last executing test programs: 25m21.897171323s ago: executing program 32 (id=2934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f636b206e6f6e916500"], 0xa) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)='>', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r7, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x4, 0x0, &(0x7f0000000240)="2294a696"}) r9 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, '/dev/cec#\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x31, 0x5d, 0x39, 0x39, 0x37, 0x32, 0x30], 0x2d, [0x61, 0x64, 0x36, 0x61], 0x2d, [0x66, 0x65, 0x53, 0x39], 0x2d, [0x37, 0x30, 0x37, 0x64], 0x2d, [0x37, 0x34, 0x34, 0x0, 0x30, 0x66, 0x31, 0x33]}}}, {@audit}]}}, 0x1, 0x0, &(0x7f0000000380)="1503f47fcee8af5def8b900588653365fe9bef5529b7edb0d930d7b95f5a8b1812a532648a000f6dae612f70ab4449a944b8a2b7013c68d5a1ef8ae00fa0a3ea6bc3535c54ca942ec52db3d606e6eff38780ae28ea16ff34e775dc1508e3013f38de584f21de10dd9f6d71029e897fd4bcd21c44c2aa7f3587601a0c13846ffdf368d6ede017d83e5f81757daf700c2cb5bf53c4229d758b5cf0d8ac2211780d504ff1eccb2d2adbd076a446ee46881113265a38e6c1c42840ea4688667a0c9191f3b794ffd2b717288c155b81f5fb58f8048df014dbdff73b107e0febf4833e73ccb9df8acb0f090c5203038d32a09e6857") mkdirat(r9, &(0x7f0000000480)='./file0\x00', 0x1d9) 7m33.687681912s ago: executing program 5 (id=8054): socket(0xa, 0x3, 0x3a) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7m33.34690426s ago: executing program 2 (id=8055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x5, {0x0, 0x2fec0509, 0x3, 0x6, 0x7fffffff, 0x1}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc74, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)={0x5c, r6, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6effac0555cb7fdf00a377f1e67b97bfd6149875aa823ea3"}]]}, 0x5c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0205647, &(0x7f0000000940)={0xf010000, @sdr={0x20343059, 0x37f8}}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x34, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x240000d4}, 0x840) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x5, {0x0, 0x2fec0509, 0x3, 0x6, 0x7fffffff, 0x1}}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00'}) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0xc74, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)={0x5c, r6, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6effac0555cb7fdf00a377f1e67b97bfd6149875aa823ea3"}]]}, 0x5c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0205647, &(0x7f0000000940)={0xf010000, @sdr={0x20343059, 0x37f8}}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x34, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x240000d4}, 0x840) (async) 7m32.78307619s ago: executing program 2 (id=8058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x449, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b500000082000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) r10 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4) socket$kcm(0x2, 0x1000000000000002, 0x0) unshare(0x42000000) 7m32.7819516s ago: executing program 5 (id=8059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 7m32.753217639s ago: executing program 5 (id=8060): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x803, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x110b, 0x2}) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r3) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x4004550d, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x1, 0x1, "fd"}, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000", 0x3) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d80ff0008000200", @ANYRES16=r8, @ANYRES32=r10], 0x44}}, 0x0) read$char_usb(r6, &(0x7f0000000280)=""/239, 0xef) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f00000023c0)={0x2020}, 0x207a) socket$inet6_sctp(0xa, 0x1, 0x84) gettid() socket$inet6_mptcp(0xa, 0x1, 0x106) 7m31.850559091s ago: executing program 1 (id=8066): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m31.596355898s ago: executing program 1 (id=8067): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 7m31.150988723s ago: executing program 1 (id=8068): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000080)=0xa) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_GETDRIVER(r7, 0x41045508, &(0x7f0000000140)={0x101, "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"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000020bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800) 7m30.766716085s ago: executing program 2 (id=8070): socket(0xa, 0x3, 0x3a) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7m29.643001356s ago: executing program 4 (id=8072): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3fe, 0x400fff, 0x34565348, 0x3, 0x8, [{0x1a5, 0x13}, {0x8, 0xa}, {0xd, 0x208}, {0x5, 0x8}, {0x8, 0x3}, {0x5, 0x9}, {0x6, 0xc}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) syz_emit_ethernet(0xb1, &(0x7f0000000180)={@local, @random="416cee93a4a6", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xa3, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x4, 0x2, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0x4000}, @generic={0x22, 0xf, "3abc6903030000000000000000"}, @window={0x3, 0x3, 0xac}, @timestamp={0x8, 0x2, 0x200, 0x9}, @mss, @fastopen={0x22, 0xe, "54df942f7e09586180bbb068"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x5, "8537c8"}, @exp_fastopen={0xfe, 0x4}]}}, {"3416af759b3c6a17234d4c2152b5ae2e004fddd386c9b64ad6f215535cc63e143334edc421ad322c3793882feede38"}}}}}}, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r3 = add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x801) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x906, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x22, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) add_key(&(0x7f0000000380)='logon\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r3) bind$inet(r6, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast2}, 0x1, 0x2, 0x0, 0x4}}, 0x2e) close(r6) listen(0xffffffffffffffff, 0x400005) write$proc_mixer(0xffffffffffffffff, 0x0, 0x4f) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000300)=0x1) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffffffffffffb3, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x8c4) recvmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000200)=""/183, 0xb7}, {&(0x7f0000000140)=""/46, 0x2e}], 0x3}, 0x12100) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 7m29.590316257s ago: executing program 1 (id=8073): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) 7m29.355383354s ago: executing program 4 (id=8074): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000090000000200000002000000000000008100000040000000000000000000009b1da5a50f31990000000000000000000000000000000000ee0dd8b17e4e8ab97cfcdda766013e9f81135c9bf02b8a0d30be60077f97429033bbbb47adf24f79fe766fe8f325f33a5b761df66cd1dcfaf723eff950dd8471f97e16760ac572"]) 7m29.292986483s ago: executing program 2 (id=8075): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m29.186129842s ago: executing program 4 (id=8076): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x9, 0x0, 0xff7ff038}, {0x6, 0x9}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3, @ANYBLOB="080002007f000001"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 7m28.958047227s ago: executing program 3 (id=8077): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001780)={0xa, 0x0, [{0x8000000, 0x9c, &(0x7f0000000040)=""/156}, {0x80a0000, 0xb5, &(0x7f0000000280)=""/181}, {0xeeee0000, 0xac, &(0x7f0000000440)=""/172}, {0xeeee8000, 0x79, &(0x7f0000001900)=""/121}, {0x10000, 0xa4, &(0x7f0000000500)=""/164}, {0xeeeeb000, 0x7a, &(0x7f00000005c0)=""/122}, {0xeeee0000, 0x3d, &(0x7f0000000140)=""/61}, {0x4, 0x8e, &(0x7f0000000640)=""/142}, {0x4000, 0x1000, &(0x7f0000000700)=""/4096}, {0x2, 0x41, &(0x7f00000001c0)=""/65}]}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb30}], 0x1, 0x40002042, 0x0) 7m28.817121193s ago: executing program 2 (id=8078): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000002300)=""/4123, &(0x7f00000000c0)=0x101b) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='reno\x00', 0x5) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) write$P9_RGETLOCK(r2, &(0x7f0000000180)={0x24, 0x37, 0x1, {0x2, 0x80000000, 0xffffffff, r3, 0x6, 'netem\x00'}}, 0x24) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000001c0)={0x20, 0x37, 0x1, {0x2, 0x3, 0x0, r3, 0x2, '\xff\xff'}}, 0x20) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r7 = dup(r6) write$FUSE_DIRENTPLUS(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="3b19430d3a49c249f9d81d1ef249de6f19f96a005acb50a85f"], 0xa8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r1, 0x2) r9 = syz_open_procfs(0x0, 0x0) pread64(r9, 0x0, 0x0, 0xffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r9, 0x28, 0x2, &(0x7f0000000080)=0x3, 0x8) 7m27.92150406s ago: executing program 4 (id=8079): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', ':\x00'}, 0x7) write$apparmor_exec(r1, &(0x7f0000000040)={'exec ', ':\x00'}, 0x7) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000300)="e9943855455596297fea737e77c9f19a911154d6ba688944e183f92398dd7a4f9e9bb5e1e2ce0447e0a73c866d6565f261e5795cd566ab122c75a0ac249d4c8107b987ac5719df9da7baca497ab274d180f56fc68a827cdc797b19b39365c3c56adce6e9027981677b9cadd9a3e365baa59957a6196aa1e28c77d175686c9d93cb11e8fb98a1e78fc14eba59a3fa985f4e3115981024354afdbd90b73ab208974d5e48590c4a781a5ca45169e07f7c8db98db5316351105b39a76b11036dc4093169639c92fa09c1989e177d005eae5fa03f9def11319519eea40efed80b6333e79fd9e49d22d1c128602c8fe6d939", 0xef}, {&(0x7f0000000080)="61431dfea62fcc0009b7d4e8cff5192fa6548de11106c34ba9ae810a2837ca8d3552b59dcf496df9dc7d278d2d63102fa4acb77321d359f24aad9976098b207492cc49011f4627578c6e5e36d90065a46e86f6e550", 0x55}], 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xfffffffc, 0x2}) 7m27.893817106s ago: executing program 1 (id=8080): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000693000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x81, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) read$char_usb(r4, &(0x7f0000000040)=""/236, 0xec) ioctl$SNDCTL_MIDI_INFO(r4, 0xc074510c, &(0x7f00000002c0)={"006620f48a6ee325b5c1c8db53855b2313fe8fe24ee58fefb27340242c0b", 0x5, 0x100, 0x8001, [0x10, 0x2, 0x9, 0xfffffff8, 0xffffffff, 0x2, 0x0, 0x5, 0x4, 0x10, 0x1, 0x101, 0xbb72, 0x954, 0xffffffff, 0x200, 0x3, 0x6]}) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x18, 0x24, 0x301, 0x70bd29, 0x25dfdbf7, {0x5}, [@typed={0x4, 0x11a, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x8000000000000003, {}, 0xfd}, 0x18) sendmmsg(r6, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="858e74aba8d771b7", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)}}], 0x2, 0x48091) 7m27.74919777s ago: executing program 3 (id=8081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 7m27.258073558s ago: executing program 4 (id=8082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f2d00000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x2) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r7, 0x2) flock(r7, 0x2) read$FUSE(r3, &(0x7f0000001900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000000)={0x50, 0x0, r8, {0x7, 0x2b, 0x3, 0x2000000, 0x6, 0x9, 0x5, 0x5, 0x0, 0x0, 0x1, 0x7fff}}, 0x50) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000018c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}}, 0x0) 7m26.737524652s ago: executing program 3 (id=8083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 7m26.672440162s ago: executing program 5 (id=8084): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r0, &(0x7f00000011c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1400000000000000000000000700"], 0x18}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)}, {&(0x7f00000003c0)="afe6706e7559fcfdc8a3331cb5789cfb2e160a13f6ffad4baf034758a12e8574e543f1e45d0344e6cc25d67247340e4366b355f80d16e23a0bce448d5166fcefba9cec2411db047ce6f295d25e1b1edaf0754f5b63f056b540757206dde88fdb6518c087b4579e98599fbfec0ebd512d25d00992bb859674f21003bc5f93efb4532b133d771d084602bdca0cca95f8400f96f0fe835a21ada6d3f0ab884de168c9808ae6f53239e827976ddc621a74d43818607f5c4c9faeddb77188d5b86df1467fd9d902b2ba8f5b95b9bee81769562346f07594d9fc7bac", 0xd9}, {&(0x7f0000000280)="63d854485313c201e2fb3e42238fde0f35ea7323c2562bea0637663fe367", 0x1e}, {&(0x7f0000000540)="e1d7eb0b3bf0659497307f1e00a138f18511f1175b49fa70123d19e4dfdd667501c9877ff85274c2b1f194bfb0d1fc6f7c4de6637ed63ce79f17122686f6a13c6a7af9e92fd49c7efcba55173cf2b43e9aae81be9b4f3663ba6600a9ec243d9c7aa28780347ace567650740be2e703cb0045325acbf1db7cda89de16876ebcb5437f27e4d7aea9ef46292da5517db374", 0x90}], 0x4}}], 0x2, 0x44008004) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) 7m26.338671127s ago: executing program 2 (id=8085): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000100)="7bf458e12fa4441b4b9a3c89900ad7868beea69bf17dc75383238308bf2e568384be3822a28268264ab0763485f029173f6055074d2a80c4f36b6498e3a38e726354e41a21b4d8900bdded521e33eebf10d1ebf55fa217784662be00da83e94c69e8691d944f3b0d7279d38c56d36a1c19fe9c2b981def269b28ea81eb9e856b0d8b25eb961e8b", 0x87}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x24, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2f, 0x0, @multicast2, @multicast2}}}}}}, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0x5) timer_settime(0x0, 0x1, 0x0, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x40000001fe0000}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x24, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(r7, 0x1, 0x100000000, 0x80000000) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048840}, 0x44000) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) close(r0) 7m26.338013999s ago: executing program 3 (id=8086): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000090000000200000002000000000000008100000040000000000000000000009b1da5a50f31990000000000000000000000000000000000ee0dd8b17e4e8ab97cfcdda766013e9f81135c9bf02b8a0d30be60077f97429033bbbb47adf24f79fe766fe8f325f33a5b761df66cd1dcfaf723eff950dd8471f97e16760ac572"]) 7m26.336110557s ago: executing program 5 (id=8087): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf250c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2713, 0x0, &(0x7f00000000c0)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x2a28, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x29d0, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x143c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY={0x11e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "1e2e08b3353506a52396bfd8a7edff0960a527ce2e9b5fe56b2bea6187a3890282613d2b5908f51c025a7112cc6fc5942f84175f50a19f7a76cd879e04f12e3400addc93905ef152fc8ddda919e8245b2d2acc81f9f99f17a9c658f31ce2fe6fdc74d819474d3c7e7ba27edf0c32c7e2d1b4ae39f3a390d4746ecaf1b4cae94788a1ff7c26b56809e655abb1e0b1f4201b968c3db6126740be5fc149ad2eeec3828f0e20d421482bb31962598fa2cbc48318f0b609c73d3c7f7eb41b1c6d1dc1b0961d1792fc193cebb18b1b5387d2f4b0fd6f07a40716ae1b7a7fa88066fc89293c2609b9ab1d11f3d9fb8119fbdf"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "4eccf57dcbd9021a04b1f153ffa1345810c9b6ece285fa6006"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xf, 0x1, "3bf386f355d1439a05a55d"}, @NFTA_DATA_VALUE={0x1004, 0x1, "d3b915523ab06471ee0b9ec7fe2e3b3dfb0978bd9e9e826334a357a78965b5ac1e5f352319688e17a1ecc519dd3769888a646b8ebecf7166fcc4391694cae58d614693d093bbde19d4c89391b9f50d8cc7c2aaec1a30c0c9fac5076a9e7b31f21b3607fe3fdd283a8253b1ec23da90145265a449d3a943ce4471d621aa529c9679113ec3f1cea040a361ac0ab550d91a497eee754b33abd09fc70832dc93a073243964742acc839c27203756e68ccd9000cbcae82a86595e5524c207ecb4bf328131692937757ad51a949891273d191ed4b4479d11f8b333af4b9dfc777db699daf0a488acc7ae1a07ed79e6133f6c19dba926b182f659e94f655ec57dd2753866c007ed4f715b44cbfd51a81f1ced2b22abd25c9f772ee0136deaaaf9c6110df2a9436c602e72f7d2fe950b7173ac3e4d1edb5cd98272756d4c9da5cad258851e17a221a0260f30c5bd0ee644838d681c706667f1dce792323722233384ba91a5b878b4b4576c3f47aee024d7bc3ce188394d99fb591914ec0d6f0473f5cf4011c26c4850e9585e49c3195788a7dcc6d29f1bf86e0fdf94199fe3c60595b2999b81faa3908e317dfc5423c35589c4390273ee47009847feef7e82d625eea51c5df64895c22ca05e104678c2a8200cd0fb371d4caf32d6818487fc6f1c0827ee59d3e3eb7af6635f0c577e5b9fe5f32cd66c8f44cc42a86ee8282fa4c485102f308e9ea665beb5bed3ae64137c4fae7fd3615d1d82b960057bd48206bfbc8e644766b5d6f3d1cb086b4375a2cc621ce95229b46ba00467d7d2b420a5438ba078d16f42e063c543f92a19e04cc0d60d4c0b126d74653b2bb48e51fb2b659331602131c2a017564dd69dd1fe20526fc2b59a1e76175237bba0e39e556a898d685b40be5c67028971ba00b1274c3cdc7e5aa57d502a18c24f542382daae216d343d0c6570afb34d29b35cad309cbc12227a5b456e14d350572b4303bec23f877bdf6f0a712e2429d3ca51a06ba5b1b502f781023f1b3e05fbe4cfe768221444b785e23afb0f1a4f727ae33092b1c0f522716c48482f1e26c70227148a5bee405817653be1b91150decf8e207e1530921611fbfb76c82cbf1c0ae395b650c83b812fb03d8b9493fd8e7b991466a943d8da63188f03c6cea7047a53083fec1f82fbf7daf6b260334f1e6fc54c9a33e4b0a57b22f821c5d7bdae925e89de5e1e360f740d13ffbce5c17ff6b2dffa1a4752bf540cf38e621746366143877bf7e7637cb45fde8ad645c42e8d9f78aac7dd35cbb67a1c1a35e974fede079e57f11f94619c71489ff05027f2151231691e31afd650ae73cd628b9bdf5beb7ed1642176a3c733d4fa226c40909fda2327957e7c690318bda36c873d3dbfd8c0a4de9a81f614baee4b9005966445a8e83ef0caf00b8925fd326a1ff9e38c19c6f79747738ebdf366ebd9bd50a4c3574ad8dfe4b3795a8b5482e252584ece4e10f6a304d5af7307449039f5cd1d2d505b585e71d40c7d67ce893ac76a7e1302958382b26bc73436fb7b7dbd320610d1d264dfd112afd263693b7ea3dbbd0797f4f05fb9f5e0d509c09f87838c7c8141c39d5aadccb5e3d56a30827546c6fbcb34e5b9d7d6b707bac1ca8233e34fa2a5b829485a034dcede14492bdaad9c0042c01eee527dae9d25bdfd7efa2d6d28f8e8ea17c82ce16dafdebc042b7cdc80670d5dceb26210f7827014e5b8d9717c2ce99f23d4e32b3ee5a9eb4c5928e0733e308db022e7d8aac27424a5f5f9f83d70ff0de1bb18db9b910a19635355eb88c78296605efe2e17ef96ace6b748ad403a4a63b3aa69eee903617bbf29157ce7c6150d17665f93e864fc82a70b2522a06eb9b5a85906cd31754760cf3ff0b1ed14b97e6ca3285aeeb862dea4893ae4614394474477d4dc337c7f2a9aa485352d255b2e531f2a2a150e45224ccf81ab4b28160921f1cf07dbd08088cb46a0966017f81465962ffc662161ffc47f04c15f0f31de2992b239cf96be889829385da3abe5a549cb56fa27c590757d7af91c624ddcf4039ef7f9d0954783d43ba9c0ccb2d746084dd7a1ee80ae9ba2c5ab728f606128a42171b71ceb11d32c2bef3bb404a8e1868751988a1c7080311188b580ebe9f86ae6ee9d53c6dcaa0e19f4d800dcc7f02c761db54de430fb6a8b456bfdb931a1c80f344fdc8bbdf8388197a498be0baf84294e3121befe84e8ffb9b4560beeab8b94cf63aba508690ae548e4fb60139850294f1b881fc1d86566a43559d552aa485daeb27fecebccfd9d6dc6fd283b2c8fb70592cf9a6858e8ea48488c78fe3b12069984b569902775a41d4ffa5c1fba0df7a0430e1f61b97d9864cde7bc70568539a3ac6334ab9bc62efe17c4f593b490955ae670cb113c46ca30492f750fc4775c7b295e90000f18583801b4563e3badf87ecd029134ce0760b82b028f4f31f4d502bb7758b13110e88ca63ec4461aff7ad87872ddb593070f7a91e06d2ef13b89d420769e669b5bdeae89f84009d74be8948bc310c35ba53c871dd0e8c6deb959578b642ca13527e668c6d20a16ff532b1f2cd24d9fa2b011f314d1815d2f8368558d17cba94ade10e02df387999fce736c7a2520caae5f03dd8655fa6ef4546905ebac9238242bbb512cfddb6cb309478bc6a21598d284454aad01488beed6f8a5ef9631162782fd66300fa28615a2729982e9b2eb37329ac7bdbeb311c71314c5d1b9568030f86e4a51e1a03adcfaae939165c5124f2500135f5b593dd72b65718d62eff5ace0cbff5e6e8ba362e4a1869037a3b34cde9a048429ca60602d7cff5a9e831a0015a7f71843faa3b4c823d169dcd85776b115aaebb670a270adb1b4a80f30664dbd3f6d1d3dc51277bc9284fce50714e41555fb10d6d4340c7543e165210a9498974efc54cfa72ecf2c90fa450b13c743fbd258f7273332bb21c5e23c17e321cbcda04ca7187a63e4b6d400dfaa874cda5c66c66118dc7f0485bc10bf4002cbd8c853dcdd621ceb9a6a721f52cfdd8da2af70264ee62e7d35c33e9668515f0ed0541beae36c0cf70f18252ac7ad94b5fe263cb2bd3cfe4d11aa72d64527f21bf61c7a7fc21ed24c62f0632f4df17a2ee5969ca4a327344b833aa961137d509210ed92c711889685cc8e31f84128ca47dd9629148cd66cc7b6687d263cfac8ca29f1fceafee048846e57cdc00e79ff3c98997975ded4b35129ee6bd0359d87731ea5af2c6ee14924330507972473216cac18ed899c934c8a89d337bce28de6162c3c4e56b0661410e205f410e4f656d99bf84f7affe31ed922a42f4c729ebd45d82c877997bb6e4e3236fa3d551acc7728db48322d14466b9f6d8af5767e1022a7b90befbea122b3cbec1a48d4d0045d70154f71adc629fba4f3c2fd837f7112b5891737f859fd2ed060e36a68b5f101bee24730bb65ca3b7a776db2419256de940e0769a544d59d1c8516ecfb66f2a07afafa01d4bd8cc6a1cbf54edce02a9e59a1e8c9a27f94e854cac56f0329162216563740c85913845cc434208e733ef1cadbfc59232f5c82692802ff10efe500fcc4b9baa8b2f20f98821d9f7964f9303507e3cb577f0f904bd782fd35fab0d6981fb80f88c71e204f997795fa1469cd4d77184bf72836ae6e2b5ac8f3864132f5c641d2807ac7743d5f054eae681156ee42f067bdf987d3a2467698284af633f6edd6722f075edefce3eaa24d85801a356848666ff227be2831f187da7e92f438fdb51bc692d62f290ece7f69df649cf4bf11a44055f4f82735ee08089746b40d88e20e5e2b8cb85096431f814cd6bdcf5f2eee4935c8aef24f784d5cc8df313bfbd4688282c4d922d895d62cfe31cb68ced6d863f1a8273113ea481eb96ecd4ecac736afd1fcc9ab92602dc16337e77632401badd551239c81effbcd22293c18068eba95217c6e2cdbff4727020adc1c77437cd97aff5400fbb26b90f393dfc6d2ac87f28ccb92caf439957b868dc0c32be7c9971e4deaaf8091b9bec45c4763768ba52264efed17ec5197c2bb506a24f2b13fb2c8ff35cc0a1f14c8aea5a9f068b8ce3c714bb0c10e16ab35afbe14d8a51a4554792b91e4037b0f166ff22c3223f1e4f9bc7cb19260edd414c095bf3186536582daa3b8351d1eb376bfb8ff94433910885f2e179d578160a6c6dc1fe1940179cacc7abeee4bd498394ec4ff9818915b0390a0671c7d44eecb6ceb86eb46ea920aa4358fc63c206aa6305ba1e0b83f849e8ded4c1bf3106ec78fcc23566502c08fac00cd298efcc9e3b365f6c9bd63fb807711cc9b0a33308e2401bd4b206f33ff6bbf98f343c7faad1aa385d6177818396541a020f54a8f4bba92ed80ae9c4e0786741f5c8f643cbf92a8a416fb6cb023aba3a9afe3a11f2cfdb6262260d0afd47fe758151aec6186a8bb4d2eddac59f2a5d898b8e9aa9879c2dedab0d4330f4e4b019688430b4ca6e686563391b5a20c72997b2b5c9975237f3c3fa34b6fe90d306aebdcec28e15a55f38a867359d3e0494fe0183a6bcd1b8716a74284abf70a0f33d15d14efa9ab9df9d30cb807318028ab76a2d9ed211db968f967e07e014e2a4ec8990e041f6c5e612384a062b125e0d45f9e94bc89490bcd5060f25d80d99385158209fb19060d44daab387461ec1b6450636dad7e16ba703455f8acac304826031b13578ff86d563db81f88f1b6c344e2718919f4f9dee50c53adefdc09e28d73b30a3d6849ba87e0b848e54b20034f1fb2bdbd25a0f6791fd75616198574ce402b9edf6e425539cf2cb01b66d151ee1434146214649184d8c4725a86d4f1f9d8936b543a8c0ca2a5ad5c5b269c19decc8bc2d987d234a649821a5b4cc05a5c48fbbc16573a7fc6a0b52ef0914dfc1d82d72e83ea9dabbf187d37b20c9ce07f1beb374e347cc031060ffb53e86855c0f4df74c0255969b1d27926fd5baaacba907a1de804900fe59b1c59c578bdcbdbe02887e218e0011e93aad706e58bc899097cbc473349020b61949a03e5e008aa236c036aa2dfe22c256fadb13f2d66da539b3705e6ccdab9084de753af3cd1b04280600222fce3f44283a3b19296eb530a1f91f4c0255480c5c593318e69f62fa867c47904f715ddde46ba0875f720d179adaf87a0d905ed42dd3a52979196406a4a5ece6e93431384ef9be41ad190e9e257fc0f0f2e07165af03d8a94ec169119ceddfaa0f51ef9235449ab63ac10393b5befff98197ad8bd45eecb7ef764030b2c9ddc4354f0a6e90185dec4113555339dc48f0a9259f8eef52a91a4b17478370595d0c7f65a9be1db420ba2346aec4938ebc0670bdfc0e5632ec90ace4427e5ed13930c83cd4f89e78b42d2a828b6b8cd51693d6dd38ca40603abe72fdba8b143e88a62ba5fa94de640920df413d908375bad153fd9b639dd76df3267d9dc7c2d895923a035d321e9cbe8a2da8b994a50847f6f815e0778e2e654d7736a4af19edb1b3dcbf2a5e1b722130b21ef0bb1b263de7f123bef8916bb1bf4905c7134e65b2d9d5a493a433a89e682e0b79a5c7da1eec7dbea80cba4788d9ade15725b6c71f008ee13136a08e01a9376798945240c46445a7dffb26b3a95cb66fc30ebf919159f8f929aaf145c0850f3c6a42faa0c0b1e988ec0d2991cecaf15ff498948ffd8f39b1732bd6050b06696ab4d0ca25ad05cd49800483e3768a7bc1236770b1272929bb2294200be7b8a642a8d23a2036bcd8c4a6d04b7d71d90cfc6ab8ee6503b06e82deb09dcb90f48c7aef694e9921c0623eb"}]}, @NFTA_SET_ELEM_DATA={0x17c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x80, 0x1, "f781067ff1ab2f60dbd28ade226a5699158de93385d0ef7aaf43a66db66cc2d1329d60719ff2b150e9cbe09f0d73c7aee60e6440d754397cba07f413cc1277b51c05be623f615e37c8fa495a6ab00d6cec41f9771452872a8e39235390fa1abd7fc3ebabd02c046f560b2386312092ec6031165d6fd8d8fe396e848a"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x17, 0x1, "b06e7e36bd3fffe1a086580e06fbb27222faea"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x79, 0x1, "5bce5fe01be1336d5ec1bd40e6fc2ab95a1361becd42fb53dd5c654ffe41a33c5e8ce63fd60f5d29e6a0ce0607576a2d2211b6820eb77bbd81ecce246e39133a6f0b33fd44f8b5fcd1fbbb48bfb7b03949c9c4e9243b790ec8fc08edd449d36232459718793fd517fa622337e7dd96c50fe22e4b35"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SREG={0x8}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x10000}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}}}, {0x40, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'cluster\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}]}, {0x364, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x69, 0x6, 0x1, 0x0, "cb5b29a95bd5faae5b2487c68f984e50b379b2548a4f4157381f0720b2c54498a9b2dca849cd3f6cb52ba26d76a1082bb110a651415468b2364347d91aa8a1d9848d8d80f324af4268ff3ab0eb97ba9ec91bb0ac7d3c9d60e53c6499f8b7a4cc8c0198d2a5"}, @NFTA_SET_ELEM_KEY_END={0x2f4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x57, 0x1, "68eb26b5e8e70e331f9f46f34448ae438dbe6df2e71bb47199080037f77687396e3b8d9ebfec9c3eb4a13988c57bc7656a4fb7f41f0eebbed503656a80265a416b008b632e734bc13385b210af349b563064a9"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "47d15d2a351a95c9b25f144bb9490bef4632c7f998b5db13ff0e4630d0e16e239f3d98dd197d10345ef4fb9177019e585df0e05fc7bbfed04da42b3f963b8b1d99b29e6fc4d3ab3bb2ad706ab2b2504b4196c1be83e32df9010d9e570a4c5ea55de7844f0fc074057d9effa5e6fe43e57aa32f770420e0d4922785f6190fa39a97f5e3031b576f64d606370d5ec1abfc534a73c6d2b7ade3719656881b4f6808a7030a7d8f46c1ac148c9b6f03d9aabe38c18492344aefbf3c85344be3dcb6c580e537e65c1e88a2def62324f0092f34dc0432d5d0331f6205f30c2619050178d28c03328fe703bdec6c0942ba"}, @NFTA_DATA_VALUE={0x62, 0x1, "74e4207db74c15cb093540cda8c4928a4b3d464fbcbd3602758cde1428457ff1654ae7e0d9625c11f1f402164b5bfb5d6a670f56e43fb11fec811135d7d5d681e0b73426b20de38189126b264e9bc5f01b0fb252b86e16bfdbeb1377287d"}, @NFTA_DATA_VALUE={0x83, 0x1, "2f79057ba42e9662a35ad511f673214447630b86beaaccea298b8f031df97c550c0539bbc13d5be2862946ec71cd4efea288d74335a1ca692b84754d4d1561ebca3f150defb5a3a11f09c4c2a1efb4713e1d22c50c48665aa7e0bc279006d3588b5f6098855ce76d354aa0b22124325e4056c108cef4bacb86fa7e707b2937"}]}]}, {0x121c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x10ac, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "c97dd4f2a0d9f866db3cecc0f856a6f6ed867ecb0929625452bb6171360fb11726c7e4d385ba356f22ed6f6680c0815db45f"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7fffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x140, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x130, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x120, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_INFO={0x6, 0x3, "71e4"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xc, 0x1, 'udplite\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0xdd, 0x3, "3931f1551ee1c4c0c3df1e9e3397d65f87326749e499b81a67be12bff759d0ed96d69721582f69d28575e5764279c65e9bbe1e0207f863c0b069a7c95c2fe8bfb8532aa2e6c46143994beb9ac4c7913913124ef3b6de9757b38c3a92913babdace25512b10d996c4507a3a13c64937400087e67f8737bb8f63b7fc1d2138889aafc1be6ca9b274a6028914c86a70245e8fe32036123aa0c74f6111d3ae89e5c858ca7f2675b82d39d51796b4b85e7bd125db9f51b30d0ff1b1945bb2f87fa8d234587ac2ca903fa4e9eeb5282864b7509f0d321f10990ae21f"}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x1b8, 0x16, 0xa, 0x802, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf82}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x2c74}}, 0x20050800) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x1, 0x0, 0x3f00, 0x3f00, 0x6, 0x0}) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a1014000000000b1700010014000200fc020000000000000000000000000001080017004e234e24140001002001"], 0x4c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 7m26.194496115s ago: executing program 3 (id=8088): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m26.169437149s ago: executing program 4 (id=8089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x449, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b500000082000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) r10 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4) socket$kcm(0x2, 0x1000000000000002, 0x0) unshare(0x42000000) 7m26.148999183s ago: executing program 1 (id=8090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x449, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b500000082000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) r10 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4) socket$kcm(0x2, 0x1000000000000002, 0x0) unshare(0x42000000) 7m25.285556972s ago: executing program 5 (id=8091): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40000000}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) recvmmsg$unix(r2, &(0x7f0000002380), 0x0, 0x0, 0x0) r3 = socket(0x1a, 0x4, 0xdf25) accept4(r1, &(0x7f0000000380)=@qipcrtr, &(0x7f0000000400)=0x80, 0x800) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e20, 0x20080000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3b1}}], 0x18}, 0x40c0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') open_by_handle_at(r4, &(0x7f0000000180)=@fuse={0xc, 0x81, {0x7, 0x39c, 0x80000000}}, 0x10001) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f000000e780), 0x0, 0x4800) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r6, 0xc, 0x0, 0x25d4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 7m25.257346425s ago: executing program 3 (id=8092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m2.459865417s ago: executing program 33 (id=8091): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40000000}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) recvmmsg$unix(r2, &(0x7f0000002380), 0x0, 0x0, 0x0) r3 = socket(0x1a, 0x4, 0xdf25) accept4(r1, &(0x7f0000000380)=@qipcrtr, &(0x7f0000000400)=0x80, 0x800) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e20, 0x20080000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3b1}}], 0x18}, 0x40c0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') open_by_handle_at(r4, &(0x7f0000000180)=@fuse={0xc, 0x81, {0x7, 0x39c, 0x80000000}}, 0x10001) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f000000e780), 0x0, 0x4800) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r6, 0xc, 0x0, 0x25d4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 6m55.557905161s ago: executing program 34 (id=8090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x449, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b500000082000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) r10 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4) socket$kcm(0x2, 0x1000000000000002, 0x0) unshare(0x42000000) 6m55.146607525s ago: executing program 35 (id=8085): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000100)="7bf458e12fa4441b4b9a3c89900ad7868beea69bf17dc75383238308bf2e568384be3822a28268264ab0763485f029173f6055074d2a80c4f36b6498e3a38e726354e41a21b4d8900bdded521e33eebf10d1ebf55fa217784662be00da83e94c69e8691d944f3b0d7279d38c56d36a1c19fe9c2b981def269b28ea81eb9e856b0d8b25eb961e8b", 0x87}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x24, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2f, 0x0, @multicast2, @multicast2}}}}}}, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0x5) timer_settime(0x0, 0x1, 0x0, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x40000001fe0000}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x24, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(r7, 0x1, 0x100000000, 0x80000000) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048840}, 0x44000) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) close(r0) 6m54.911951035s ago: executing program 36 (id=8092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6m54.826754802s ago: executing program 37 (id=8089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x449, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b500000082000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) r10 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4) socket$kcm(0x2, 0x1000000000000002, 0x0) unshare(0x42000000) 1m5.061237989s ago: executing program 0 (id=9572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={0x4c, r1, 0x1, 0x70bd2a, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x4c}}, 0x800) 1m4.987970223s ago: executing program 0 (id=9573): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@mpls_delroute={0x28, 0x19, 0x600, 0x70bd25, 0x25dfdbfb, {0x1c, 0x20, 0x10, 0x80, 0xff, 0x1, 0xff, 0x8, 0x900}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x1, 0x49, r1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x400a000}, 0x0) 1m4.89912755s ago: executing program 0 (id=9574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x3}, {0xfff2, 0xffff}, {0x5, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x3d, 0x107, 0x8000, 0x8, {0x3, 0x7c}, [@nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x50b}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0xc000) 1m4.830545005s ago: executing program 0 (id=9575): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000080)=0xa) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) eventfd(0x80000001) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_GETDRIVER(r7, 0x41045508, &(0x7f0000000140)={0x101, "1b9243b9e24e380a2c0190fd3d663e6ca615183c26707c3acceecd7f5e86c8fbda2a19fe69b8595d6d909f8fae12dcd11cfc1f9a2fe6e4ef75aafb23d5e955ac46764d3a39685ae1020fc46621ef97c8131b35f5da9888eca0c6f79460e6d765d6330efed7c03577a28cbeb279b054a4d5f40e7e26e50d2d0a7ff2e923e00d74034493839ba83991705dcb7a1d7905f863c241866526ee73f40c68225d07c62fe22c49bf1afbadaeb59e6c43e21dc40d969b40a3bafdeada494bed7a536ac6f8ab51525b914f7206fda41fab42444aeda5b877eb5a8d5b0ecfe77768c1b527f2a7239a3c092485a8cc95ecd71bccf906d3f724a3da7ef0ded0531193066b2537"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000020bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800) 1m3.730834103s ago: executing program 0 (id=9580): socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) writev(r4, &(0x7f0000000940), 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000840)="51d128f952260d14492e27b3ef4cdb951da880d61e0608ecfb2ddeea5fd60e0290cc002871f9dd806a07c56ff7447b5b63521e9bd6a1b13e8578142101435847783ab85638d646b59db16e9e4401ba632c78dd044a4ec98eeb566d437c16c5d259ba4e71ad4c18d226dccfb35457af71135b6e2b747fd84a0a6dad6e2469d3250cb364f0eeede6fd7858f1a01a4a869f376e74cc3b7233d8ca312fe17bafbc49457c9085ddf38901503de4386d383fe783cd21effaf795af593fda4c281836958b5a308b162563b442eedb828e322fab92", 0xd1}, {&(0x7f0000000940)="4e77e0554e780d00b8a70570a24f485cc72f01baf51993ca34ba5822073580f1193479b8c078340ad0635727fdae9af4a6fda1fd96e3b9e85b97ed94b8f1bfbecb42d3d3d5fe42326316483f679e82cd675f57da86dafd5ccca37615e929791891add95ca203f30fc69e0c4e634387a3fa2ab85c93fa659a41c5fffa9c04fe08a1f6d21cd5cb83434be83eaedb1553a1d48d515fc863c6c73c5aa316ac1876aaf9e7b591c1090d2e782ee73a6a838de590af0574111c8739c2ad60c7be8bed68e2807ecfb0531262f059735cc6f47f50fb232619730e64580dd6352312b080ca889ff9adf2d5363d3375719bb6c881e328ad3d816c5084c33de0fa05634180", 0xff}, {&(0x7f0000000a40)="9b28b109ee99e2a5702522864275a7fdc98e215004058208bcab976e26d4984505078134c11b48c1a40b2ad5c0d6b3f9ada35e0af635922c9a6bb955c647fe57c6617dea5cce62ee368a618e4f1501370278fed0cebbaece82c9fd2542310767f4c0b43c8fadd48f106315f694093d885b8c11a4c9ff149e85752ea855480686fb449e534a388a049651ccc4fd512fae0b1b4afc7e7290267d5b565ceb72a7dd794d8ca74e259e4b5c33e2ac40e8a3d6681f9987780473f3894b", 0xfffffffffffffe09}, {&(0x7f00000000c0)="638741ed8bec253e897d1af5d80277e1253f28351b811ff25764abbca0d4a4", 0x1f}, {&(0x7f0000000b00)="c4b2126fe152e16ed2a98fdd60222d17a1711f89c1888a94e2e784f624f4f56201f748ee19bfa82c110606b8c8316f143cb81380a2a909e46944a79496527de7dad693c0503280b43e51022727f304c732475544666c2f5487a927d94cc5bbce396507e238561e4ec8c125c6e9e0dd6c620b0850596ceb00e18d51f00cd18763b33e241946820a610821ead94706a6672cb1179895e8ad0000000000000000", 0x9f}, {&(0x7f0000000300)="1b0445ae9a626cc68324c99dfb46a8839228573ca5d077994f428b83c9930282e01a8c2ee288d965e4fad82a53d1ffb700278a031bc91561465c5bc5d2957d330b", 0x41}], 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8, @ANYBLOB="0000000014001ffdeef3899bd4b7152c36ec6ebb78000000000000290000003e000000030000000000000058000000000000002900000039e9ffff2e08010200000000fe880000000000000000000000000101fc010000a7ff43b5f03a41608238094b5775000000000000000000000000ff02000000000000000000000000000100000000000000000000ffffac1e0001"], 0x310}}], 0x1, 0x4000) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m2.656011216s ago: executing program 0 (id=9586): openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000007e0500000400000095000000000000000bdece3ecf0361fca97ba29e1c31357bca7859acf9979ad9d8bde41d06c9fdfd72ad8a5b1f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 47.454918703s ago: executing program 38 (id=9586): openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000007e0500000400000095000000000000000bdece3ecf0361fca97ba29e1c31357bca7859acf9979ad9d8bde41d06c9fdfd72ad8a5b1f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 30.366857434s ago: executing program 7 (id=9710): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000080)=0xa) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) eventfd(0x80000001) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) r7 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_GETDRIVER(r7, 0x41045508, &(0x7f0000000140)={0x101, "1b9243b9e24e380a2c0190fd3d663e6ca615183c26707c3acceecd7f5e86c8fbda2a19fe69b8595d6d909f8fae12dcd11cfc1f9a2fe6e4ef75aafb23d5e955ac46764d3a39685ae1020fc46621ef97c8131b35f5da9888eca0c6f79460e6d765d6330efed7c03577a28cbeb279b054a4d5f40e7e26e50d2d0a7ff2e923e00d74034493839ba83991705dcb7a1d7905f863c241866526ee73f40c68225d07c62fe22c49bf1afbadaeb59e6c43e21dc40d969b40a3bafdeada494bed7a536ac6f8ab51525b914f7206fda41fab42444aeda5b877eb5a8d5b0ecfe77768c1b527f2a7239a3c092485a8cc95ecd71bccf906d3f724a3da7ef0ded0531193066b2537"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000020bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800) 28.673421789s ago: executing program 7 (id=9716): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x44, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x4}, {}, {}, {0xa888, 0x88be, 0x81000000}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r11, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r11, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0xa, 0x849}) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4c, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5008}, 0x1}) 27.721972035s ago: executing program 7 (id=9719): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000080)=0xa) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) eventfd(0x80000001) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_GETDRIVER(r7, 0x41045508, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000020bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800) 27.426980056s ago: executing program 9 (id=9722): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0xaec, @loopback, 0x6096}, 0x1c) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1c) socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="549dfc6a5662000000000000"], 0x10}}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x26) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4040010) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000280)={0x48}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x8000000000000000}) 26.34745153s ago: executing program 7 (id=9725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000020003900000008000300", @ANYRES32=r2, @ANYBLOB="24005a802000030009000600050005"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) 25.734242028s ago: executing program 9 (id=9726): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x10000007, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x4}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x12d142, 0x0) close(0xffffffffffffffff) r3 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x8000002, 0x1c0}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r7, 0x86, 0xa, 0x6, 0x1, 0x48f}, &(0x7f0000000140)=0x14) syz_open_dev$usbmon(&(0x7f00000021c0), 0x8000000000000000, 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r8, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) shutdown(r8, 0x2) 25.626502282s ago: executing program 7 (id=9727): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x2001370, &(0x7f00000004c0)={0x0, 0x8ca7, 0x11110, 0x0, 0x4e}, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x577, {0x763039aa, 0x114}, 0x10, 0x5}) io_setup(0x8, &(0x7f00000001c0)=0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r6, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000300)="87992d800d80", 0x6, 0x4}]) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040de28021180000000000109022400010000d000090400040103000000bfb9999c1a68978313320581030000000050"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f8008000240000000050800024000000b8608000340000047510800034000000003080001"], 0xdc}}, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) socket(0x1, 0x5, 0x0) 24.020348875s ago: executing program 9 (id=9729): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000100)="7bf458e12fa4441b4b9a3c89900ad7868beea69bf17dc75383238308bf2e568384be3822a28268264ab0763485f029173f6055074d2a80c4f36b6498e3a38e726354e41a21b4d8900bdded521e33eebf10d1ebf55fa217784662be00da83e94c69e8691d944f", 0x66}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x24, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2f, 0x0, @multicast2, @multicast2}}}}}}, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0x5) timer_settime(0x0, 0x1, 0x0, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x40000001fe0000}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x24, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(r6, 0x1, 0x100000000, 0x80000000) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048840}, 0x44000) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) close(r0) 22.7270219s ago: executing program 8 (id=9731): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x7, 0x2, 0x17d, 0x400000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0xb, 0x0, 0x6, 0x0, 0x1], 0xffff1001, 0x120182}) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x1) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000045000000040000000fa2"], 0x45}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x80000001, 0xffff, 0x2, 0x249a, 0x9, 0x479, 0x8}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22.67103749s ago: executing program 8 (id=9732): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000000114010029bd7000fedbdf2508"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x44f95000) accept$inet(0xffffffffffffffff, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, 0x0) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008180)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1}, 0xff}], 0x1, 0x40000003, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r9, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 22.461309064s ago: executing program 7 (id=9733): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80040, 0x61) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0xc) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x10010, r6, 0x837d8000) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x408, 0x2e8, 0x2e8, 0x408, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r7, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r7, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x0, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, 0x0) 22.291733412s ago: executing program 9 (id=9734): r0 = socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) writev(r5, &(0x7f0000000940), 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x0, [0x5, 0x100]}, &(0x7f0000000400)=0x44) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000001c0)=0x3) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r7, &(0x7f0000001080)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000840)="51d128f952260d14492e27b3ef4cdb951da880d61e0608ecfb2ddeea5fd60e0290cc002871f9dd806a07c56ff7447b5b63521e9bd6a1b13e8578142101435847783ab85638d646b59db16e9e4401ba632c78dd044a4ec98eeb566d437c16c5d259ba4e71ad4c18d226dccfb35457af71135b6e2b747fd84a0a6dad6e2469d3250cb364f0eeede6fd7858f1a01a4a869f376e74cc3b7233d8ca312fe17bafbc49457c9085ddf38901503de4386d383fe783cd21effaf795af593fda4c281836958b5a308b162563b442eedb828e322fab92", 0xd1}, {&(0x7f0000000940)="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", 0xff}, {&(0x7f0000000a40)="9b28b109ee99e2a5702522864275a7fdc98e215004058208bcab976e26d4984505078134c11b48c1a40b2ad5c0d6b3f9ada35e0af635922c9a6bb955c647fe57c6617dea5cce62ee368a618e4f1501370278fed0cebbaece82c9fd2542310767f4c0b43c8fadd48f106315f694093d885b8c11a4c9ff149e85752ea855480686fb449e534a388a049651ccc4fd512fae0b1b4afc7e7290267d5b565ceb72a7dd794d8ca74e259e4b5c33e2ac40e8a3d6681f9987780473f3894b", 0xfffffffffffffe09}, {&(0x7f00000000c0)="638741ed8bec253e897d1af5d80277e1253f28351b811ff25764abbca0d4a4", 0x1f}, {&(0x7f0000000b00)="c4b2126fe152e16ed2a98fdd60222d17a1711f89c1888a94e2e784f624f4f56201f748ee19bfa82c110606b8c8316f143cb81380a2a909e46944a79496527de7dad693c0503280b43e51022727f304c732475544666c2f5487a927d94cc5bbce396507e238561e4ec8c125c6e9e0dd6c620b0850596ceb00e18d51f00cd18763b33e241946820a610821ead94706a6672cb1179895e8ad0000000000000000", 0x9f}, {&(0x7f0000000300)="1b0445ae9a626cc68324c99dfb46a8839228573ca5d077994f428b83c9930282e01a8c2ee288d965e4fad82a53d1ffb700278a031bc91561465c5bc5d2957d330b", 0x41}], 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r7, @ANYBLOB="0000000014001ffdeef3899bd4b7152c36ec6ebb78000000000000290000003e000000030000000000000058000000000000002900000039e9ffff2e08010200000000fe880000000000000000000000000101fc010000a7ff43b5f03a41608238094b5775000000000000000000000000ff02000000000000000000000000000100000000000000000000ffffac1e0001"], 0x310}}], 0x1, 0x4000) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x9) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0xc) accept4(r0, &(0x7f0000000280)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000200)=0x80, 0x800) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$xdp(0x2c, 0x3, 0x0) 20.977892673s ago: executing program 9 (id=9735): socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) r3 = socket(0x10, 0x80002, 0x0) bind$netlink(r3, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=@newtfilter={0x4c4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x10, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x779f0574}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_RATE={0x6, 0x5, {0x1, 0xa8}}, @TCA_RATE={0x6, 0x5, {0xab, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x438, 0x2, [@TCA_U32_POLICE={0x410, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x368, 0x6, 0x5, 0x5f, 0x81, 0xe6, 0x5, 0x10, 0x4, 0x2, 0x4, 0x84, 0x9, 0x7, 0x17ee, 0x8001, 0x2, 0x6, 0x1, 0x0, 0xb, 0x1, 0xffffffff, 0x35ab, 0x4, 0xddc, 0x1, 0xa, 0x0, 0x2, 0x1, 0xffffffff, 0x3, 0x72820263, 0x9, 0x7, 0x0, 0x5, 0x7, 0x0, 0xfffffff9, 0x4, 0x7, 0x6, 0xc, 0xfff, 0x5, 0x5a9, 0x7fff, 0x49d2, 0xa, 0x100, 0x1b, 0x0, 0x3, 0x9, 0x28000000, 0x0, 0x8, 0x6, 0xf, 0x2735, 0x7ff, 0x0, 0x80, 0x101, 0x7f, 0x8, 0x1, 0x8, 0x9d, 0x391, 0x7, 0x6, 0x7, 0x6, 0xc4, 0xb, 0xec0, 0x40, 0x8, 0x8001, 0x2, 0x40, 0x7, 0x8, 0x7566, 0xb, 0x1, 0x4, 0x6, 0x10, 0x9, 0xc054, 0x6, 0xfffffff9, 0x4, 0x4, 0x8, 0x4, 0xea, 0x3, 0x3, 0x0, 0x9843, 0xb9a, 0x40, 0x2, 0x3, 0x0, 0x4, 0x2, 0xa94, 0x7, 0x0, 0x6, 0x0, 0x8000c, 0x1, 0x3, 0x0, 0xfffffff8, 0xd7, 0x80000001, 0x40, 0xfff, 0x4, 0x9, 0x9, 0xaa, 0x7fffffff, 0x9, 0x0, 0x80, 0x3ff, 0x6, 0x3, 0x800, 0xc9, 0x1, 0x2, 0xe, 0x1, 0x8001, 0x7ff, 0x40, 0x4, 0x100, 0x8, 0x1, 0x1, 0xae0c, 0x1df, 0x6, 0x7, 0x1, 0x6, 0x0, 0x200, 0x7, 0x200, 0x9, 0xffff, 0x2f, 0x0, 0xffffffff, 0x7ff, 0x6, 0xb029, 0x8, 0x2, 0x2, 0x80, 0x100000, 0x2, 0x6, 0x20000, 0x10001, 0x5, 0x4, 0x400, 0x58a2, 0x1ff, 0xff, 0x8, 0x8, 0x7f, 0x8, 0x1, 0x6, 0x4, 0x9, 0x0, 0x3, 0x81, 0xff, 0x6, 0xffffffff, 0x5, 0xfffffff8, 0x1, 0x10000, 0xd, 0x2, 0x0, 0x8, 0x5c8d, 0x5, 0x1385, 0x800, 0x9, 0x8, 0x80, 0x836, 0x8c66, 0x8, 0x1, 0x8, 0x3, 0xe8c, 0x47c4, 0x9f, 0x4, 0x2, 0x8, 0x7, 0xa6f, 0x9, 0x1, 0x2000000c, 0x5, 0x7, 0x40, 0x5, 0x4a5e, 0xd32c, 0x1000, 0x4c, 0xfffffffc, 0x1, 0x442, 0x1000, 0x1, 0x7, 0x8, 0x8, 0x9, 0x8000, 0x51c, 0x7, 0x3, 0x5, 0x3, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x874}]}, @TCA_U32_INDEV={0x14, 0x8, 'geneve1\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0xfff1}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7f}, @TCA_CHAIN={0x8, 0xb, 0x1000}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 19.995585248s ago: executing program 9 (id=9736): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf250c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2713, 0x0, &(0x7f00000000c0)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x2a3c, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x29e4, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x143c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY={0x11e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "1e2e08b3353506a52396bfd8a7edff0960a527ce2e9b5fe56b2bea6187a3890282613d2b5908f51c025a7112cc6fc5942f84175f50a19f7a76cd879e04f12e3400addc93905ef152fc8ddda919e8245b2d2acc81f9f99f17a9c658f31ce2fe6fdc74d819474d3c7e7ba27edf0c32c7e2d1b4ae39f3a390d4746ecaf1b4cae94788a1ff7c26b56809e655abb1e0b1f4201b968c3db6126740be5fc149ad2eeec3828f0e20d421482bb31962598fa2cbc48318f0b609c73d3c7f7eb41b1c6d1dc1b0961d1792fc193cebb18b1b5387d2f4b0fd6f07a40716ae1b7a7fa88066fc89293c2609b9ab1d11f3d9fb8119fbdf"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "4eccf57dcbd9021a04b1f153ffa1345810c9b6ece285fa6006"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xf, 0x1, "3bf386f355d1439a05a55d"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_DATA={0x17c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x80, 0x1, "f781067ff1ab2f60dbd28ade226a5699158de93385d0ef7aaf43a66db66cc2d1329d60719ff2b150e9cbe09f0d73c7aee60e6440d754397cba07f413cc1277b51c05be623f615e37c8fa495a6ab00d6cec41f9771452872a8e39235390fa1abd7fc3ebabd02c046f560b2386312092ec6031165d6fd8d8fe396e848a"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x17, 0x1, "b06e7e36bd3fffe1a086580e06fbb27222faea"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x79, 0x1, "5bce5fe01be1336d5ec1bd40e6fc2ab95a1361becd42fb53dd5c654ffe41a33c5e8ce63fd60f5d29e6a0ce0607576a2d2211b6820eb77bbd81ecce246e39133a6f0b33fd44f8b5fcd1fbbb48bfb7b03949c9c4e9243b790ec8fc08edd449d36232459718793fd517fa622337e7dd96c50fe22e4b35"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SREG={0x8}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x10000}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}}}, {0x40, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'cluster\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}]}, {0x378, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x69, 0x6, 0x1, 0x0, "cb5b29a95bd5faae5b2487c68f984e50b379b2548a4f4157381f0720b2c54498a9b2dca849cd3f6cb52ba26d76a1082bb110a651415468b2364347d91aa8a1d9848d8d80f324af4268ff3ab0eb97ba9ec91bb0ac7d3c9d60e53c6499f8b7a4cc8c0198d2a5"}, @NFTA_SET_ELEM_KEY_END={0x308, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "68eb26b5e8e70e331f9f46f34448ae438dbe6df2e71bb47199080037f77687396e3b8d9ebfec9c3eb4a13988c57bc7656a4fb7f41f0eebbed503656a80265a416b008b632e734bc133"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "47d15d2a351a95c9b25f144bb9490bef4632c7f998b5db13ff0e4630d0e16e239f3d98dd197d10345ef4fb9177019e585df0e05fc7bbfed04da42b3f963b8b1d99b29e6fc4d3ab3bb2ad706ab2b2504b4196c1be83e32df9010d9e570a4c5ea55de7844f0fc074057d9effa5e6fe43e57aa32f770420e0d4922785f6190fa39a97f5e3031b576f64d606370d5ec1abfc534a73c6d2b7ade3719656881b4f6808a7030a7d8f46c1ac148c9b6f03d9aabe38c18492344aefbf3c85344be3dcb6c580e537e65c1e88a2def62324f0092f34dc0432d5d0331f6205f30c2619050178d28c03328fe703bdec6c0942ba"}, @NFTA_DATA_VALUE={0x62, 0x1, "74e4207db74c15cb093540cda8c4928a4b3d464fbcbd3602758cde1428457ff1654ae7e0d9625c11f1f402164b5bfb5d6a670f56e43fb11fec811135d7d5d681e0b73426b20de38189126b264e9bc5f01b0fb252b86e16bfdbeb1377287d"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x83, 0x1, "2f79057ba42e9662a35ad511f673214447630b86beaaccea298b8f031df97c550c0539bbc13d5be2862946ec71cd4efea288d74335a1ca692b84754d4d1561ebca3f150defb5a3a11f09c4c2a1efb4713e1d22c50c48665aa7e0bc279006d3588b5f6098855ce76d354aa0b22124325e4056c108cef4bacb86fa7e707b2937"}]}]}, {0x121c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x10ac, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "c97dd4f2a0d9f866db3cecc0f856a6f6ed867ecb0929625452bb6171360fb11726c7e4d385ba356f22ed6f6680c0815db45f"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7fffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "48e6bfc885b18ade3002144df3fc5f2eafbab83d67bac481f49beb489809c414d9b517a90f64bdc90bb7c35e9d65940487b3ab0c4c2f9f1b19bb3609a94082c748fec4134c84018d320e0b0beb2c111b8ddbc3be9b05281846674d8e4bfbbeaa226249988b7d3de63c510cf357d4cda98aa036fc53a426bf3bfe5ae76305c5f9ce7883f0b80eb20ce64fc15bfe1b16976c4c38853cc8f302728184eef6a4a64e6845ef3fab7aee213add0c44a7daf2b4fb463eea40f30cfe78e999c10e7e6a6894a2704e5b779c094a219662840f75c3a8f31cc39e5511d00c8afdbb4ecc1a926c239ce77712a7a31ae2be3818211ed4f9e27aae29372c2ae46d7deb7dc4035d63825dc47a0a8f2443d187e7362bd441616da781f5cefa4624fa2a4cb7722bd9342a5ee6d3ca5d1e5606915f6add5028205f74c275f98d49580ed4bddbf3719a3d4374e8672eb5c862062d0458a8e20a9e8c3366ddb6af8503805c206cd6f650309bcb79623c2531dd09093d42bd39dccde86e92fee5251ea263e213c7b05f2c0a232693e4c0da7060ed1f7f1ac2451cbad64778ab8495ad8a57caea926eebb99aa655096365501ecbcc819cd0ea0188b2c9ea115d091461380a10f1082131b6e6c4c312dde0cd05655325868106d4115f8129ef1964a1fe5d9cdcf8d3ba1e27dbcebb00962410463f2f776d22cf8c9bef2083d88f4a90c6795b140c4cb9f41f92f3bd23d347d5b36794890853cf0d4ad254736d512d70710a8669154bc4fdf288a32c465e9f2978615ebfe4fb2390b3b02b8661dc252bd1c6cf43c769c7adb524df85a231148ef28795825c690999c9e10dc0f3a9a63e35f3b691f6dcf3052bf05d54b8176794e08817cd4f1ccc05a60be8d8323326be1accc852a14607d21291e5917ef6bcaf30d566c27f785bb4e7e0b53072c283dcf42b96f7c8bf9c898e1a7fea93fcac11c7bc9662b516a38a78945d65f10f8b7e9786195acd988e9524ebfb62768f9aef51b345fe68c5d5cbbc571dc016b703a00803bf3b888b47ffa38ae372e2fecc71874d1ff8da14e9518b731354f7c98a2683c8c41d6e11c91df5e1df5f2e527d6bcaa386a0bbe73f6def65d1ddfd17df454e9d01559886be38a1ed43a2cee4ed36bb92a1e9ed24c088a5e6a567ca9c6f7036035f1a0eb016b5fdd74c12fe7483c945b484085ce8879ba6989f8daed95e3f7360058100216c67fd4b3ed23bfd38ca81077a9dc821b134669898df4a8712aeb8dab36385c248a63ad169cfacfc914514205e27bc7e972ff37205a707778406083faa239d73e9f6f22b549e97a0784c3efa599a4f71a2a7281a4de5c749ac32144818b6cf8b0df4ba1460d7c72e35bc5ba18f579d8bd26b620d5a8d615cb4b892b59558c5182502d5df7db1a4d7917400f6223e564ad163ba79d25b1d66937afcde18098b49ffa2eb31c91db75d1aa9f24f4a61ee581352cfbfccf0bd3866dfa3d5b478a8dc18f554b429e4bbdee4e5aaa2c287d69e5bcf98231732bc3386ec94586f99bca842e76374a1a6feeeadb6b0657bcc3ddd3db2a51d5a24a149054a43a1c8915515dca72e9955c360f5af11a608ea0dd4cf2eb73a51bfab23686ea9d4087190e88c1fa3bd0ac4df3deab08a10179a975ea853fc566558cbabd228620be4632691832c4c54d2f7a8d91c06778e9dc2068ca70cb3d700eb47473ddeae3ff48b4f774276cd98866f06fd2fde8cbb2b1667d39b91b3ffa3ed930aeeec4f8824f3309da45de5fd479ed8841e0be48df87815d021cd0de28b10ef7328b3859f97edebfef3d45f7e3a646558ca785b369241cd202fd478374996ba2c42dbb22f0ba917f97dee373ecb21427f5727b892e9d41c3d7ea7d54c72743f9bbf7fece969dd4b131d9efe5a7b95f93089a40e39b3504aada6face5b76c8996f8815307f7483e9de07fb3293847d89771fb4d0eeca4184799483cc0d007753da403afdafa85d82949308d0a57df38d90109e2a3c75f15eb4a914c48a62718f7cad5ae68d7031a848755d50d3a37757402f9b6d178fecbf0e191fd3e4f35fa681375b7ad7931ec227f90f09ff16d22745800860b5ba9153712877dc663166b98d0fde97676e8e9b291c42cb84697399909b330070e74bb0af35d4515703efa65009241324381b1588ba17c0383729a790eb74f17ff9323c5ca09afd7acc202caf04fd8ca44e4910592d238e8c98205ee862fe3753be6346a2cbe850449859839e3310ba6d27419a3563817db5c92319172c337fe30ca83496e48158782cd6b360c403a1ec52bcdb94ac49e6ff24947ff68a310880c9d57142f159cbf15f753ac1ddfe58a5a342ea609189d88036e43331be26e49f722f3320ef63a0f3bdafb0c116fd3282ac0fae07f79078392b086f7e29630a4c083c6f868627026e2ec819a0467adf0fdf2142d5ebc04d6c3ab7c09b30490282c1a1f39255b1495bbec1f68fb429dd69264a7ae090cc34e62b10a3a33d9aefae0206ed447d189830dd351f6cb8fe3ee5d30ddd34dc8229234fabc9c25680b3b1e73ea8bd956eefc1247f71e56f99b4e60b48aa7ed36e3284ead21d5c8e91b8b8bab61dacebe12332792b2b4cd4b1875b47ef01eb00b0e598e371dea1aa189eb2e53c12bb03706408c5b99742cbb2d317d0f8a7276b44ff93dd922f7ed81f39332e20dd0a6824803096dec1c1d23c60132ae1cfef3029979713a2f492e99691427ac080680867d64af5767ff2b0ab0f4e7dbd4251bfeebd1b88b6e039662436e6d2f7bc5401c5ebee02c578f8935ae27fd0f21a7682b9bb87ecb73f38551669a950639ad658b8ce4de48d9100d62ef9aadf4435869b2656c64f4c52072ede66535b85ff23f455569658ba8c51fe24275fe0ab4f62a2cdec3ca834764e072615ced2931cf653af671d83f62d011ed15847d0a965a1cc9f6e05944bc5f1edd04f6e785eb9d3f6afd463eaa45f2d3a25f8274756e039eeb6668da513bbc680d5226ea7f89e36c05108e8878ac1e7c6be3dd6cefbc5cdd3c3a89b326c4a82b7bd32cc490d5447c169bfcbb30941337b65c4887d3f7a0b2ef7b11950f5c623c009901e7771849ad7816e30f0964128a2a404b88314f5e4e9861ca06e0f8eac25308f1bf7b15427d21867e9f23c17a53c071189a2ae8c699de7c5108381bb02299bdaac5541340ccf4daa1bfc27791d36aebb0cec3ac42c603038043217bf5026bbcd6bda136425ea3b191376ff0e690461601362098cf6b46c8e829fc739b6b40970309b5032d58aa43b1a04c1d4bcc9e735f5f0146808b7a11ca1d443915d4a20541ae8c43cbb5216fa2dc78ada791bcb3976b9f33f499f2a9600748e479dc72ad4fb2d349a5d5287e743c3c47f73c4bfbaf57c842c7bb8e9755794504c1868796f241476b95a3bc385cc1aa352b91c6ba33d14f48c28b6f4eda99ed065d0c4341e7e3e9aec65ec52292b447c429bd54864d80d785c844abd1952a1ce37eb414156eaf595d0f9544d8fe15a0551595ef8485f139ed8c06cd1ab447b21baf0c5763b40a97fb9f48e1e175cee44438d3f8aaf048d2431653567e4bebef1b963b3c8f036cc6da3cd93367a2d7bb20a70fc360a4b281c652413a757a2ca5738748e3b47330a1f5d8dbca05b904717bfcd1097884022b6c6b48e462c27d243f929d2329186598aeac1c086ee012f6544688c44cb345e1e4bd7e1a9dc497a1a910958821e95fbb817339ef6c1eebb01df46c2ee89b5a67d973c2a3fc38f773a13879ad98d8c89997b802a1f06f94dc1516aeac0c040ce7a1885f9aac91918e095408a6cda1b9ccdc782d78b58d74dfefea0f5bd5c65d51ed4da1c53e0ce3f0042c270f7b60bd0acae1dd653a6a1dc63b6fea97e1725e5ba63a4bdfde9c14ea488091690c5926d68e69a292b9d5e4dbd55365689feb87f238be7ec40376851b5670497cfa9267511bf08e6a398d554ff195c07b780734ac2518d53afd7e93d095e2fa18b5101fc7d44373c7b904adee2fc757ba0c4eae19789fb7581b0df12031ae969eb43de8257c296013961284e4c6030d78e3f7ec11db74af1f98b2118efb66b235aafa547c3433513fbbd53498883966ab995819e87afcba02d7860b6f4b8944f331f2505d85221e1665ac7514cf6dc6fcfce7ea0f2a1332147c1da3ddf1f9c8b3edba9040a366a9bf4d790a4f259b00bc3e2940fdb1667ac6e8bcc66959cc5cacab88a9a707c27620397a393bf7407812bed3390fd2866064caa3af1287c1e7818a22c9c9e159f6742ca0465a15ea474baced986f9909c8e16d43b2fb38d196b74083d536b897739156b7ce493513d4cfba8b79ed2960ac6fff53aa38cea5a9d5ea176091bbca6dae39131ee8e63bd28e9eb659fd53db009e7bf0c6c98d2c1ecb7e06d6a9a8b17198dde9f235691597318f0d003b4bcf8fee6f8201908af13f8c8c40ceb64eb4a816c2706d3225fb2a12da5d8c2ace757dc6a9d87aa82fc12d1b2eca0a0fc156b6cfcbec07776c1c92bd87341dbcb8ce1680e8e2d0a4b76c90f005628088bb362b91048f0408148abe0567239c750e21714783d52aa35fcb2322a59dd4c260fb55d6d5d47ce45db5eb4537f5e0731ada76626930fdda6470ee10fb877cc0c7d53860d45f8fb439366df395971a6b4240e49305ce2e4fae1e8114fd66aa64e7b6827e6ee223a2d5383d7c7dadd5c2746a5cb1ae4ab7c2756c134030778634def6d5d6ca0d29d598a93d9b58387306cbf79a4c4a4dfd67697794ded7c58ce856f66dba7450ccac1cf284aeb706091f582785751f52f558b5a28291c3f65e1c3bda29c96bb4c1f3365b6cb793b0fce3df13ffa5955640f3152013df32ea25506e423d26db57b6aa7f878b2959cce3729f78aed1ddbd1c391602ab46eb6f6989e628e1bca36dd796b7b4e574e7e1745c0d6a55b443161e0f7ec6b058ffbbafc0a85f513d1cb87da2ecc666bc8abf765fcf1b0e3d6cd133b86da2b91d37885375a538f0dc1eee45bd482b6ddb08d58696e3f9f9a48e882d81ae01ea5bae25e7bdc1fc00221c100d53eaaedacf3e3e545bdb528d6b3b354b8d6f21e4d8f51744ed84ea9a862bd776af02fd7ed213698758cb3f6b908a792fb197803ac7ce11f26450c27bb6fc80980351b0c341cc602515e22fe7db0e374bf57db3a9d5328c3cc1a6dbc8dc3cddac3a6c8a724d1d3de3878cd83a292d05fd9098e03146cf0452a8ae4cc228c8b44f372ee7aea2858ce7792b6ee0b917921143c69e43093030669c3411117cbbdff2755ebd343a43fbaaa5496607513ea50e5287e74161c5a6a7c310a5711824b04843fa98e99aa67bd67e4626260b0597609d7409d1857684cf47a675eada196458afd4f050305155451c43bbb9d9beef92fd29d91b733d896e41dd0f9afe239290420c6c07417f3a9ae5ef4333840736c36d1f0dd1705d1300b5573129533fa829a9434a771cdee58a6fb7fb5d03c719b1db1fe10e6a59803a4f3df3a04ff01a2d58e80573c06ed87d44a5455581852ac04621d2c5c0a866d50cdc749e56bd31da213dbb202773085eb13bf38d6726e49021968fcaa2c4a372b28e52af043646db9649d67b898f421b2ea048891c66c61ba8bec3c6867812653e7f99295519e43e3e365b3d0a0f495fbeb3b98620dfb128a827d14f0830a207d67f732f7316009834bdf49ee522c29a86d7005b067e65b36d640e781c84cbdc34c0834cf152cc31e024ff333b526a075eb05557b89725ad6ea280473bafbadf2b3525786d4786764ab20f5e0364b1e56bac22b3ee14419"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x140, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x130, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x120, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_INFO={0x6, 0x3, "71e4"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xc, 0x1, 'udplite\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0xdd, 0x3, "3931f1551ee1c4c0c3df1e9e3397d65f87326749e499b81a67be12bff759d0ed96d69721582f69d28575e5764279c65e9bbe1e0207f863c0b069a7c95c2fe8bfb8532aa2e6c46143994beb9ac4c7913913124ef3b6de9757b38c3a92913babdace25512b10d996c4507a3a13c64937400087e67f8737bb8f63b7fc1d2138889aafc1be6ca9b274a6028914c86a70245e8fe32036123aa0c74f6111d3ae89e5c858ca7f2675b82d39d51796b4b85e7bd125db9f51b30d0ff1b1945bb2f87fa8d234587ac2ca903fa4e9eeb5282864b7509f0d321f10990ae21f"}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x1b8, 0x16, 0xa, 0x802, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf82}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x2c88}}, 0x20050800) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x1, 0x0, 0x3f00, 0x3f00, 0x6, 0x0}) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a1014000000000b1700010014000200fc020000000000000000000000000001080017004e234e24140001002001"], 0x4c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 19.673298038s ago: executing program 6 (id=9738): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x18, &(0x7f0000002400)={[{}, {0xb, 0x4e00, "4a9d6571c1639a704b45d2"}, {}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) unshare(0x20040600) r0 = socket$unix(0x1, 0x1, 0x0) listen(r0, 0x802) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000140)='user_id', 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@smackfsroot}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x9}}, {@subj_user={'subj_user', 0x3d, 'group_id'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@dont_appraise}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/sg#\x00'}}]}}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000005400010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(0xffffffffffffffff, &(0x7f0000002440)={0x2020}, 0x2020) mmap(&(0x7f000033e000/0x1000)=nil, 0x1000, 0x2000000, 0x4132, r2, 0x7f0e7000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) 19.440851213s ago: executing program 8 (id=9739): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x10000007, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x4}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x12d142, 0x0) close(0xffffffffffffffff) r3 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x8000002, 0x1c0}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r7, 0x86, 0xa, 0x6, 0x1, 0x48f}, &(0x7f0000000140)=0x14) syz_open_dev$usbmon(&(0x7f00000021c0), 0x8000000000000000, 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r8, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) shutdown(r8, 0x2) 18.207001643s ago: executing program 6 (id=9740): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2000000020, 0x8000000000000001, 0x80000000000, 0x0, 0x10, 0x4, 0x0, 0x2000, 0x2, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x4, {0x3, 0x0, 0x0, 0x100000000, 0xf, 0x0, {0x3, 0x20000, 0x0, 0x4, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') r3 = socket$kcm(0x10, 0x400000002, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="a11e5be3dadb4d23a2e8ed359c2c94905153aa3b8ac5e5d947eb8b11985f56053b884886d7c92fd062a3d4698ceef5c4e8eeaf03013360fc4b384b550f5f35c9f9f5c4c419a0961ca8a962d38616fc3ee83afc6d6fb7093d7c74d83e311f890a83036cb7cb95b0dd60f1b7e71193595d5865640c01414dec6b652b14c4450faf513085e3fe2b8f21b13ead6ba9ace6756f4b837a1c490f69f03820bd79e0a32aaac02fdd02d672a7e5a3956ad7e7ee940958c8e4f9883c8ba708d9f27ba7a2de08047c019548722eb898726af65dfdfbc2a041e7d97e2fa4cb93992339"], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000002640)=""/4115, 0x1013}], 0x2}, 0x0) 17.961858432s ago: executing program 8 (id=9741): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = syz_io_uring_setup(0x109, &(0x7f00000000c0)={0x0, 0xda66, 0x80, 0x40003, 0x302}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x1d, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x8aa, 0x0, 0x41, 0x0, 0x0) close(r0) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r6, &(0x7f0000000080)="1e1b8a9ecdeeddac20eb23d7031b62c2b95fb35e2ff68d8c9f0a6bb56f94c2f1e51b49e2d958b2b67ddc64a7aead75d24d18148aee2a32c5bbecdcf55473c3cbb490dbdd31f2c19f7e28a68f97e95e88548e0fe318b5f515d9c6a4fb811e580fb184ab5795a7960c35de90c2463464b153e5c7edd4005f57e829f0b9a05c503439ca535e9d1b5e2b2506d992", 0x8c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff38, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000000cb00"/20, @ANYRES32=r7, @ANYBLOB="080004006401010108000200ac1414aa08000a0001000000"], 0x30}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 17.384087834s ago: executing program 6 (id=9742): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0xb6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e22, @loopback}}}, 0x84) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(r6, 0x5) accept4(r6, &(0x7f0000000240)=@x25, 0x0, 0x80800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x2}}, 0x2e) getsockopt(r10, 0x111, 0x6, 0x0, &(0x7f0000000080)) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) io_submit(0x0, 0xfffffffffffffe1a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x8d2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x2b4}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r11, 0x0, 0x0}) 16.682921217s ago: executing program 8 (id=9743): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0xaec, @loopback, 0x6096}, 0x1c) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1c) socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="549dfc6a5662000000000000"], 0x10}}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x26) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xff7ffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4040010) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000280)={0x48}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x8000000000000000}) 16.453189408s ago: executing program 6 (id=9744): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0xffff, 0x8000}, 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x77ea5858, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0), 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000040)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xe, &(0x7f00000005c0)=ANY=[@ANYRES64, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x6}, 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008420000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r8, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) 15.902766393s ago: executing program 8 (id=9745): creat(0x0, 0xd931d3864d39ddd8) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd) r2 = syz_open_procfs(0x0, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) syz_io_uring_setup(0x2016, 0x0, &(0x7f0000000280), &(0x7f0000000400)) r4 = fsopen(&(0x7f0000000240)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40804}, 0x20040045) r6 = fsmount(r4, 0x1, 0x0) fchdir(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 15.391018807s ago: executing program 6 (id=9746): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) uname(&(0x7f0000000180)=""/93) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2421}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0xc}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000002) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0xffff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x940e, 0x1}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r3}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 15.206906367s ago: executing program 6 (id=9747): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000480)="133045cf02628364eaa990be24d2b0ffc018d49240ecbe556ae1ce715a5987fd", 0x20}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000009c0), &(0x7f00000002c0)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x881c4814e9f13319, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x8c0, 0xa0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x80000001}, 0x8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x2d, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b", 0x83}], 0x1}, 0x0) connect$qrtr(r10, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000680)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x40800) recvmmsg$unix(r12, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/73, 0x49}], 0x1}}], 0x1, 0x10000, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) 7.00368543s ago: executing program 39 (id=9733): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80040, 0x61) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0xc) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x10010, r6, 0x837d8000) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x408, 0x2e8, 0x2e8, 0x408, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r7, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r7, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x0, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, 0x0) 4.00462207s ago: executing program 40 (id=9736): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf250c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2713, 0x0, &(0x7f00000000c0)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x2a3c, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x29e4, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x143c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY={0x11e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "1e2e08b3353506a52396bfd8a7edff0960a527ce2e9b5fe56b2bea6187a3890282613d2b5908f51c025a7112cc6fc5942f84175f50a19f7a76cd879e04f12e3400addc93905ef152fc8ddda919e8245b2d2acc81f9f99f17a9c658f31ce2fe6fdc74d819474d3c7e7ba27edf0c32c7e2d1b4ae39f3a390d4746ecaf1b4cae94788a1ff7c26b56809e655abb1e0b1f4201b968c3db6126740be5fc149ad2eeec3828f0e20d421482bb31962598fa2cbc48318f0b609c73d3c7f7eb41b1c6d1dc1b0961d1792fc193cebb18b1b5387d2f4b0fd6f07a40716ae1b7a7fa88066fc89293c2609b9ab1d11f3d9fb8119fbdf"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "4eccf57dcbd9021a04b1f153ffa1345810c9b6ece285fa6006"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xf, 0x1, "3bf386f355d1439a05a55d"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_DATA={0x17c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x80, 0x1, "f781067ff1ab2f60dbd28ade226a5699158de93385d0ef7aaf43a66db66cc2d1329d60719ff2b150e9cbe09f0d73c7aee60e6440d754397cba07f413cc1277b51c05be623f615e37c8fa495a6ab00d6cec41f9771452872a8e39235390fa1abd7fc3ebabd02c046f560b2386312092ec6031165d6fd8d8fe396e848a"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x17, 0x1, "b06e7e36bd3fffe1a086580e06fbb27222faea"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x79, 0x1, "5bce5fe01be1336d5ec1bd40e6fc2ab95a1361becd42fb53dd5c654ffe41a33c5e8ce63fd60f5d29e6a0ce0607576a2d2211b6820eb77bbd81ecce246e39133a6f0b33fd44f8b5fcd1fbbb48bfb7b03949c9c4e9243b790ec8fc08edd449d36232459718793fd517fa622337e7dd96c50fe22e4b35"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SREG={0x8}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x10000}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}}}, {0x40, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'cluster\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}]}, {0x378, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x69, 0x6, 0x1, 0x0, "cb5b29a95bd5faae5b2487c68f984e50b379b2548a4f4157381f0720b2c54498a9b2dca849cd3f6cb52ba26d76a1082bb110a651415468b2364347d91aa8a1d9848d8d80f324af4268ff3ab0eb97ba9ec91bb0ac7d3c9d60e53c6499f8b7a4cc8c0198d2a5"}, @NFTA_SET_ELEM_KEY_END={0x308, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "68eb26b5e8e70e331f9f46f34448ae438dbe6df2e71bb47199080037f77687396e3b8d9ebfec9c3eb4a13988c57bc7656a4fb7f41f0eebbed503656a80265a416b008b632e734bc133"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "47d15d2a351a95c9b25f144bb9490bef4632c7f998b5db13ff0e4630d0e16e239f3d98dd197d10345ef4fb9177019e585df0e05fc7bbfed04da42b3f963b8b1d99b29e6fc4d3ab3bb2ad706ab2b2504b4196c1be83e32df9010d9e570a4c5ea55de7844f0fc074057d9effa5e6fe43e57aa32f770420e0d4922785f6190fa39a97f5e3031b576f64d606370d5ec1abfc534a73c6d2b7ade3719656881b4f6808a7030a7d8f46c1ac148c9b6f03d9aabe38c18492344aefbf3c85344be3dcb6c580e537e65c1e88a2def62324f0092f34dc0432d5d0331f6205f30c2619050178d28c03328fe703bdec6c0942ba"}, @NFTA_DATA_VALUE={0x62, 0x1, "74e4207db74c15cb093540cda8c4928a4b3d464fbcbd3602758cde1428457ff1654ae7e0d9625c11f1f402164b5bfb5d6a670f56e43fb11fec811135d7d5d681e0b73426b20de38189126b264e9bc5f01b0fb252b86e16bfdbeb1377287d"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x83, 0x1, "2f79057ba42e9662a35ad511f673214447630b86beaaccea298b8f031df97c550c0539bbc13d5be2862946ec71cd4efea288d74335a1ca692b84754d4d1561ebca3f150defb5a3a11f09c4c2a1efb4713e1d22c50c48665aa7e0bc279006d3588b5f6098855ce76d354aa0b22124325e4056c108cef4bacb86fa7e707b2937"}]}]}, {0x121c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x10ac, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "c97dd4f2a0d9f866db3cecc0f856a6f6ed867ecb0929625452bb6171360fb11726c7e4d385ba356f22ed6f6680c0815db45f"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7fffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x140, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x130, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x120, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_INFO={0x6, 0x3, "71e4"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xc, 0x1, 'udplite\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0xdd, 0x3, "3931f1551ee1c4c0c3df1e9e3397d65f87326749e499b81a67be12bff759d0ed96d69721582f69d28575e5764279c65e9bbe1e0207f863c0b069a7c95c2fe8bfb8532aa2e6c46143994beb9ac4c7913913124ef3b6de9757b38c3a92913babdace25512b10d996c4507a3a13c64937400087e67f8737bb8f63b7fc1d2138889aafc1be6ca9b274a6028914c86a70245e8fe32036123aa0c74f6111d3ae89e5c858ca7f2675b82d39d51796b4b85e7bd125db9f51b30d0ff1b1945bb2f87fa8d234587ac2ca903fa4e9eeb5282864b7509f0d321f10990ae21f"}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x1b8, 0x16, 0xa, 0x802, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf82}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x2c88}}, 0x20050800) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x1, 0x0, 0x3f00, 0x3f00, 0x6, 0x0}) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a1014000000000b1700010014000200fc020000000000000000000000000001080017004e234e24140001002001"], 0x4c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 500.253392ms ago: executing program 41 (id=9745): creat(0x0, 0xd931d3864d39ddd8) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd) r2 = syz_open_procfs(0x0, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) syz_io_uring_setup(0x2016, 0x0, &(0x7f0000000280), &(0x7f0000000400)) r4 = fsopen(&(0x7f0000000240)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40804}, 0x20040045) r6 = fsmount(r4, 0x1, 0x0) fchdir(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 0s ago: executing program 42 (id=9747): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000480)="133045cf02628364eaa990be24d2b0ffc018d49240ecbe556ae1ce715a5987fd", 0x20}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000009c0), &(0x7f00000002c0)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x881c4814e9f13319, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x8c0, 0xa0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x80000001}, 0x8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x2d, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b", 0x83}], 0x1}, 0x0) connect$qrtr(r10, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000680)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x40800) recvmmsg$unix(r12, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/73, 0x49}], 0x1}}], 0x1, 0x10000, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) kernel console output (not intermixed with test programs): 879][ T5963] usb 1-1: USB disconnect, device number 15 [ 1909.035268][ T5963] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1909.520004][T24290] usb 10-1: new full-speed USB device number 43 using dummy_hcd [ 1909.568738][ T5963] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1909.680315][T24290] usb 10-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 1909.784072][T24290] usb 10-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1909.799675][T24290] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1909.807029][ T5963] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1909.818607][ T5963] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1909.839034][T24290] usb 10-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.80 [ 1909.858882][ T5963] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1909.875981][T24290] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.902723][ T5963] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1909.938201][T24290] usb 10-1: config 0 descriptor?? [ 1909.947693][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.099852][T24290] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1910.114734][ T5963] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1910.159745][ T5963] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1910.305425][ T1171] udevd[1171]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1910.516451][ T5997] netlink: 88 bytes leftover after parsing attributes in process `syz.9.9200'. [ 1910.631825][ T6019] kvm: user requested TSC rate below hardware speed [ 1911.677544][ T6027] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1912.246579][ T24] usb 1-1: USB disconnect, device number 16 [ 1912.586302][ T5904] usb 10-1: USB disconnect, device number 43 [ 1912.738834][ T5963] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1912.747309][ T1145] Bluetooth: hci9: Malformed HCI Event: 0x22 [ 1912.961773][ T5963] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1912.973597][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.001795][ T5963] usb 1-1: Product: syz [ 1913.010642][ T5963] usb 1-1: Manufacturer: syz [ 1913.015293][ T5963] usb 1-1: SerialNumber: syz [ 1913.026431][ T5963] usb 1-1: config 0 descriptor?? [ 1913.036311][ T5963] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 1913.045551][ T5963] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1913.054234][ T5963] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1913.243498][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1913.279228][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.288557][ T6069] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1913.394355][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9215'. [ 1913.434750][ T6071] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1914.356241][ T6083] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1914.682508][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.689149][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.519487][ T5904] usb 1-1: USB disconnect, device number 17 [ 1915.798756][ T5963] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1915.959613][ T5963] usb 9-1: Using ep0 maxpacket: 8 [ 1915.977134][ T5963] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1915.994392][ T5963] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.146124][ T6111] netlink: 75 bytes leftover after parsing attributes in process `syz.6.9236'. [ 1916.162495][ T5963] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1916.170153][ T5963] pvrusb2: ********** [ 1916.175680][ T5963] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1916.200685][ T5963] pvrusb2: Important functionality might not be entirely working. [ 1916.209160][ T5963] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1916.236109][ T5963] pvrusb2: ********** [ 1916.319069][ T2344] pvrusb2: Invalid write control endpoint [ 1916.381262][ T2344] pvrusb2: Invalid write control endpoint [ 1916.387050][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1916.423934][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1916.444311][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1916.467028][ T2344] pvrusb2: Device being rendered inoperable [ 1916.485503][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1916.502654][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1916.536049][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1916.545849][ T6124] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9241'. [ 1916.552936][ T5963] usb 9-1: USB disconnect, device number 52 [ 1916.571748][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1916.598579][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1916.895003][ T6133] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1917.197241][ T6139] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 1917.258510][ T6142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1917.972482][ T6158] netlink: 6040 bytes leftover after parsing attributes in process `syz.9.9249'. [ 1918.133742][ T6163] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9251'. [ 1918.229682][ T6167] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9253'. [ 1918.259124][ T5904] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1918.468883][ T5904] usb 10-1: Using ep0 maxpacket: 32 [ 1918.579941][ T5904] usb 10-1: config 4 has an invalid interface number: 8 but max is 0 [ 1918.589981][ T5904] usb 10-1: config 4 has no interface number 0 [ 1918.596677][ T5904] usb 10-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1918.606762][ T24] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1918.614836][ T5904] usb 10-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 1918.626289][ T5904] usb 10-1: config 4 interface 8 has no altsetting 0 [ 1918.635259][ T5904] usb 10-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 1918.668727][ T5904] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.676972][ T5904] usb 10-1: Product: syz [ 1918.682288][ T5904] usb 10-1: Manufacturer: syz [ 1918.687061][ T5904] usb 10-1: SerialNumber: syz [ 1918.768748][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 1918.775664][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1918.786361][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1918.795784][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1918.807475][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1918.819190][ T24] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1918.828367][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1918.892515][ T24] hub 9-1:1.0: bad descriptor, ignoring hub [ 1918.899283][ T24] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1918.915937][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 1918.955371][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 1918.962736][ T5904] opticon 10-1:4.8: opticon converter detected [ 1918.977360][ T24] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1918.992648][ T5904] usb 10-1: opticon converter now attached to ttyUSB0 [ 1919.004687][ T24] cdc_wdm 9-1:1.0: Unknown control protocol [ 1919.023657][ T5904] usb 10-1: USB disconnect, device number 44 [ 1919.044766][ T5904] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 1919.085171][ T5904] opticon 10-1:4.8: device disconnected [ 1919.108732][ T1802] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1919.210264][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1919.233499][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1919.262904][ T1802] usb 1-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 1919.273755][ T1802] usb 1-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1919.338575][ T1802] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1919.358257][ T1802] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.80 [ 1919.381689][ T1802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.456277][ T1802] usb 1-1: config 0 descriptor?? [ 1919.476139][ T1802] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1919.676587][ T6179] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9257'. [ 1919.688770][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9257'. [ 1920.031176][ T6186] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1920.090878][ T6185] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1920.102153][ T6185] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1920.115435][ T6185] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1920.123327][ T6185] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1920.133465][ T6185] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1920.142816][ T6185] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1920.151504][ T6185] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1920.163095][ T6185] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1920.174280][ T6185] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1920.234021][ T6185] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1920.642119][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9262'. [ 1920.666893][ T6199] binder: 6198:6199 unknown command 4294967295 [ 1920.673785][ T6199] binder: 6198:6199 ioctl c0306201 200000000100 returned -22 [ 1921.203819][ T6216] syzkaller0: entered promiscuous mode [ 1921.209702][ T6216] syzkaller0: entered allmulticast mode [ 1921.659025][ T5904] usb 9-1: reset high-speed USB device number 53 using dummy_hcd [ 1921.678772][T24290] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1921.828814][ T1802] usb 1-1: USB disconnect, device number 18 [ 1921.839238][ T5904] usb 9-1: device firmware changed [ 1921.844807][ T5904] usb 9-1: USB disconnect, device number 53 [ 1922.055070][ T1145] Bluetooth: hci0: command 0x0406 tx timeout [ 1922.130199][ T1145] Bluetooth: hci6: command 0x0406 tx timeout [ 1922.168840][ T5904] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1922.198718][ T1145] Bluetooth: hci9: command 0x0406 tx timeout [ 1922.198959][ T3641] Bluetooth: hci7: command 0x0406 tx timeout [ 1922.210899][ T3642] Bluetooth: hci8: command 0x0406 tx timeout [ 1922.328706][ T5904] usb 9-1: Using ep0 maxpacket: 8 [ 1922.335656][ T5904] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1922.351663][ T5904] usb 9-1: config 0 has no interface number 0 [ 1922.364638][ T5904] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1922.385412][ T5904] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1922.399740][ T5904] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1922.421820][ T5904] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1922.435170][ T5904] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1922.444834][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.459937][ T5904] usb 9-1: config 0 descriptor?? [ 1922.469085][ T5904] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1923.815325][ T6248] tipc: Enabled bearer , priority 0 [ 1923.825305][ T6248] syzkaller0: entered promiscuous mode [ 1923.833420][ T6248] syzkaller0: entered allmulticast mode [ 1923.854077][ T6248] tipc: Resetting bearer [ 1923.862988][ T6247] tipc: Resetting bearer [ 1923.876784][ T6247] tipc: Disabling bearer [ 1924.118800][ T3641] Bluetooth: hci0: command 0x0406 tx timeout [ 1924.200122][ T3641] Bluetooth: hci6: command 0x0406 tx timeout [ 1924.279013][ T3641] Bluetooth: hci9: command 0x0406 tx timeout [ 1924.285073][ T3641] Bluetooth: hci7: command 0x0406 tx timeout [ 1924.291320][ T3642] Bluetooth: hci8: command 0x0406 tx timeout [ 1924.418864][T24290] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1924.461282][ T6256] FAULT_INJECTION: forcing a failure. [ 1924.461282][ T6256] name failslab, interval 1, probability 0, space 0, times 0 [ 1924.474763][ T6256] CPU: 0 UID: 0 PID: 6256 Comm: syz.9.9280 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 1924.474794][ T6256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1924.474807][ T6256] Call Trace: [ 1924.474815][ T6256] [ 1924.474822][ T6256] dump_stack_lvl+0x189/0x250 [ 1924.474862][ T6256] ? __pfx____ratelimit+0x10/0x10 [ 1924.474879][ T6256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1924.474891][ T6256] ? __pfx__printk+0x10/0x10 [ 1924.474918][ T6256] should_fail_ex+0x414/0x560 [ 1924.474945][ T6256] should_failslab+0xa8/0x100 [ 1924.474972][ T6256] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1924.474996][ T6256] ? skb_clone+0x212/0x3a0 [ 1924.475017][ T6256] skb_clone+0x212/0x3a0 [ 1924.475036][ T6256] __netlink_deliver_tap+0x404/0x850 [ 1924.475054][ T6256] ? netlink_deliver_tap+0x2e/0x1b0 [ 1924.475068][ T6256] netlink_deliver_tap+0x19c/0x1b0 [ 1924.475089][ T6256] netlink_unicast+0x7fa/0x9e0 [ 1924.475114][ T6256] ? __pfx_netlink_unicast+0x10/0x10 [ 1924.475138][ T6256] ? netlink_sendmsg+0x642/0xb30 [ 1924.475162][ T6256] ? skb_put+0x11b/0x210 [ 1924.475180][ T6256] netlink_sendmsg+0x805/0xb30 [ 1924.475207][ T6256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1924.475233][ T6256] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1924.475244][ T6256] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1924.475257][ T6256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1924.475271][ T6256] __sock_sendmsg+0x219/0x270 [ 1924.475293][ T6256] ____sys_sendmsg+0x505/0x830 [ 1924.475314][ T6256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1924.475336][ T6256] ? import_iovec+0x74/0xa0 [ 1924.475357][ T6256] ___sys_sendmsg+0x21f/0x2a0 [ 1924.475376][ T6256] ? __pfx____sys_sendmsg+0x10/0x10 [ 1924.475405][ T6256] ? __fget_files+0x2a/0x420 [ 1924.475416][ T6256] ? __fget_files+0x3a0/0x420 [ 1924.475427][ T6256] __x64_sys_sendmsg+0x19b/0x260 [ 1924.475438][ T6256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1924.475454][ T6256] ? __pfx_ksys_write+0x10/0x10 [ 1924.475474][ T6256] ? rcu_is_watching+0x15/0xb0 [ 1924.475494][ T6256] ? rcu_is_watching+0x15/0xb0 [ 1924.475513][ T6256] do_syscall_64+0xfa/0x3b0 [ 1924.475545][ T6256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1924.475562][ T6256] ? clear_bhb_loop+0x60/0xb0 [ 1924.475581][ T6256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1924.475592][ T6256] RIP: 0033:0x7f6a3458ebe9 [ 1924.475603][ T6256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1924.475613][ T6256] RSP: 002b:00007f6a35464038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1924.475630][ T6256] RAX: ffffffffffffffda RBX: 00007f6a347b5fa0 RCX: 00007f6a3458ebe9 [ 1924.475643][ T6256] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 1924.475656][ T6256] RBP: 00007f6a35464090 R08: 0000000000000000 R09: 0000000000000000 [ 1924.475668][ T6256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1924.475680][ T6256] R13: 00007f6a347b6038 R14: 00007f6a347b5fa0 R15: 00007f6a348dfa28 [ 1924.475699][ T6256] [ 1924.795050][ T5963] usb 9-1: USB disconnect, device number 54 [ 1924.807492][ T5963] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1924.888994][T24290] usb 1-1: Using ep0 maxpacket: 32 [ 1924.895662][T24290] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1924.940285][T24290] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1924.950569][T24290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.958929][T24290] usb 1-1: Product: syz [ 1924.963300][T24290] usb 1-1: Manufacturer: syz [ 1924.967913][T24290] usb 1-1: SerialNumber: syz [ 1924.973710][T24290] usb 1-1: config 0 descriptor?? [ 1924.979278][ T6253] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1925.003929][T24290] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input100 [ 1925.228610][T17482] usb 1-1: USB disconnect, device number 19 [ 1925.228638][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1925.326550][ T6268] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1926.376986][ T6279] FAULT_INJECTION: forcing a failure. [ 1926.376986][ T6279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1926.427235][ T6279] CPU: 0 UID: 0 PID: 6279 Comm: syz.9.9286 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 1926.427267][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1926.427280][ T6279] Call Trace: [ 1926.427288][ T6279] [ 1926.427296][ T6279] dump_stack_lvl+0x189/0x250 [ 1926.427326][ T6279] ? __pfx____ratelimit+0x10/0x10 [ 1926.427352][ T6279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1926.427373][ T6279] ? __pfx__printk+0x10/0x10 [ 1926.427395][ T6279] ? __might_fault+0xb0/0x130 [ 1926.427420][ T6279] ? __pfx_stack_trace_save+0x10/0x10 [ 1926.427443][ T6279] ? rcu_is_watching+0x15/0xb0 [ 1926.427461][ T6279] should_fail_ex+0x414/0x560 [ 1926.427486][ T6279] _copy_to_iter+0x3f5/0x16f0 [ 1926.427509][ T6279] ? __pfx__copy_to_iter+0x10/0x10 [ 1926.427532][ T6279] __skb_datagram_iter+0x41a/0x990 [ 1926.427554][ T6279] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1926.427578][ T6279] skb_copy_datagram_iter+0xc5/0x230 [ 1926.427602][ T6279] unix_stream_read_actor+0x6c/0xb0 [ 1926.427622][ T6279] unix_stream_read_generic+0xac0/0x2480 [ 1926.427653][ T6279] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 1926.427673][ T6279] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 1926.427696][ T6279] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1926.427727][ T6279] unix_stream_recvmsg+0x15d/0x1b0 [ 1926.427752][ T6279] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1926.427774][ T6279] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 1926.427795][ T6279] ? unwind_next_frame+0xa5/0x2390 [ 1926.427816][ T6279] ? aa_sock_msg_perm+0xda/0x1d0 [ 1926.427849][ T6279] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1926.427871][ T6279] ? security_socket_recvmsg+0x7e/0x2e0 [ 1926.427893][ T6279] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1926.427915][ T6279] sock_recvmsg+0x229/0x270 [ 1926.427942][ T6279] ____sys_recvmsg+0x1c9/0x460 [ 1926.427966][ T6279] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1926.427992][ T6279] ? import_iovec+0x74/0xa0 [ 1926.428014][ T6279] ___sys_recvmsg+0x1b5/0x510 [ 1926.428037][ T6279] ? __pfx____sys_recvmsg+0x10/0x10 [ 1926.428059][ T6279] ? __fget_files+0x2a/0x420 [ 1926.428075][ T6279] ? rcu_is_watching+0x15/0xb0 [ 1926.428106][ T6279] ? __fget_files+0x3a0/0x420 [ 1926.428128][ T6279] do_recvmmsg+0x307/0x770 [ 1926.428152][ T6279] ? __pfx_do_recvmmsg+0x10/0x10 [ 1926.428177][ T6279] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1926.428212][ T6279] __x64_sys_recvmmsg+0x190/0x240 [ 1926.428233][ T6279] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1926.428252][ T6279] ? rcu_is_watching+0x15/0xb0 [ 1926.428272][ T6279] ? rcu_is_watching+0x15/0xb0 [ 1926.428291][ T6279] do_syscall_64+0xfa/0x3b0 [ 1926.428317][ T6279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1926.428335][ T6279] ? clear_bhb_loop+0x60/0xb0 [ 1926.428356][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1926.428373][ T6279] RIP: 0033:0x7f6a3458ebe9 [ 1926.428390][ T6279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1926.428406][ T6279] RSP: 002b:00007f6a35464038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1926.428429][ T6279] RAX: ffffffffffffffda RBX: 00007f6a347b5fa0 RCX: 00007f6a3458ebe9 [ 1926.428442][ T6279] RDX: 040000000000013c RSI: 00002000000034c0 RDI: 0000000000000008 [ 1926.428454][ T6279] RBP: 00007f6a35464090 R08: 0000000000000000 R09: 0000000000000000 [ 1926.428467][ T6279] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000002 [ 1926.428479][ T6279] R13: 00007f6a347b6038 R14: 00007f6a347b5fa0 R15: 00007f6a348dfa28 [ 1926.428500][ T6279] [ 1926.923682][ T6293] kvm: user requested TSC rate below hardware speed [ 1927.353394][ T6302] netlink: 'syz.0.9292': attribute type 25 has an invalid length. [ 1927.353424][ T6302] netlink: 'syz.0.9292': attribute type 7 has an invalid length. [ 1927.728739][T24290] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1927.898731][T24290] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1927.908175][T24290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.916280][T24290] usb 1-1: Product: syz [ 1927.932826][T24290] usb 1-1: Manufacturer: syz [ 1927.937467][T24290] usb 1-1: SerialNumber: syz [ 1927.960475][T24290] usb 1-1: config 0 descriptor?? [ 1927.970545][T24290] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 1927.978785][T24290] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1927.986975][T24290] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1928.173280][ T6305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.181951][ T6305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.258983][ T5904] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1928.307467][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9293'. [ 1928.490802][ T5904] usb 9-1: Using ep0 maxpacket: 16 [ 1928.515253][ T5904] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 207, changing to 7 [ 1928.549900][ T5904] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59041, setting to 1024 [ 1928.580085][ T6327] ptrace attach of "./syz-executor exec"[1137] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ [ 1928.582261][ T5904] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1928.733302][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.743494][ T5904] usb 9-1: config 0 descriptor?? [ 1928.757212][ T5904] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1930.471177][T24290] usb 1-1: USB disconnect, device number 20 [ 1930.516691][ T6349] IPv6: addrconf: prefix option has invalid lifetime [ 1930.758202][ T6356] netlink: 88 bytes leftover after parsing attributes in process `syz.9.9307'. [ 1930.770784][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9307'. [ 1931.085967][T24290] usb 9-1: USB disconnect, device number 55 [ 1931.468885][T24290] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1931.618783][T24290] usb 9-1: device descriptor read/64, error -71 [ 1931.635882][ T6363] pim6reg: entered allmulticast mode [ 1931.662413][ T6363] netlink: 'syz.0.9309': attribute type 10 has an invalid length. [ 1931.670437][ T6363] macvlan0: entered allmulticast mode [ 1931.870346][ T6369] tipc: Enabled bearer , priority 0 [ 1931.878747][T24290] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1931.893629][ T6369] syzkaller0: entered promiscuous mode [ 1931.903199][ T6369] syzkaller0: entered allmulticast mode [ 1931.924611][ T6369] tipc: Resetting bearer [ 1931.936913][ T6368] tipc: Resetting bearer [ 1931.952623][ T6368] tipc: Disabling bearer [ 1932.008817][T24290] usb 9-1: device descriptor read/64, error -71 [ 1932.120357][T24290] usb usb9-port1: attempt power cycle [ 1932.451735][ T6360] pim6reg: left allmulticast mode [ 1932.468831][T24290] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1932.523440][T24290] usb 9-1: device descriptor read/8, error -71 [ 1932.771815][T24290] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1932.819533][T24290] usb 9-1: device descriptor read/8, error -71 [ 1932.898954][ T6390] pim6reg: entered allmulticast mode [ 1932.922516][ T6390] netlink: 'syz.0.9316': attribute type 10 has an invalid length. [ 1932.930641][T24290] usb usb9-port1: unable to enumerate USB device [ 1933.720591][ T6386] pim6reg: left allmulticast mode [ 1934.432721][ T6419] FAULT_INJECTION: forcing a failure. [ 1934.432721][ T6419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1934.455789][ T6419] CPU: 0 UID: 0 PID: 6419 Comm: syz.9.9327 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 1934.455821][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1934.455833][ T6419] Call Trace: [ 1934.455840][ T6419] [ 1934.455849][ T6419] dump_stack_lvl+0x189/0x250 [ 1934.455876][ T6419] ? __pfx____ratelimit+0x10/0x10 [ 1934.455901][ T6419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1934.455921][ T6419] ? __pfx__printk+0x10/0x10 [ 1934.455944][ T6419] ? __might_fault+0xb0/0x130 [ 1934.455968][ T6419] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 1934.456004][ T6419] ? rcu_is_watching+0x15/0xb0 [ 1934.456023][ T6419] should_fail_ex+0x414/0x560 [ 1934.456048][ T6419] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 1934.456076][ T6419] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 1934.456102][ T6419] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1934.456127][ T6419] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1934.456151][ T6419] ? read_tsc+0x9/0x20 [ 1934.456179][ T6419] ? ktime_get+0x1cb/0x1f0 [ 1934.456199][ T6419] ? lapic_next_event+0x11/0x20 [ 1934.456217][ T6419] ? clockevents_program_min_delta+0x2fc/0x350 [ 1934.456242][ T6419] ? rcu_is_watching+0x15/0xb0 [ 1934.456260][ T6419] ? fpu__alloc_mathframe+0xad/0x130 [ 1934.456285][ T6419] get_sigframe+0x58d/0x7d0 [ 1934.456313][ T6419] ? __pfx_get_sigframe+0x10/0x10 [ 1934.456337][ T6419] ? rcu_is_watching+0x15/0xb0 [ 1934.456357][ T6419] x64_setup_rt_frame+0x15b/0xd40 [ 1934.456385][ T6419] ? _raw_spin_unlock_irq+0x29/0x50 [ 1934.456407][ T6419] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1934.456427][ T6419] ? get_signal+0x1151/0x1340 [ 1934.456447][ T6419] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1934.456476][ T6419] arch_do_signal_or_restart+0x3d7/0x750 [ 1934.456504][ T6419] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1934.456532][ T6419] ? lock_release+0x4b/0x3e0 [ 1934.456556][ T6419] ? __pfx_do_readv+0x10/0x10 [ 1934.456591][ T6419] ? rcu_is_watching+0x15/0xb0 [ 1934.456608][ T6419] ? rcu_is_watching+0x15/0xb0 [ 1934.456626][ T6419] exit_to_user_mode_loop+0x75/0x110 [ 1934.456651][ T6419] do_syscall_64+0x2bd/0x3b0 [ 1934.456677][ T6419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.456694][ T6419] ? clear_bhb_loop+0x60/0xb0 [ 1934.456714][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.456731][ T6419] RIP: 0033:0x7f6a3458ebe7 [ 1934.456747][ T6419] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1934.456762][ T6419] RSP: 002b:00007f6a35464038 EFLAGS: 00000246 [ 1934.456780][ T6419] RAX: 0000000000000013 RBX: 00007f6a347b5fa0 RCX: 00007f6a3458ebe9 [ 1934.456793][ T6419] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 0000000000000003 [ 1934.456805][ T6419] RBP: 00007f6a35464090 R08: 0000000000000000 R09: 0000000000000000 [ 1934.456818][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1934.456829][ T6419] R13: 00007f6a347b6038 R14: 00007f6a347b5fa0 R15: 00007f6a348dfa28 [ 1934.456848][ T6419] [ 1934.457324][ T6416] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1935.101826][ T6425] tipc: Enabled bearer , priority 0 [ 1935.124305][ T6425] syzkaller0: entered promiscuous mode [ 1935.138719][ T6425] syzkaller0: entered allmulticast mode [ 1935.161845][ T6425] tipc: Resetting bearer [ 1935.173233][ T6424] tipc: Resetting bearer [ 1935.197756][ T6424] tipc: Disabling bearer [ 1935.955839][ T6437] tipc: Enabled bearer , priority 0 [ 1936.114587][ T6437] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1936.760099][ T6432] tipc: Disabling bearer [ 1937.534794][ T6459] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1937.834738][ T6467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1938.586557][ T6475] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1938.595724][T17482] IPVS: starting estimator thread 0... [ 1938.768783][ T6477] IPVS: using max 46 ests per chain, 110400 per kthread [ 1939.349958][T17482] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1939.513686][T17482] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1939.533058][T17482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.557789][T17482] usb 1-1: Product: syz [ 1939.570936][T17482] usb 1-1: Manufacturer: syz [ 1939.579058][T17482] usb 1-1: SerialNumber: syz [ 1939.591308][T17482] usb 1-1: config 0 descriptor?? [ 1939.603041][T17482] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 1939.613417][T17482] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1939.635235][T17482] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1939.815347][ T6484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1939.871138][ T6484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1939.936143][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9341'. [ 1940.558783][ T5963] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1940.711172][ T5963] usb 10-1: Using ep0 maxpacket: 8 [ 1940.720527][ T5963] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1940.729991][ T5963] usb 10-1: config 0 has no interface number 0 [ 1940.738449][ T5963] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1940.750533][ T5963] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1940.777701][ T5963] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1940.808426][ T5963] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1940.868069][ T5963] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1940.878826][ T5963] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.891625][ T5963] usb 10-1: config 0 descriptor?? [ 1940.907371][ T5963] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1941.064510][ T6521] pim6reg: entered allmulticast mode [ 1941.098467][ T6521] netlink: 'syz.8.9352': attribute type 10 has an invalid length. [ 1941.126756][ T6521] macvlan0: entered promiscuous mode [ 1941.142755][ T6521] macvlan0: entered allmulticast mode [ 1941.164527][ T6521] veth1_vlan: entered allmulticast mode [ 1941.228965][ T6521] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1941.369795][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1941.378591][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1941.645528][T17482] usb 10-1: USB disconnect, device number 46 [ 1941.652565][T17482] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1941.901057][ T6513] pim6reg: left allmulticast mode [ 1942.118796][T24290] usb 1-1: USB disconnect, device number 21 [ 1943.115621][ T6543] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1944.140742][ T6568] pim6reg: entered allmulticast mode [ 1944.174266][ T6568] netlink: 'syz.6.9353': attribute type 10 has an invalid length. [ 1944.189584][ T6568] macvlan0: entered promiscuous mode [ 1944.215809][ T6568] macvlan0: entered allmulticast mode [ 1944.226206][ T6568] veth1_vlan: entered allmulticast mode [ 1944.233219][ T5904] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1944.244443][ T6568] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1944.396753][ T5904] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1944.418184][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.468939][ T5904] usb 1-1: Product: syz [ 1944.473141][ T5904] usb 1-1: Manufacturer: syz [ 1944.509507][ T5904] usb 1-1: SerialNumber: syz [ 1944.537349][ T5904] usb 1-1: config 0 descriptor?? [ 1944.573152][ T5904] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 1944.592960][ T5904] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1944.609456][ T5904] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1944.620469][ T6523] pim6reg: left allmulticast mode [ 1944.776613][ T6570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1944.829964][ T6570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1944.922409][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9364'. [ 1945.001035][ T6581] syzkaller0: entered promiscuous mode [ 1945.017887][ T6581] syzkaller0: entered allmulticast mode [ 1945.968582][ T6614] netlink: 88 bytes leftover after parsing attributes in process `syz.8.9373'. [ 1945.992984][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9373'. [ 1946.833384][ T6620] tipc: Enabled bearer , priority 0 [ 1946.921871][ T6620] syzkaller0: entered promiscuous mode [ 1946.938838][ T6620] syzkaller0: entered allmulticast mode [ 1946.973993][ T6619] tipc: Resetting bearer [ 1946.995532][ T5963] usb 1-1: USB disconnect, device number 22 [ 1947.040228][ T6630] netlink: 'syz.0.9381': attribute type 1 has an invalid length. [ 1947.053337][ T6631] netlink: 'syz.0.9381': attribute type 1 has an invalid length. [ 1947.062797][ T6619] tipc: Disabling bearer [ 1947.098836][ T6630] netlink: 'syz.0.9381': attribute type 2 has an invalid length. [ 1947.100879][ T6631] netlink: 'syz.0.9381': attribute type 2 has an invalid length. [ 1947.246220][ T6638] binder: 6626:6638 ioctl c0306201 200000000100 returned -11 [ 1947.257164][ T6638] fuse: Bad value for 'fd' [ 1947.754379][ T6647] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1948.058748][ T1802] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1948.373451][ T1802] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1948.404896][ T1802] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1948.435276][ T1802] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1948.465610][ T1802] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.495307][ T6652] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1948.504417][ T1802] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1948.788394][ T1802] usb 9-1: USB disconnect, device number 60 [ 1949.464543][ T6687] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1950.084835][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9398'. [ 1950.127814][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1950.162448][ T6699] bridge_slave_1 (unregistering): left allmulticast mode [ 1950.177210][ T6699] bridge_slave_1 (unregistering): left promiscuous mode [ 1950.194889][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1950.231123][ T6705] trusted_key: encrypted_key: insufficient parameters specified [ 1950.470512][ T6716] tipc: Enabled bearer , priority 0 [ 1950.485692][ T6716] syzkaller0: entered promiscuous mode [ 1950.498350][ T6716] syzkaller0: entered allmulticast mode [ 1950.589619][ T6713] FAULT_INJECTION: forcing a failure. [ 1950.589619][ T6713] name failslab, interval 1, probability 0, space 0, times 0 [ 1950.602697][ T6713] CPU: 1 UID: 0 PID: 6713 Comm: syz.9.9403 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 1950.602717][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1950.602725][ T6713] Call Trace: [ 1950.602730][ T6713] [ 1950.602735][ T6713] dump_stack_lvl+0x189/0x250 [ 1950.602753][ T6713] ? __pfx____ratelimit+0x10/0x10 [ 1950.602768][ T6713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1950.602780][ T6713] ? __pfx__printk+0x10/0x10 [ 1950.602795][ T6713] ? __pfx___might_resched+0x10/0x10 [ 1950.602805][ T6713] ? lock_acquire+0x5f/0x360 [ 1950.602821][ T6713] should_fail_ex+0x414/0x560 [ 1950.602835][ T6713] should_failslab+0xa8/0x100 [ 1950.602851][ T6713] __kmalloc_noprof+0xcb/0x4f0 [ 1950.602864][ T6713] ? kfree+0x4d/0x440 [ 1950.602876][ T6713] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1950.602888][ T6713] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1950.602899][ T6713] ? tomoyo_domain+0xd9/0x130 [ 1950.602911][ T6713] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1950.602924][ T6713] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1950.602937][ T6713] ? lock_release+0x4b/0x3e0 [ 1950.602951][ T6713] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1950.602966][ T6713] ? rcu_is_watching+0x15/0xb0 [ 1950.602977][ T6713] ? lock_release+0x4b/0x3e0 [ 1950.602990][ T6713] ? vfs_write+0x956/0xb30 [ 1950.603005][ T6713] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 1950.603023][ T6713] ? lock_release+0x4b/0x3e0 [ 1950.603038][ T6713] ? __fget_files+0x2a/0x420 [ 1950.603047][ T6713] ? __fget_files+0x3a0/0x420 [ 1950.603055][ T6713] ? __fget_files+0x2a/0x420 [ 1950.603065][ T6713] security_file_ioctl+0xcb/0x2d0 [ 1950.603079][ T6713] __se_sys_ioctl+0x47/0x170 [ 1950.603091][ T6713] do_syscall_64+0xfa/0x3b0 [ 1950.603105][ T6713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1950.603116][ T6713] ? clear_bhb_loop+0x60/0xb0 [ 1950.603128][ T6713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1950.603138][ T6713] RIP: 0033:0x7f6a3458ebe9 [ 1950.603148][ T6713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1950.603158][ T6713] RSP: 002b:00007f6a35464038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1950.603173][ T6713] RAX: ffffffffffffffda RBX: 00007f6a347b5fa0 RCX: 00007f6a3458ebe9 [ 1950.603181][ T6713] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 1950.603189][ T6713] RBP: 00007f6a35464090 R08: 0000000000000000 R09: 0000000000000000 [ 1950.603196][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1950.603203][ T6713] R13: 00007f6a347b6038 R14: 00007f6a347b5fa0 R15: 00007f6a348dfa28 [ 1950.603214][ T6713] [ 1950.603220][ T6713] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1950.810801][ C1] vkms_vblank_simulate: vblank timer overrun [ 1950.941763][ T6713] tipc: Resetting bearer [ 1950.958316][ T6712] tipc: Resetting bearer [ 1950.968472][ T6712] tipc: Disabling bearer [ 1951.500554][ T6734] tipc: Enabled bearer , priority 0 [ 1951.516114][ T6734] syzkaller0: entered promiscuous mode [ 1951.530535][ T6734] syzkaller0: entered allmulticast mode [ 1951.609004][ T6733] tipc: Resetting bearer [ 1951.646995][ T6731] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1951.706966][ T6733] tipc: Disabling bearer [ 1951.900069][ T6736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1952.411073][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9411'. [ 1952.454774][ T6741] bridge0: entered promiscuous mode [ 1952.460286][ T6741] macvtap2: entered promiscuous mode [ 1952.480777][ T6741] macvtap2: entered allmulticast mode [ 1952.533486][ T6741] bridge0: entered allmulticast mode [ 1952.591408][ T6743] bridge0: left allmulticast mode [ 1952.629822][ T6743] bridge0: left promiscuous mode [ 1952.985724][ T6760] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1953.290475][ T6764] netlink: 'syz.8.9416': attribute type 10 has an invalid length. [ 1953.326644][ T6759] pim6reg: entered allmulticast mode [ 1953.362241][ T6764] veth1_vlan: left allmulticast mode [ 1953.492592][ T6768] pim6reg: entered allmulticast mode [ 1953.602910][ T6768] netlink: 'syz.6.9418': attribute type 10 has an invalid length. [ 1953.654868][ T6768] veth1_vlan: left allmulticast mode [ 1953.750725][ T6773] tipc: Enabled bearer , priority 0 [ 1953.804919][ T6773] syzkaller0: entered promiscuous mode [ 1953.881723][ T6773] syzkaller0: entered allmulticast mode [ 1954.010429][ T6772] tipc: Resetting bearer [ 1954.023947][ T6772] tipc: Disabling bearer [ 1954.050632][ T6761] pim6reg: left allmulticast mode [ 1954.140044][ T6752] pim6reg: left allmulticast mode [ 1954.657686][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9425'. [ 1954.683090][ T6789] FAULT_INJECTION: forcing a failure. [ 1954.683090][ T6789] name failslab, interval 1, probability 0, space 0, times 0 [ 1954.713343][ T6789] CPU: 0 UID: 0 PID: 6789 Comm: syz.8.9425 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 1954.713367][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1954.713375][ T6789] Call Trace: [ 1954.713380][ T6789] [ 1954.713385][ T6789] dump_stack_lvl+0x189/0x250 [ 1954.713403][ T6789] ? __pfx____ratelimit+0x10/0x10 [ 1954.713418][ T6789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1954.713430][ T6789] ? __pfx__printk+0x10/0x10 [ 1954.713445][ T6789] ? __pfx___might_resched+0x10/0x10 [ 1954.713456][ T6789] ? lock_acquire+0x5f/0x360 [ 1954.713471][ T6789] should_fail_ex+0x414/0x560 [ 1954.713485][ T6789] should_failslab+0xa8/0x100 [ 1954.713501][ T6789] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 1954.713515][ T6789] ? __d_alloc+0x36/0x7a0 [ 1954.713527][ T6789] __d_alloc+0x36/0x7a0 [ 1954.713537][ T6789] ? rcu_is_watching+0x15/0xb0 [ 1954.713549][ T6789] d_alloc_parallel+0xe5/0x15e0 [ 1954.713560][ T6789] ? unwind_next_frame+0xa5/0x2390 [ 1954.713573][ T6789] ? __asan_memset+0x22/0x50 [ 1954.713585][ T6789] ? number+0xd18/0xf60 [ 1954.713604][ T6789] ? number+0x41/0xf60 [ 1954.713615][ T6789] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1954.713626][ T6789] ? __d_lookup+0x66/0x780 [ 1954.713637][ T6789] ? rcu_is_watching+0x15/0xb0 [ 1954.713647][ T6789] ? __raw_spin_lock_init+0x45/0x100 [ 1954.713660][ T6789] ? __init_waitqueue_head+0xa9/0x150 [ 1954.713674][ T6789] __lookup_slow+0x116/0x3d0 [ 1954.713686][ T6789] ? __pfx___lookup_slow+0x10/0x10 [ 1954.713699][ T6789] ? d_lookup+0x8a/0xa0 [ 1954.713710][ T6789] ? lookup_noperm+0x112/0x220 [ 1954.713722][ T6789] simple_start_creating+0xfd/0x1e0 [ 1954.713732][ T6789] ? __pfx_simple_start_creating+0x10/0x10 [ 1954.713744][ T6789] start_creating+0x10f/0x180 [ 1954.713760][ T6789] __debugfs_create_file+0x79/0x4f0 [ 1954.713775][ T6789] debugfs_create_file_full+0x3f/0x60 [ 1954.713790][ T6789] ref_tracker_dir_debugfs+0x14e/0x270 [ 1954.713805][ T6789] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1954.713824][ T6789] ? rcu_is_watching+0x15/0xb0 [ 1954.713833][ T6789] ? alloc_netdev_mqs+0xa3/0x11b0 [ 1954.713849][ T6789] ? trace_kmalloc+0x1f/0xd0 [ 1954.713862][ T6789] ? __raw_spin_lock_init+0x45/0x100 [ 1954.713875][ T6789] alloc_netdev_mqs+0x26f/0x11b0 [ 1954.713887][ T6789] ? __pfx_ppp_setup+0x10/0x10 [ 1954.713898][ T6789] rtnl_create_link+0x31f/0xd10 [ 1954.713913][ T6789] rtnl_newlink_create+0x25c/0xb00 [ 1954.713924][ T6789] ? __pfx___nla_validate_parse+0x10/0x10 [ 1954.713941][ T6789] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1954.713952][ T6789] ? __pfx___mutex_lock+0x10/0x10 [ 1954.713969][ T6789] ? ns_capable+0x8a/0xf0 [ 1954.713980][ T6789] rtnl_newlink+0x16d6/0x1c70 [ 1954.713995][ T6789] ? netlink_sendmsg+0x805/0xb30 [ 1954.714012][ T6789] ? __pfx_rtnl_newlink+0x10/0x10 [ 1954.714030][ T6789] ? rcu_is_watching+0x15/0xb0 [ 1954.714043][ T6789] ? nlmon_xmit+0xb0/0x100 [ 1954.714053][ T6789] ? kmem_cache_free+0x18f/0x400 [ 1954.714067][ T6789] ? rcu_is_watching+0x15/0xb0 [ 1954.714078][ T6789] ? __dev_queue_xmit+0x27b/0x3b50 [ 1954.714090][ T6789] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1954.714101][ T6789] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1954.714111][ T6789] ? __dev_queue_xmit+0x27b/0x3b50 [ 1954.714122][ T6789] ? lock_release+0x4b/0x3e0 [ 1954.714136][ T6789] ? __dev_queue_xmit+0x27b/0x3b50 [ 1954.714146][ T6789] ? __dev_queue_xmit+0x27b/0x3b50 [ 1954.714158][ T6789] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1954.714172][ T6789] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1954.714186][ T6789] ? lock_release+0x4b/0x3e0 [ 1954.714199][ T6789] ? bpf_lsm_capable+0x9/0x20 [ 1954.714213][ T6789] ? security_capable+0x7e/0x2e0 [ 1954.714229][ T6789] ? __pfx_rtnl_newlink+0x10/0x10 [ 1954.714243][ T6789] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1954.714257][ T6789] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1954.714271][ T6789] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1954.714284][ T6789] ? ref_tracker_free+0x63a/0x7d0 [ 1954.714303][ T6789] ? __asan_memcpy+0x40/0x70 [ 1954.714324][ T6789] ? __pfx_ref_tracker_free+0x10/0x10 [ 1954.714352][ T6789] netlink_rcv_skb+0x208/0x470 [ 1954.714377][ T6789] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1954.714402][ T6789] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1954.714435][ T6789] netlink_unicast+0x82c/0x9e0 [ 1954.714461][ T6789] ? __pfx_netlink_unicast+0x10/0x10 [ 1954.714485][ T6789] ? netlink_sendmsg+0x642/0xb30 [ 1954.714509][ T6789] ? skb_put+0x11b/0x210 [ 1954.714527][ T6789] netlink_sendmsg+0x805/0xb30 [ 1954.714556][ T6789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1954.714583][ T6789] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1954.714610][ T6789] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1954.714630][ T6789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1954.714656][ T6789] __sock_sendmsg+0x219/0x270 [ 1954.714681][ T6789] ____sys_sendmsg+0x505/0x830 [ 1954.714702][ T6789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1954.714724][ T6789] ? import_iovec+0x74/0xa0 [ 1954.714746][ T6789] ___sys_sendmsg+0x21f/0x2a0 [ 1954.714765][ T6789] ? __pfx____sys_sendmsg+0x10/0x10 [ 1954.714797][ T6789] ? __fget_files+0x2a/0x420 [ 1954.714813][ T6789] ? __fget_files+0x3a0/0x420 [ 1954.714832][ T6789] __x64_sys_sendmsg+0x19b/0x260 [ 1954.714851][ T6789] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1954.714873][ T6789] ? __pfx_ksys_write+0x10/0x10 [ 1954.714894][ T6789] ? rcu_is_watching+0x15/0xb0 [ 1954.714914][ T6789] ? rcu_is_watching+0x15/0xb0 [ 1954.714933][ T6789] do_syscall_64+0xfa/0x3b0 [ 1954.714959][ T6789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1954.714977][ T6789] ? clear_bhb_loop+0x60/0xb0 [ 1954.714998][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1954.715016][ T6789] RIP: 0033:0x7f111a18ebe9 [ 1954.715032][ T6789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1954.715049][ T6789] RSP: 002b:00007f111b0ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1954.715071][ T6789] RAX: ffffffffffffffda RBX: 00007f111a3b5fa0 RCX: 00007f111a18ebe9 [ 1954.715085][ T6789] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1954.715097][ T6789] RBP: 00007f111b0ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1954.715109][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1954.715121][ T6789] R13: 00007f111a3b6038 R14: 00007f111a3b5fa0 R15: 00007f111a4dfa28 [ 1954.715141][ T6789] [ 1956.201025][ T5904] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1956.215366][ T6804] FAULT_INJECTION: forcing a failure. [ 1956.215366][ T6804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1956.263480][ T6804] CPU: 1 UID: 0 PID: 6804 Comm: syz.6.9430 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 1956.263515][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1956.263528][ T6804] Call Trace: [ 1956.263536][ T6804] [ 1956.263545][ T6804] dump_stack_lvl+0x189/0x250 [ 1956.263573][ T6804] ? __pfx____ratelimit+0x10/0x10 [ 1956.263598][ T6804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1956.263620][ T6804] ? __pfx__printk+0x10/0x10 [ 1956.263643][ T6804] ? __might_fault+0xb0/0x130 [ 1956.263670][ T6804] ? rcu_is_watching+0x15/0xb0 [ 1956.263691][ T6804] should_fail_ex+0x414/0x560 [ 1956.263716][ T6804] _copy_to_iter+0x575/0x16f0 [ 1956.263740][ T6804] ? __pfx__copy_to_iter+0x10/0x10 [ 1956.263756][ T6804] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 1956.263780][ T6804] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 1956.263811][ T6804] __skb_datagram_iter+0xf8/0x990 [ 1956.263832][ T6804] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1956.263856][ T6804] skb_copy_datagram_iter+0xc5/0x230 [ 1956.263879][ T6804] netlink_recvmsg+0x2ab/0xa30 [ 1956.263910][ T6804] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1956.263938][ T6804] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1956.263956][ T6804] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1956.263976][ T6804] ? security_socket_recvmsg+0x7e/0x2e0 [ 1956.263997][ T6804] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1956.264024][ T6804] sock_recvmsg_nosec+0x186/0x1c0 [ 1956.264050][ T6804] ____sys_recvmsg+0x3aa/0x460 [ 1956.264073][ T6804] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1956.264099][ T6804] ? import_iovec+0x74/0xa0 [ 1956.264120][ T6804] ___sys_recvmsg+0x1b5/0x510 [ 1956.264142][ T6804] ? __pfx____sys_recvmsg+0x10/0x10 [ 1956.264160][ T6804] ? rcu_read_unlock_special+0x3a2/0x4b0 [ 1956.264194][ T6804] ? rcu_is_watching+0x15/0xb0 [ 1956.264211][ T6804] ? lock_release+0x4b/0x3e0 [ 1956.264238][ T6804] ? __might_fault+0xcc/0x130 [ 1956.264262][ T6804] do_recvmmsg+0x307/0x770 [ 1956.264285][ T6804] ? __pfx_do_recvmmsg+0x10/0x10 [ 1956.264309][ T6804] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1956.264343][ T6804] __x64_sys_recvmmsg+0x190/0x240 [ 1956.264365][ T6804] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1956.264383][ T6804] ? rcu_is_watching+0x15/0xb0 [ 1956.264403][ T6804] ? rcu_is_watching+0x15/0xb0 [ 1956.264422][ T6804] do_syscall_64+0xfa/0x3b0 [ 1956.264448][ T6804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.264466][ T6804] ? clear_bhb_loop+0x60/0xb0 [ 1956.264486][ T6804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.264505][ T6804] RIP: 0033:0x7f2dfef8ebe9 [ 1956.264521][ T6804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1956.264537][ T6804] RSP: 002b:00007f2dffde9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1956.264558][ T6804] RAX: ffffffffffffffda RBX: 00007f2dff1b5fa0 RCX: 00007f2dfef8ebe9 [ 1956.264573][ T6804] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 1956.264586][ T6804] RBP: 00007f2dffde9090 R08: 0000000000000000 R09: 0000000000000000 [ 1956.264598][ T6804] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000002 [ 1956.264610][ T6804] R13: 00007f2dff1b6038 R14: 00007f2dff1b5fa0 R15: 00007f2dff2dfa28 [ 1956.264630][ T6804] [ 1956.808694][ T5904] usb 9-1: Using ep0 maxpacket: 8 [ 1956.844459][ T6809] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1956.973595][ T5904] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1956.991195][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.051295][ T5904] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1957.077591][ T5904] pvrusb2: ********** [ 1957.083756][ T5904] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1957.118198][ T5904] pvrusb2: Important functionality might not be entirely working. [ 1957.146659][ T5904] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1957.289290][ T6824] pim6reg: entered allmulticast mode [ 1957.304141][ T6824] netlink: 'syz.0.9434': attribute type 10 has an invalid length. [ 1957.443063][ T6825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1957.452793][ T5904] pvrusb2: ********** [ 1957.719989][ T2344] pvrusb2: Invalid write control endpoint [ 1957.762990][ T5963] usb 9-1: USB disconnect, device number 61 [ 1957.817114][ T2344] pvrusb2: Invalid write control endpoint [ 1957.844924][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1957.929322][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1957.967635][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1958.018145][ T2344] pvrusb2: Device being rendered inoperable [ 1958.041331][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1958.060429][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1958.130540][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1958.156579][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1958.180032][ T6817] pim6reg: left allmulticast mode [ 1958.198367][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1958.439157][ T6838] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1958.529247][ T6844] FAULT_INJECTION: forcing a failure. [ 1958.529247][ T6844] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1958.584506][ T6844] CPU: 1 UID: 0 PID: 6844 Comm: syz.0.9439 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 1958.584535][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1958.584547][ T6844] Call Trace: [ 1958.584555][ T6844] [ 1958.584565][ T6844] dump_stack_lvl+0x189/0x250 [ 1958.584593][ T6844] ? __pfx____ratelimit+0x10/0x10 [ 1958.584609][ T6844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1958.584621][ T6844] ? __pfx__printk+0x10/0x10 [ 1958.584636][ T6844] ? lock_acquire+0x5f/0x360 [ 1958.584653][ T6844] should_fail_ex+0x414/0x560 [ 1958.584668][ T6844] prepare_alloc_pages+0x213/0x610 [ 1958.584680][ T6844] __alloc_frozen_pages_noprof+0x123/0x370 [ 1958.584692][ T6844] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1958.584714][ T6844] alloc_pages_bulk_noprof+0x560/0x710 [ 1958.584725][ T6844] ? rcu_is_watching+0x15/0xb0 [ 1958.584736][ T6844] ? trace_kmalloc+0x1f/0xd0 [ 1958.584749][ T6844] ? __kmalloc_noprof+0x29b/0x4f0 [ 1958.584762][ T6844] ? copy_splice_read+0x143/0xa50 [ 1958.584777][ T6844] copy_splice_read+0x173/0xa50 [ 1958.584791][ T6844] ? __pfx_aa_file_perm+0x10/0x10 [ 1958.584804][ T6844] ? splice_file_to_pipe+0x2e/0x440 [ 1958.584818][ T6844] ? __pfx_copy_splice_read+0x10/0x10 [ 1958.584832][ T6844] ? __pfx___mutex_lock+0x10/0x10 [ 1958.584848][ T6844] ? wait_for_space+0x24d/0x2d0 [ 1958.584863][ T6844] ? __pfx_copy_splice_read+0x10/0x10 [ 1958.584877][ T6844] splice_file_to_pipe+0x273/0x440 [ 1958.584892][ T6844] do_sendfile+0x475/0x7e0 [ 1958.584903][ T6844] ? __pfx_vfs_write+0x10/0x10 [ 1958.584917][ T6844] ? __pfx_do_sendfile+0x10/0x10 [ 1958.584927][ T6844] ? arch_do_signal_or_restart+0x2d2/0x750 [ 1958.584943][ T6844] ? __fget_files+0x3a0/0x420 [ 1958.584953][ T6844] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1958.584969][ T6844] __se_sys_sendfile64+0x13e/0x190 [ 1958.584985][ T6844] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1958.585000][ T6844] ? rcu_is_watching+0x15/0xb0 [ 1958.585011][ T6844] ? rcu_is_watching+0x15/0xb0 [ 1958.585022][ T6844] do_syscall_64+0xfa/0x3b0 [ 1958.585037][ T6844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.585048][ T6844] ? clear_bhb_loop+0x60/0xb0 [ 1958.585059][ T6844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.585071][ T6844] RIP: 0033:0x7fd19938ebe9 [ 1958.585081][ T6844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1958.585092][ T6844] RSP: 002b:00007fd19a29e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1958.585107][ T6844] RAX: ffffffffffffffda RBX: 00007fd1995b5fa0 RCX: 00007fd19938ebe9 [ 1958.585115][ T6844] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1958.585122][ T6844] RBP: 00007fd19a29e090 R08: 0000000000000000 R09: 0000000000000000 [ 1958.585130][ T6844] R10: 0000000000110003 R11: 0000000000000246 R12: 0000000000000001 [ 1958.585137][ T6844] R13: 00007fd1995b6038 R14: 00007fd1995b5fa0 R15: 00007fd1996dfa28 [ 1958.585148][ T6844] [ 1959.188724][ T1802] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1959.246670][ T6858] netlink: 'syz.6.9442': attribute type 33 has an invalid length. [ 1959.266551][ T6858] netlink: 164 bytes leftover after parsing attributes in process `syz.6.9442'. [ 1959.369022][ T1802] usb 9-1: Using ep0 maxpacket: 32 [ 1959.400211][ T1802] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1959.461999][ T1802] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1959.503506][ T1802] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1959.514543][ T1802] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1959.536933][ T1802] usb 9-1: config 0 descriptor?? [ 1959.546295][ T1802] hub 9-1:0.0: USB hub found [ 1959.795433][ T6880] netlink: 1004 bytes leftover after parsing attributes in process `syz.9.9448'. [ 1960.329492][ T1802] hub 9-1:0.0: 1 port detected [ 1960.627146][ T6887] netlink: 'syz.9.9449': attribute type 10 has an invalid length. [ 1960.882321][ T6889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1960.911372][ T6889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1961.400108][ T1802] hub 9-1:0.0: hub_hub_status failed (err = -32) [ 1961.406760][ T1802] hub 9-1:0.0: config failed, can't get hub status (err -32) [ 1961.421342][ T1802] usbhid 9-1:0.0: can't add hid device: -32 [ 1961.431018][ T1802] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 1961.818003][ T6896] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1961.880847][ T6902] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9452'. [ 1962.023062][ T6904] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9454'. [ 1962.032481][ T6904] FAULT_INJECTION: forcing a failure. [ 1962.032481][ T6904] name failslab, interval 1, probability 0, space 0, times 0 [ 1962.048384][ T6904] CPU: 0 UID: 0 PID: 6904 Comm: syz.9.9454 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 1962.048415][ T6904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1962.048434][ T6904] Call Trace: [ 1962.048439][ T6904] [ 1962.048445][ T6904] dump_stack_lvl+0x189/0x250 [ 1962.048464][ T6904] ? __pfx____ratelimit+0x10/0x10 [ 1962.048479][ T6904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1962.048491][ T6904] ? __pfx__printk+0x10/0x10 [ 1962.048506][ T6904] ? __pfx___might_resched+0x10/0x10 [ 1962.048517][ T6904] ? lock_acquire+0x5f/0x360 [ 1962.048532][ T6904] should_fail_ex+0x414/0x560 [ 1962.048547][ T6904] should_failslab+0xa8/0x100 [ 1962.048563][ T6904] __kmalloc_cache_noprof+0x70/0x3d0 [ 1962.048578][ T6904] ? nfnetlink_rcv+0xeff/0x2520 [ 1962.048592][ T6904] nfnetlink_rcv+0xeff/0x2520 [ 1962.048610][ T6904] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1962.048641][ T6904] ? ref_tracker_free+0x63a/0x7d0 [ 1962.048684][ T6904] ? __netlink_deliver_tap+0x807/0x850 [ 1962.048710][ T6904] ? netlink_deliver_tap+0x2e/0x1b0 [ 1962.048735][ T6904] ? lock_release+0x4b/0x3e0 [ 1962.048763][ T6904] netlink_unicast+0x82c/0x9e0 [ 1962.048790][ T6904] ? __pfx_netlink_unicast+0x10/0x10 [ 1962.048814][ T6904] ? netlink_sendmsg+0x642/0xb30 [ 1962.048836][ T6904] ? skb_put+0x11b/0x210 [ 1962.048854][ T6904] netlink_sendmsg+0x805/0xb30 [ 1962.048882][ T6904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1962.048910][ T6904] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1962.048927][ T6904] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1962.048948][ T6904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1962.048974][ T6904] __sock_sendmsg+0x219/0x270 [ 1962.048999][ T6904] ____sys_sendmsg+0x505/0x830 [ 1962.049020][ T6904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1962.049042][ T6904] ? import_iovec+0x74/0xa0 [ 1962.049063][ T6904] ___sys_sendmsg+0x21f/0x2a0 [ 1962.049082][ T6904] ? __pfx____sys_sendmsg+0x10/0x10 [ 1962.049113][ T6904] ? __fget_files+0x2a/0x420 [ 1962.049129][ T6904] ? __fget_files+0x3a0/0x420 [ 1962.049150][ T6904] __x64_sys_sendmsg+0x19b/0x260 [ 1962.049169][ T6904] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1962.049193][ T6904] ? __pfx_ksys_write+0x10/0x10 [ 1962.049227][ T6904] ? rcu_is_watching+0x15/0xb0 [ 1962.049247][ T6904] ? rcu_is_watching+0x15/0xb0 [ 1962.049266][ T6904] do_syscall_64+0xfa/0x3b0 [ 1962.049294][ T6904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1962.049313][ T6904] ? clear_bhb_loop+0x60/0xb0 [ 1962.049334][ T6904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1962.049353][ T6904] RIP: 0033:0x7f6a3458ebe9 [ 1962.049370][ T6904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1962.049395][ T6904] RSP: 002b:00007f6a35464038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1962.049425][ T6904] RAX: ffffffffffffffda RBX: 00007f6a347b5fa0 RCX: 00007f6a3458ebe9 [ 1962.049440][ T6904] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1962.049452][ T6904] RBP: 00007f6a35464090 R08: 0000000000000000 R09: 0000000000000000 [ 1962.049464][ T6904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1962.049477][ T6904] R13: 00007f6a347b6038 R14: 00007f6a347b5fa0 R15: 00007f6a348dfa28 [ 1962.049498][ T6904] [ 1962.109128][ T5904] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1962.528740][ T5904] usb 1-1: device descriptor read/64, error -71 [ 1962.570459][ T6909] loop6: detected capacity change from 0 to 6656 [ 1962.577345][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1962.698425][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1962.760051][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1962.794052][ T5904] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1962.812170][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1962.875086][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1962.912971][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1962.921467][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1962.934559][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1962.951053][ T5904] usb 1-1: device descriptor read/64, error -71 [ 1962.972855][ T6909] ldm_validate_partition_table(): Disk read failed. [ 1962.987129][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1962.995154][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1963.004783][ T6909] Dev loop6: unable to read RDB block 0 [ 1963.010859][ T6909] loop6: unable to read partition table [ 1963.022321][ T6909] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1963.089303][ T5904] usb usb1-port1: attempt power cycle [ 1963.190955][ T6921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1963.220200][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1963.241655][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1963.429071][ T5963] usb 9-1: reset high-speed USB device number 62 using dummy_hcd [ 1963.452218][ T5963] usb 9-1: device reset changed ep0 maxpacket size! [ 1963.465310][ T5963] usb 9-1: USB disconnect, device number 62 [ 1963.481531][ T5904] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1963.526858][ T5904] usb 1-1: device descriptor read/8, error -71 [ 1963.778759][ T5904] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1963.798779][ T5963] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1963.839559][ T5904] usb 1-1: device descriptor read/8, error -71 [ 1963.963386][ T5904] usb usb1-port1: unable to enumerate USB device [ 1963.991909][ T5963] usb 9-1: Using ep0 maxpacket: 8 [ 1964.014486][ T5963] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1964.031816][ T5963] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1964.041934][ T5963] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 104 [ 1964.052262][ T5963] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1964.063949][ T5963] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1964.078705][ T5963] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.108702][ T5963] usb 9-1: Product: ã¹ç•¶ä‚°é¾©ç’¾ç¼é¯¢ [ 1964.114507][ T5963] usb 9-1: Manufacturer: у [ 1964.135427][ T5963] usb 9-1: SerialNumber: 覽괧윎⥬褈棦᧟̢å¶ç™™åŸ°ë¿—çŒî·˜á‚¿î‘±í‘宄᜹볷䫃îŸä¹½á‹èž‘얗猳᳹◢撙⠭娵垼锰쵯盉îºè°íˆŸà¤œå©½äŽì§ˆä€†ã±à¯¿ß‰ã‚°ëˆ¢éš¬ì²•å› ç‹¾æŽã¨à½žìŸ‡æ™ â Œáº¡â®ŒîªŒìˆ„㌂蠦啟ꖼ䰘埳淀継駵蜵建îŸã´¬ä¥—ë–ºí˜ï˜´á¶Œâ‹ë®§é¢®Ê¯ë«±íšìž˜ç°ä©¨è•®ë ï›·è«»á•±á¼µâ¾—ൌﳷᎡ斤๞⎨㊙Უ俀ꎥ駵෾㘼å¼å¾…艌젮 [ 1964.268066][ T6941] pim6reg: entered allmulticast mode [ 1964.334712][ T6946] netlink: 'syz.7.9463': attribute type 10 has an invalid length. [ 1964.492234][ T5963] cdc_ncm 9-1:1.0: bind() failure [ 1964.506031][ T5963] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1964.529509][ T5963] cdc_ncm 9-1:1.1: bind() failure [ 1964.557339][ T5963] usb 9-1: USB disconnect, device number 63 [ 1964.758764][ T5904] usb 10-1: new full-speed USB device number 47 using dummy_hcd [ 1964.954881][ T5904] usb 10-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 1964.967060][ T6933] pim6reg: left allmulticast mode [ 1965.016590][ T5904] usb 10-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1965.073910][ T5904] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1965.173392][ T5904] usb 10-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.80 [ 1965.180062][ T6958] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1965.251459][ T5904] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1965.653224][ T5904] usb 10-1: config 0 descriptor?? [ 1965.670971][ T5904] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1965.995392][ T6945] netlink: 88 bytes leftover after parsing attributes in process `syz.9.9465'. [ 1966.004822][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9465'. [ 1967.248731][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1967.318891][ T1318] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1967.401244][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1967.410241][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1967.419479][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.441998][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1967.449175][ T24] pvrusb2: ********** [ 1967.453199][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1967.463810][ T24] pvrusb2: Important functionality might not be entirely working. [ 1967.472168][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1967.472433][ T1318] usb 9-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1967.484000][ T24] pvrusb2: ********** [ 1967.515251][ T1318] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.527045][ T1318] usb 9-1: Product: syz [ 1967.532976][ T1318] usb 9-1: Manufacturer: syz [ 1967.537869][ T1318] usb 9-1: SerialNumber: syz [ 1967.547679][ T1318] usb 9-1: config 0 descriptor?? [ 1967.638149][ T2344] pvrusb2: Invalid write control endpoint [ 1967.697081][ T2344] pvrusb2: Invalid write control endpoint [ 1967.715786][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1967.750317][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1967.778002][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1967.797046][ T6997] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1967.827825][ T2344] pvrusb2: Device being rendered inoperable [ 1967.841871][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1967.849378][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1967.858297][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1967.864539][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1967.875009][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1967.896193][ T5963] usb 1-1: USB disconnect, device number 27 [ 1968.213254][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9475'. [ 1968.228543][ T1802] usb 10-1: USB disconnect, device number 47 [ 1968.278606][ T1318] cx82310_eth 9-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1968.305400][ T1318] cxacru 9-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1968.317923][ T1318] usb 9-1: USB disconnect, device number 64 [ 1968.601813][ T7009] netlink: 'syz.9.9479': attribute type 10 has an invalid length. [ 1968.710480][ T7013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1969.348750][ T5963] usb 9-1: new full-speed USB device number 65 using dummy_hcd [ 1969.693485][ T5963] usb 9-1: config 0 has too many interfaces: 110, using maximum allowed: 32 [ 1969.707689][ T5963] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 110 [ 1969.766282][ T5963] usb 9-1: config 0 has no interface number 0 [ 1969.783875][ T5963] usb 9-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1969.833009][ T5963] usb 9-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1969.843425][ T5963] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.880421][ T5963] usb 9-1: Product: syz [ 1969.896360][ T5963] usb 9-1: Manufacturer: syz [ 1969.922752][ T5963] usb 9-1: SerialNumber: syz [ 1969.943182][ T5963] usb 9-1: config 0 descriptor?? [ 1969.954172][ T7017] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1969.964957][ T5963] usb-storage 9-1:0.20: USB Mass Storage device detected [ 1969.976484][ T5963] usb-storage 9-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1970.169626][ T1318] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1970.186764][ T5963] scsi host1: usb-storage 9-1:0.20 [ 1970.232825][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9486'. [ 1970.340675][ T1318] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1970.356868][ T1318] usb 1-1: not running at top speed; connect to a high speed hub [ 1970.379479][ T1318] usb 1-1: config 11 has an invalid interface number: 16 but max is 1 [ 1970.396347][ T1318] usb 1-1: config 11 has an invalid interface number: 3 but max is 1 [ 1970.410657][ T1318] usb 1-1: config 11 has no interface number 0 [ 1970.417021][ T1318] usb 1-1: config 11 has no interface number 1 [ 1970.517239][ T1318] usb 1-1: config 11 interface 16 has no altsetting 0 [ 1970.556311][ T1318] usb 1-1: config 11 interface 3 has no altsetting 0 [ 1970.623707][ T1318] usb 1-1: New USB device found, idVendor=0582, idProduct=0120, bcdDevice=9c.cd [ 1970.663732][ T1318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.688599][ T1318] usb 1-1: Product: syz [ 1970.693797][ T1318] usb 1-1: Manufacturer: syz [ 1970.696843][ T7035] fuse: Bad value for 'fd' [ 1970.706146][ T1318] usb 1-1: SerialNumber: syz [ 1970.795272][ T5963] usb 9-1: USB disconnect, device number 65 [ 1970.939717][ T1318] usb 1-1: USB disconnect, device number 28 [ 1970.987930][ T2641] udevd[2641]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:11.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1971.562186][ T7055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1973.248318][ T7074] binder: 7061:7074 ioctl c0306201 200000000100 returned -11 [ 1973.287491][ T7068] fuse: Bad value for 'fd' [ 1973.386475][ T7076] pim6reg: entered allmulticast mode [ 1973.397762][ T7076] netlink: 'syz.6.9494': attribute type 10 has an invalid length. [ 1973.746350][ T7080] syzkaller0: entered promiscuous mode [ 1973.776999][ T7080] syzkaller0: entered allmulticast mode [ 1973.939188][ T7072] pim6reg: left allmulticast mode [ 1974.188728][ T1802] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1974.231095][ T7092] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1974.343009][ T7091] pim6reg: entered allmulticast mode [ 1974.376275][ T1802] usb 10-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1974.390535][ T1802] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.422995][ T1802] usb 10-1: Product: syz [ 1974.437538][ T1802] usb 10-1: Manufacturer: syz [ 1974.443909][ T1802] usb 10-1: SerialNumber: syz [ 1974.480948][ T1802] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1974.491558][ T1802] r8152-cfgselector 10-1: config 0 descriptor?? [ 1974.703415][ T1802] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1974.744181][ T1802] r8152-cfgselector 10-1: bad CDC descriptors [ 1974.922842][ T7088] pim6reg: left allmulticast mode [ 1975.012711][ T1318] r8152-cfgselector 10-1: USB disconnect, device number 48 [ 1975.958456][ T7122] syzkaller0: entered promiscuous mode [ 1975.995692][ T7122] syzkaller0: entered allmulticast mode [ 1976.123471][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.129975][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.267161][ T7132] FAULT_INJECTION: forcing a failure. [ 1976.267161][ T7132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1976.293829][ T7132] CPU: 1 UID: 0 PID: 7132 Comm: syz.0.9512 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 1976.293861][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1976.293872][ T7132] Call Trace: [ 1976.293880][ T7132] [ 1976.293889][ T7132] dump_stack_lvl+0x189/0x250 [ 1976.293916][ T7132] ? __pfx____ratelimit+0x10/0x10 [ 1976.293942][ T7132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1976.293963][ T7132] ? __pfx__printk+0x10/0x10 [ 1976.293987][ T7132] ? __might_fault+0xb0/0x130 [ 1976.294013][ T7132] ? rcu_is_watching+0x15/0xb0 [ 1976.294033][ T7132] ? rcu_is_watching+0x15/0xb0 [ 1976.294052][ T7132] should_fail_ex+0x414/0x560 [ 1976.294079][ T7132] _copy_from_user+0x2d/0xb0 [ 1976.294100][ T7132] ucma_bind+0xae/0x280 [ 1976.294119][ T7132] ? __pfx_ucma_bind+0x10/0x10 [ 1976.294141][ T7132] ? rcu_is_watching+0x15/0xb0 [ 1976.294159][ T7132] ? lock_release+0x4b/0x3e0 [ 1976.294184][ T7132] ? __might_fault+0xb0/0x130 [ 1976.294208][ T7132] ? __might_fault+0xcc/0x130 [ 1976.294234][ T7132] ucma_write+0x246/0x2e0 [ 1976.294262][ T7132] ? __pfx_ucma_write+0x10/0x10 [ 1976.294285][ T7132] ? security_file_permission+0x75/0x290 [ 1976.294309][ T7132] ? rw_verify_area+0x255/0x4d0 [ 1976.294332][ T7132] ? __pfx_ucma_write+0x10/0x10 [ 1976.294359][ T7132] vfs_write+0x27e/0xb30 [ 1976.294386][ T7132] ? __pfx_vfs_write+0x10/0x10 [ 1976.294409][ T7132] ? lock_release+0x4b/0x3e0 [ 1976.294437][ T7132] ? __fget_files+0x2a/0x420 [ 1976.294453][ T7132] ? __fget_files+0x3a0/0x420 [ 1976.294467][ T7132] ? __fget_files+0x2a/0x420 [ 1976.294487][ T7132] ksys_write+0x145/0x250 [ 1976.294520][ T7132] ? __pfx_ksys_write+0x10/0x10 [ 1976.294543][ T7132] ? rcu_is_watching+0x15/0xb0 [ 1976.294563][ T7132] ? rcu_is_watching+0x15/0xb0 [ 1976.294582][ T7132] do_syscall_64+0xfa/0x3b0 [ 1976.294610][ T7132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1976.294629][ T7132] ? clear_bhb_loop+0x60/0xb0 [ 1976.294650][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1976.294668][ T7132] RIP: 0033:0x7fd19938ebe9 [ 1976.294700][ T7132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1976.294718][ T7132] RSP: 002b:00007fd19a29e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1976.294741][ T7132] RAX: ffffffffffffffda RBX: 00007fd1995b5fa0 RCX: 00007fd19938ebe9 [ 1976.294757][ T7132] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1976.294770][ T7132] RBP: 00007fd19a29e090 R08: 0000000000000000 R09: 0000000000000000 [ 1976.294782][ T7132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1976.294795][ T7132] R13: 00007fd1995b6038 R14: 00007fd1995b5fa0 R15: 00007fd1996dfa28 [ 1976.294815][ T7132] [ 1977.084289][ T30] audit: type=1326 audit(1755373750.417:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7144 comm="syz.0.9516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19938ebe9 code=0x7ffc0000 [ 1977.108450][ T30] audit: type=1326 audit(1755373750.417:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7144 comm="syz.0.9516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19938ebe9 code=0x7ffc0000 [ 1977.135554][ T30] audit: type=1326 audit(1755373750.417:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7144 comm="syz.0.9516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fd19938ebe9 code=0x7ffc0000 [ 1977.159432][ T30] audit: type=1326 audit(1755373750.417:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7144 comm="syz.0.9516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19938ebe9 code=0x7ffc0000 [ 1977.184045][ T30] audit: type=1326 audit(1755373750.417:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7144 comm="syz.0.9516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd19938ebe9 code=0x7ffc0000 [ 1977.221444][ T30] audit: type=1326 audit(1755373750.417:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7144 comm="syz.0.9516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19938ebe9 code=0x7ffc0000 [ 1977.262190][ T30] audit: type=1326 audit(1755373750.417:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7144 comm="syz.0.9516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19938ebe9 code=0x7ffc0000 [ 1977.305918][ T30] audit: type=1326 audit(1755373750.417:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7144 comm="syz.0.9516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd19938ebe9 code=0x7ffc0000 [ 1977.973551][ T7159] netlink: 552 bytes leftover after parsing attributes in process `syz.8.9519'. [ 1978.656545][ T7165] syzkaller1: entered promiscuous mode [ 1978.663232][ T7165] syzkaller1: entered allmulticast mode [ 1979.757825][ T7203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1979.968812][ T1802] usb 9-1: new full-speed USB device number 66 using dummy_hcd [ 1980.171605][ T1802] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1980.226897][ T1802] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1980.348517][ T1802] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1980.563758][ T1802] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1980.633204][ T1802] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1980.660471][ T1802] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1980.677321][ T1802] usb 9-1: Product: syz [ 1980.695273][ T1802] usb 9-1: Manufacturer: syz [ 1980.716910][ T1802] usb 9-1: SerialNumber: syz [ 1980.730430][ T1802] usb 9-1: config 0 descriptor?? [ 1980.747437][ T1802] radio-si470x 9-1:0.0: could not find interrupt in endpoint [ 1980.764256][ T1802] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1980.784670][ T1802] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1982.376049][ T7220] pim6reg: entered allmulticast mode [ 1982.391099][ T7220] netlink: 'syz.6.9539': attribute type 10 has an invalid length. [ 1982.850649][ T1318] usb 9-1: USB disconnect, device number 66 [ 1982.875936][ T30] audit: type=1326 audit(1755373756.167:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.9.9543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3458ebe9 code=0x7ffc0000 [ 1982.898321][ C1] vkms_vblank_simulate: vblank timer overrun [ 1983.041884][ T7188] delete_channel: no stack [ 1983.049816][ T30] audit: type=1326 audit(1755373756.167:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.9.9543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6a3458ebe9 code=0x7ffc0000 [ 1983.161819][ T30] audit: type=1326 audit(1755373756.167:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.9.9543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3458ebe9 code=0x7ffc0000 [ 1983.185335][ T30] audit: type=1326 audit(1755373756.167:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.9.9543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6a3458ebe9 code=0x7ffc0000 [ 1983.208858][ T30] audit: type=1326 audit(1755373756.167:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.9.9543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3458ebe9 code=0x7ffc0000 [ 1983.231190][ C1] vkms_vblank_simulate: vblank timer overrun [ 1983.247744][ T30] audit: type=1326 audit(1755373756.277:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.9.9543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6a3458ebe9 code=0x7ffc0000 [ 1983.691472][ T30] audit: type=1326 audit(1755373756.277:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.9.9543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3458ebe9 code=0x7ffc0000 [ 1983.713866][ C1] vkms_vblank_simulate: vblank timer overrun [ 1983.796589][ T30] audit: type=1326 audit(1755373756.277:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.9.9543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3458ebe9 code=0x7ffc0000 [ 1983.832364][ T30] audit: type=1326 audit(1755373756.457:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.9.9543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f6a3458ebe9 code=0x7ffc0000 [ 1983.860565][ T30] audit: type=1326 audit(1755373756.457:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.9.9543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3458ebe9 code=0x7ffc0000 [ 1983.882921][ C1] vkms_vblank_simulate: vblank timer overrun [ 1983.916921][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9548'. [ 1983.927249][ T7256] FAULT_INJECTION: forcing a failure. [ 1983.927249][ T7256] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.941801][ T7256] CPU: 1 UID: 0 PID: 7256 Comm: syz.8.9548 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 1983.941831][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1983.941844][ T7256] Call Trace: [ 1983.941852][ T7256] [ 1983.941861][ T7256] dump_stack_lvl+0x189/0x250 [ 1983.941888][ T7256] ? __pfx____ratelimit+0x10/0x10 [ 1983.941914][ T7256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1983.941936][ T7256] ? __pfx__printk+0x10/0x10 [ 1983.941960][ T7256] ? genl_family_rcv_msg_doit+0x267/0x300 [ 1983.941982][ T7256] ? __pfx___might_resched+0x10/0x10 [ 1983.941999][ T7256] ? lock_acquire+0x5f/0x360 [ 1983.942022][ T7256] should_fail_ex+0x414/0x560 [ 1983.942046][ T7256] should_failslab+0xa8/0x100 [ 1983.942069][ T7256] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1983.942092][ T7256] ? __alloc_skb+0x112/0x2d0 [ 1983.942118][ T7256] __alloc_skb+0x112/0x2d0 [ 1983.942143][ T7256] netlink_ack+0x146/0xa50 [ 1983.942166][ T7256] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1983.942184][ T7256] ? __asan_memcpy+0x40/0x70 [ 1983.942201][ T7256] ? __pfx_ref_tracker_free+0x10/0x10 [ 1983.942224][ T7256] netlink_rcv_skb+0x28c/0x470 [ 1983.942258][ T7256] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1983.942278][ T7256] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1983.942306][ T7256] ? lock_release+0x4b/0x3e0 [ 1983.942336][ T7256] ? down_read+0x1ad/0x2e0 [ 1983.942354][ T7256] genl_rcv+0x28/0x40 [ 1983.942371][ T7256] netlink_unicast+0x82c/0x9e0 [ 1983.942396][ T7256] ? __pfx_netlink_unicast+0x10/0x10 [ 1983.942416][ T7256] ? netlink_sendmsg+0x642/0xb30 [ 1983.942441][ T7256] ? skb_put+0x11b/0x210 [ 1983.942457][ T7256] netlink_sendmsg+0x805/0xb30 [ 1983.942484][ T7256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1983.942509][ T7256] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1983.942527][ T7256] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1983.942544][ T7256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1983.942569][ T7256] __sock_sendmsg+0x219/0x270 [ 1983.942594][ T7256] ____sys_sendmsg+0x505/0x830 [ 1983.942614][ T7256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1983.942637][ T7256] ? import_iovec+0x74/0xa0 [ 1983.942660][ T7256] ___sys_sendmsg+0x21f/0x2a0 [ 1983.942680][ T7256] ? __pfx____sys_sendmsg+0x10/0x10 [ 1983.942709][ T7256] ? sb_end_write+0xe9/0x1c0 [ 1983.942733][ T7256] ? __pfx_vfs_write+0x10/0x10 [ 1983.942760][ T7256] __x64_sys_sendmsg+0x19b/0x260 [ 1983.942780][ T7256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1983.942802][ T7256] ? __pfx_ksys_write+0x10/0x10 [ 1983.942823][ T7256] ? rcu_is_watching+0x15/0xb0 [ 1983.942843][ T7256] ? rcu_is_watching+0x15/0xb0 [ 1983.942862][ T7256] do_syscall_64+0xfa/0x3b0 [ 1983.942889][ T7256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1983.942907][ T7256] ? clear_bhb_loop+0x60/0xb0 [ 1983.942927][ T7256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1983.942944][ T7256] RIP: 0033:0x7f111a18ebe9 [ 1983.942961][ T7256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1983.942978][ T7256] RSP: 002b:00007f111b0ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1983.943000][ T7256] RAX: ffffffffffffffda RBX: 00007f111a3b5fa0 RCX: 00007f111a18ebe9 [ 1983.943014][ T7256] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1983.943027][ T7256] RBP: 00007f111b0ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1983.943039][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1983.943050][ T7256] R13: 00007f111a3b6038 R14: 00007f111a3b5fa0 R15: 00007f111a4dfa28 [ 1983.943070][ T7256] [ 1984.861923][ T7267] kvm: user requested TSC rate below hardware speed [ 1985.737751][ T7280] pim6reg: entered allmulticast mode [ 1985.804525][ T7283] netlink: 'syz.8.9554': attribute type 10 has an invalid length. [ 1986.035104][ T7291] netlink: 'syz.7.9555': attribute type 10 has an invalid length. [ 1986.056082][ T7286] pim6reg: entered allmulticast mode [ 1986.163106][ T7289] vlan2: entered allmulticast mode [ 1986.168483][ T7289] erspan0: entered allmulticast mode [ 1987.442336][ T7325] loop9: detected capacity change from 0 to 8 [ 1987.473041][ T2641] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1987.492433][ T2641] loop9: partition table partially beyond EOD, truncated [ 1987.532940][ T2641] loop9: p1 size 81768186 extends beyond EOD, truncated [ 1987.624270][ T7325] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1987.667560][ T7325] loop9: partition table partially beyond EOD, truncated [ 1987.680994][ T7325] loop9: p1 size 81768186 extends beyond EOD, truncated [ 1987.717085][ T7329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1987.743495][ T7331] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1987.758892][ T7331] loop9: partition table partially beyond EOD, truncated [ 1987.790771][ T7331] loop9: p1 size 81768186 extends beyond EOD, truncated [ 1988.045146][ T2641] udevd[2641]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1988.265898][ T2641] udevd[2641]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1988.324152][ T7336] syzkaller0: entered promiscuous mode [ 1988.334634][ T7336] syzkaller0: entered allmulticast mode [ 1988.447061][ T7341] kvm: user requested TSC rate below hardware speed [ 1988.686294][ T7343] ptrace attach of "./syz-executor exec"[1139] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ @  ƒ     \x0c  \x0c  \x0c  @  ƒ     \x0c  \x0c  \x0c  @  ƒ     \x0c  \x0c  \x0c  @  @  [ 1988.687312][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9570'. [ 1989.202981][ T7354] netlink: 'syz.0.9574': attribute type 8 has an invalid length. [ 1989.686128][ T7364] netlink: 'syz.0.9575': attribute type 10 has an invalid length. [ 1990.715565][ T7382] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1991.659680][ T7414] kvm: user requested TSC rate below hardware speed [ 1993.646253][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1993.646267][ T30] audit: type=1326 audit(1755373766.987:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.7.9597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3835f8ebe9 code=0x7ffc0000 [ 1993.690408][ T30] audit: type=1326 audit(1755373767.017:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.7.9597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3835f8ebe9 code=0x7ffc0000 [ 1993.715266][ T30] audit: type=1326 audit(1755373767.047:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.7.9597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f3835f8ebe9 code=0x7ffc0000 [ 1993.737867][ T30] audit: type=1326 audit(1755373767.047:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.7.9597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3835f8ebe9 code=0x7ffc0000 [ 1993.760486][ T30] audit: type=1326 audit(1755373767.047:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.7.9597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3835f8ebe9 code=0x7ffc0000 [ 1994.394743][ T7471] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20003 [ 1994.425116][T17481] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1994.503126][ T7470] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1994.541952][T17481] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1995.337469][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9607'. [ 1995.391492][ T7489] macvtap1: entered promiscuous mode [ 1995.397026][ T7489] macvtap1: entered allmulticast mode [ 1995.405482][ T7489] bridge0: entered allmulticast mode [ 1995.434616][ T7490] bridge0: left allmulticast mode [ 1995.864172][ T7505] FAULT_INJECTION: forcing a failure. [ 1995.864172][ T7505] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.876956][ T7505] CPU: 1 UID: 0 PID: 7505 Comm: syz.6.9613 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 1995.876975][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1995.876983][ T7505] Call Trace: [ 1995.876990][ T7505] [ 1995.876995][ T7505] dump_stack_lvl+0x189/0x250 [ 1995.877014][ T7505] ? __pfx____ratelimit+0x10/0x10 [ 1995.877028][ T7505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1995.877040][ T7505] ? __pfx__printk+0x10/0x10 [ 1995.877054][ T7505] ? fs_reclaim_acquire+0x7d/0x100 [ 1995.877077][ T7505] ? rcu_is_watching+0x15/0xb0 [ 1995.877088][ T7505] ? __pfx___might_resched+0x10/0x10 [ 1995.877098][ T7505] ? lock_acquire+0x5f/0x360 [ 1995.877113][ T7505] should_fail_ex+0x414/0x560 [ 1995.877129][ T7505] should_failslab+0xa8/0x100 [ 1995.877144][ T7505] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1995.877160][ T7505] ? __alloc_skb+0x112/0x2d0 [ 1995.877176][ T7505] __alloc_skb+0x112/0x2d0 [ 1995.877191][ T7505] netlink_sendmsg+0x5c6/0xb30 [ 1995.877209][ T7505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1995.877224][ T7505] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1995.877235][ T7505] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1995.877247][ T7505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1995.877262][ T7505] __sock_sendmsg+0x219/0x270 [ 1995.877275][ T7505] ____sys_sendmsg+0x505/0x830 [ 1995.877288][ T7505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1995.877300][ T7505] ? import_iovec+0x74/0xa0 [ 1995.877318][ T7505] ___sys_sendmsg+0x21f/0x2a0 [ 1995.877330][ T7505] ? __pfx____sys_sendmsg+0x10/0x10 [ 1995.877347][ T7505] ? __fget_files+0x2a/0x420 [ 1995.877356][ T7505] ? __fget_files+0x3a0/0x420 [ 1995.877367][ T7505] __x64_sys_sendmsg+0x19b/0x260 [ 1995.877379][ T7505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1995.877391][ T7505] ? __pfx_ksys_write+0x10/0x10 [ 1995.877404][ T7505] ? rcu_is_watching+0x15/0xb0 [ 1995.877416][ T7505] ? rcu_is_watching+0x15/0xb0 [ 1995.877427][ T7505] do_syscall_64+0xfa/0x3b0 [ 1995.877442][ T7505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1995.877453][ T7505] ? clear_bhb_loop+0x60/0xb0 [ 1995.877465][ T7505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1995.877477][ T7505] RIP: 0033:0x7f2dfef8ebe9 [ 1995.877488][ T7505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1995.877498][ T7505] RSP: 002b:00007f2dffde9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1995.877513][ T7505] RAX: ffffffffffffffda RBX: 00007f2dff1b5fa0 RCX: 00007f2dfef8ebe9 [ 1995.877522][ T7505] RDX: 0000000020004800 RSI: 0000200000006040 RDI: 0000000000000006 [ 1995.877529][ T7505] RBP: 00007f2dffde9090 R08: 0000000000000000 R09: 0000000000000000 [ 1995.877537][ T7505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1995.877544][ T7505] R13: 00007f2dff1b6038 R14: 00007f2dff1b5fa0 R15: 00007f2dff2dfa28 [ 1995.877555][ T7505] [ 1996.336251][ T7502] binder: 7496:7502 ioctl c0306201 200000000100 returned -11 [ 1996.345040][ T7502] fuse: Bad value for 'fd' [ 1997.096185][ T7527] netlink: 'syz.8.9621': attribute type 10 has an invalid length. [ 1997.107397][ T7527] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9621'. [ 1997.208889][ T1318] usb 10-1: new full-speed USB device number 49 using dummy_hcd [ 1997.338768][ T1318] usb 10-1: device descriptor read/64, error -71 [ 1997.783760][ T1318] usb 10-1: new full-speed USB device number 50 using dummy_hcd [ 1998.091657][ T1318] usb 10-1: device descriptor read/64, error -71 [ 1998.199129][ T1318] usb usb10-port1: attempt power cycle [ 1998.559166][ T1318] usb 10-1: new full-speed USB device number 51 using dummy_hcd [ 1998.599430][ T1318] usb 10-1: device descriptor read/8, error -71 [ 1998.848841][ T1318] usb 10-1: new full-speed USB device number 52 using dummy_hcd [ 1998.870920][ T1318] usb 10-1: device descriptor read/8, error -71 [ 1998.980646][ T1318] usb usb10-port1: unable to enumerate USB device [ 2000.275636][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9629'. [ 2000.403158][ T24] usb 10-1: new full-speed USB device number 53 using dummy_hcd [ 2000.610845][ T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2000.622580][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2000.636530][ T24] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2000.738691][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2000.765657][ T24] usb 10-1: SerialNumber: syz [ 2000.803813][ T24] usb 10-1: 0:2 : does not exist [ 2000.856102][ T7562] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2001.280881][ T24] usb 10-1: USB disconnect, device number 53 [ 2002.641740][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9637'. [ 2003.461285][ T7609] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9642'. [ 2004.054287][ T7611] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9643'. [ 2004.201052][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9644'. [ 2004.508819][ T24] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 2004.648733][ T24] usb 10-1: device descriptor read/64, error -71 [ 2004.888948][ T24] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 2005.048745][ T24] usb 10-1: device descriptor read/64, error -71 [ 2005.179031][ T24] usb usb10-port1: attempt power cycle [ 2005.220469][ T7622] binder: 7617:7622 ioctl c0306201 200000000100 returned -11 [ 2005.230331][ T7622] fuse: Bad value for 'fd' [ 2005.499347][ T7632] netlink: 'syz.8.9650': attribute type 10 has an invalid length. [ 2005.539041][ T24] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 2005.598745][ T24] usb 10-1: device descriptor read/8, error -71 [ 2005.725000][ T7637] kvm: user requested TSC rate below hardware speed [ 2005.838693][ T24] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 2005.859627][ T24] usb 10-1: device descriptor read/8, error -71 [ 2006.020224][ T24] usb usb10-port1: unable to enumerate USB device [ 2006.873866][ T30] audit: type=1326 audit(1755373780.217:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.8.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111a18ebe9 code=0x7ffc0000 [ 2007.013286][ T30] audit: type=1326 audit(1755373780.217:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.8.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111a18ebe9 code=0x7ffc0000 [ 2007.070965][ T30] audit: type=1326 audit(1755373780.217:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.8.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f111a18ebe9 code=0x7ffc0000 [ 2007.146154][ T30] audit: type=1326 audit(1755373780.217:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.8.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111a18ebe9 code=0x7ffc0000 [ 2007.202274][ T30] audit: type=1326 audit(1755373780.217:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.8.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111a18ebe9 code=0x7ffc0000 [ 2007.226988][ T30] audit: type=1326 audit(1755373780.217:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.8.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f111a18ebe9 code=0x7ffc0000 [ 2007.258771][ T30] audit: type=1326 audit(1755373780.217:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.8.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111a18ebe9 code=0x7ffc0000 [ 2007.352622][ T30] audit: type=1326 audit(1755373780.217:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.8.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111a18ebe9 code=0x7ffc0000 [ 2007.377825][ T30] audit: type=1326 audit(1755373780.217:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.8.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f111a18ebe9 code=0x7ffc0000 [ 2007.403994][ T30] audit: type=1326 audit(1755373780.217:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.8.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111a18ebe9 code=0x7ffc0000 [ 2007.844726][ T7663] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9658'. [ 2008.558853][T24291] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 2008.615344][ T7657] ALSA: mixer_oss: invalid OSS volume ':' [ 2008.621277][ T7657] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 2008.627661][ T7657] ALSA: mixer_oss: invalid OSS volume '2' [ 2008.633758][ T7657] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 2008.640280][ T7657] ALSA: mixer_oss: invalid OSS volume '3' [ 2008.646211][ T7657] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 2008.859979][T24291] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2008.871098][T24291] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2008.892525][T24291] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2008.948720][T24291] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2008.957813][T24291] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.002145][T24291] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2009.072264][T24291] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 2009.104527][ T1341] udevd[1341]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2009.913853][ T7683] netlink: 'syz.7.9663': attribute type 10 has an invalid length. [ 2010.146448][ T7695] netlink: 161716 bytes leftover after parsing attributes in process `syz.6.9666'. [ 2010.168344][ T7695] netlink: zone id is out of range [ 2010.180505][ T7695] netlink: zone id is out of range [ 2010.185729][ T7695] netlink: zone id is out of range [ 2010.232673][ T7695] netlink: zone id is out of range [ 2010.239921][ T7695] netlink: zone id is out of range [ 2010.247196][ T7695] netlink: zone id is out of range [ 2010.253185][ T7695] netlink: zone id is out of range [ 2010.259224][ T7695] netlink: zone id is out of range [ 2010.265177][ T7695] netlink: zone id is out of range [ 2010.272359][ T7695] netlink: zone id is out of range [ 2010.662142][ T7702] loop6: detected capacity change from 0 to 524287999 [ 2010.832602][ T7707] usb 9-1: USB disconnect, device number 67 [ 2010.904828][ T7707] hub 9-0:1.0: USB hub found [ 2010.910045][ T7707] hub 9-0:1.0: 1 port detected [ 2011.105168][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9671'. [ 2011.133167][T24291] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 2011.152006][ T7712] bridge_slave_0: left allmulticast mode [ 2011.157969][ T7712] bridge_slave_0: left promiscuous mode [ 2011.164427][ T7712] bridge0: port 1(bridge_slave_0) entered disabled state [ 2011.177945][ T7712] bond0: (slave bond_slave_0): Releasing backup interface [ 2011.188484][ T7712] bond0: (slave bond_slave_1): Releasing backup interface [ 2011.207361][ T7712] team0: Port device team_slave_0 removed [ 2011.231181][ T7712] team0: Port device team_slave_1 removed [ 2011.247972][ T7712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2011.281230][ T7712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2011.299676][ T7712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2011.322293][ T7712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2011.347135][ T7712] bond0: (slave macvlan0): Releasing backup interface [ 2012.339209][T24291] usb 9-1: device descriptor read/64, error -71 [ 2012.578716][T24291] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 2012.740777][T24291] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 2012.750323][T24291] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2012.761313][T24291] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2012.773309][T24291] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2012.783358][T24291] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2012.792115][T24291] usb 9-1: Product: syz [ 2012.796651][T24291] usb 9-1: Manufacturer: syz [ 2012.801744][T24291] usb 9-1: SerialNumber: syz [ 2012.814493][T24291] usb 9-1: config 0 descriptor?? [ 2012.826777][T24291] hub 9-1:0.0: bad descriptor, ignoring hub [ 2012.833649][T24291] hub 9-1:0.0: probe with driver hub failed with error -5 [ 2012.842707][T24291] usb 9-1: selecting invalid altsetting 0 [ 2013.728767][ T7715] usb 9-1: reset high-speed USB device number 69 using dummy_hcd [ 2013.878953][ T7715] usb 9-1: device descriptor read/64, error -71 [ 2014.119880][ T7715] usb 9-1: reset high-speed USB device number 69 using dummy_hcd [ 2014.278934][ T7715] usb 9-1: device descriptor read/64, error -71 [ 2014.529418][ T7715] usb 9-1: reset high-speed USB device number 69 using dummy_hcd [ 2014.561313][ T7715] usb 9-1: device descriptor read/8, error -71 [ 2014.818735][ T7715] usb 9-1: reset high-speed USB device number 69 using dummy_hcd [ 2014.849443][ T7715] usb 9-1: device descriptor read/8, error -71 [ 2014.959559][T24291] usb 9-1: USB disconnect, device number 69 [ 2015.477520][ T7741] tipc: Enabled bearer , priority 0 [ 2015.493818][ T7741] tipc: Resetting bearer [ 2015.504206][ T7740] tipc: Disabling bearer [ 2015.963990][ T7753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2015.994756][ T7755] sctp: [Deprecated]: syz.9.9684 (pid 7755) Use of int in max_burst socket option deprecated. [ 2015.994756][ T7755] Use struct sctp_assoc_value instead [ 2016.198786][ T7758] netlink: 'syz.9.9684': attribute type 1 has an invalid length. [ 2016.669939][ T7766] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2017.312743][ T1318] usb 10-1: new full-speed USB device number 58 using dummy_hcd [ 2017.490151][ T1318] usb 10-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 2017.514468][ T1318] usb 10-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2017.605730][ T1318] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2017.619964][ T1318] usb 10-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.80 [ 2017.638253][ T1318] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.656884][ T1318] usb 10-1: config 0 descriptor?? [ 2017.814592][ T1318] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2018.021574][ T7774] netlink: 88 bytes leftover after parsing attributes in process `syz.9.9687'. [ 2018.032632][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9687'. [ 2018.250783][ T7785] netlink: 'syz.6.9691': attribute type 10 has an invalid length. [ 2019.072076][ T7797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2019.499540][ T1318] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 2019.658671][ T1318] usb 9-1: Using ep0 maxpacket: 16 [ 2019.687167][ T1318] usb 9-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2019.697740][ T1318] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2019.710301][ T1318] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2019.722017][ T1318] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.731254][ T1318] usb 9-1: Product: syz [ 2019.740703][ T1318] usb 9-1: Manufacturer: syz [ 2019.745459][ T1318] usb 9-1: SerialNumber: syz [ 2019.959003][ T7802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2019.972209][ T7802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2019.986299][ T1318] usb 9-1: 0:2 : does not exist [ 2019.997288][ T1318] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 2020.024525][ T1318] usb 9-1: USB disconnect, device number 71 [ 2020.074278][ T2641] udevd[2641]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2020.154814][ T7807] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2020.296835][ T24] usb 10-1: USB disconnect, device number 58 [ 2020.399853][ T7810] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2022.599745][ T7838] netlink: 'syz.7.9705': attribute type 10 has an invalid length. [ 2022.633164][ T7838] veth1_vlan: entered allmulticast mode [ 2022.661918][ T7838] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 2023.158668][T17481] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 2023.288697][ T1318] usb 10-1: new full-speed USB device number 59 using dummy_hcd [ 2023.348698][T17481] usb 9-1: Using ep0 maxpacket: 8 [ 2023.370260][T17481] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 2023.408466][T17481] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2023.458658][T17481] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2023.512149][T17481] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2023.558939][ T1318] usb 10-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 2023.569541][T17481] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2023.569635][T17481] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2023.569659][T17481] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.686861][ T1318] usb 10-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2023.759126][ T1318] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2023.787418][ T1318] usb 10-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.80 [ 2023.827783][ T1318] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.828945][T17481] usb 9-1: usb_control_msg returned -32 [ 2023.869284][ T1318] usb 10-1: config 0 descriptor?? [ 2023.878297][ T1318] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2024.005254][T17481] usbtmc 9-1:16.0: can't read capabilities [ 2024.088206][ T7850] netlink: 88 bytes leftover after parsing attributes in process `syz.9.9708'. [ 2024.101728][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9708'. [ 2024.203294][ T7854] netlink: 'syz.7.9710': attribute type 10 has an invalid length. [ 2024.211693][ T7854] veth1_vlan: left allmulticast mode [ 2024.431802][T24291] usb 9-1: USB disconnect, device number 72 [ 2024.606138][ T7861] netlink: 'syz.6.9712': attribute type 11 has an invalid length. [ 2024.616700][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9712'. [ 2025.112301][ T7869] netlink: 388 bytes leftover after parsing attributes in process `syz.8.9714'. [ 2025.678693][ T7877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2025.968268][ T1318] usb 10-1: USB disconnect, device number 59 [ 2026.900360][ T7900] netlink: 'syz.7.9719': attribute type 10 has an invalid length. [ 2027.558860][T24290] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 2027.724174][T24290] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 2027.751120][T24290] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2027.784892][T24290] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2027.822807][T24290] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2027.871931][T24290] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2027.906023][T24290] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2027.944684][T24290] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2027.968254][T24290] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2027.993798][T24290] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2028.033490][T24290] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2028.058019][T24290] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2028.082691][T24290] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2028.125666][T24290] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2028.149077][ T7911] netlink: 'syz.7.9725': attribute type 6 has an invalid length. [ 2028.157728][ T7906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2028.177389][T24290] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2028.203747][T24290] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2028.225113][T24290] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2028.243849][T24290] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2028.258983][T24290] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2028.281037][T24290] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2028.299354][T24290] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2028.321281][T24290] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2028.343234][T24290] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2028.359702][T24290] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2028.393289][T24290] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2028.404826][T24290] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2028.434499][T24290] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2028.472823][T24290] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2028.510943][T24290] usb 9-1: Product: syz [ 2028.521125][T24290] usb 9-1: Manufacturer: syz [ 2028.526036][T24290] usb 9-1: SerialNumber: syz [ 2028.532702][T24290] usb 9-1: config 0 descriptor?? [ 2028.556127][T24290] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 2029.263074][ T24] usb 9-1: USB disconnect, device number 73 [ 2030.306525][ T7936] kvm: user requested TSC rate below hardware speed [ 2030.779294][ T24] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 2031.703304][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 2031.703330][ T30] audit: type=1326 audit(1755373805.047:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.7.9733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3835f8ebe9 code=0x7ffc0000 [ 2031.856968][ T30] audit: type=1326 audit(1755373805.047:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.7.9733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3835f8ebe9 code=0x7ffc0000 [ 2031.880857][ T30] audit: type=1326 audit(1755373805.087:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.7.9733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3835f8ebe9 code=0x7ffc0000 [ 2031.903832][ T30] audit: type=1326 audit(1755373805.087:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.7.9733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3835f8ebe9 code=0x7ffc0000 [ 2031.946614][ T30] audit: type=1326 audit(1755373805.087:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.7.9733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3835f8ebe9 code=0x7ffc0000 [ 2031.978718][T24291] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 2032.009874][ T7957] netlink: 'syz.7.9733': attribute type 11 has an invalid length. [ 2032.058025][ T30] audit: type=1326 audit(1755373805.087:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.7.9733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3835f8ebe9 code=0x7ffc0000 [ 2032.110294][ T30] audit: type=1326 audit(1755373805.087:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.7.9733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3835f8ebe9 code=0x7ffc0000 [ 2032.148156][ T7958] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2032.165306][T24291] usb 9-1: Using ep0 maxpacket: 8 [ 2032.182824][T24291] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2032.192291][T24291] usb 9-1: config 0 has no interface number 0 [ 2032.200944][T24291] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2032.213019][ T30] audit: type=1326 audit(1755373805.087:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.7.9733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3835f8ebe9 code=0x7ffc0000 [ 2032.244056][T24291] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2032.318196][T24291] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.334923][ T30] audit: type=1326 audit(1755373805.087:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.7.9733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3835f8ebe9 code=0x7ffc0000 [ 2032.473539][T24291] usb 9-1: config 0 descriptor?? [ 2032.488360][T24291] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2032.569769][ T30] audit: type=1326 audit(1755373805.087:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7949 comm="syz.7.9733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3835f8ebe9 code=0x7ffc0000 [ 2032.592201][ C1] vkms_vblank_simulate: vblank timer overrun [ 2034.548992][T17481] usb 9-1: USB disconnect, device number 74 [ 2034.860959][ T7980] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.9738'. [ 2036.408725][T24291] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 2036.560219][T24291] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2036.571369][T24291] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2036.581873][T24291] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2036.591603][T24291] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.603497][ T7987] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2036.613133][T24291] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2036.877112][T24291] usb 9-1: USB disconnect, device number 75 [ 2037.560636][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.567231][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.750093][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 2038.750112][ T30] audit: type=1326 audit(1755373812.097:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.6.9746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dfef8ebe9 code=0x7ffc0000 [ 2038.758259][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9746'. [ 2038.807580][ T30] audit: type=1326 audit(1755373812.097:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.6.9746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dfef8ebe9 code=0x7ffc0000 [ 2038.831960][ T30] audit: type=1326 audit(1755373812.097:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.6.9746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f2dfef8ebe9 code=0x7ffc0000 [ 2038.878520][ T30] audit: type=1326 audit(1755373812.097:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.6.9746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dfef8ebe9 code=0x7ffc0000 [ 2038.903065][ T30] audit: type=1326 audit(1755373812.097:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.6.9746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dfef8ebe9 code=0x7ffc0000 [ 2038.930893][ T30] audit: type=1326 audit(1755373812.097:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.6.9746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2dfef8ebe9 code=0x7ffc0000 [ 2038.954515][ T30] audit: type=1326 audit(1755373812.097:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.6.9746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dfef8ebe9 code=0x7ffc0000 [ 2038.985200][ T30] audit: type=1326 audit(1755373812.097:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.6.9746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2dfef8ebe9 code=0x7ffc0000 [ 2039.011649][ T30] audit: type=1326 audit(1755373812.097:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.6.9746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dfef8ebe9 code=0x7ffc0000 [ 2039.038206][ T30] audit: type=1326 audit(1755373812.097:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.6.9746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f2dfef8ebe9 code=0x7ffc0000 [ 2099.000762][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.007093][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2150.838805][ T31] INFO: task kworker/1:4:5904 blocked for more than 143 seconds. [ 2150.846637][ T31] Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 [ 2150.854457][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2150.863252][ T31] task:kworker/1:4 state:D stack:16520 pid:5904 tgid:5904 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2150.875327][ T31] Workqueue: events rfkill_sync_work [ 2150.880673][ T31] Call Trace: [ 2150.883957][ T31] [ 2150.886878][ T31] __schedule+0x1798/0x4cc0 [ 2150.891599][ T31] ? __pfx___schedule+0x10/0x10 [ 2150.896471][ T31] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 2150.902078][ T31] ? lock_release+0x4b/0x3e0 [ 2150.906689][ T31] ? rcu_is_watching+0x15/0xb0 [ 2150.911504][ T31] schedule+0x165/0x360 [ 2150.915674][ T31] schedule_preempt_disabled+0x13/0x30 [ 2150.921215][ T31] __mutex_lock+0x7e6/0x1360 [ 2150.925831][ T31] ? __mutex_lock+0x5b6/0x1360 [ 2150.930677][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 2150.935976][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2150.941241][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2150.947161][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2150.953568][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 2150.959368][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 2150.964502][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 2150.970286][ T31] rfkill_set_block+0x1cf/0x440 [ 2150.975159][ T31] rfkill_sync_work+0x114/0x200 [ 2150.980123][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2150.985870][ T31] process_scheduled_works+0xade/0x17b0 [ 2150.991470][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2150.997568][ T31] worker_thread+0x8a0/0xda0 [ 2151.002284][ T31] kthread+0x70e/0x8a0 [ 2151.006373][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2151.011721][ T31] ? __pfx_kthread+0x10/0x10 [ 2151.016365][ T31] ? rcu_is_watching+0x15/0xb0 [ 2151.021202][ T31] ? __pfx_kthread+0x10/0x10 [ 2151.025825][ T31] ret_from_fork+0x3f9/0x770 [ 2151.030468][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2151.035695][ T31] ? __switch_to_asm+0x39/0x70 [ 2151.040596][ T31] ? __switch_to_asm+0x33/0x70 [ 2151.045402][ T31] ? __pfx_kthread+0x10/0x10 [ 2151.050067][ T31] ret_from_fork_asm+0x1a/0x30 [ 2151.054862][ T31] [ 2151.057911][ T31] INFO: task kworker/1:5:1802 blocked for more than 143 seconds. [ 2151.065698][ T31] Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 [ 2151.073386][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2151.082110][ T31] task:kworker/1:5 state:D stack:20848 pid:1802 tgid:1802 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2151.094242][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 2151.101041][ T31] Call Trace: [ 2151.104366][ T31] [ 2151.107337][ T31] __schedule+0x1798/0x4cc0 [ 2151.111919][ T31] ? __pfx___schedule+0x10/0x10 [ 2151.116809][ T31] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 2151.122418][ T31] ? lock_release+0x4b/0x3e0 [ 2151.127035][ T31] ? rcu_is_watching+0x15/0xb0 [ 2151.131845][ T31] schedule+0x165/0x360 [ 2151.136025][ T31] schedule_preempt_disabled+0x13/0x30 [ 2151.141529][ T31] __mutex_lock+0x7e6/0x1360 [ 2151.146139][ T31] ? __mutex_lock+0x5b6/0x1360 [ 2151.150991][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 2151.157265][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2151.162356][ T31] ? lock_acquire+0x5f/0x360 [ 2151.166990][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2151.172758][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 2151.178926][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2151.184674][ T31] process_scheduled_works+0xade/0x17b0 [ 2151.190276][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2151.196382][ T31] worker_thread+0x8a0/0xda0 [ 2151.201069][ T31] kthread+0x70e/0x8a0 [ 2151.205152][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2151.210329][ T31] ? __pfx_kthread+0x10/0x10 [ 2151.214936][ T31] ? rcu_is_watching+0x15/0xb0 [ 2151.219760][ T31] ? __pfx_kthread+0x10/0x10 [ 2151.224375][ T31] ret_from_fork+0x3f9/0x770 [ 2151.229039][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2151.234172][ T31] ? __switch_to_asm+0x39/0x70 [ 2151.239024][ T31] ? __switch_to_asm+0x33/0x70 [ 2151.243803][ T31] ? __pfx_kthread+0x10/0x10 [ 2151.248609][ T31] ret_from_fork_asm+0x1a/0x30 [ 2151.253400][ T31] [ 2151.256450][ T31] INFO: task syz.0.9586:7404 blocked for more than 143 seconds. [ 2151.264435][ T31] Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 [ 2151.272112][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2151.280822][ T31] task:syz.0.9586 state:D stack:25256 pid:7404 tgid:7404 ppid:1147 task_flags:0x400040 flags:0x00004004 [ 2151.292813][ T31] Call Trace: [ 2151.296088][ T31] [ 2151.299061][ T31] __schedule+0x1798/0x4cc0 [ 2151.303589][ T31] ? unwind_get_return_address+0x4d/0x90 [ 2151.309278][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2151.315450][ T31] ? __pfx___schedule+0x10/0x10 [ 2151.320631][ T31] ? schedule+0x91/0x360 [ 2151.324903][ T31] ? rcu_is_watching+0x15/0xb0 [ 2151.329710][ T31] ? lock_release+0x4b/0x3e0 [ 2151.334322][ T31] schedule+0x165/0x360 [ 2151.338468][ T31] schedule_timeout+0x9a/0x270 [ 2151.343309][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2151.348749][ T31] ? rcu_is_watching+0x15/0xb0 [ 2151.353566][ T31] ? rcu_is_watching+0x15/0xb0 [ 2151.358342][ T31] ? wait_for_completion+0x267/0x5d0 [ 2151.363693][ T31] wait_for_completion+0x2bf/0x5d0 [ 2151.368872][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 2151.374531][ T31] ? lock_release+0x4b/0x3e0 [ 2151.379205][ T31] ? rcu_is_watching+0x15/0xb0 [ 2151.384018][ T31] ? __flush_work+0xd2/0xbc0 [ 2151.388656][ T31] __flush_work+0x9b9/0xbc0 [ 2151.393188][ T31] ? __flush_work+0xd2/0xbc0 [ 2151.397768][ T31] ? __pfx___flush_work+0x10/0x10 [ 2151.402851][ T31] ? __mutex_lock+0x335/0x1360 [ 2151.407722][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 2151.413168][ T31] ? __pfx___cancel_work+0x10/0x10 [ 2151.418310][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 2151.424010][ T31] __cancel_work_sync+0xbe/0x110 [ 2151.429010][ T31] rfkill_unregister+0x92/0x220 [ 2151.433900][ T31] nfc_unregister_device+0x96/0x2a0 [ 2151.439171][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 2151.444911][ T31] virtual_ncidev_close+0x56/0x90 [ 2151.450604][ T31] __fput+0x449/0xa70 [ 2151.454599][ T31] task_work_run+0x1d4/0x260 [ 2151.459234][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2151.464364][ T31] ? __pfx___se_sys_close_range+0x10/0x10 [ 2151.470125][ T31] ? rcu_is_watching+0x15/0xb0 [ 2151.474934][ T31] ? rcu_is_watching+0x15/0xb0 [ 2151.479783][ T31] exit_to_user_mode_loop+0xec/0x110 [ 2151.485093][ T31] do_syscall_64+0x2bd/0x3b0 [ 2151.489746][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2151.495839][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2151.500594][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2151.506511][ T31] RIP: 0033:0x7fd19938ebe9 [ 2151.511021][ T31] RSP: 002b:00007fd1996dfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2151.519504][ T31] RAX: 0000000000000000 RBX: 00007fd1995b7da0 RCX: 00007fd19938ebe9 [ 2151.527491][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2151.535609][ T31] RBP: 00007fd1995b7da0 R08: 0000000000000000 R09: 00000004996dfe7f [ 2151.543635][ T31] R10: 000000000003fdac R11: 0000000000000246 R12: 00000000001e6685 [ 2151.551690][ T31] R13: 00007fd1995b5fa0 R14: ffffffffffffffff R15: 00007fd1996dfca0 [ 2151.559717][ T31] [ 2151.562767][ T31] INFO: task syz-executor:7643 blocked for more than 144 seconds. [ 2151.570696][ T31] Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 [ 2151.578331][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2151.587069][ T31] task:syz-executor state:D stack:24232 pid:7643 tgid:7643 ppid:5847 task_flags:0x400000 flags:0x00004004 [ 2151.599067][ T31] Call Trace: [ 2151.602371][ T31] [ 2151.605345][ T31] __schedule+0x1798/0x4cc0 [ 2151.609912][ T31] ? __pfx___schedule+0x10/0x10 [ 2151.614782][ T31] ? schedule+0x91/0x360 [ 2151.619102][ T31] ? rcu_is_watching+0x15/0xb0 [ 2151.623886][ T31] ? lock_release+0x4b/0x3e0 [ 2151.628500][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2151.634490][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2151.640920][ T31] schedule+0x165/0x360 [ 2151.645190][ T31] schedule_preempt_disabled+0x13/0x30 [ 2151.650690][ T31] __mutex_lock+0x7e6/0x1360 [ 2151.655300][ T31] ? __mutex_lock+0x5b6/0x1360 [ 2151.660121][ T31] ? rfkill_register+0x37/0x8e0 [ 2151.664994][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2151.670060][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 2151.675360][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 2151.680798][ T31] ? device_initialize+0x24b/0x440 [ 2151.685926][ T31] rfkill_register+0x37/0x8e0 [ 2151.690661][ T31] hci_register_dev+0x3f5/0x890 [ 2151.695619][ T31] vhci_create_device+0x39c/0x6e0 [ 2151.700696][ T31] vhci_write+0x3ce/0x4a0 [ 2151.705044][ T31] vfs_write+0x5c6/0xb30 [ 2151.709340][ T31] ? __pfx_vhci_write+0x10/0x10 [ 2151.714210][ T31] ? __pfx_vfs_write+0x10/0x10 [ 2151.719152][ T31] ? kmem_cache_free+0x18f/0x400 [ 2151.724112][ T31] ksys_write+0x145/0x250 [ 2151.728438][ T31] ? __pfx_ksys_write+0x10/0x10 [ 2151.733349][ T31] ? rcu_is_watching+0x15/0xb0 [ 2151.738176][ T31] do_syscall_64+0xfa/0x3b0 [ 2151.742790][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2151.748925][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2151.753636][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2151.759624][ T31] RIP: 0033:0x7fa083b8d660 [ 2151.764051][ T31] RSP: 002b:00007fffc236a688 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 2151.772626][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa083b8d660 [ 2151.780656][ T31] RDX: 0000000000000002 RSI: 00007fffc236a69a RDI: 00000000000000ca [ 2151.788690][ T31] RBP: 00007fa083db67b8 R08: 00000000000000d7 R09: 0000000000000000 [ 2151.796683][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 2151.804754][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 2151.812786][ T31] [ 2151.815829][ T31] INFO: lockdep is turned off. [ 2151.820668][ T31] NMI backtrace for cpu 1 [ 2151.820690][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 2151.820712][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2151.820723][ T31] Call Trace: [ 2151.820731][ T31] [ 2151.820739][ T31] dump_stack_lvl+0x189/0x250 [ 2151.820767][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2151.820788][ T31] ? __pfx__printk+0x10/0x10 [ 2151.820818][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2151.820841][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2151.820863][ T31] ? __pfx__printk+0x10/0x10 [ 2151.820889][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2151.820916][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2151.820939][ T31] watchdog+0xf93/0xfe0 [ 2151.820965][ T31] ? watchdog+0x1de/0xfe0 [ 2151.820992][ T31] kthread+0x70e/0x8a0 [ 2151.821016][ T31] ? __pfx_watchdog+0x10/0x10 [ 2151.821039][ T31] ? __pfx_kthread+0x10/0x10 [ 2151.821061][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2151.821085][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2151.821108][ T31] ? __pfx_kthread+0x10/0x10 [ 2151.821129][ T31] ret_from_fork+0x3f9/0x770 [ 2151.821149][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2151.821169][ T31] ? __switch_to_asm+0x39/0x70 [ 2151.821192][ T31] ? __switch_to_asm+0x33/0x70 [ 2151.821214][ T31] ? __pfx_kthread+0x10/0x10 [ 2151.821236][ T31] ret_from_fork_asm+0x1a/0x30 [ 2151.821267][ T31] [ 2151.821274][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2151.969426][ C0] NMI backtrace for cpu 0 [ 2151.969444][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 2151.969463][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2151.969473][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2151.969498][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 c7 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2151.969511][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 2151.969533][ C0] RAX: 38dde82928b23100 RBX: ffffffff81968308 RCX: 38dde82928b23100 [ 2151.969551][ C0] RDX: 0000000000000001 RSI: ffffffff8be334e0 RDI: ffffffff81968308 [ 2151.969562][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 2151.969579][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38130 [ 2151.969590][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 2151.969601][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 2151.969614][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2151.969626][ C0] CR2: 00005557e2d8e168 CR3: 000000000df36000 CR4: 00000000003526f0 [ 2151.969641][ C0] Call Trace: [ 2151.969648][ C0] [ 2151.969654][ C0] default_idle+0x13/0x20 [ 2151.969679][ C0] default_idle_call+0x74/0xb0 [ 2151.969693][ C0] do_idle+0x1e8/0x510 [ 2151.969717][ C0] ? __pfx_do_idle+0x10/0x10 [ 2151.969736][ C0] cpu_startup_entry+0x44/0x60 [ 2151.969751][ C0] rest_init+0x2de/0x300 [ 2151.969767][ C0] start_kernel+0x3a9/0x410 [ 2151.969867][ C0] x86_64_start_reservations+0x24/0x30 [ 2151.969904][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2151.969923][ C0] common_startup_64+0x13e/0x147 [ 2151.969947][ C0] [ 2151.970505][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2152.153908][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 2152.165716][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2152.175770][ T31] Call Trace: [ 2152.179045][ T31] [ 2152.181976][ T31] dump_stack_lvl+0x99/0x250 [ 2152.186569][ T31] ? __asan_memcpy+0x40/0x70 [ 2152.191162][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2152.196358][ T31] ? __pfx__printk+0x10/0x10 [ 2152.200963][ T31] vpanic+0x281/0x750 [ 2152.204949][ T31] ? __pfx_vpanic+0x10/0x10 [ 2152.209452][ T31] ? rcu_is_watching+0x15/0xb0 [ 2152.214215][ T31] ? preempt_schedule+0xae/0xc0 [ 2152.219074][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2152.224537][ T31] panic+0xb9/0xc0 [ 2152.228256][ T31] ? __pfx_panic+0x10/0x10 [ 2152.232672][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2152.238049][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2152.244205][ T31] watchdog+0xfd2/0xfe0 [ 2152.248364][ T31] ? watchdog+0x1de/0xfe0 [ 2152.252702][ T31] kthread+0x70e/0x8a0 [ 2152.256773][ T31] ? __pfx_watchdog+0x10/0x10 [ 2152.261449][ T31] ? __pfx_kthread+0x10/0x10 [ 2152.266039][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2152.271239][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2152.276440][ T31] ? __pfx_kthread+0x10/0x10 [ 2152.281028][ T31] ret_from_fork+0x3f9/0x770 [ 2152.285616][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2152.290723][ T31] ? __switch_to_asm+0x39/0x70 [ 2152.295486][ T31] ? __switch_to_asm+0x33/0x70 [ 2152.300252][ T31] ? __pfx_kthread+0x10/0x10 [ 2152.304841][ T31] ret_from_fork_asm+0x1a/0x30 [ 2152.309611][ T31] [ 2152.312914][ T31] Kernel Offset: disabled [ 2152.317226][ T31] Rebooting in 86400 seconds..