7f0000000200)={0x19980330}, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = gettid() r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r5, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000080)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x9, &(0x7f0000000240)=[{0xfff9, 0x7, 0x2, 0x101}, {0x1, 0x5, 0x28}, {0x0, 0x80, 0x2d, 0x1}, {0x101, 0x4, 0x2, 0x1000}, {0xc, 0x0, 0xfd, 0x6}, {0xfffa, 0x2, 0xff, 0x7fff}, {0x7b, 0xfb, 0xe, 0x8}, {0x8, 0x41, 0x1, 0xd59}, {0x321e, 0x3, 0x1, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000380)) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x9, 0x2, 0x0, 0x4, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8c, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) getrusage(0x0, &(0x7f0000000180)) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000003440)=ANY=[@ANYBLOB="aaaaaaaaaaaa4163d65a9e81080045040024000000004e244e2000109078620300008000"/50], 0x0) recvfrom$inet(r8, 0x0, 0x0, 0x20, 0x0, 0x0) 3.273618241s ago: executing program 7 (id=8106): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000004dc0), 0x404040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, 0x0, 0x0) keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x2c2b01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) socket$unix(0x1, 0x1, 0x0) writev(r0, &(0x7f0000000040), 0x0) 3.015236479s ago: executing program 4 (id=8107): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x18, 0x18}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0xc4}}}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) recvfrom(r2, &(0x7f0000000000)=""/114, 0x72, 0x21, &(0x7f0000000140)=@llc={0x1a, 0x10f, 0x9, 0xb3, 0x3, 0x6, @broadcast}, 0x80) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f00000001c0)='syzkaller\x00', 0xa) 2.163284254s ago: executing program 4 (id=8108): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2, 0x1, 0x3, "4749570000000000000000000e00000007000000000000001400000500", 0x34325241}) 1.82086492s ago: executing program 4 (id=8109): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x6}) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x1, 0xe7, 0x8}) fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x2, 0x1, 0x100000002, 0x8}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07346706000005000000160302000ee60060bf650000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf5400000000000007"], 0x0}, 0x94) r2 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x800, 0x0, 0x1, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) connect$inet6(r2, &(0x7f00000000c0), 0x1c) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/12, 0xc}, {&(0x7f0000000180)=""/18, 0x12}], 0x2) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000c200010000001000000000000000000a3c000000120a05000000000000000000020000000904400000bb74140f00000900010073797a300000000008000340000008000000000000009bd29719720e8d5cde9a4444160a67c501000000000000000000579292b63644f0283fe248db49c99bd54046d88db6643fe3f5ac58ea2b113a577051cf5e3e2dfcbdfa1367b65d334c01cbf35c6bc63b4fe30168aaf275589f54dd795c0104666517f76732d86783851dc2b7c0aacdf9c9ac9208e37ad685a6b5a9ca1a1751492ff5296e7d16d786c5c3bf14624e5791ba25b155444e0634bdc974ed26bf790e8ed72121a87f923b3a0de164cf72177556e7b1c472f0c2c5f28a059ea5d8"], 0x64}}, 0x0) 1.490569425s ago: executing program 9 (id=8110): r0 = openat$vimc0(0xffffff9c, &(0x7f0000001440), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000001480)={0xc, {0xfffff001, 0x80000000, 0x9, 0x8}, {0x8000, 0x9, 0x800, 0x9}, {0x9, 0x2}}) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0xe6, @private0}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000002c0)="c3", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x3ff, @loopback, 0x2c2e}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000480)='\t', 0x1}], 0x20000000000000ef}}], 0x2, 0x931766f6319eed44) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0x83, &(0x7f0000001c40)=""/4130, &(0x7f0000000000)=0x913) sendfile(r3, r3, 0x0, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b00000002"], 0x68}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x20048040) 1.30304409s ago: executing program 6 (id=8111): r0 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xbc}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4004040) openat$cgroup_root(0xffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) 1.080580876s ago: executing program 9 (id=8112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x5c, r1, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1200}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local={0xfe, 0xfc}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x5c}, 0x1, 0x2000000}, 0x0) 901.305279ms ago: executing program 9 (id=8113): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000033666a"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) sendmmsg$unix(r3, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 835.587586ms ago: executing program 7 (id=8114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x13b4, 0x443, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x139c, 0x1, 0x0, 0x1, [@nested={0x1395, 0x13e, 0x0, 0x1, [@typed={0x14, 0x129, 0x0, 0x0, @ipv6=@mcast1}, @generic="a9ebf4d548", @nested={0x1374, 0xe1, 0x0, 0x1, [@typed={0x14, 0x94, 0x0, 0x0, @ipv6=@private1}, @nested={0x10c0, 0xff, 0x0, 0x1, [@nested={0x4, 0x47}, @typed={0x1004, 0x45, 0x0, 0x0, @binary="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"}, @generic="72fef3a1d812b32320cf803f6d602967e83162b0dd58d041780f4b7c678ab7ce08267860e3d0d83c328e4093e268766a736f96091325e3b823056c970c354a59fb0b8296ae93dcd34dfbcb8111dfc7856e0be6b1bbb6185f47d8bc82baeac7298fc2c871c3ca7af8f41903ed38200578f3cf3c1eeb38041a85b2b541c0fa79414b183a39c01dda0bb7f56d89575c2930f40298ea531bd8a80c1fb6d01158a2babebb0e48dc7531cb5184b3790cfb3ce2", @nested={0x4, 0x10e}]}, @generic="ad86febe021efd3fb2d7e14f1da0cde3b336ad8892a7a1119a5fb559b591222114db8d2533b4159d3a89b19a69ae772c86600de65f832b8ece475fb5f3c79f56093089b3b805e73826e83e87e9b4aafbccd68c", @generic="b748937050fc39a2755ed481d0fe4c9c58052d7c1bc3b00ac80230763e15eeaad16ed85c05e6a87b6ca951650f10311f291b4a35f9299b796cc12c66fe21d041f0ce913ec225b68e7cc996c32fb1771e6e20b0de6866d6bb652cefb2c9de2ef310ff62f97566560fb482febc7d28eba37b0e0de9819819e5cd2af36e8d32558d884700ddf54319d245501558ae828a5f3c", @nested={0x1af, 0x4e, 0x0, 0x1, [@typed={0xc, 0x77, 0x0, 0x0, @u64=0x7}, @generic="b28b5c50ac7413946a39820aed1a61b613e345326d0ae75de041a070123ef461876f4ea9504dde1b427fb4c336fbe90e0e3d229c5f5fab797f9b698d0dcaf4f393489f1c7cfe44bfaa03b768e746bb23d95bcd128a8d6b4a48b10d7e3f02019c64b90cb2f8cccf51a318b40c825a479e9a31962d6fb19e8e1aa8a2050c80c20f21ca77c936a634b95afffcebcd63b2daab27984d951cc99a2e9e29de", @generic="d7348465109d127d", @generic="f665faf9730c094860e62ffc5ad0f18d896e536712adaf072f438ea28c58cecc7a28f295c6904dcf5c9e1479808dce633ec93676053bc53261d643cc5f0622e157b35bfb096a39a2be8430e8c7686fd27c56b904765d571ea702fe431b6185efeb796ad0929bd5b6a6e20361b5d48ee47ace23275321d3eeeffd27da943eb90a729573ab28487c60185bc8061df074e439727e4544c6833f09742013d9b775bb7e6339940f99517a438dfffcc3b462025765eee504bd41d69b7fe96bdd89eb1695c1b4ec8b934306cba612ad2685e2c53ac9e810807a53afcfd1b7204c073c", @typed={0x8, 0x3d, 0x0, 0x0, @u32=0x80}, @typed={0x14, 0x14c, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x8, 0x121, 0x0, 0x0, @u32=0x4a9d}]}, @typed={0x4, 0x3a}]}]}]}, 0x13b4}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0000007300005ddadb8608b7f31446ffeeed13fbf4184000"/40]) 623.285375ms ago: executing program 6 (id=8115): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_usb_connect(0x5, 0x2b, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x1a, 0x78, 0xdd, 0x8, 0x41e, 0x3f0a, 0xb404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x9, 0x8, 0x90, 0x7, [{{0x9, 0x4, 0x68, 0xe, 0x0, 0xff, 0x27, 0xe1, 0x3, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x8, 0xc0}]}]}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002a00)=@newtaction={0x604, 0x30, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{0x5f0, 0x1, [@m_ipt={0x5ec, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x5c1, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x604}}, 0x4000000) read$alg(r1, &(0x7f0000000a00)=""/4087, 0xff7) 595.521388ms ago: executing program 3 (id=8116): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000480)="49099a92402160eee5113095360f834e53474a3012ef81f7c59b1abbecc116c71be38c01e62f018f1f4c8365ee41bf6f0b79c664007705896c1aa9af794b2f775352c4bd9eb6ccf61cb2ff9e7bb339e4ac80ca53541a30b698ae3547f48b6174d474", 0x62}, {&(0x7f00000005c0)="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", 0xfc}, {&(0x7f00000006c0)="072636927e8d801df503a6c46f8b741975ce62ffa7551cb4cfc345117300129e05c15bbff1410beb91c5997c6a6d58c9cba3bce8a6e5bf1e14a12e99fda2305bfb8048ceccf7cb574b560ca82892c7cc8c6006046e294190e867cded92a1d4080ea086fdc7fd4e6667f56b23cc432c3c98df08ced425442350fd23ee48bb2b34d66c7ca57d6dcf7a820d99bfbe0d794508b5bd5034a9994c68b9eb2997423192", 0xa0}, {&(0x7f0000000780)="2d38a893d43d2be76d17cdd002e2efc49637ed2616a568b24667c17468682cf7ea6a31d77e373d65fedbdca1a88424a445be49cbe3bf428d76166e55dce04889eecfcc8eedf21798d6e30f8c8b1de6212ebaa0c62b08261a3fa50c2c027c614826995f8ff2b0e1dd629e7c13b690881dfb2e99486cde0ccac1a7fc8d5b48775e824c2abb0bf58f33518a396412150b4ac7d99af08437c03decce2f2af680989ad89ba6843ad14e86da1ac7f584762c37e07d023fbfe2adcae11c5003c3d8021426ee7b46a464cc7429769d093501bf8da8ab8942e09fcac3b1d0df6f56215f", 0xdf}], 0x4, &(0x7f0000000880)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [r4, r3, r2, r3, r4, r2, r4, 0xffffffffffffffff, r4]}}, @rights={{0xc}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [r4, r2]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r3, r3, 0xffffffffffffffff, r2, r3, r2, r0]}}], 0xf0}}], 0x1, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000480)="49099a92402160eee5113095360f834e53474a3012ef81f7c59b1abbecc116c71be38c01e62f018f1f4c8365ee41bf6f0b79c664007705896c1aa9af794b2f775352c4bd9eb6ccf61cb2ff9e7bb339e4ac80ca53541a30b698ae3547f48b6174d474", 0x62}, {&(0x7f00000005c0)="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", 0xfc}, {&(0x7f00000006c0)="072636927e8d801df503a6c46f8b741975ce62ffa7551cb4cfc345117300129e05c15bbff1410beb91c5997c6a6d58c9cba3bce8a6e5bf1e14a12e99fda2305bfb8048ceccf7cb574b560ca82892c7cc8c6006046e294190e867cded92a1d4080ea086fdc7fd4e6667f56b23cc432c3c98df08ced425442350fd23ee48bb2b34d66c7ca57d6dcf7a820d99bfbe0d794508b5bd5034a9994c68b9eb2997423192", 0xa0}, {&(0x7f0000000780)="2d38a893d43d2be76d17cdd002e2efc49637ed2616a568b24667c17468682cf7ea6a31d77e373d65fedbdca1a88424a445be49cbe3bf428d76166e55dce04889eecfcc8eedf21798d6e30f8c8b1de6212ebaa0c62b08261a3fa50c2c027c614826995f8ff2b0e1dd629e7c13b690881dfb2e99486cde0ccac1a7fc8d5b48775e824c2abb0bf58f33518a396412150b4ac7d99af08437c03decce2f2af680989ad89ba6843ad14e86da1ac7f584762c37e07d023fbfe2adcae11c5003c3d8021426ee7b46a464cc7429769d093501bf8da8ab8942e09fcac3b1d0df6f56215f", 0xdf}], 0x4, &(0x7f0000000880)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [r4, r3, r2, r3, r4, r2, r4, 0xffffffffffffffff, r4]}}, @rights={{0xc}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [r4, r2]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r3, r3, 0xffffffffffffffff, r2, r3, r2, r0]}}], 0xf0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r4}) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) (async) sendmsg$nl_route(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_submit(0x0, 0x2, &(0x7f0000002900)=[0x0, 0x0]) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) r7 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0xffffffffffffff94, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4c) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300), r1, 0x0, 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300), r1, 0x0, 0x2, 0x4}}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, {0xa, 0x4e23, 0xd, @local, 0x2}, r1, 0x10}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, {0xa, 0x4e23, 0xd, @local, 0x2}, r1, 0x10}}, 0x48) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRESDEC, @ANYBLOB="00000000000000001c001a80080006800400faff230000003e107e4169be3efacbc01a987e5f164b5b8476c2350a6bd80c394d6ff85ef37d9a704a0d129ae0b1f33514e04d9c3e9c0d3dd6875fb1ed0843d46198e307d4d0d3bfbb08976d712ea93a8634a9bb2ef3b676"], 0x44}, 0x1, 0x0, 0x0, 0x20040090}, 0x800) (async) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRESDEC, @ANYBLOB="00000000000000001c001a80080006800400faff230000003e107e4169be3efacbc01a987e5f164b5b8476c2350a6bd80c394d6ff85ef37d9a704a0d129ae0b1f33514e04d9c3e9c0d3dd6875fb1ed0843d46198e307d4d0d3bfbb08976d712ea93a8634a9bb2ef3b676"], 0x44}, 0x1, 0x0, 0x0, 0x20040090}, 0x800) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xb598, @remote, 0x6}, r1}}, 0x30) 488.626864ms ago: executing program 7 (id=8117): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x9, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r6, 0x40045436, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000011c0)={0x0}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddc26f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b04761c340f273410ad620a1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8) r10 = io_uring_setup(0x25e, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_RING_FDS(r10, 0x1b, &(0x7f00000042c0), 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) 370.851923ms ago: executing program 4 (id=8118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x1000000) 2.49168ms ago: executing program 3 (id=8119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f00000005c0)=[@dead_binder_done], 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0xf, 0x0, 0xc, 0xa, 0x7, 0xb, 0x3, 0x13, 0x3c, 0x74, 0x0, 0xd, 0xb, 0x0, 0x0, 0xff, 0x0, '\x00', 0x4, 0x2d}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x0, @val={0x8c, 0x10, {0xb9b, "f44eda075587", @short="93c59cabdf99e1b3"}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 0s ago: executing program 4 (id=8120): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) openat$cgroup_ro(r0, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x901000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x6, 0x0, 0x2, 0x1], [0x20000000, 0x500, 0x4], [0x3]], '\x00', [{0xffffffff, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x4000000}], '\x00', 0x6b4}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000940)=@allocspi={0x108, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x14}, @in=@broadcast, 0x4e23, 0x0, 0x4e22, 0x3, 0x2, 0x20, 0x110, 0x2c}, {@in6=@local, 0x4d2, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x5, 0xaaf0, 0x1}, {0x500002, 0x4, 0x4, 0x2}, {0x6, 0x9, 0x8}, 0x703d2e, 0x350a, 0xa, 0x0, 0x0, 0x10}, 0x0, 0x80000002}, [@etimer_thresh={0x8, 0xc, 0x4000000a}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x4}}]}, 0x108}, 0x1, 0x0, 0x0, 0x63a0f7cf031481fc}, 0x48080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@gettfilter={0x34, 0x2e, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x7, 0x5}, {0xfff1, 0xa}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003340)=@newtfilter={0x30, 0x2c, 0xe23, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x2, 0xfff0}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0x20000014}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0x1000) epoll_wait(r10, &(0x7f0000000340)=[{}], 0x1, 0x80000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1a) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000000)={0xa0000001}) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) kernel console output (not intermixed with test programs): s mode [ 1986.302474][ T5931] gspca_stk1135: Sensor read failed [ 1986.329683][ T5931] gspca_stk1135: serial bus timeout: status=0x00 [ 1986.368324][ T5931] gspca_stk1135: Sensor read failed [ 1986.387449][T32228] veth1_macvtap: entered promiscuous mode [ 1986.389790][ T5931] gspca_stk1135: serial bus timeout: status=0x00 [ 1986.400171][T21167] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1986.410012][ T5931] gspca_stk1135: Sensor write failed [ 1986.419829][ T5931] gspca_stk1135: serial bus timeout: status=0x00 [ 1986.429934][ T5931] gspca_stk1135: Sensor write failed [ 1986.438334][ T5931] stk1135 10-1:0.0: probe with driver stk1135 failed with error -71 [ 1986.453587][ T5931] usb 10-1: USB disconnect, device number 64 [ 1986.525279][T32228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1986.563587][T21167] usb 7-1: Using ep0 maxpacket: 16 [ 1986.570771][T21167] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1986.590994][T21167] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1986.615928][T32228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1986.636560][T21167] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1986.684979][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1986.753164][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1986.762128][T21167] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1986.799001][T21167] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1986.828737][T21167] usb 7-1: config 0 descriptor?? [ 1986.834851][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1986.887851][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1988.318869][T21167] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1988.346582][T21167] microsoft 0003:045E:07DA.0056: ignoring exceeding usage max [ 1988.401408][T21167] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1988.420167][T21167] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1988.455035][T21167] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1988.585020][T21167] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1988.616380][T21167] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1988.642157][T21167] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1988.654026][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1988.677686][T21167] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1988.692679][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1988.718016][T21167] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1988.750592][T21167] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 1988.774019][T21167] microsoft 0003:045E:07DA.0056: unsupported Resolution Multiplier 0 [ 1988.811995][T27071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1988.823429][T32542] vivid-000: ================= START STATUS ================= [ 1988.830003][T27071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1988.844478][T32542] vivid-000: Test Pattern: 100% Red [ 1988.856845][T32542] vivid-000: Fill Percentage of Frame: 2 [ 1988.867886][T32542] vivid-000: Horizontal Movement: Move Right Slow [ 1988.881511][T32542] vivid-000: Vertical Movement: Move Down Fast [ 1988.889347][T32542] vivid-000: OSD Text Mode: All [ 1988.899490][T32542] vivid-000: Show Border: false [ 1988.906726][T21167] microsoft 0003:045E:07DA.0056: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1988.923292][T32542] [ 1988.929478][T32550] random: crng reseeded on system resumption [ 1988.937167][T32542] vivid-000: Show Square: false [ 1988.962009][T21167] microsoft 0003:045E:07DA.0056: no inputs found [ 1988.991126][T32542] vivid-000: Sensor Flipped Horizontally: false [ 1988.997802][T32542] vivid-000: Sensor Flipped Vertically: false [ 1989.005986][T21167] microsoft 0003:045E:07DA.0056: could not initialize ff, continuing anyway [ 1989.019429][T32542] vivid-000: Insert SAV Code in Image: false [ 1989.028445][T32542] vivid-000: Insert EAV Code in Image: false [ 1989.042641][T32542] vivid-000: Insert Video Guard Band: true [ 1989.054443][T32542] vivid-000: Reduced Framerate: false [ 1989.066973][T32542] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1989.086375][T32542] vivid-000: S-Video 000-0 Is Connected To: None [ 1989.107654][T32542] vivid-000: Enable Capture Cropping: true [ 1989.114846][T21167] usb 7-1: USB disconnect, device number 63 [ 1989.129444][T32542] grabbed [ 1989.135148][T32542] vivid-000: Enable Capture Composing: true [ 1989.149020][T32542] grabbed [ 1989.158452][T32542] vivid-000: Enable Capture Scaler: true grabbed [ 1989.174830][T32542] vivid-000: Timestamp Source: End of Frame [ 1989.195249][T32542] vivid-000: Colorspace: sRGB [ 1989.206475][T32542] vivid-000: Transfer Function: Default [ 1989.215261][T32542] [ 1989.218723][T32542] vivid-000: Y'CbCr Encoding: Default [ 1989.228085][T32542] vivid-000: HSV Encoding: Hue 0-256 [ 1989.238136][T32542] vivid-000: Quantization: Default [ 1989.255801][T32542] vivid-000: Apply Alpha To Red Only: [ 1989.275691][T32542] false [ 1989.362205][T32542] [ 1989.372062][T32542] vivid-000: Standard Aspect Ratio: 4x3 [ 1989.382174][T32542] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1989.406205][T32542] vivid-000: DV Timings: 640x480p59 inactive [ 1989.444345][T32554] fido_id[32554]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1989.524580][T32542] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1989.533708][T32542] vivid-000: Maximum EDID Blocks: 2 [ 1989.539203][T32542] vivid-000: Limited RGB Range (16-235): false [ 1989.559750][T32542] vivid-000: Rx RGB Quantization Range: Automatic [ 1989.570811][T32542] vivid-000: Power Present: 0x00000001 [ 1989.589814][T32542] tpg source WxH: 3840x2160 (Y'CbCr) [ 1989.596633][T32542] tpg field: 1 [ 1989.602232][T32542] tpg crop: (0,0)/3840x2160 [ 1989.608844][T32542] tpg compose: (0,0)/3840x2160 [ 1989.616018][T32542] tpg colorspace: 2 [ 1989.622030][T32542] tpg transfer function: 0/4 [ 1989.627660][T32542] tpg Y'CbCr encoding: 0/8 [ 1989.634841][T32542] tpg quantization: 0/2 [ 1989.640394][T32542] tpg RGB range: 0/2 [ 1989.647828][T32542] vivid-000: ================== END STATUS ================== [ 1989.820281][T32566] binder: 32564:32566 ioctl c02064b2 80000040 returned -22 [ 1991.403519][T32598] batadv_slave_0: entered promiscuous mode [ 1991.501225][T32598] macsec1: entered promiscuous mode [ 1991.529893][T32605] netlink: 'syz.4.7669': attribute type 11 has an invalid length. [ 1991.538160][T32605] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.7669'. [ 1991.569896][T32598] batadv_slave_0: left promiscuous mode [ 1991.674872][T22233] hid-generic 0000:0000:0000.0057: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1991.982632][T32611] random: crng reseeded on system resumption [ 1994.287877][T32647] FAULT_INJECTION: forcing a failure. [ 1994.287877][T32647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1994.321088][T32647] CPU: 1 UID: 0 PID: 32647 Comm: syz.6.7678 Not tainted syzkaller #0 PREEMPT(full) [ 1994.321118][T32647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1994.321133][T32647] Call Trace: [ 1994.321142][T32647] [ 1994.321152][T32647] dump_stack_lvl+0x189/0x250 [ 1994.321187][T32647] ? __pfx____ratelimit+0x10/0x10 [ 1994.321207][T32647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1994.321228][T32647] ? __pfx__printk+0x10/0x10 [ 1994.321244][T32647] ? __might_fault+0xb0/0x130 [ 1994.321274][T32647] should_fail_ex+0x414/0x560 [ 1994.321302][T32647] _copy_from_user+0x2d/0xb0 [ 1994.321323][T32647] get_compat_msghdr+0xad/0x4a0 [ 1994.321344][T32647] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1994.321361][T32647] ? ___sys_recvmsg+0x1c4/0x510 [ 1994.321377][T32647] ? kfree+0x4d/0x6d0 [ 1994.321401][T32647] ___sys_recvmsg+0x17f/0x510 [ 1994.321422][T32647] ? __pfx____sys_recvmsg+0x10/0x10 [ 1994.321456][T32647] ? __fget_files+0x3a0/0x420 [ 1994.321479][T32647] do_recvmmsg+0x36a/0x770 [ 1994.321502][T32647] ? __pfx_do_recvmmsg+0x10/0x10 [ 1994.321519][T32647] ? ksys_write+0x1cb/0x250 [ 1994.321554][T32647] ? __fget_files+0x3a0/0x420 [ 1994.321573][T32647] __sys_recvmmsg+0x19d/0x280 [ 1994.321592][T32647] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1994.321609][T32647] ? __pfx_ksys_write+0x10/0x10 [ 1994.321635][T32647] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1994.321654][T32647] __do_fast_syscall_32+0xb6/0x2b0 [ 1994.321676][T32647] ? lockdep_hardirqs_on+0x9c/0x150 [ 1994.321700][T32647] do_fast_syscall_32+0x34/0x80 [ 1994.321722][T32647] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1994.321740][T32647] RIP: 0023:0xf7f64539 [ 1994.321755][T32647] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1994.321769][T32647] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1994.321786][T32647] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 1994.321797][T32647] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1994.321806][T32647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1994.321816][T32647] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1994.321825][T32647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1994.321847][T32647] [ 1994.657897][T26530] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1994.670662][T26530] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1994.679988][T26530] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1994.688299][T26530] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1994.696688][T26530] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1994.851576][ T30] audit: type=1326 audit(1761674984.824:7153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.7679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1994.899641][ T30] audit: type=1326 audit(1761674984.824:7154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.7679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1994.997819][ T30] audit: type=1326 audit(1761674984.824:7155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.7679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1995.021108][ T30] audit: type=1326 audit(1761674984.824:7156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.7679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1995.058765][ T30] audit: type=1326 audit(1761674984.824:7157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.7679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1995.083567][ T30] audit: type=1326 audit(1761674984.824:7158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.7679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1995.123395][ T30] audit: type=1326 audit(1761674984.824:7159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.7679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1995.251187][ T30] audit: type=1326 audit(1761674984.824:7160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.7679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1995.301150][ T30] audit: type=1326 audit(1761674985.034:7161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.7679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1995.348705][ T30] audit: type=1326 audit(1761674985.034:7162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.7679" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1995.935078][T27071] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1996.089637][T32667] fuse: Unknown parameter '0x0000000000000004' [ 1996.144802][T27071] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1996.287756][T27071] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1996.498696][T27071] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1996.949791][T19664] Bluetooth: hci0: command tx timeout [ 1997.016538][T32691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7692'. [ 1997.451880][T32660] chnl_net:caif_netlink_parms(): no params data found [ 1997.581811][T32699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7694'. [ 1997.896349][T27071] bridge_slave_1: left allmulticast mode [ 1997.935346][T27071] bridge_slave_1: left promiscuous mode [ 1998.003906][T27071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1998.102674][T27071] bridge_slave_0: left allmulticast mode [ 1998.118710][T27071] bridge_slave_0: left promiscuous mode [ 1998.147566][T27071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1998.331892][T27071] bond_slave_0: left promiscuous mode [ 1998.366508][T27071] bond_slave_1: left promiscuous mode [ 1998.738805][T27071] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1999.023432][T19664] Bluetooth: hci0: command tx timeout [ 1999.242176][T26562] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 1999.263380][T32744] sctp: [Deprecated]: syz.7.7704 (pid 32744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1999.263380][T32744] Use struct sctp_sack_info instead [ 1999.445198][T26562] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1999.473862][T26562] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1999.502126][T26562] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1999.511962][T26562] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.556867][ C0] vkms_vblank_simulate: vblank timer overrun [ 2000.483834][T26562] usb 7-1: usb_control_msg returned -32 [ 2000.489842][T26562] usbtmc 7-1:16.0: can't read capabilities [ 2000.931120][T26562] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 2000.986436][T27071] bond5 (unregistering): (slave macvlan2): Removing an active aggregator [ 2000.999673][T27071] bond5 (unregistering): (slave macvlan2): Releasing backup interface [ 2001.024738][T27071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2001.036481][T27071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2001.047207][T27071] bond0 (unregistering): Released all slaves [ 2001.064701][T27071] bond1 (unregistering): Released all slaves [ 2001.071648][T26562] usb 4-1: device descriptor read/64, error -71 [ 2001.082266][T27071] bond2 (unregistering): Released all slaves [ 2001.100337][T27071] bond3 (unregistering): Released all slaves [ 2001.106625][T19664] Bluetooth: hci0: command tx timeout [ 2001.305315][T27071] bond4 (unregistering): Released all slaves [ 2001.311483][T26562] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 2001.441608][T26562] usb 4-1: device descriptor read/64, error -71 [ 2001.558337][T26562] usb usb4-port1: attempt power cycle [ 2001.686739][T27071] bond5 (unregistering): Released all slaves [ 2001.819060][T32660] bridge0: port 1(bridge_slave_0) entered blocking state [ 2001.826633][T32660] bridge0: port 1(bridge_slave_0) entered disabled state [ 2001.845832][T32660] bridge_slave_0: entered allmulticast mode [ 2001.858945][T32660] bridge_slave_0: entered promiscuous mode [ 2001.869127][T32660] bridge0: port 2(bridge_slave_1) entered blocking state [ 2001.876605][T32660] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.884682][T32660] bridge_slave_1: entered allmulticast mode [ 2001.892942][T32660] bridge_slave_1: entered promiscuous mode [ 2001.900112][T27071] tipc: Disabling bearer [ 2001.906288][T27071] tipc: Left network mode [ 2001.911303][T26562] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 2001.962004][T26562] usb 4-1: device descriptor read/8, error -71 [ 2002.030053][T32760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7709'. [ 2002.056942][T32760] FAULT_INJECTION: forcing a failure. [ 2002.056942][T32760] name failslab, interval 1, probability 0, space 0, times 0 [ 2002.078711][T32660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2002.082595][T32760] CPU: 0 UID: 0 PID: 32760 Comm: syz.4.7709 Not tainted syzkaller #0 PREEMPT(full) [ 2002.082631][T32760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2002.082649][T32760] Call Trace: [ 2002.082660][T32760] [ 2002.082669][T32760] dump_stack_lvl+0x189/0x250 [ 2002.082714][T32760] ? __pfx____ratelimit+0x10/0x10 [ 2002.082746][T32760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2002.082782][T32760] ? __pfx__printk+0x10/0x10 [ 2002.082815][T32760] ? __pfx___might_resched+0x10/0x10 [ 2002.082850][T32760] should_fail_ex+0x414/0x560 [ 2002.082896][T32760] should_failslab+0xa8/0x100 [ 2002.082926][T32760] __kvmalloc_node_noprof+0x158/0x910 [ 2002.082967][T32760] ? nf_hook_entries_grow+0x281/0x720 [ 2002.082994][T32760] ? __pfx___mutex_lock+0x10/0x10 [ 2002.083035][T32760] nf_hook_entries_grow+0x281/0x720 [ 2002.083079][T32760] __nf_register_net_hook+0x2c9/0x930 [ 2002.083117][T32760] nf_register_net_hook+0xb2/0x190 [ 2002.083147][T32760] nf_register_net_hooks+0x44/0x1b0 [ 2002.083176][T32760] nf_defrag_ipv4_enable+0x87/0x120 [ 2002.083220][T32760] nf_ct_netns_do_get+0x18c/0x5a0 [ 2002.083252][T32760] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 2002.083278][T32760] ? synproxy_pernet+0x45/0x270 [ 2002.083310][T32760] ? synproxy_pernet+0x45/0x270 [ 2002.083337][T32760] ? synproxy_pernet+0x45/0x270 [ 2002.083375][T32760] nft_synproxy_do_init+0x1d1/0x4c0 [ 2002.083433][T32760] nft_obj_init+0x21f/0x360 [ 2002.083463][T32760] nf_tables_newobj+0xade/0x1c30 [ 2002.083514][T32760] ? __pfx_nf_tables_newobj+0x10/0x10 [ 2002.083554][T32760] ? __nla_parse+0x40/0x60 [ 2002.083592][T32760] nfnetlink_rcv+0x11d9/0x2590 [ 2002.083669][T32760] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2002.083724][T32760] ? ref_tracker_free+0x63a/0x7d0 [ 2002.083784][T32760] ? __netlink_deliver_tap+0x807/0x850 [ 2002.083823][T32760] ? netlink_deliver_tap+0x2e/0x1b0 [ 2002.083882][T32760] netlink_unicast+0x82f/0x9e0 [ 2002.083930][T32760] ? __pfx_netlink_unicast+0x10/0x10 [ 2002.083967][T32760] ? netlink_sendmsg+0x642/0xb30 [ 2002.083986][T32760] ? skb_put+0x11b/0x210 [ 2002.084013][T32760] netlink_sendmsg+0x805/0xb30 [ 2002.084050][T32760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2002.084077][T32760] ? __import_iovec+0x5d4/0x7f0 [ 2002.084106][T32760] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2002.084145][T32760] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2002.084169][T32760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2002.084195][T32760] __sock_sendmsg+0x21c/0x270 [ 2002.084232][T32760] ____sys_sendmsg+0x505/0x830 [ 2002.084265][T32760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2002.084313][T32760] ___sys_sendmsg+0x21f/0x2a0 [ 2002.084343][T32760] ? __pfx____sys_sendmsg+0x10/0x10 [ 2002.084421][T32760] ? __fget_files+0x2a/0x420 [ 2002.084446][T32760] ? __fget_files+0x3a0/0x420 [ 2002.084483][T32760] __sys_sendmsg+0x164/0x220 [ 2002.084511][T32760] ? __pfx___sys_sendmsg+0x10/0x10 [ 2002.084551][T32760] ? __pfx_ksys_write+0x10/0x10 [ 2002.084588][T32760] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2002.084624][T32760] ? lockdep_hardirqs_on+0x9c/0x150 [ 2002.084659][T32760] __do_fast_syscall_32+0xb6/0x2b0 [ 2002.084694][T32760] ? lockdep_hardirqs_on+0x9c/0x150 [ 2002.084731][T32760] do_fast_syscall_32+0x34/0x80 [ 2002.084764][T32760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2002.084796][T32760] RIP: 0023:0xf7f73539 [ 2002.084817][T32760] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2002.084839][T32760] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2002.084868][T32760] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 2002.084886][T32760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2002.084899][T32760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2002.084915][T32760] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2002.084929][T32760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2002.084967][T32760] [ 2002.493223][T32660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2002.611055][T26562] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 2002.651645][T26562] usb 4-1: device descriptor read/8, error -71 [ 2002.737901][T32660] team0: Port device team_slave_0 added [ 2002.748528][T32660] team0: Port device team_slave_1 added [ 2002.779564][T26562] usb usb4-port1: unable to enumerate USB device [ 2002.855597][T26562] usb 7-1: USB disconnect, device number 64 [ 2002.940512][T27071] macvlan0: left promiscuous mode [ 2002.948016][T27071] hsr0: left allmulticast mode [ 2002.953410][T27071] veth1_macvtap: left promiscuous mode [ 2002.959161][T27071] veth0_macvtap: left promiscuous mode [ 2002.966573][T27071] veth1_vlan: left promiscuous mode [ 2002.972424][T27071] veth0_vlan: left promiscuous mode [ 2003.128997][T27071] pim6reg (unregistering): left allmulticast mode [ 2003.186265][T19664] Bluetooth: hci0: command tx timeout [ 2003.723527][ T311] random: crng reseeded on system resumption [ 2003.752436][ T311] Unrecognized hibernate image header format! [ 2003.758566][ T311] PM: hibernation: Image mismatch: architecture specific data [ 2003.784609][T27071] team0 (unregistering): Port device team_slave_1 removed [ 2003.858499][T27071] team0 (unregistering): Port device team_slave_0 removed [ 2004.413284][ T320] netlink: 'syz.7.7714': attribute type 10 has an invalid length. [ 2005.279636][ T320] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2005.352694][ T323] wg1: entered promiscuous mode [ 2005.357773][ T323] wg1: entered allmulticast mode [ 2005.447905][T32660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2005.465272][T32660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2005.506896][T32660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2005.529699][T32660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2005.542705][T32660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2005.597092][T32660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2005.793944][T32660] hsr_slave_0: entered promiscuous mode [ 2005.800900][T32660] hsr_slave_1: entered promiscuous mode [ 2005.840513][T32660] debugfs: 'hsr0' already exists in 'hsr' [ 2005.849136][T32660] Cannot create hsr debugfs directory [ 2005.876381][T27071] IPVS: stop unused estimator thread 0... [ 2005.980716][ T346] netlink: 'syz.6.7718': attribute type 4 has an invalid length. [ 2005.988831][ T346] netlink: 17 bytes leftover after parsing attributes in process `syz.6.7718'. [ 2006.231611][ T353] fuse: Unknown parameter './file0' [ 2006.250782][ T353] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2007.389037][T32660] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2007.497754][T32660] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2007.562242][T32660] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2007.630329][ T362] tipc: Enabled bearer , priority 10 [ 2007.668845][T32660] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2007.734184][ T370] random: crng reseeded on system resumption [ 2008.099757][T32660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2008.231939][T32660] 8021q: adding VLAN 0 to HW filter on device team0 [ 2008.280070][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state [ 2008.287352][ T6244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2008.362677][ T385] program syz.4.7726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2008.409530][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state [ 2008.416828][ T6249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2008.682179][T26562] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2008.833449][T32660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2008.877875][T26562] usb 4-1: Using ep0 maxpacket: 16 [ 2008.900464][T26562] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2008.915058][T26562] usb 4-1: config 1 has an invalid interface descriptor of length 3, skipping [ 2008.961107][T26562] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2008.990599][T26562] usb 4-1: config 1 has no interface number 1 [ 2009.000781][T26562] usb 4-1: config 1 interface 2 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2009.014195][T32660] veth0_vlan: entered promiscuous mode [ 2009.039654][T26562] usb 4-1: config 1 interface 2 has no altsetting 2 [ 2009.046115][T32660] veth1_vlan: entered promiscuous mode [ 2009.059540][T26562] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2009.074218][ T345] delete_channel: no stack [ 2009.093520][T26562] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.122608][T26562] usb 4-1: Product: syz [ 2009.128747][T32660] veth0_macvtap: entered promiscuous mode [ 2009.147272][T26562] usb 4-1: Manufacturer: syz [ 2009.160762][T26562] usb 4-1: SerialNumber: syz [ 2009.164001][T32660] veth1_macvtap: entered promiscuous mode [ 2009.226892][T32660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2009.253721][T32660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2009.279635][T27071] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.298016][T27071] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.310427][T27071] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.324125][T27071] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.443042][T26562] usb 4-1: USB disconnect, device number 96 [ 2009.483166][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2009.484943][T32389] udevd[32389]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2009.526404][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2009.580244][T27071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2009.592589][T27071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2010.094610][ T426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7733'. [ 2010.524627][ T434] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7735'. [ 2011.261396][ T458] fuse: Invalid rootmode [ 2012.220380][ T471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7743'. [ 2012.236359][ T471] FAULT_INJECTION: forcing a failure. [ 2012.236359][ T471] name failslab, interval 1, probability 0, space 0, times 0 [ 2012.254265][ T471] CPU: 0 UID: 0 PID: 471 Comm: syz.4.7743 Not tainted syzkaller #0 PREEMPT(full) [ 2012.254297][ T471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2012.254313][ T471] Call Trace: [ 2012.254323][ T471] [ 2012.254333][ T471] dump_stack_lvl+0x189/0x250 [ 2012.254372][ T471] ? __pfx____ratelimit+0x10/0x10 [ 2012.254400][ T471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2012.254431][ T471] ? __pfx__printk+0x10/0x10 [ 2012.254458][ T471] ? __pfx___might_resched+0x10/0x10 [ 2012.254483][ T471] ? fs_reclaim_acquire+0x7d/0x100 [ 2012.254531][ T471] should_fail_ex+0x414/0x560 [ 2012.254572][ T471] should_failslab+0xa8/0x100 [ 2012.254598][ T471] __kvmalloc_node_noprof+0x158/0x910 [ 2012.254630][ T471] ? __nf_register_net_hook+0x232/0x930 [ 2012.254660][ T471] ? nf_hook_entries_grow+0x281/0x720 [ 2012.254690][ T471] nf_hook_entries_grow+0x281/0x720 [ 2012.254727][ T471] __nf_register_net_hook+0x2c9/0x930 [ 2012.254764][ T471] ? nf_register_net_hook+0xc8/0x190 [ 2012.254789][ T471] nf_register_net_hook+0xb2/0x190 [ 2012.254813][ T471] nf_register_net_hooks+0x44/0x1b0 [ 2012.254839][ T471] nf_ct_netns_do_get+0x3bf/0x5a0 [ 2012.254867][ T471] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 2012.254890][ T471] ? synproxy_pernet+0x45/0x270 [ 2012.254918][ T471] ? synproxy_pernet+0x45/0x270 [ 2012.254948][ T471] ? synproxy_pernet+0x45/0x270 [ 2012.254981][ T471] nft_synproxy_do_init+0x1d1/0x4c0 [ 2012.255015][ T471] nft_obj_init+0x21f/0x360 [ 2012.255041][ T471] nf_tables_newobj+0xade/0x1c30 [ 2012.255085][ T471] ? __pfx_nf_tables_newobj+0x10/0x10 [ 2012.255122][ T471] ? __nla_parse+0x40/0x60 [ 2012.255150][ T471] nfnetlink_rcv+0x11d9/0x2590 [ 2012.255219][ T471] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2012.255267][ T471] ? ref_tracker_free+0x63a/0x7d0 [ 2012.255321][ T471] ? __netlink_deliver_tap+0x807/0x850 [ 2012.255355][ T471] ? netlink_deliver_tap+0x2e/0x1b0 [ 2012.255408][ T471] netlink_unicast+0x82f/0x9e0 [ 2012.255449][ T471] ? __pfx_netlink_unicast+0x10/0x10 [ 2012.255482][ T471] ? netlink_sendmsg+0x642/0xb30 [ 2012.255500][ T471] ? skb_put+0x11b/0x210 [ 2012.255525][ T471] netlink_sendmsg+0x805/0xb30 [ 2012.255557][ T471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2012.255581][ T471] ? __import_iovec+0x5d4/0x7f0 [ 2012.255607][ T471] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2012.255643][ T471] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2012.255671][ T471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2012.255693][ T471] __sock_sendmsg+0x21c/0x270 [ 2012.255727][ T471] ____sys_sendmsg+0x505/0x830 [ 2012.255757][ T471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2012.255799][ T471] ___sys_sendmsg+0x21f/0x2a0 [ 2012.255825][ T471] ? __pfx____sys_sendmsg+0x10/0x10 [ 2012.255890][ T471] ? __fget_files+0x2a/0x420 [ 2012.255911][ T471] ? __fget_files+0x3a0/0x420 [ 2012.255944][ T471] __sys_sendmsg+0x164/0x220 [ 2012.255970][ T471] ? __pfx___sys_sendmsg+0x10/0x10 [ 2012.256004][ T471] ? __pfx_ksys_write+0x10/0x10 [ 2012.256037][ T471] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2012.256071][ T471] ? lockdep_hardirqs_on+0x9c/0x150 [ 2012.256103][ T471] __do_fast_syscall_32+0xb6/0x2b0 [ 2012.256135][ T471] ? lockdep_hardirqs_on+0x9c/0x150 [ 2012.256168][ T471] do_fast_syscall_32+0x34/0x80 [ 2012.256198][ T471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2012.256225][ T471] RIP: 0023:0xf7f73539 [ 2012.256245][ T471] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2012.256265][ T471] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2012.256290][ T471] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 2012.256305][ T471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2012.256319][ T471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2012.256332][ T471] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2012.256346][ T471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2012.256380][ T471] [ 2013.451076][T26562] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 2013.628850][ T494] random: crng reseeded on system resumption [ 2013.637254][T26562] usb 10-1: Using ep0 maxpacket: 32 [ 2013.707291][T26562] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 2013.721049][T26562] usb 10-1: config 0 has no interface number 0 [ 2013.757951][T26562] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2013.767434][T26562] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.857197][T26562] usb 10-1: Product: syz [ 2013.879345][T26562] usb 10-1: Manufacturer: syz [ 2013.899809][T26562] usb 10-1: SerialNumber: syz [ 2014.021161][T26562] usb 10-1: config 0 descriptor?? [ 2014.081460][T26562] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2014.306151][ T507] netlink: 'syz.3.7750': attribute type 21 has an invalid length. [ 2014.314226][ T507] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7750'. [ 2014.339819][ T507] netlink: 'syz.3.7750': attribute type 5 has an invalid length. [ 2014.368525][T26562] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2014.453289][T26562] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2014.465877][ T507] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7750'. [ 2015.045515][ T512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2015.288708][ T512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2015.902824][ T525] tipc: Failed to remove unknown binding: 66,1,1/0:1833043020/1833043022 [ 2016.637572][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2016.655130][ T1217] usb 10-1: USB disconnect, device number 65 [ 2016.718162][ T1217] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2016.756934][ T1217] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2016.836093][ T1217] quatech2 10-1:0.51: device disconnected [ 2017.221359][ T1217] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 2017.434430][ T1217] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2017.450314][ T1217] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.501295][T26561] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2017.544063][ T1217] usb 10-1: config 0 descriptor?? [ 2017.671330][T26561] usb 4-1: Using ep0 maxpacket: 8 [ 2017.719968][T26561] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2017.733091][T26561] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 2017.748107][T26561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 2017.779217][T26561] usb 4-1: SerialNumber: syz [ 2017.795597][ T545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2017.809524][ T545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2017.831226][T26561] usb 4-1: config 0 descriptor?? [ 2017.873055][T26561] uvcvideo 4-1:0.0: Found UVC 0.00 device (05ac:8501) [ 2017.881485][T26561] uvcvideo 4-1:0.0: No valid video chain found. [ 2018.088351][ T1217] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2018.103155][ T1217] [drm:udl_init] *ERROR* Selecting channel failed [ 2018.239318][ T553] bond1: entered allmulticast mode [ 2018.246689][ T553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2018.283085][ T1217] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 2018.303865][ T1217] [drm] Initialized udl on minor 2 [ 2018.318722][ T1217] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2018.343403][ T1217] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 2018.353062][T22233] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2018.374552][ T1217] usb 10-1: USB disconnect, device number 66 [ 2018.380808][T22233] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 2018.915095][ T571] ipvlan1: entered promiscuous mode [ 2018.923625][ T571] ipvlan1: left promiscuous mode [ 2019.141054][T27829] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 2019.274026][T27829] usb 7-1: device descriptor read/64, error -71 [ 2019.431145][T22233] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 2019.531215][T27829] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 2019.563922][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2019.563942][ T30] audit: type=1326 audit(1761675009.544:7166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=580 comm="syz.4.7770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2019.595388][T22233] usb 10-1: Using ep0 maxpacket: 8 [ 2019.601404][ T30] audit: type=1326 audit(1761675009.544:7167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=580 comm="syz.4.7770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2019.625301][ T30] audit: type=1326 audit(1761675009.574:7168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=580 comm="syz.4.7770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f73539 code=0x7ffc0000 [ 2019.648799][T22233] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2019.659731][T22233] usb 10-1: config 1 has an invalid interface number: 65 but max is 0 [ 2019.668622][T22233] usb 10-1: config 1 has no interface number 0 [ 2019.675113][T22233] usb 10-1: too many endpoints for config 1 interface 65 altsetting 139: 128, using maximum allowed: 30 [ 2019.704573][T22233] usb 10-1: config 1 interface 65 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 2019.721114][T27829] usb 7-1: device descriptor read/64, error -71 [ 2019.736151][T22233] usb 10-1: config 1 interface 65 has no altsetting 0 [ 2019.746026][T22233] usb 10-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 2019.758801][T22233] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.767198][T22233] usb 10-1: Product: syz [ 2019.771542][T22233] usb 10-1: Manufacturer: syz [ 2019.776241][T22233] usb 10-1: SerialNumber: syz [ 2019.841789][T27829] usb usb7-port1: attempt power cycle [ 2020.126618][ T5925] usb 4-1: USB disconnect, device number 97 [ 2020.285033][T27829] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 2020.361638][T27829] usb 7-1: device descriptor read/8, error -71 [ 2020.442632][ T591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2020.476281][ T591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2020.611476][T27829] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 2020.627708][ T596] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7773'. [ 2020.701890][T27829] usb 7-1: device descriptor read/8, error -71 [ 2020.832778][T27829] usb usb7-port1: unable to enumerate USB device [ 2021.300675][ T606] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2021.420351][ T613] bridge0: port 3(erspan0) entered blocking state [ 2021.428369][ T613] bridge0: port 3(erspan0) entered disabled state [ 2021.436121][ T613] erspan0: entered allmulticast mode [ 2021.459999][ T613] erspan0: entered promiscuous mode [ 2021.466777][ T613] bridge0: port 3(erspan0) entered blocking state [ 2021.473434][ T613] bridge0: port 3(erspan0) entered forwarding state [ 2021.764100][ T613] bridge0: port 3(erspan0) entered disabled state [ 2022.060669][ T613] bridge0: port 2(bridge_slave_1) entered disabled state [ 2022.068602][ T613] bridge0: port 1(bridge_slave_0) entered disabled state [ 2022.078148][ T626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7783'. [ 2022.093050][ T626] FAULT_INJECTION: forcing a failure. [ 2022.093050][ T626] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.175625][ T626] CPU: 0 UID: 0 PID: 626 Comm: syz.3.7783 Not tainted syzkaller #0 PREEMPT(full) [ 2022.175658][ T626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2022.175673][ T626] Call Trace: [ 2022.175684][ T626] [ 2022.175694][ T626] dump_stack_lvl+0x189/0x250 [ 2022.175731][ T626] ? __pfx____ratelimit+0x10/0x10 [ 2022.175761][ T626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2022.175808][ T626] ? __pfx__printk+0x10/0x10 [ 2022.175851][ T626] ? __pfx___might_resched+0x10/0x10 [ 2022.175879][ T626] ? fs_reclaim_acquire+0x7d/0x100 [ 2022.175923][ T626] should_fail_ex+0x414/0x560 [ 2022.175965][ T626] should_failslab+0xa8/0x100 [ 2022.175992][ T626] __kvmalloc_node_noprof+0x158/0x910 [ 2022.176025][ T626] ? __nf_register_net_hook+0x232/0x930 [ 2022.176049][ T626] ? nf_hook_entries_grow+0x281/0x720 [ 2022.176078][ T626] nf_hook_entries_grow+0x281/0x720 [ 2022.176117][ T626] __nf_register_net_hook+0x2c9/0x930 [ 2022.176153][ T626] nf_register_net_hook+0xb2/0x190 [ 2022.176178][ T626] nf_register_net_hooks+0x44/0x1b0 [ 2022.176205][ T626] nf_ct_netns_do_get+0x3bf/0x5a0 [ 2022.176232][ T626] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 2022.176258][ T626] ? synproxy_pernet+0x45/0x270 [ 2022.176287][ T626] ? synproxy_pernet+0x45/0x270 [ 2022.176311][ T626] ? synproxy_pernet+0x45/0x270 [ 2022.176356][ T626] nft_synproxy_do_init+0x1d1/0x4c0 [ 2022.176390][ T626] nft_obj_init+0x21f/0x360 [ 2022.176417][ T626] nf_tables_newobj+0xade/0x1c30 [ 2022.176462][ T626] ? __pfx_nf_tables_newobj+0x10/0x10 [ 2022.176498][ T626] ? __nla_parse+0x40/0x60 [ 2022.176545][ T626] nfnetlink_rcv+0x11d9/0x2590 [ 2022.176617][ T626] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2022.176668][ T626] ? ref_tracker_free+0x63a/0x7d0 [ 2022.176723][ T626] ? __netlink_deliver_tap+0x807/0x850 [ 2022.176760][ T626] ? netlink_deliver_tap+0x2e/0x1b0 [ 2022.176815][ T626] netlink_unicast+0x82f/0x9e0 [ 2022.176866][ T626] ? __pfx_netlink_unicast+0x10/0x10 [ 2022.176900][ T626] ? netlink_sendmsg+0x642/0xb30 [ 2022.176918][ T626] ? skb_put+0x11b/0x210 [ 2022.176944][ T626] netlink_sendmsg+0x805/0xb30 [ 2022.176977][ T626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2022.177002][ T626] ? __import_iovec+0x5d4/0x7f0 [ 2022.177029][ T626] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2022.177066][ T626] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2022.177090][ T626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2022.177113][ T626] __sock_sendmsg+0x21c/0x270 [ 2022.177155][ T626] ____sys_sendmsg+0x505/0x830 [ 2022.177186][ T626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2022.177229][ T626] ___sys_sendmsg+0x21f/0x2a0 [ 2022.177256][ T626] ? __pfx____sys_sendmsg+0x10/0x10 [ 2022.177323][ T626] ? __fget_files+0x2a/0x420 [ 2022.177343][ T626] ? __fget_files+0x3a0/0x420 [ 2022.177374][ T626] __sys_sendmsg+0x164/0x220 [ 2022.177401][ T626] ? __pfx___sys_sendmsg+0x10/0x10 [ 2022.177433][ T626] ? __pfx_ksys_write+0x10/0x10 [ 2022.177471][ T626] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2022.177505][ T626] ? lockdep_hardirqs_on+0x9c/0x150 [ 2022.177539][ T626] __do_fast_syscall_32+0xb6/0x2b0 [ 2022.177574][ T626] ? lockdep_hardirqs_on+0x9c/0x150 [ 2022.177608][ T626] do_fast_syscall_32+0x34/0x80 [ 2022.177640][ T626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2022.177668][ T626] RIP: 0023:0xf700d539 [ 2022.177688][ T626] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2022.177708][ T626] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2022.177732][ T626] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 2022.177747][ T626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2022.177761][ T626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2022.177774][ T626] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2022.177787][ T626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2022.177823][ T626] [ 2022.565481][ C0] vkms_vblank_simulate: vblank timer overrun [ 2022.885460][ T590] delete_channel: no stack [ 2022.909707][ T613] wg1: left promiscuous mode [ 2022.917077][ T613] wg1: left allmulticast mode [ 2022.926956][T22233] kalmia 10-1:1.65 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 2023.020666][ T613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2023.025385][T22233] kalmia 10-1:1.65: probe with driver kalmia failed with error -22 [ 2023.042688][ T613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2023.072296][ T632] random: crng reseeded on system resumption [ 2023.135054][T22233] usb 10-1: USB disconnect, device number 67 [ 2023.145509][ T30] audit: type=1400 audit(1761675013.104:7169): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10C4A7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=629 comm="syz.6.7785" [ 2023.612602][T27071] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2023.623915][T27071] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2023.643087][T27071] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2023.916340][T27071] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2024.013967][ T651] random: crng reseeded on system resumption [ 2024.091658][ T651] Unrecognized hibernate image header format! [ 2024.097802][ T651] PM: hibernation: Image mismatch: architecture specific data [ 2024.660333][ T678] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7798'. [ 2024.672293][ T678] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7798'. [ 2024.709157][ T678] syzkaller0: entered promiscuous mode [ 2024.714785][ T678] syzkaller0: entered allmulticast mode [ 2024.725833][ T678] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2024.769578][ T678] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7798'. [ 2024.793011][T22231] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 2024.799560][ T678] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7798'. [ 2024.964344][T22231] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2024.975802][T22231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.000134][T22231] usb 7-1: config 0 descriptor?? [ 2025.018345][T22231] cp210x 7-1:0.0: cp210x converter detected [ 2025.221610][T22231] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2025.298902][T22231] cp210x 7-1:0.0: querying part number failed [ 2025.409155][ T699] IPVS: length: 149 != 176933024328 [ 2025.466040][T22231] usb 7-1: cp210x converter now attached to ttyUSB0 [ 2025.509397][ T631] usb 7-1: USB disconnect, device number 69 [ 2025.526848][ T631] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2026.001750][ T631] cp210x 7-1:0.0: device disconnected [ 2026.090101][ T704] random: crng reseeded on system resumption [ 2026.114846][ T704] Unrecognized hibernate image header format! [ 2026.131716][ T704] PM: hibernation: Image mismatch: architecture specific data [ 2026.692830][ T709] macsec1: entered promiscuous mode [ 2026.698231][ T709] macvlan0: entered promiscuous mode [ 2026.709148][ T709] macvlan0: left promiscuous mode [ 2027.013658][ T717] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7809'. [ 2027.291948][ T725] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7812'. [ 2027.484089][ T736] random: crng reseeded on system resumption [ 2027.515941][ T736] Unrecognized hibernate image header format! [ 2027.526017][ T736] PM: hibernation: Image mismatch: architecture specific data [ 2027.648889][ T742] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7818'. [ 2028.033076][ T754] random: crng reseeded on system resumption [ 2028.078675][ T754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7823'. [ 2028.129688][ T754] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 2028.182773][ T754] Unrecognized hibernate image header format! [ 2028.189159][ T754] PM: hibernation: Image mismatch: architecture specific data [ 2029.076836][ T781] random: crng reseeded on system resumption [ 2029.126806][ T781] Unrecognized hibernate image header format! [ 2029.136066][ T781] PM: hibernation: Image mismatch: architecture specific data [ 2029.502960][ T30] audit: type=1326 audit(1761675019.484:7170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.9.7831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2029.567801][ T30] audit: type=1326 audit(1761675019.484:7171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.9.7831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2029.641186][ T30] audit: type=1326 audit(1761675019.484:7172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.9.7831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2029.649648][ T799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7837'. [ 2029.670412][ T30] audit: type=1326 audit(1761675019.484:7173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.9.7831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2029.701308][ T799] FAULT_INJECTION: forcing a failure. [ 2029.701308][ T799] name failslab, interval 1, probability 0, space 0, times 0 [ 2029.706321][ T30] audit: type=1326 audit(1761675019.484:7174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.9.7831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2029.736965][ C0] vkms_vblank_simulate: vblank timer overrun [ 2029.743543][ T30] audit: type=1326 audit(1761675019.484:7175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.9.7831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2029.765566][ C0] vkms_vblank_simulate: vblank timer overrun [ 2029.771897][ T30] audit: type=1326 audit(1761675019.484:7176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.9.7831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2029.794614][ T30] audit: type=1326 audit(1761675019.484:7177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.9.7831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2029.803448][ T799] CPU: 1 UID: 0 PID: 799 Comm: syz.3.7837 Not tainted syzkaller #0 PREEMPT(full) [ 2029.803485][ T799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2029.803501][ T799] Call Trace: [ 2029.803512][ T799] [ 2029.803525][ T799] dump_stack_lvl+0x189/0x250 [ 2029.803566][ T799] ? __pfx____ratelimit+0x10/0x10 [ 2029.803600][ T799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2029.803634][ T799] ? __pfx__printk+0x10/0x10 [ 2029.803666][ T799] ? __pfx___might_resched+0x10/0x10 [ 2029.803701][ T799] should_fail_ex+0x414/0x560 [ 2029.803747][ T799] should_failslab+0xa8/0x100 [ 2029.803778][ T799] __kvmalloc_node_noprof+0x158/0x910 [ 2029.803819][ T799] ? nf_hook_entries_grow+0x281/0x720 [ 2029.803845][ T799] ? __pfx___mutex_lock+0x10/0x10 [ 2029.803886][ T799] nf_hook_entries_grow+0x281/0x720 [ 2029.803929][ T799] __nf_register_net_hook+0x2c9/0x930 [ 2029.803967][ T799] nf_register_net_hook+0xb2/0x190 [ 2029.803995][ T799] nf_register_net_hooks+0x44/0x1b0 [ 2029.804025][ T799] nf_synproxy_ipv4_init+0x6c/0xd0 [ 2029.804056][ T799] nft_synproxy_do_init+0x295/0x4c0 [ 2029.804095][ T799] nft_obj_init+0x21f/0x360 [ 2029.804123][ T799] nf_tables_newobj+0xade/0x1c30 [ 2029.804173][ T799] ? __pfx_nf_tables_newobj+0x10/0x10 [ 2029.804214][ T799] ? __nla_parse+0x40/0x60 [ 2029.804247][ T799] nfnetlink_rcv+0x11d9/0x2590 [ 2029.804325][ T799] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2029.804385][ T799] ? ref_tracker_free+0x63a/0x7d0 [ 2029.804445][ T799] ? __netlink_deliver_tap+0x807/0x850 [ 2029.804490][ T799] ? netlink_deliver_tap+0x2e/0x1b0 [ 2029.804553][ T799] netlink_unicast+0x82f/0x9e0 [ 2029.804601][ T799] ? __pfx_netlink_unicast+0x10/0x10 [ 2029.804639][ T799] ? netlink_sendmsg+0x642/0xb30 [ 2029.804659][ T799] ? skb_put+0x11b/0x210 [ 2029.804687][ T799] netlink_sendmsg+0x805/0xb30 [ 2029.804723][ T799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2029.804750][ T799] ? __import_iovec+0x5d4/0x7f0 [ 2029.804778][ T799] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2029.804817][ T799] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2029.804843][ T799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2029.804867][ T799] __sock_sendmsg+0x21c/0x270 [ 2029.804904][ T799] ____sys_sendmsg+0x505/0x830 [ 2029.804938][ T799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2029.804985][ T799] ___sys_sendmsg+0x21f/0x2a0 [ 2029.805015][ T799] ? __pfx____sys_sendmsg+0x10/0x10 [ 2029.805087][ T799] ? __fget_files+0x2a/0x420 [ 2029.805108][ T799] ? __fget_files+0x3a0/0x420 [ 2029.805145][ T799] __sys_sendmsg+0x164/0x220 [ 2029.805174][ T799] ? __pfx___sys_sendmsg+0x10/0x10 [ 2029.805213][ T799] ? __pfx_ksys_write+0x10/0x10 [ 2029.805252][ T799] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2029.805289][ T799] ? lockdep_hardirqs_on+0x9c/0x150 [ 2029.805325][ T799] __do_fast_syscall_32+0xb6/0x2b0 [ 2029.805367][ T799] ? lockdep_hardirqs_on+0x9c/0x150 [ 2029.805404][ T799] do_fast_syscall_32+0x34/0x80 [ 2029.805439][ T799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2029.805470][ T799] RIP: 0023:0xf700d539 [ 2029.805492][ T799] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2029.805514][ T799] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2029.805541][ T799] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 2029.805559][ T799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2029.805575][ T799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2029.805589][ T799] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2029.805605][ T799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2029.805642][ T799] [ 2029.816550][ C0] vkms_vblank_simulate: vblank timer overrun [ 2030.256854][ T30] audit: type=1326 audit(1761675019.484:7178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.9.7831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2030.279137][ T30] audit: type=1326 audit(1761675019.484:7179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.9.7831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2030.301081][ C0] vkms_vblank_simulate: vblank timer overrun [ 2031.626449][ T826] random: crng reseeded on system resumption [ 2031.941161][T10661] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 2032.051051][ T639] usb 10-1: new full-speed USB device number 68 using dummy_hcd [ 2032.115142][T10661] usb 7-1: Using ep0 maxpacket: 8 [ 2032.123485][T10661] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2032.135341][T10661] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.149312][T10661] usb 7-1: config 0 descriptor?? [ 2032.215935][ T639] usb 10-1: config 0 has an invalid interface number: 69 but max is 0 [ 2032.224797][ T639] usb 10-1: config 0 has no interface number 0 [ 2032.234555][ T639] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 2032.245723][ T639] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2032.258907][ T639] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2032.273871][ T639] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 2032.283234][ T639] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.291502][ T639] usb 10-1: Product: syz [ 2032.295927][ T639] usb 10-1: Manufacturer: syz [ 2032.300716][ T639] usb 10-1: SerialNumber: syz [ 2032.310109][ T639] usb 10-1: config 0 descriptor?? [ 2032.324529][ T835] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2032.343442][ T639] cyberjack 10-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 2032.359096][ T639] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 2032.369040][ T639] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 2032.553878][ T631] usb 10-1: USB disconnect, device number 68 [ 2032.576399][ T631] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 2032.593484][ T631] cyberjack 10-1:0.69: device disconnected [ 2032.596925][ T849] program syz.3.7852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2032.785267][ T852] FAULT_INJECTION: forcing a failure. [ 2032.785267][ T852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2032.800669][ T852] CPU: 0 UID: 0 PID: 852 Comm: syz.4.7853 Not tainted syzkaller #0 PREEMPT(full) [ 2032.800699][ T852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2032.800712][ T852] Call Trace: [ 2032.800721][ T852] [ 2032.800729][ T852] dump_stack_lvl+0x189/0x250 [ 2032.800767][ T852] ? __pfx____ratelimit+0x10/0x10 [ 2032.800795][ T852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2032.800824][ T852] ? __pfx__printk+0x10/0x10 [ 2032.800844][ T852] ? __might_fault+0xb0/0x130 [ 2032.800882][ T852] should_fail_ex+0x414/0x560 [ 2032.800918][ T852] _copy_from_user+0x2d/0xb0 [ 2032.800974][ T852] get_compat_msghdr+0xad/0x4a0 [ 2032.801002][ T852] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2032.801047][ T852] ___sys_sendmsg+0x193/0x2a0 [ 2032.801072][ T852] ? __pfx____sys_sendmsg+0x10/0x10 [ 2032.801120][ T852] ? __fget_files+0x2a/0x420 [ 2032.801136][ T852] ? __fget_files+0x3a0/0x420 [ 2032.801161][ T852] __sys_sendmsg+0x164/0x220 [ 2032.801184][ T852] ? __pfx___sys_sendmsg+0x10/0x10 [ 2032.801211][ T852] ? __pfx_ksys_write+0x10/0x10 [ 2032.801250][ T852] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2032.801280][ T852] ? lockdep_hardirqs_on+0x9c/0x150 [ 2032.801309][ T852] __do_fast_syscall_32+0xb6/0x2b0 [ 2032.801337][ T852] ? lockdep_hardirqs_on+0x9c/0x150 [ 2032.801366][ T852] do_fast_syscall_32+0x34/0x80 [ 2032.801392][ T852] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2032.801416][ T852] RIP: 0023:0xf7f73539 [ 2032.801434][ T852] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2032.801454][ T852] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2032.801476][ T852] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 2032.801490][ T852] RDX: 0000000000008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 2032.801504][ T852] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2032.801516][ T852] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2032.801529][ T852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2032.801557][ T852] [ 2033.013650][ C0] vkms_vblank_simulate: vblank timer overrun [ 2033.128661][ T854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7854'. [ 2033.369181][ T864] random: crng reseeded on system resumption [ 2033.380223][ T865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2034.386121][ T880] FAULT_INJECTION: forcing a failure. [ 2034.386121][ T880] name failslab, interval 1, probability 0, space 0, times 0 [ 2034.423118][ T880] CPU: 0 UID: 0 PID: 880 Comm: syz.4.7862 Not tainted syzkaller #0 PREEMPT(full) [ 2034.423149][ T880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2034.423162][ T880] Call Trace: [ 2034.423175][ T880] [ 2034.423183][ T880] dump_stack_lvl+0x189/0x250 [ 2034.423215][ T880] ? __pfx____ratelimit+0x10/0x10 [ 2034.423237][ T880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2034.423266][ T880] ? __pfx__printk+0x10/0x10 [ 2034.423287][ T880] ? __pfx___might_resched+0x10/0x10 [ 2034.423303][ T880] ? fs_reclaim_acquire+0x7d/0x100 [ 2034.423332][ T880] should_fail_ex+0x414/0x560 [ 2034.423362][ T880] should_failslab+0xa8/0x100 [ 2034.423381][ T880] __kmalloc_noprof+0xcb/0x7f0 [ 2034.423403][ T880] ? tomoyo_encode+0x28b/0x550 [ 2034.423432][ T880] tomoyo_encode+0x28b/0x550 [ 2034.423460][ T880] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2034.423485][ T880] ? tomoyo_domain+0xd9/0x130 [ 2034.423513][ T880] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2034.423533][ T880] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2034.423556][ T880] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2034.423589][ T880] ? __lock_acquire+0xab9/0xd20 [ 2034.423619][ T880] ? __fget_files+0x2a/0x420 [ 2034.423638][ T880] ? __fget_files+0x3a0/0x420 [ 2034.423651][ T880] ? __fget_files+0x2a/0x420 [ 2034.423669][ T880] security_file_ioctl_compat+0xcb/0x2d0 [ 2034.423692][ T880] __ia32_compat_sys_ioctl+0x128/0x840 [ 2034.423726][ T880] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2034.423747][ T880] ? __fget_files+0x3a0/0x420 [ 2034.423767][ T880] ? fput+0xa0/0xd0 [ 2034.423785][ T880] ? ksys_write+0x22a/0x250 [ 2034.423810][ T880] ? __pfx_ksys_write+0x10/0x10 [ 2034.423834][ T880] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2034.423858][ T880] ? lockdep_hardirqs_on+0x9c/0x150 [ 2034.423881][ T880] __do_fast_syscall_32+0xb6/0x2b0 [ 2034.423912][ T880] ? lockdep_hardirqs_on+0x9c/0x150 [ 2034.423945][ T880] do_fast_syscall_32+0x34/0x80 [ 2034.423976][ T880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2034.424004][ T880] RIP: 0023:0xf7f73539 [ 2034.424024][ T880] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2034.424045][ T880] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2034.424062][ T880] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c008ae88 [ 2034.424073][ T880] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2034.424083][ T880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2034.424093][ T880] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2034.424102][ T880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2034.424127][ T880] [ 2034.425246][ T880] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2034.798451][ T883] QAT: failed to copy from user. [ 2034.812042][ T883] QAT: Invalid ioctl 17921 [ 2035.024165][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2035.034371][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffb9 [ 2035.070507][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2035.082330][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2035.097499][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2035.122065][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2035.133256][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2035.149292][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2035.163583][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2035.175246][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2035.190548][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2035.202360][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2035.214201][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2035.229319][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2035.240625][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2035.251406][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2035.265925][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2035.282121][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2035.293878][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2035.308586][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2035.322768][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2035.335095][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2035.348853][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2035.359675][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2035.370266][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2035.384282][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2035.395868][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2035.406409][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2035.418522][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2035.433490][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2035.444658][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2035.460771][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2035.472636][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2035.486346][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2035.500679][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2035.517395][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2035.529192][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2035.561263][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2035.618591][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2035.650273][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2035.672737][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2035.692967][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2035.717251][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2035.752667][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2035.776080][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2035.798088][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2035.871157][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2035.892130][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2035.919034][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2035.943004][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2035.974294][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2036.004991][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2036.032759][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2036.063987][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2036.090131][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2036.127019][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2036.157914][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2036.188775][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2036.211992][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2036.263503][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2036.290427][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2036.325653][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2036.346637][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2036.361182][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2036.388351][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2036.413384][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2036.434185][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2036.458365][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2036.492564][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2036.534192][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2036.572118][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2036.583039][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2036.598723][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2036.626791][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2036.648796][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2036.678274][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2036.719572][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2036.761030][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2036.791108][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2036.823150][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2036.851543][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2036.940999][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2036.991578][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2037.011511][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2037.051873][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2037.093799][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2037.128398][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2037.159025][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2037.194037][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2037.236487][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2037.257145][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 2037.280363][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2037.324610][T10661] asix 7-1:0.0 (unnamed net_device) (uninitialized): Could not register MDIO bus (err -5) [ 2037.345740][T10661] asix 7-1:0.0: probe with driver asix failed with error -5 [ 2037.373233][ T864] Unrecognized hibernate image header format! [ 2037.379462][ T864] PM: hibernation: Image mismatch: architecture specific data [ 2037.382743][T10661] usb 7-1: USB disconnect, device number 70 [ 2037.757529][ T921] vlan2: entered promiscuous mode [ 2037.773314][ T921] macvtap0: entered promiscuous mode [ 2038.228613][ T933] loop5: detected capacity change from 0 to 16384 [ 2038.312063][ T933] loop5: detected capacity change from 16384 to 16383 [ 2039.357453][ T956] random: crng reseeded on system resumption [ 2039.430058][ T956] Unrecognized hibernate image header format! [ 2039.460984][ T956] PM: hibernation: Image mismatch: architecture specific data [ 2039.726111][ T964] netlink: 'syz.7.7886': attribute type 9 has an invalid length. [ 2040.204883][ T979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7891'. [ 2040.355963][ T984] FAULT_INJECTION: forcing a failure. [ 2040.355963][ T984] name failslab, interval 1, probability 0, space 0, times 0 [ 2040.384509][ T984] CPU: 1 UID: 0 PID: 984 Comm: syz.9.7893 Not tainted syzkaller #0 PREEMPT(full) [ 2040.384540][ T984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2040.384553][ T984] Call Trace: [ 2040.384562][ T984] [ 2040.384572][ T984] dump_stack_lvl+0x189/0x250 [ 2040.384608][ T984] ? __pfx____ratelimit+0x10/0x10 [ 2040.384635][ T984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2040.384666][ T984] ? __pfx__printk+0x10/0x10 [ 2040.384695][ T984] ? __pfx___might_resched+0x10/0x10 [ 2040.384719][ T984] ? fs_reclaim_acquire+0x7d/0x100 [ 2040.384758][ T984] should_fail_ex+0x414/0x560 [ 2040.384797][ T984] should_failslab+0xa8/0x100 [ 2040.384821][ T984] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2040.384862][ T984] ? __alloc_skb+0x112/0x2d0 [ 2040.384895][ T984] ? netlink_autobind+0xdb/0x300 [ 2040.384922][ T984] __alloc_skb+0x112/0x2d0 [ 2040.384960][ T984] netlink_sendmsg+0x5c6/0xb30 [ 2040.384991][ T984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2040.385015][ T984] ? __import_iovec+0x5d4/0x7f0 [ 2040.385041][ T984] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2040.385074][ T984] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2040.385095][ T984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2040.385117][ T984] __sock_sendmsg+0x21c/0x270 [ 2040.385149][ T984] ____sys_sendmsg+0x505/0x830 [ 2040.385179][ T984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2040.385220][ T984] ___sys_sendmsg+0x21f/0x2a0 [ 2040.385246][ T984] ? __pfx____sys_sendmsg+0x10/0x10 [ 2040.385306][ T984] ? __fget_files+0x2a/0x420 [ 2040.385327][ T984] ? __fget_files+0x3a0/0x420 [ 2040.385359][ T984] __sys_sendmsg+0x164/0x220 [ 2040.385385][ T984] ? __pfx___sys_sendmsg+0x10/0x10 [ 2040.385418][ T984] ? __pfx_ksys_write+0x10/0x10 [ 2040.385452][ T984] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2040.385485][ T984] ? lockdep_hardirqs_on+0x9c/0x150 [ 2040.385517][ T984] __do_fast_syscall_32+0xb6/0x2b0 [ 2040.385548][ T984] ? lockdep_hardirqs_on+0x9c/0x150 [ 2040.385580][ T984] do_fast_syscall_32+0x34/0x80 [ 2040.385611][ T984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2040.385638][ T984] RIP: 0023:0xf70ad539 [ 2040.385658][ T984] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2040.385677][ T984] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2040.385700][ T984] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 2040.385716][ T984] RDX: 0000000000008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 2040.385731][ T984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2040.385744][ T984] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2040.385757][ T984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2040.385790][ T984] [ 2040.720572][ T987] netlink: 'syz.6.7894': attribute type 30 has an invalid length. [ 2040.801136][ T633] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2040.925654][ T997] random: crng reseeded on system resumption [ 2040.955928][ T633] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 2040.978602][ T633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2041.015568][ T633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2041.042355][ T633] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2041.057565][ T633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2041.069212][ T633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2041.079480][ T1000] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 2041.090783][ T633] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 2041.100484][ T633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.110347][ T633] usb 4-1: Product: syz [ 2041.117083][ T633] usb 4-1: Manufacturer: syz [ 2041.127958][ T633] usb 4-1: SerialNumber: syz [ 2041.147616][ T633] usb 4-1: config 0 descriptor?? [ 2041.163488][ T633] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 2041.376856][ T633] usb 4-1: USB disconnect, device number 98 [ 2041.491048][ T639] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 2041.669793][ T639] usb 10-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2041.696699][ T639] usb 10-1: config 1 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2041.719594][ T639] usb 10-1: config 1 interface 0 altsetting 16 bulk endpoint 0x3 has invalid maxpacket 0 [ 2041.730196][ T639] usb 10-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2041.746599][ T1008] FAULT_INJECTION: forcing a failure. [ 2041.746599][ T1008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2041.747772][ T639] usb 10-1: config 1 interface 0 has no altsetting 0 [ 2041.761476][ T1008] CPU: 0 UID: 0 PID: 1008 Comm: syz.6.7901 Not tainted syzkaller #0 PREEMPT(full) [ 2041.761513][ T1008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2041.761530][ T1008] Call Trace: [ 2041.761540][ T1008] [ 2041.761551][ T1008] dump_stack_lvl+0x189/0x250 [ 2041.761594][ T1008] ? __pfx____ratelimit+0x10/0x10 [ 2041.761636][ T1008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2041.761670][ T1008] ? __pfx__printk+0x10/0x10 [ 2041.761697][ T1008] ? __might_fault+0xb0/0x130 [ 2041.761747][ T1008] should_fail_ex+0x414/0x560 [ 2041.761808][ T1008] ? __pfx_do_get_msr+0x10/0x10 [ 2041.761838][ T1008] _copy_from_user+0x2d/0xb0 [ 2041.761873][ T1008] msr_io+0xa2/0x570 [ 2041.761899][ T1008] ? kvm_arch_vcpu_ioctl+0x11b1/0x2b40 [ 2041.761928][ T1008] ? __pfx_msr_io+0x10/0x10 [ 2041.761967][ T1008] kvm_arch_vcpu_ioctl+0x11ee/0x2b40 [ 2041.761994][ T1008] ? __lock_acquire+0xab9/0xd20 [ 2041.762019][ T1008] ? kvm_arch_vcpu_ioctl+0x11b1/0x2b40 [ 2041.762052][ T1008] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 2041.762086][ T1008] ? __lock_acquire+0xab9/0xd20 [ 2041.762127][ T1008] ? __lock_acquire+0xab9/0xd20 [ 2041.762175][ T1008] ? is_bpf_text_address+0x26/0x2b0 [ 2041.762211][ T1008] ? is_bpf_text_address+0x292/0x2b0 [ 2041.762238][ T1008] ? is_bpf_text_address+0x26/0x2b0 [ 2041.762268][ T1008] ? kernel_text_address+0xa5/0xe0 [ 2041.762310][ T1008] ? __kernel_text_address+0xd/0x40 [ 2041.762344][ T1008] ? unwind_get_return_address+0x4d/0x90 [ 2041.762373][ T1008] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2041.762408][ T1008] ? arch_stack_walk+0xfc/0x150 [ 2041.762463][ T1008] ? __lock_acquire+0xab9/0xd20 [ 2041.762498][ T1008] ? __mutex_trylock_common+0x153/0x260 [ 2041.762534][ T1008] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2041.762562][ T1008] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2041.762598][ T1008] ? rcu_is_watching+0x15/0xb0 [ 2041.762647][ T1008] ? trace_contention_end+0x39/0x120 [ 2041.762676][ T1008] ? __mutex_lock+0x335/0x1350 [ 2041.762744][ T1008] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 2041.762783][ T1008] ? __pfx___mutex_lock+0x10/0x10 [ 2041.762825][ T1008] ? lockdep_hardirqs_on+0x9c/0x150 [ 2041.762870][ T1008] kvm_vcpu_ioctl+0x74d/0xe90 [ 2041.762912][ T1008] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2041.762955][ T1008] ? do_vfs_ioctl+0xbe8/0x1430 [ 2041.762990][ T1008] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2041.763037][ T1008] ? __lock_acquire+0xab9/0xd20 [ 2041.763086][ T1008] kvm_vcpu_compat_ioctl+0x203/0x390 [ 2041.763126][ T1008] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 2041.763163][ T1008] ? __fget_files+0x3a0/0x420 [ 2041.763184][ T1008] ? __fget_files+0x2a/0x420 [ 2041.763211][ T1008] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2041.763245][ T1008] __ia32_compat_sys_ioctl+0x543/0x840 [ 2041.763281][ T1008] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2041.763315][ T1008] ? __fget_files+0x3a0/0x420 [ 2041.763345][ T1008] ? fput+0xa0/0xd0 [ 2041.763374][ T1008] ? ksys_write+0x22a/0x250 [ 2041.763405][ T1008] ? exc_page_fault+0x82/0x100 [ 2041.763436][ T1008] ? __pfx_ksys_write+0x10/0x10 [ 2041.763474][ T1008] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2041.763509][ T1008] ? lockdep_hardirqs_on+0x9c/0x150 [ 2041.763545][ T1008] __do_fast_syscall_32+0xb6/0x2b0 [ 2041.763579][ T1008] ? lockdep_hardirqs_on+0x9c/0x150 [ 2041.763615][ T1008] do_fast_syscall_32+0x34/0x80 [ 2041.763656][ T1008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2041.763685][ T1008] RIP: 0023:0xf7f64539 [ 2041.763706][ T1008] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2041.763729][ T1008] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2041.763756][ T1008] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c008ae88 [ 2041.763773][ T1008] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2041.763787][ T1008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2041.763802][ T1008] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2041.763815][ T1008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2041.763851][ T1008] [ 2042.189949][ T639] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2042.199667][ T639] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.207909][ T639] usb 10-1: Product: ц [ 2042.212229][ T639] usb 10-1: Manufacturer: 萝ꯐ젅㈾ࣵ藛뭹㝕憐玶鍖쇻ⴺ纅꫁뇮ﲚ㪫ꪎꕚౠ෍ⴻହ谫슳堅ퟤ⢣﷒⭖㙿猀붜ṥ밢䙃⟏ﭴ塹䷓ｨ绤偾类꿱㋶ꡫᓓ馥끓쏦뜄亂뽿㳆웓挂颙ꎡ [ 2042.233549][ T639] usb 10-1: SerialNumber: ϒ [ 2042.286501][ T1003] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2042.538183][ T639] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 2042.578433][ T639] usb 10-1: USB disconnect, device number 69 [ 2042.855272][ T1036] random: crng reseeded on system resumption [ 2042.876607][ T1036] Unrecognized hibernate image header format! [ 2042.883085][ T1036] PM: hibernation: Image mismatch: architecture specific data [ 2042.947301][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.953994][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2043.142671][ T1038] netlink: 'syz.4.7909': attribute type 16 has an invalid length. [ 2043.738330][ T1038] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7909'. [ 2043.955181][ T1045] netlink: 'syz.9.7912': attribute type 2 has an invalid length. [ 2043.992186][ T1045] netlink: 'syz.9.7912': attribute type 9 has an invalid length. [ 2044.002309][ T1045] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.7912'. [ 2044.071720][ T633] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 2044.251058][ T633] usb 7-1: Using ep0 maxpacket: 8 [ 2044.272080][ T633] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 2044.282720][ T633] usb 7-1: config 2 has no interface number 0 [ 2044.293240][ T633] usb 7-1: config 2 interface 31 has no altsetting 0 [ 2044.305383][ T633] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 2044.314899][ T633] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.331270][ T633] usb 7-1: Product: syz [ 2044.340296][ T633] usb 7-1: Manufacturer: syz [ 2044.350725][ T633] usb 7-1: SerialNumber: syz [ 2044.377331][ T633] ch9200 7-1:2.31: probe with driver ch9200 failed with error -22 [ 2044.791968][ T1042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.797035][ T1067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7915'. [ 2044.800792][ T1042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.858228][ T1042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.875587][ T1042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.897678][ T1042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.907976][ T1042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.936960][ T1042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.982097][ T1042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2045.011623][ T1042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2045.020675][ T1042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2045.082518][ T631] usb 7-1: USB disconnect, device number 71 [ 2045.463350][ T1091] tap0: tun_chr_ioctl cmd 1074025677 [ 2045.469626][ T1091] tap0: linktype set to 825 [ 2045.581990][ T1088] kvm: requested 50285 ns i8254 timer period limited to 200000 ns [ 2045.614098][ T1088] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 2045.638055][ T1088] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 2045.691682][ T1088] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 2045.707217][ T1088] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 2045.758341][ T1088] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 2045.813312][ T1088] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 2045.855032][ T1098] syzkaller0: entered promiscuous mode [ 2045.873419][ T1098] syzkaller0: entered allmulticast mode [ 2045.879855][ T1088] kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 2045.930156][ T1088] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 2045.962562][ T1088] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 2046.131946][ T1077] syzkaller0: entered promiscuous mode [ 2046.137509][ T1077] syzkaller0: entered allmulticast mode [ 2046.146609][T22231] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 2046.362955][T22231] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2046.387386][T22231] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2046.414558][T22231] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2046.465362][T22231] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2046.510841][T22231] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2046.580319][T22231] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2046.600823][T22231] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2046.630987][T22231] usb 7-1: Product: syz [ 2046.635264][T22231] usb 7-1: Manufacturer: syz [ 2046.690761][T22231] cdc_wdm 7-1:1.0: skipping garbage [ 2046.702069][ T1109] random: crng reseeded on system resumption [ 2046.721359][T22231] cdc_wdm 7-1:1.0: skipping garbage [ 2046.744712][T22231] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2046.750738][T22231] cdc_wdm 7-1:1.0: Unknown control protocol [ 2046.801125][ T1109] Unrecognized hibernate image header format! [ 2046.815528][ T1109] PM: hibernation: Image mismatch: architecture specific data [ 2046.995751][T22231] usb 7-1: USB disconnect, device number 72 [ 2047.119989][ T1120] program syz.3.7931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2047.258220][ T1125] loop2: detected capacity change from 0 to 7 [ 2047.261788][ T631] usb 10-1: new full-speed USB device number 70 using dummy_hcd [ 2047.340330][ C0] blk_print_req_error: 25 callbacks suppressed [ 2047.340355][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2047.355875][ C0] buffer_io_error: 25 callbacks suppressed [ 2047.355900][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 2047.400858][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2047.410217][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 2047.419333][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2047.428593][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 2047.438189][ T631] usb 10-1: device descriptor read/64, error -71 [ 2047.446296][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2047.455577][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 2047.468554][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2047.477869][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 2047.487098][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2047.496373][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 2047.527226][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2047.536567][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 2047.544812][ T1125] ldm_validate_partition_table(): Disk read failed. [ 2047.561126][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2047.570467][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 2047.580689][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2047.589975][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 2047.599371][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2047.608670][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 2047.620488][ T1125] Dev loop2: unable to read RDB block 0 [ 2047.642143][ T1125] loop2: unable to read partition table [ 2047.648427][ T1125] loop2: partition table beyond EOD, truncated [ 2047.673602][ T1125] loop_reread_partitions: partition scan of loop2 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 2047.741252][ T631] usb 10-1: new full-speed USB device number 71 using dummy_hcd [ 2047.881444][ T631] usb 10-1: device descriptor read/64, error -71 [ 2047.992534][ T631] usb usb10-port1: attempt power cycle [ 2048.347053][ T631] usb 10-1: new full-speed USB device number 72 using dummy_hcd [ 2048.375475][ T631] usb 10-1: device descriptor read/8, error -71 [ 2048.653996][ T631] usb 10-1: new full-speed USB device number 73 using dummy_hcd [ 2048.691397][ T631] usb 10-1: device descriptor read/8, error -71 [ 2048.821060][ T631] usb usb10-port1: unable to enumerate USB device [ 2050.438360][ T1176] loop8: detected capacity change from 0 to 8 [ 2050.456135][ T1176] Dev loop8: unable to read RDB block 8 [ 2050.474525][ T1176] loop8: unable to read partition table [ 2050.483379][ T1176] loop8: partition table beyond EOD, truncated [ 2050.510611][ T1176] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 2051.091900][ T638] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 2051.190559][ T1192] syz.4.7954 (1192): drop_caches: 2 [ 2051.268464][ T638] usb 7-1: Using ep0 maxpacket: 32 [ 2051.283930][ T638] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 2051.293221][ T638] usb 7-1: config 0 has no interface number 0 [ 2051.300548][ T638] usb 7-1: config 0 interface 12 has no altsetting 0 [ 2051.323295][ T638] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2051.337150][ T638] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.355611][ T638] usb 7-1: Product: syz [ 2051.359836][ T638] usb 7-1: Manufacturer: syz [ 2051.372984][ T638] usb 7-1: SerialNumber: syz [ 2051.393127][ T638] usb 7-1: config 0 descriptor?? [ 2051.455251][ T1199] syz.9.7957 (1199): drop_caches: 2 [ 2051.674085][ T1207] random: crng reseeded on system resumption [ 2052.166187][ T1209] IPv6: NLM_F_CREATE should be specified when creating new route [ 2052.174242][ T1209] IPv6: Can't replace route, no match found [ 2052.182897][ T1209] binder: 1208:1209 ioctl c0306201 80000240 returned -11 [ 2052.427894][ T1231] netlink: 196 bytes leftover after parsing attributes in process `syz.9.7963'. [ 2052.440638][ T1231] netlink: 'syz.9.7963': attribute type 8 has an invalid length. [ 2052.478091][ T1231] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7963'. [ 2052.969065][ T1241] netlink: 'syz.3.7965': attribute type 3 has an invalid length. [ 2052.982747][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 2052.982786][ T30] audit: type=1400 audit(1761675042.964:7200): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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forcing a failure. [ 2053.148314][ T1243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2053.256249][ T1243] CPU: 1 UID: 0 PID: 1243 Comm: syz.4.7966 Not tainted syzkaller #0 PREEMPT(full) [ 2053.256281][ T1243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2053.256295][ T1243] Call Trace: [ 2053.256304][ T1243] [ 2053.256314][ T1243] dump_stack_lvl+0x189/0x250 [ 2053.256357][ T1243] ? __pfx____ratelimit+0x10/0x10 [ 2053.256384][ T1243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2053.256411][ T1243] ? __pfx__printk+0x10/0x10 [ 2053.256432][ T1243] ? __might_fault+0xb0/0x130 [ 2053.256473][ T1243] should_fail_ex+0x414/0x560 [ 2053.256510][ T1243] _copy_from_iter+0x1de/0x1790 [ 2053.256539][ T1243] ? rcu_is_watching+0x15/0xb0 [ 2053.256568][ T1243] ? kmalloc_reserve+0xbd/0x290 [ 2053.256603][ T1243] ? __pfx__copy_from_iter+0x10/0x10 [ 2053.256629][ T1243] ? __build_skb_around+0x262/0x3f0 [ 2053.256663][ T1243] ? netlink_sendmsg+0x642/0xb30 [ 2053.256681][ T1243] ? skb_put+0x11b/0x210 [ 2053.256721][ T1243] netlink_sendmsg+0x6b2/0xb30 [ 2053.256750][ T1243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2053.256772][ T1243] ? __import_iovec+0x5d4/0x7f0 [ 2053.256797][ T1243] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2053.256831][ T1243] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2053.256853][ T1243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2053.256872][ T1243] __sock_sendmsg+0x21c/0x270 [ 2053.256912][ T1243] ____sys_sendmsg+0x505/0x830 [ 2053.256941][ T1243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2053.256982][ T1243] ___sys_sendmsg+0x21f/0x2a0 [ 2053.257006][ T1243] ? __pfx____sys_sendmsg+0x10/0x10 [ 2053.257066][ T1243] ? __fget_files+0x2a/0x420 [ 2053.257087][ T1243] ? __fget_files+0x3a0/0x420 [ 2053.257119][ T1243] __sys_sendmsg+0x164/0x220 [ 2053.257145][ T1243] ? __pfx___sys_sendmsg+0x10/0x10 [ 2053.257173][ T1243] ? __pfx_ksys_write+0x10/0x10 [ 2053.257209][ T1243] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2053.257243][ T1243] ? lockdep_hardirqs_on+0x9c/0x150 [ 2053.257274][ T1243] __do_fast_syscall_32+0xb6/0x2b0 [ 2053.257306][ T1243] ? lockdep_hardirqs_on+0x9c/0x150 [ 2053.257340][ T1243] do_fast_syscall_32+0x34/0x80 [ 2053.257370][ T1243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2053.257398][ T1243] RIP: 0023:0xf7f73539 [ 2053.257420][ T1243] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2053.257441][ T1243] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2053.257465][ T1243] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 2053.257480][ T1243] RDX: 0000000000008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 2053.257494][ T1243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2053.257507][ T1243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2053.257521][ T1243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2053.257554][ T1243] [ 2053.538131][ C1] vkms_vblank_simulate: vblank timer overrun [ 2053.668419][ T30] audit: type=1326 audit(1761675043.644:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1248 comm="syz.4.7968" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f73539 code=0x0 [ 2053.838798][ T638] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 2053.847200][ T638] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 2053.854735][ T638] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2053.864143][ T638] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 2053.878100][ T638] usb 7-1: USB disconnect, device number 73 [ 2055.421559][ T1282] macsec1: entered promiscuous mode [ 2055.433409][ T1282] macvlan0: entered promiscuous mode [ 2055.445757][ T1282] macvlan0: left promiscuous mode [ 2056.179057][ T30] audit: type=1326 audit(1761675046.144:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1290 comm="syz.3.7978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2056.249610][ T30] audit: type=1326 audit(1761675046.144:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1290 comm="syz.3.7978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2056.295372][ T1296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7979'. [ 2056.301346][ T30] audit: type=1326 audit(1761675046.144:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1290 comm="syz.3.7978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2056.326571][ C1] vkms_vblank_simulate: vblank timer overrun [ 2056.341502][ T30] audit: type=1326 audit(1761675046.144:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1290 comm="syz.3.7978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2056.367228][ T30] audit: type=1326 audit(1761675046.144:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1290 comm="syz.3.7978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2056.394845][ T30] audit: type=1326 audit(1761675046.144:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1290 comm="syz.3.7978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2056.396676][ T1296] netlink: 'syz.6.7979': attribute type 3 has an invalid length. [ 2056.421209][ T30] audit: type=1326 audit(1761675046.144:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1290 comm="syz.3.7978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2056.452414][ T1296] netlink: 'syz.6.7979': attribute type 3 has an invalid length. [ 2056.557747][ T30] audit: type=1326 audit(1761675046.144:7209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1290 comm="syz.3.7978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2057.322955][ T1308] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7981'. [ 2057.927738][ T1322] bond1: option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3) [ 2057.970594][ T1322] bond1 (unregistering): Released all slaves [ 2058.235520][ T1337] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7992'. [ 2058.318890][ T1340] FAULT_INJECTION: forcing a failure. [ 2058.318890][ T1340] name failslab, interval 1, probability 0, space 0, times 0 [ 2058.351114][ T1340] CPU: 0 UID: 0 PID: 1340 Comm: syz.6.7993 Not tainted syzkaller #0 PREEMPT(full) [ 2058.351148][ T1340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2058.351164][ T1340] Call Trace: [ 2058.351174][ T1340] [ 2058.351185][ T1340] dump_stack_lvl+0x189/0x250 [ 2058.351225][ T1340] ? __pfx____ratelimit+0x10/0x10 [ 2058.351254][ T1340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2058.351284][ T1340] ? __pfx__printk+0x10/0x10 [ 2058.351314][ T1340] ? __lock_acquire+0xab9/0xd20 [ 2058.351345][ T1340] should_fail_ex+0x414/0x560 [ 2058.351386][ T1340] should_failslab+0xa8/0x100 [ 2058.351413][ T1340] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2058.351445][ T1340] ? skb_clone+0x212/0x3a0 [ 2058.351476][ T1340] skb_clone+0x212/0x3a0 [ 2058.351502][ T1340] __netlink_deliver_tap+0x404/0x850 [ 2058.351552][ T1340] ? netlink_deliver_tap+0x2e/0x1b0 [ 2058.351588][ T1340] netlink_deliver_tap+0x19c/0x1b0 [ 2058.351624][ T1340] netlink_unicast+0x7fa/0x9e0 [ 2058.351666][ T1340] ? __pfx_netlink_unicast+0x10/0x10 [ 2058.351700][ T1340] ? netlink_sendmsg+0x642/0xb30 [ 2058.351718][ T1340] ? skb_put+0x11b/0x210 [ 2058.351743][ T1340] netlink_sendmsg+0x805/0xb30 [ 2058.351791][ T1340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2058.351815][ T1340] ? __import_iovec+0x5d4/0x7f0 [ 2058.351842][ T1340] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2058.351877][ T1340] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2058.351900][ T1340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2058.351922][ T1340] __sock_sendmsg+0x21c/0x270 [ 2058.351956][ T1340] ____sys_sendmsg+0x505/0x830 [ 2058.351987][ T1340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2058.352028][ T1340] ___sys_sendmsg+0x21f/0x2a0 [ 2058.352056][ T1340] ? __pfx____sys_sendmsg+0x10/0x10 [ 2058.352120][ T1340] ? __fget_files+0x2a/0x420 [ 2058.352140][ T1340] ? __fget_files+0x3a0/0x420 [ 2058.352174][ T1340] __sys_sendmsg+0x164/0x220 [ 2058.352199][ T1340] ? __pfx___sys_sendmsg+0x10/0x10 [ 2058.352233][ T1340] ? __pfx_ksys_write+0x10/0x10 [ 2058.352268][ T1340] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2058.352302][ T1340] ? lockdep_hardirqs_on+0x9c/0x150 [ 2058.352334][ T1340] __do_fast_syscall_32+0xb6/0x2b0 [ 2058.352367][ T1340] ? lockdep_hardirqs_on+0x9c/0x150 [ 2058.352400][ T1340] do_fast_syscall_32+0x34/0x80 [ 2058.352431][ T1340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2058.352458][ T1340] RIP: 0023:0xf7f64539 [ 2058.352479][ T1340] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2058.352499][ T1340] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2058.352520][ T1340] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 2058.352533][ T1340] RDX: 0000000000008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 2058.352544][ T1340] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2058.352554][ T1340] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2058.352565][ T1340] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2058.352598][ T1340] [ 2058.352773][ T1340] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7993'. [ 2059.751826][ T639] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2059.939258][ T639] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2059.976403][ T639] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2060.042881][ T639] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2060.077945][ T639] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2060.103946][ T639] usb 4-1: Manufacturer: syz [ 2060.122388][ T639] usb 4-1: config 0 descriptor?? [ 2060.745819][ T639] uclogic 0003:256C:006D.0058: failed retrieving Huion firmware version: -71 [ 2060.786291][ T639] uclogic 0003:256C:006D.0058: failed probing parameters: -71 [ 2060.811221][ T639] uclogic 0003:256C:006D.0058: probe with driver uclogic failed with error -71 [ 2060.846000][ T639] usb 4-1: USB disconnect, device number 99 [ 2060.964348][ T1382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8007'. [ 2061.153000][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 2061.153023][ T30] audit: type=1326 audit(1761675051.064:7240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1383 comm="syz.7.8008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2061.181211][ C0] vkms_vblank_simulate: vblank timer overrun [ 2061.205056][ T30] audit: type=1326 audit(1761675051.064:7241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1383 comm="syz.7.8008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2061.228210][ T30] audit: type=1326 audit(1761675051.064:7242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1383 comm="syz.7.8008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2061.250275][ C0] vkms_vblank_simulate: vblank timer overrun [ 2061.268123][ T1389] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8009'. [ 2061.272183][ T30] audit: type=1326 audit(1761675051.064:7243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1383 comm="syz.7.8008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2061.299157][ C0] vkms_vblank_simulate: vblank timer overrun [ 2061.306143][ T30] audit: type=1326 audit(1761675051.064:7244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1383 comm="syz.7.8008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2061.333777][ T30] audit: type=1326 audit(1761675051.064:7245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1383 comm="syz.7.8008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2061.367953][ T30] audit: type=1326 audit(1761675051.064:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1383 comm="syz.7.8008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2061.394554][ T30] audit: type=1326 audit(1761675051.074:7247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1383 comm="syz.7.8008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2061.416650][ C0] vkms_vblank_simulate: vblank timer overrun [ 2061.424156][ T30] audit: type=1326 audit(1761675051.074:7248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1383 comm="syz.7.8008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2061.446220][ C0] vkms_vblank_simulate: vblank timer overrun [ 2061.490645][ T30] audit: type=1326 audit(1761675051.074:7249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1383 comm="syz.7.8008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2061.512884][ C0] vkms_vblank_simulate: vblank timer overrun [ 2063.734508][ T1422] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8017'. [ 2064.187636][ T1422] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8017'. [ 2064.367737][ T633] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 2064.430200][ T1419] batadv_slave_1: entered promiscuous mode [ 2064.532480][ T633] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2064.549472][ T633] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2064.563558][ T633] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2064.592390][ T633] usb 7-1: config 0 descriptor?? [ 2064.640851][ T1417] batadv_slave_1: left promiscuous mode [ 2065.009470][ T1444] input: syz1 as /devices/virtual/input/input239 [ 2065.044660][ T633] arvo 0003:1E7D:30D4.0059: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.6-1/input0 [ 2065.238890][ T631] usb 7-1: USB disconnect, device number 74 [ 2065.509361][T19664] Bluetooth: hci5: command 0x0406 tx timeout [ 2065.563597][ T1454] netlink: 'syz.3.8030': attribute type 9 has an invalid length. [ 2066.642217][ T1474] netlink: 6 bytes leftover after parsing attributes in process `syz.9.8038'. [ 2066.721866][ T1476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2066.763601][ T1476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2066.796629][ T1479] random: crng reseeded on system resumption [ 2066.961791][ T638] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 2067.122900][ T638] usb 10-1: Using ep0 maxpacket: 16 [ 2067.137100][ T1486] macsec1: entered promiscuous mode [ 2067.146539][ T1486] macvlan0: entered promiscuous mode [ 2067.153707][ T638] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2067.169668][ T1486] macvlan0: left promiscuous mode [ 2067.187082][ T638] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2067.419108][ T638] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2067.584335][ T638] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.604440][ T638] usb 10-1: Product: syz [ 2067.612280][ T638] usb 10-1: Manufacturer: syz [ 2067.620558][ T638] usb 10-1: SerialNumber: syz [ 2067.910822][ T638] usb 10-1: 0:2 : does not exist [ 2067.957710][ T638] usb 10-1: USB disconnect, device number 74 [ 2068.001342][T22231] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2068.201578][T22231] usb 4-1: Using ep0 maxpacket: 32 [ 2068.220640][T22231] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2068.225507][T32389] udevd[32389]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2068.240643][T22231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.391617][T22231] usb 4-1: config 0 descriptor?? [ 2068.485362][T22231] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2068.684443][ T1495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2068.723332][ T1495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2068.882502][ T1511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8049'. [ 2068.904518][ T1511] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8049'. [ 2068.987612][T22231] gspca_nw80x: reg_r err -32 [ 2069.003773][T22231] nw80x 4-1:0.0: probe with driver nw80x failed with error -32 [ 2070.550783][ T1536] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8056'. [ 2071.271331][T10661] usb 4-1: USB disconnect, device number 100 [ 2071.592682][ T1554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8060'. [ 2071.596630][ T1554] bridge0: port 2(bridge_slave_1) entered disabled state [ 2071.596917][ T1554] bridge0: port 1(bridge_slave_0) entered disabled state [ 2071.671018][T22231] usb 10-1: new full-speed USB device number 75 using dummy_hcd [ 2071.945180][ T1563] random: crng reseeded on system resumption [ 2072.103070][ T1565] random: crng reseeded on system resumption [ 2072.138295][ T1565] FAULT_INJECTION: forcing a failure. [ 2072.138295][ T1565] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2072.174907][ T1565] CPU: 1 UID: 0 PID: 1565 Comm: syz.6.8065 Not tainted syzkaller #0 PREEMPT(full) [ 2072.174940][ T1565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2072.174956][ T1565] Call Trace: [ 2072.174966][ T1565] [ 2072.174977][ T1565] dump_stack_lvl+0x189/0x250 [ 2072.175015][ T1565] ? __pfx____ratelimit+0x10/0x10 [ 2072.175044][ T1565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2072.175076][ T1565] ? __pfx__printk+0x10/0x10 [ 2072.175106][ T1565] ? __lock_acquire+0xab9/0xd20 [ 2072.175135][ T1565] should_fail_ex+0x414/0x560 [ 2072.175176][ T1565] prepare_alloc_pages+0x213/0x610 [ 2072.175207][ T1565] __alloc_frozen_pages_noprof+0x123/0x370 [ 2072.175235][ T1565] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2072.175263][ T1565] ? rcu_is_watching+0x15/0xb0 [ 2072.175293][ T1565] ? policy_nodemask+0x27c/0x720 [ 2072.175312][ T1565] ? __mutex_lock+0x335/0x1350 [ 2072.175349][ T1565] alloc_pages_mpol+0x232/0x4a0 [ 2072.175378][ T1565] alloc_pages_noprof+0xa9/0x190 [ 2072.175402][ T1565] get_zeroed_page_noprof+0x1a/0x90 [ 2072.175452][ T1565] get_image_page+0x36/0x330 [ 2072.175489][ T1565] ? wait_for_device_probe+0x165/0x1c0 [ 2072.175522][ T1565] snapshot_write_next+0x696/0x12f0 [ 2072.175571][ T1565] snapshot_write+0x116/0x220 [ 2072.175597][ T1565] ? __pfx_snapshot_write+0x10/0x10 [ 2072.175620][ T1565] ? security_file_permission+0x75/0x290 [ 2072.175649][ T1565] ? rw_verify_area+0x255/0x4d0 [ 2072.175686][ T1565] vfs_writev+0x4b6/0x960 [ 2072.175714][ T1565] ? __pfx_snapshot_write+0x10/0x10 [ 2072.175741][ T1565] ? __pfx_vfs_writev+0x10/0x10 [ 2072.175779][ T1565] ? __fget_files+0x2a/0x420 [ 2072.175806][ T1565] ? __fget_files+0x3a0/0x420 [ 2072.175825][ T1565] ? __fget_files+0x2a/0x420 [ 2072.175855][ T1565] do_writev+0x14d/0x2d0 [ 2072.175882][ T1565] ? __pfx_do_writev+0x10/0x10 [ 2072.175911][ T1565] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2072.175945][ T1565] ? lockdep_hardirqs_on+0x9c/0x150 [ 2072.175978][ T1565] __do_fast_syscall_32+0xb6/0x2b0 [ 2072.176008][ T1565] ? lockdep_hardirqs_on+0x9c/0x150 [ 2072.176036][ T1565] do_fast_syscall_32+0x34/0x80 [ 2072.176065][ T1565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2072.176092][ T1565] RIP: 0023:0xf7f64539 [ 2072.176111][ T1565] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2072.176131][ T1565] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 2072.176155][ T1565] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 2072.176171][ T1565] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 2072.176185][ T1565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2072.176198][ T1565] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2072.176212][ T1565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2072.176246][ T1565] [ 2072.805236][ T1571] macsec1: entered promiscuous mode [ 2072.810518][ T1571] macvlan0: entered promiscuous mode [ 2072.928271][ T1571] macvlan0: left promiscuous mode [ 2073.008090][ T1577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8069'. [ 2073.501685][ T1591] random: crng reseeded on system resumption [ 2074.049165][ T1611] fuse: Invalid rootmode [ 2074.431794][ T1613] netlink: 'syz.4.8081': attribute type 9 has an invalid length. [ 2074.578598][ T638] hid_parser_main: 2 callbacks suppressed [ 2074.578616][ T638] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 2074.610556][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 2074.610577][ T30] audit: type=1326 audit(1761675064.534:7299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1614 comm="syz.6.8082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2074.678944][ T638] hid-generic 0000:0000:0000.005A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2074.981361][ T30] audit: type=1326 audit(1761675064.544:7300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1614 comm="syz.6.8082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2075.080577][ T30] audit: type=1326 audit(1761675064.544:7301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1614 comm="syz.6.8082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2075.213806][ T30] audit: type=1326 audit(1761675064.544:7302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1614 comm="syz.6.8082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2075.263347][ T30] audit: type=1326 audit(1761675064.544:7303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1614 comm="syz.6.8082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2075.311089][ T30] audit: type=1326 audit(1761675064.544:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1614 comm="syz.6.8082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2075.366766][ T30] audit: type=1326 audit(1761675064.544:7305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1614 comm="syz.6.8082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2075.429792][ T30] audit: type=1326 audit(1761675064.554:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1614 comm="syz.6.8082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2075.481021][ T30] audit: type=1326 audit(1761675064.554:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1614 comm="syz.6.8082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2075.538296][ T30] audit: type=1326 audit(1761675064.554:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1614 comm="syz.6.8082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 2075.682057][ T1615] fuse: Unknown parameter 'fj' [ 2077.288157][ T1662] random: crng reseeded on system resumption [ 2077.428183][ T1665] FAULT_INJECTION: forcing a failure. [ 2077.428183][ T1665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2077.470733][ T1665] CPU: 0 UID: 0 PID: 1665 Comm: syz.7.8098 Not tainted syzkaller #0 PREEMPT(full) [ 2077.470765][ T1665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2077.470780][ T1665] Call Trace: [ 2077.470789][ T1665] [ 2077.470799][ T1665] dump_stack_lvl+0x189/0x250 [ 2077.470836][ T1665] ? __pfx____ratelimit+0x10/0x10 [ 2077.470865][ T1665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2077.470899][ T1665] ? __pfx__printk+0x10/0x10 [ 2077.470922][ T1665] ? __might_fault+0xb0/0x130 [ 2077.470967][ T1665] should_fail_ex+0x414/0x560 [ 2077.471007][ T1665] _copy_from_user+0x2d/0xb0 [ 2077.471037][ T1665] kstrtouint_from_user+0xc4/0x170 [ 2077.471065][ T1665] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2077.471107][ T1665] proc_fail_nth_write+0x88/0x200 [ 2077.471137][ T1665] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2077.471173][ T1665] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2077.471204][ T1665] vfs_write+0x27e/0xb30 [ 2077.471245][ T1665] ? __pfx_vfs_write+0x10/0x10 [ 2077.471278][ T1665] ? __fget_files+0x2a/0x420 [ 2077.471305][ T1665] ? __fget_files+0x3a0/0x420 [ 2077.471332][ T1665] ? __fget_files+0x2a/0x420 [ 2077.471363][ T1665] ksys_write+0x145/0x250 [ 2077.471397][ T1665] ? __pfx_ksys_write+0x10/0x10 [ 2077.471432][ T1665] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2077.471465][ T1665] ? lockdep_hardirqs_on+0x9c/0x150 [ 2077.471497][ T1665] __do_fast_syscall_32+0xb6/0x2b0 [ 2077.471530][ T1665] ? lockdep_hardirqs_on+0x9c/0x150 [ 2077.471564][ T1665] do_fast_syscall_32+0x34/0x80 [ 2077.471596][ T1665] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2077.471624][ T1665] RIP: 0023:0xf705d539 [ 2077.471643][ T1665] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2077.471664][ T1665] RSP: 002b:00000000f544d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2077.471688][ T1665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f544d620 [ 2077.471705][ T1665] RDX: 0000000000000001 RSI: 00000000f73f5ff4 RDI: 0000000000000000 [ 2077.471719][ T1665] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2077.471733][ T1665] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2077.471747][ T1665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2077.471782][ T1665] [ 2078.033063][ T1668] random: crng reseeded on system resumption [ 2078.783776][ T1682] vlan2: entered promiscuous mode [ 2079.959576][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 2079.959597][ T30] audit: type=1326 audit(1761675069.934:7369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1698 comm="syz.7.8106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d558 code=0x7ffc0000 [ 2080.098663][ T30] audit: type=1326 audit(1761675069.984:7370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1698 comm="syz.7.8106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d558 code=0x7ffc0000 [ 2080.121668][ T30] audit: type=1326 audit(1761675069.984:7371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1698 comm="syz.7.8106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d558 code=0x7ffc0000 [ 2080.229127][ T30] audit: type=1326 audit(1761675069.984:7372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1698 comm="syz.7.8106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d558 code=0x7ffc0000 [ 2080.435907][ T30] audit: type=1326 audit(1761675069.994:7373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1698 comm="syz.7.8106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d558 code=0x7ffc0000 [ 2080.594568][ T30] audit: type=1326 audit(1761675069.994:7374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1698 comm="syz.7.8106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2080.787693][ T30] audit: type=1326 audit(1761675069.994:7375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1698 comm="syz.7.8106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2080.941917][ T30] audit: type=1326 audit(1761675070.064:7376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1698 comm="syz.7.8106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d558 code=0x7ffc0000 [ 2081.051095][ T30] audit: type=1326 audit(1761675070.064:7377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1698 comm="syz.7.8106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d558 code=0x7ffc0000 [ 2081.115238][ T30] audit: type=1326 audit(1761675070.064:7378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1698 comm="syz.7.8106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d558 code=0x7ffc0000 [ 2081.492090][ T1708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8109'. [ 2081.900560][ T1552] Set syz1 is full, maxelem 65536 reached [ 2082.501092][ T623] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 2082.679172][ T623] usb 7-1: Using ep0 maxpacket: 8 [ 2082.693047][ T623] usb 7-1: config 9 has an invalid interface number: 104 but max is 0 [ 2082.702221][ T623] usb 7-1: config 9 has no interface number 0 [ 2082.708361][ T623] usb 7-1: config 9 interface 104 has no altsetting 0 [ 2082.724727][ T1734] ------------[ cut here ]------------ [ 2082.731103][ T1734] no supported rates for sta 08:02:11:00:00:01 (0xf, band 0) in rate_mask 0xffffffff with flags 0x10 [ 2082.743322][ T1734] WARNING: CPU: 1 PID: 1734 at net/mac80211/rate.c:406 __rate_control_send_low+0x5e2/0x820 [ 2082.753822][ T1734] Modules linked in: [ 2082.758496][ T1734] CPU: 1 UID: 0 PID: 1734 Comm: syz.3.8119 Not tainted syzkaller #0 PREEMPT(full) [ 2082.767900][ T1734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2082.778139][ T1734] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 2082.784502][ T1734] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 75 89 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 ff 04 c6 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 2082.804303][ T1734] RSP: 0018:ffffc9000435ea58 EFLAGS: 00010246 [ 2082.810429][ T1734] RAX: 28bf7dd8b67d6900 RBX: ffff88802766cf94 RCX: 0000000000080000 [ 2082.818648][ T1734] RDX: ffffc900143f1000 RSI: 0000000000003c9a RDI: 0000000000003c9b [ 2082.826719][ T1734] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 2082.834820][ T1734] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffff88805fb34168 [ 2082.842904][ T1734] R13: 0000000000000010 R14: ffff888046d60e80 R15: ffff888046d63138 [ 2082.850962][ T1734] FS: 0000000000000000(0000) GS:ffff88812623e000(0063) knlGS:00000000f53fdb40 [ 2082.860003][ T1734] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2082.866773][ T1734] CR2: 0000000030614ff8 CR3: 000000005e99e000 CR4: 00000000003526f0 [ 2082.874862][ T1734] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2082.877755][ T1736] unsupported nla_type 16384 [ 2082.883159][ T1734] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2082.883250][ T1734] Call Trace: [ 2082.883263][ T1734] [ 2082.883278][ T1734] ? stack_depot_save_flags+0x40/0x860 [ 2082.883336][ T1734] rate_control_send_low+0xf9/0x7b0 [ 2082.883376][ T1734] ? idr_get_free+0x2b3/0xa70 [ 2082.883407][ T1734] rate_control_get_rate+0x20b/0x5d0 [ 2082.883452][ T1734] ieee80211_tx_h_rate_ctrl+0xae0/0x1750 [ 2082.883525][ T1734] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 2082.935200][ T1734] ? ieee80211_is_bufferable_mmpdu+0xb6/0x200 [ 2082.941423][ T1734] invoke_tx_handlers_late+0xba/0x18a0 [ 2082.946975][ T1734] ? invoke_tx_handlers_early+0xa0c/0x1d50 [ 2082.952946][ T1734] ieee80211_tx+0x2ac/0x460 [ 2082.957533][ T1734] ? __pfx_ieee80211_tx+0x10/0x10 [ 2082.962727][ T1734] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 2082.968797][ T1734] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 2082.974716][ T1734] ? ieee80211_tx_skb_tid+0x2f/0x470 [ 2082.980074][ T1734] ieee80211_tx_skb_tid+0x29a/0x470 [ 2082.985388][ T1734] ieee80211_mgmt_tx+0x1d0e/0x22e0 [ 2082.990576][ T1734] ? ieee80211_mgmt_tx+0xa20/0x22e0 [ 2082.995920][ T1734] cfg80211_mlme_mgmt_tx+0x7bc/0x1420 [ 2083.001392][ T1734] nl80211_tx_mgmt+0xa64/0xdf0 [ 2083.006222][ T1734] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 2083.011618][ T1734] ? __pfx___mutex_lock+0x10/0x10 [ 2083.016817][ T1734] ? nl80211_pre_doit+0x4f1/0x930 [ 2083.021979][ T1734] genl_family_rcv_msg_doit+0x215/0x300 [ 2083.027604][ T1734] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2083.033811][ T1734] ? bpf_lsm_capable+0x9/0x20 [ 2083.038542][ T1734] ? security_capable+0x7e/0x2e0 [ 2083.043693][ T1734] genl_rcv_msg+0x60e/0x790 [ 2083.048272][ T1734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2083.053440][ T1734] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2083.058952][ T1734] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 2083.064300][ T1734] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2083.069824][ T1734] ? __asan_memcpy+0x40/0x70 [ 2083.074473][ T1734] ? __pfx_ref_tracker_free+0x10/0x10 [ 2083.079871][ T1734] netlink_rcv_skb+0x208/0x470 [ 2083.084694][ T1734] ? __lock_acquire+0xab9/0xd20 [ 2083.089569][ T1734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2083.094681][ T1734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2083.100012][ T1734] ? down_read+0x1ad/0x2e0 [ 2083.104510][ T1734] genl_rcv+0x28/0x40 [ 2083.108514][ T1734] netlink_unicast+0x82f/0x9e0 [ 2083.113334][ T1734] ? __pfx_netlink_unicast+0x10/0x10 [ 2083.118754][ T1734] ? netlink_sendmsg+0x642/0xb30 [ 2083.123734][ T1734] ? skb_put+0x11b/0x210 [ 2083.128011][ T1734] netlink_sendmsg+0x805/0xb30 [ 2083.132868][ T1734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2083.138204][ T1734] ? __import_iovec+0x5d4/0x7f0 [ 2083.143144][ T1734] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2083.148331][ T1734] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2083.153699][ T1734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2083.159045][ T1734] __sock_sendmsg+0x21c/0x270 [ 2083.163896][ T1734] ____sys_sendmsg+0x505/0x830 [ 2083.168739][ T1734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2083.174161][ T1734] ? __pfx_futex_wake_mark+0x10/0x10 [ 2083.179516][ T1734] ___sys_sendmsg+0x21f/0x2a0 [ 2083.184324][ T1734] ? __pfx____sys_sendmsg+0x10/0x10 [ 2083.189624][ T1734] ? __fget_files+0x2a/0x420 [ 2083.194351][ T1734] ? __fget_files+0x3a0/0x420 [ 2083.199105][ T1734] __sys_sendmsg+0x164/0x220 [ 2083.203998][ T1734] ? __pfx___sys_sendmsg+0x10/0x10 [ 2083.209165][ T1734] ? rcu_is_watching+0x15/0xb0 [ 2083.214005][ T1734] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2083.220710][ T1734] ? lockdep_hardirqs_on+0x9c/0x150 [ 2083.225975][ T1734] __do_fast_syscall_32+0xb6/0x2b0 [ 2083.231146][ T1734] ? lockdep_hardirqs_on+0x9c/0x150 [ 2083.236378][ T1734] do_fast_syscall_32+0x34/0x80 [ 2083.241288][ T1734] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2083.247636][ T1734] RIP: 0023:0xf700d539 [ 2083.251747][ T1734] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2083.271590][ T1734] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2083.280144][ T1734] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003740 [ 2083.288208][ T1734] RDX: 0000000028008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 2083.296251][ T1734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2083.304443][ T1734] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2083.312477][ T1734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2083.320499][ T1734] [ 2083.323580][ T1734] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2083.330879][ T1734] CPU: 1 UID: 0 PID: 1734 Comm: syz.3.8119 Not tainted syzkaller #0 PREEMPT(full) [ 2083.340217][ T1734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2083.350293][ T1734] Call Trace: [ 2083.353701][ T1734] [ 2083.356650][ T1734] dump_stack_lvl+0x99/0x250 [ 2083.361263][ T1734] ? __asan_memcpy+0x40/0x70 [ 2083.365890][ T1734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2083.371116][ T1734] ? __pfx__printk+0x10/0x10 [ 2083.375750][ T1734] vpanic+0x237/0x6d0 [ 2083.379793][ T1734] ? __pfx_vpanic+0x10/0x10 [ 2083.384347][ T1734] panic+0xb9/0xc0 [ 2083.388087][ T1734] ? __pfx_panic+0x10/0x10 [ 2083.392571][ T1734] __warn+0x31b/0x4b0 [ 2083.396758][ T1734] ? __rate_control_send_low+0x5e2/0x820 [ 2083.402480][ T1734] ? __rate_control_send_low+0x5e2/0x820 [ 2083.408162][ T1734] report_bug+0x2be/0x4f0 [ 2083.412534][ T1734] ? __rate_control_send_low+0x5e2/0x820 [ 2083.418225][ T1734] ? __rate_control_send_low+0x5e2/0x820 [ 2083.423939][ T1734] ? __rate_control_send_low+0x5e4/0x820 [ 2083.429628][ T1734] handle_bug+0x84/0x160 [ 2083.433930][ T1734] exc_invalid_op+0x1a/0x50 [ 2083.438499][ T1734] asm_exc_invalid_op+0x1a/0x20 [ 2083.443400][ T1734] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 2083.449855][ T1734] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 75 89 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 ff 04 c6 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 2083.469533][ T1734] RSP: 0018:ffffc9000435ea58 EFLAGS: 00010246 [ 2083.475628][ T1734] RAX: 28bf7dd8b67d6900 RBX: ffff88802766cf94 RCX: 0000000000080000 [ 2083.483643][ T1734] RDX: ffffc900143f1000 RSI: 0000000000003c9a RDI: 0000000000003c9b [ 2083.491765][ T1734] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 2083.499782][ T1734] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffff88805fb34168 [ 2083.507863][ T1734] R13: 0000000000000010 R14: ffff888046d60e80 R15: ffff888046d63138 [ 2083.515887][ T1734] ? __rate_control_send_low+0x5e1/0x820 [ 2083.521638][ T1734] ? stack_depot_save_flags+0x40/0x860 [ 2083.527122][ T1734] rate_control_send_low+0xf9/0x7b0 [ 2083.532344][ T1734] ? idr_get_free+0x2b3/0xa70 [ 2083.537034][ T1734] rate_control_get_rate+0x20b/0x5d0 [ 2083.542370][ T1734] ieee80211_tx_h_rate_ctrl+0xae0/0x1750 [ 2083.548046][ T1734] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 2083.554148][ T1734] ? ieee80211_is_bufferable_mmpdu+0xb6/0x200 [ 2083.560238][ T1734] invoke_tx_handlers_late+0xba/0x18a0 [ 2083.565737][ T1734] ? invoke_tx_handlers_early+0xa0c/0x1d50 [ 2083.571591][ T1734] ieee80211_tx+0x2ac/0x460 [ 2083.576114][ T1734] ? __pfx_ieee80211_tx+0x10/0x10 [ 2083.581178][ T1734] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 2083.587254][ T1734] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 2083.593072][ T1734] ? ieee80211_tx_skb_tid+0x2f/0x470 [ 2083.598458][ T1734] ieee80211_tx_skb_tid+0x29a/0x470 [ 2083.603673][ T1734] ieee80211_mgmt_tx+0x1d0e/0x22e0 [ 2083.608858][ T1734] ? ieee80211_mgmt_tx+0xa20/0x22e0 [ 2083.614090][ T1734] cfg80211_mlme_mgmt_tx+0x7bc/0x1420 [ 2083.619500][ T1734] nl80211_tx_mgmt+0xa64/0xdf0 [ 2083.624284][ T1734] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 2083.629696][ T1734] ? __pfx___mutex_lock+0x10/0x10 [ 2083.634754][ T1734] ? nl80211_pre_doit+0x4f1/0x930 [ 2083.639836][ T1734] genl_family_rcv_msg_doit+0x215/0x300 [ 2083.645408][ T1734] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2083.651524][ T1734] ? bpf_lsm_capable+0x9/0x20 [ 2083.656251][ T1734] ? security_capable+0x7e/0x2e0 [ 2083.661229][ T1734] genl_rcv_msg+0x60e/0x790 [ 2083.665786][ T1734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2083.670850][ T1734] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2083.676512][ T1734] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 2083.681814][ T1734] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2083.687287][ T1734] ? __asan_memcpy+0x40/0x70 [ 2083.691906][ T1734] ? __pfx_ref_tracker_free+0x10/0x10 [ 2083.697291][ T1734] netlink_rcv_skb+0x208/0x470 [ 2083.702079][ T1734] ? __lock_acquire+0xab9/0xd20 [ 2083.706950][ T1734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2083.711991][ T1734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2083.717304][ T1734] ? down_read+0x1ad/0x2e0 [ 2083.721735][ T1734] genl_rcv+0x28/0x40 [ 2083.725734][ T1734] netlink_unicast+0x82f/0x9e0 [ 2083.730529][ T1734] ? __pfx_netlink_unicast+0x10/0x10 [ 2083.735843][ T1734] ? netlink_sendmsg+0x642/0xb30 [ 2083.740797][ T1734] ? skb_put+0x11b/0x210 [ 2083.745060][ T1734] netlink_sendmsg+0x805/0xb30 [ 2083.749884][ T1734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2083.755195][ T1734] ? __import_iovec+0x5d4/0x7f0 [ 2083.760078][ T1734] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2083.765059][ T1734] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2083.770363][ T1734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2083.775665][ T1734] __sock_sendmsg+0x21c/0x270 [ 2083.780384][ T1734] ____sys_sendmsg+0x505/0x830 [ 2083.785169][ T1734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2083.790558][ T1734] ? __pfx_futex_wake_mark+0x10/0x10 [ 2083.795867][ T1734] ___sys_sendmsg+0x21f/0x2a0 [ 2083.800709][ T1734] ? __pfx____sys_sendmsg+0x10/0x10 [ 2083.805965][ T1734] ? __fget_files+0x2a/0x420 [ 2083.810628][ T1734] ? __fget_files+0x3a0/0x420 [ 2083.815346][ T1734] __sys_sendmsg+0x164/0x220 [ 2083.819979][ T1734] ? __pfx___sys_sendmsg+0x10/0x10 [ 2083.825134][ T1734] ? rcu_is_watching+0x15/0xb0 [ 2083.829962][ T1734] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2083.836724][ T1734] ? lockdep_hardirqs_on+0x9c/0x150 [ 2083.842038][ T1734] __do_fast_syscall_32+0xb6/0x2b0 [ 2083.847191][ T1734] ? lockdep_hardirqs_on+0x9c/0x150 [ 2083.852423][ T1734] do_fast_syscall_32+0x34/0x80 [ 2083.857400][ T1734] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2083.863757][ T1734] RIP: 0023:0xf700d539 [ 2083.867862][ T1734] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2083.887487][ T1734] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2083.895929][ T1734] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003740 [ 2083.903944][ T1734] RDX: 0000000028008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 2083.911954][ T1734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2083.920039][ T1734] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2083.928034][ T1734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2083.936041][ T1734] [ 2083.939393][ T1734] Kernel Offset: disabled [ 2083.943838][ T1734] Rebooting in 86400 seconds..