last executing test programs: 4m15.942155657s ago: executing program 1 (id=1350): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x406100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000005) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="146d576736f891bf1f25b7e7579c32b6c900000052a1ec8a26d999a36750b2c3bd063ac0ed1cd8120b75264846ee5520bed453a8a2a6d500190c609517a71e1992c96bc78412f1e20f9fb16e5c4412b8d904a57f23cc67ea80873f3cef7d79b4880684881580dc7314221e4298107649b7fc8a3613aebe86e345664c916ca57566c5bdaaf3534ffb72fa63d8af8281188a3038f894970e1f87d5bf1c1b595b78b3b83d5eabf74b9177d7a9dfe32c967b8ebac31c39087adc1cb84c860c49c9a320e87baba01896c54db432e5159dc1115af339fdf7ac19dc54318cec3c10781b414df46f3e6a409bc92537e470dc70f4fea0491bc1c54eabeb4dd66c2a2da677e7b2cddf5d788f7f14050983020000000084a4f41383ae722d3183d6551fb75be0119e50df524943be061727097e51456555077455d0809809b8416d4a0f815c9367554a4172463b7eaf76a27dfc1cb0e2dd535a87c9ef87a877f58dc3c7c811df175008b99f8f", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0xfffffffffffffffa, 0x2) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r3], 0x30}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f00000005c0)="66b8000000000f23d00f21f86635000000020f23f8ba4000b041ee66b9800000c00f326635001000000f30d87d000f01cf2ee12eded9660f1efc360f01c2baf80c66b8278e788666efbafc0cb000ee", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x7, 0x7, 0x8, 0x3, 0x8, 0x9, 0xc5, 0x9, 0x2, 0x2, 0x1, 0x3, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0d0300000000000000001300000024000980080002000000000093ff02000000000008008100000000000800020004000000"], 0x38}}, 0x0) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="80000000bb2189881d94d279e4220173a8dc6c6dc35b4f38fbfa12ca53868fbc5ef829d0c126184901775d724e4e19d48ea44d764d99322529cc7271bdf046c2d6443d976bcbf5898930ae", @ANYRES16=r7, @ANYBLOB="000326bd7000fcdbdf250e0000000c00068008000600020000005800028054000380080001000a00000008000200ff070000080002005a05000008000200001000000800020006000000080001000b000000080001000c00000008000100faffffff08000200f95b000008000100e10600000800058004000280"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000885) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x1, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0x0, 0xffff}, {0xffe0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40010) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x6}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000580)={0x6, 0x800c, 0x9, 0xe4, r9}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_vlan\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x80}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000100)) 4m14.808261239s ago: executing program 1 (id=1356): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000006c0)={0xa, 0x4e21, 0x5, @ipv4}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="0be0e81856a4874abdcb8b57beac347970d96985a5ca6a1079278efea10ab39b9e73151b195e2d0a0000001e3149c114f0232b800a3d0b68f682f3d25f0292a2c5f05fffef661dd47bb8a2b2c7c9d43f3380c4ebcfb3868f79766dcbcf4efb31f21461901227e26a25ad5059ea97da3b1778fceaad145a751bfd9aba7b038b5e142a893abedd79985374efd79ccda506bb72e9f8d7", 0x95}, {&(0x7f0000000780)="d3130b24da6a524d8fb8577413b9109489238ae71bbc2a1ff09395463aa8bdd93d4813f1e74c012c15243e21570ffdf124e11099a60a6a202a3f4fd550a68d3dbd14d8568bd1086b56cf5ea2c59b979d939f199d3f280508939b91a22d80a62ab46fbba42ee821affb77ad7491b1f9a7752532eab159396e6519e4c8d9249447e043f2ca0b479f80e6d4a1dad2fc7739b594f0dc82d660f861bb850f9e88149b7a78cb310c87a85cd46724b1810be0b91a94348acdf6f041c2848ce1120358f1472b784908d2c491eb90753b85de183f54f7fca3643a2e9d4e867451cad0ad2e9f77f1ed8bfef23282e2c1135ec4ac58a4712c8992c59806", 0xf8}, {&(0x7f0000002200)="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", 0x1000}, {&(0x7f0000000880)="86ec4b2e8c95c1c9055fdc63bed2ab369caec75eb603c346e771b27e33161f302c29b685599cbcf53de5ba6b679fce8a4335376f7fb97fb8834ec057acf0f0311a937b705677f73e25eeb4d329badfab05af5baf6641e0823227ca08ba761fcd10296af926dbbbb94f98894c8c63926f7e62de2336c373000000", 0x7a}, {&(0x7f0000003200)="8bfc8c211096ad5b81e3f557afbd57ed5f13ce862f43028dd6375953234ad39a92218c39f598e53123e8582f5d1eefafd06d9250d84c9c09c5d49a8baf03c7420293b114ba18cb0108c5c290d152495aa4e7fe5fab8b4b8d786ba26bab93fb8a371b0eed250154da951e61086a6c6947cadb8f2c355c1b12c27efaae81d4894e31dc8066ba3737fcdcf89c9a7f2bccafb382f9ef0658d2d3d1c0b0c15dd877f2e8cf10a312f1cfe1d4d8ef4f577912b8de04eb8ca806ecb870422339743d39433b60a5b0711ddf2586a4a812475262493090a9fd7202b8e93f3894b95688dee7cb261b1c73fbef87475a63fe65516d83ff9f96f03e49115460036e862d4049bc18f52c28f7c45cfbfadec9514fef596f6433ec06290b290721a652ad1f722fdb995c066310fc39951265ac134f8d75e9a7df948829c0d02c220bb31e363b47ec68cf625a935475fa23cea80ac32a30ce9005be2f4bfb9696cfde86302de21c540e26681d9be61853e5b701f06696895182e082dc85b2fc5a2434262b2103a83ee90310828bc07ab05c5b171ee7a99be8ef94ddb45f31f4161df56f2258111b494884d45e2cf0ec3bad4426365317b00a744e23dce0a45ee1dfe05064b2c6a164eba5a1c708ed77c8a824cef905ba6bbec3d86686ed4e28a9e13a3810664c5dc337ab179549a08f4dab083df496ba47b09301c2c9e3d1b2f24a8e42d5b0e48584a230cbc0a7bceaa2daba9f2a7b6b2503278095fbb33bf9946a7a974809d33e1ac61023dd37439fa477781e49ec4561e4afc217e50e16ab944579a78d9681b53ff16255b35639e93a2649e66fd885d4d038f433f4c911b6531d5a911c26e923bccb1c26cec5f9561879c53636ee85d07c68dcad98609e73ee8a3e0a243b39311b720f1978756be41f437d64834a10b378ab7b54e8ce28ca3f84f6e7c621afeb9e7ca0a897cc2a33fcdce0854174a16cbf3047e380ea787e65a650afd2c94ea1e726823b49de357ef30041e9bbd11c0d6c407bd2d72323003947a2d34fcd8f099d9b443f20be244a04a27ed4b73b33fc1146319b1eee1c74610d5bca9bcc0dad3080a4a5d4bab2b386ca3add994ec29c63888ebc74c693755be4fdf31468b5ae6164cd31061992617f38128cdf9b6c1c6fab6f0e95e0ef2ddedd0c3275d2ca2d2c0acadf8ae0fd9df2eea8770dde0304b4de885394fd688e4a3d95cf13af2141edc6651d2ab8250cb131e7abe10c805887efb8224fd9ef0078bfcb7355a91d616ad96e3fbd959a34865437525ab2b022d9fa069842384598062bf69b9abe91fc1b480ed5e73d4422ed0d2d01aaf1527e7ba33ad0f49363c102db6310b32390f57ae699647f6602cb631ca840166852a024c8a95fc1fcdb8fa228266c0abf7a5bf67050fd5e989dd45c955ec0bbf86978f83179f89f51b33b68f911a02dc9577c44951b90c70fdb5722a534921db27c18217ea4818678199493671a9f905ff02788092955c4613d5c1d80b3f7f9ced374723aca531e54423c42b97123f32cf82f541bc30558366f3cd8e61a00c82f197bc12ecd93c25c92efe881317d27f16387a7e4a948fa51e80a6805ddbf4a7ed525696d5b61d066b1b9762bc930b4b44a9b1f9813955a92789478f0dd155f9a0a02102cf0534dd4402e7900fcc5e9db67ef143b50baee7c227fbe4f1165741f936135107b029ff8f3973f489f492893140e4998c90995ede97b3ac71199ff38f40d5e569331c51ed9f056a227cd7b4f996d1334e222d42ce0fbd3208ca9b71b72f20672c439cc8662dd58537c25e26ae407f598d910c4ca85af17487f5214ce3517ad8b799b7a3f8d40fe7254065b6c54643ea4baed5fbcf70c95d450d670ad6d5c6703db0179e86177a4c05302c589d7700fb67aea12439f46dec18e285f2628097685b6e1f374aad04a34b1b5cdd5dd49fb65d4a24e750f19b9225fcaccea8dc71035a01e0f8ec643ef65f8f128ff2d3789369e617b63c730f289b8a8cb21d0ba478ea7a97549bf5771842352e829c8370cdb0b7a344a71331d217809a3ecdf1bcd9d8ee5b8560a6dbd531e2515966180289b2da5bac405a5c926f38055a9ec9bfe01bb18e385ed623a063a67421c9a5ee6cc9651c75f5260458ef5817f2b72726819cc255a19c5e726cabc276848178d3b1548ab7610a850ea8654271634e960aa3068cda4288b878b7b593376a5c4b0fd46f0f9027c0bf05da7b36b6ead0c792ce7037bea3a4c9934bb415b95ea0863ccb801399917bcbe0c03810ffb2e01cfa288af193cc57e0840f061bbf2b6a36d9f91157df0cecccc757ec6ce684aeefec8a0e75a1b670aa280d4c1ef2abc1215d03a8b657f4deae3c3a25df2bffb749f71548abdb6bd9f0aea63adabd4c35024d50a94ffdfe586983e8c85eb8202a58965d96fced6c73a5ab44e9f9ffa077487ff77e68936a16173729a1369a3ebbbcbed83fcfe0c6c7e7cd19257a835a0440b34119715ab5b196553181c99024d1eaa8bd61fe425078ecb604153de5ce61b87aeb9d4bba17d99843737303047fbaa4d9db617e7a46aa8e8988acf7dbb2a4332f87439febb8ea3c64f9d14586c6ab322079178b617dc6d629284742fba081b20ad0f0ad8a8cb361fb9c165f87607dd0fd690f2cdc0fbf415118828637adf36f7687c9974e4c1759651c043758a28cd50f9182d8fbd7d0fca3fca85213bbcae2ca3828d461712749f76d1aa329c97187919ac3b044de1c48ea317a5227b966c8356ec3e9c0056037ecb798c0cd1fdcdc6aa8bec877489b5d0ccef4152c15f4ca1ee397cbd43e6e0f37d13196b8a88cf85bca095f517fce451d96a8b3c69d12245018ce47862d39d7005893a22c9065b8c9adbbb0c5e6bb38bea766a04c3ca842b869751532f963bacedd84bf7cb3c01e9243c9e8d12acea56d8555c45c7a97cd2e8cb5cd2acaa10710e8b0a2526a7c64234b38c1c84a8f0decc8a04577506c899ee9de23f166a3cb3f18806f35b2d7a843a7a3464f16db25ce975e9cd418e9518241e3c69de684cdf9b66b03f98633fe027d14a3d9c6f490011abf3b91b4ed8cb97ea112f0cc96e6d71f235f3cf4836db14a7fe788163aca95ab72c3f1da5fbe5321be6d41c0aa0d1922426a0507d660f0c05057b627e5f446e2c347ec3756b6c58c009dd5640562b4f93bdaa9daf5e1441d69497254e8861c83f0344289c9e9fbf4805154302e0a8f3365d4b38dd7094998c499b3501dd87d4b3340fe61a2b30972edb9af2e403f1177062ec066954ea05f565281b69f1f0fb8d7846ff3fc301600ac6d42e741f5cf1ebbf003182746956e5ca683e2a26e103663440c56bb3fb54cbc838789d0e43f6e92407a594b053700e820747a5359df4456663da76b4293e0e35d5e28bf2e99419a630c9ecdc33cf3b05e1d48650e4696be36b6adb95385460d005cb4036999e26045f24ce71df5c10a0290b792c01f2e621f0fcea68e3eb1e7fa743b882666bbfb0a247fbb4d17625e8a6d0101fb15abb88a1808674cf8ba579e93dd714b004b2a2bea791c564858550c75b660b95f6d4b5f8674cdc0197cf1daba99aedff327271a0db4116b74cfa4d52f7089183c09958d8e2a561c680d8294af1397fa80060bf060db3e0d5bc83b64f24a8b5d0e059c2234b520b432381b2a90efb5d6e0414f903cecec580a1f600ddd113c5f9c77d2828d153c876f63a5d2c3bdb9b2c6a3e88fd4620f74dd70fd827a32b29f9b961ede8d229bf37eac262b19e83512376403c31a0dc5fd865dc9b4882cce1ca3ff05f6dda45bfc5ff2b0db28be4f75f7074900912311dcaece17c54adbc1e0324a37d7965ed68607d3e50b793472d1d89f8da7c1d766fa25d1f837115f6146bdc548df131dd14d8efb28ec70f1cf0ba180afa2004c0679ba0d5e3165987d8255cf76cbd0d805d5c4f97b45c91c9d37d882cc884419d28f1a996479e0e564347b75eb28f45d72649d232cf695d97d923a8e739a85548b46dcc86538bc8507deed535df837b78203896c6600d907bd405649e0460d3aa674c19b819d8f7975d25ad075921a06c6e84c9a60b43dfb1bbb92f24c8600642e8620240d5932e19636fdf9f4e6e1771518f7cb3a9cb0ca71c41691c4df4522613c52c50ea7d1b8f734cb0ef863c7164dec0e22cb1cabca229d3b5fff190f04eaf15aaca934cdcb1c5fbc5a5b45675c62c7196b419f4f2bcff15ec48aa220d1640d86e0046975cc9e52162f05cb4f3d2a0adb093f566fc07dfa885828556dd0d10e314f593624d5f015925fb7665fc9af8bcfb71daaf569020764c6057908c7f60b96df0c0bfd6bdcac563aa1dc46fa980130f283d8a5791bcae076701fa8afaa89c6ebbd9a07a7c4934de3188b92fca17401346709163dd0182a177f4861441dda6bee68dbb739c10cada19976bacafabff1b3664c372e4968f981fa83562b624ba7e16f9034b70357c5287fdaa056709693a2b8ac7ccaec164cf9ea65b22f8470e123203cd73c278fd9a2c3f99475d693746dffaf87978fd7761a9f2540b36e57fb6e30982dd819bf050de28c3e4b8c4a64f08f6ce2878dd303a4ea2fb766d1304816edcbd201bb5b976da317d4ccd4d2b9ad1b1e41aadec5b619f21fc9152aa068a4cdb7733ded11f99e4f05f9c9cd2100e22a81f4745bf72cdb60589961964e49d78c5886b7593441ac9d9bc7df4dfddf8bda7530703da54be3d273a3bdf4bde32939a53816bfd9803945833d79ed3984ffd82e8bc6a37613ed8518c799665b815f75cca183c035d7a0d350207719e2c3d72431e85461999f7a39ed809d4a1559563d57319b62c4dee4aaeee0c8900f7ed4e7f579a2594dd638c3053f3bad5d5f08eb753184a9d9799af2222d44331ded4733f934947c8dc9b9f8c1343afa982f05fb7f18fd69dab7fbacb92c179baae26c226e933993bca15183e2e06cc1bc6e6259b25e78be7bdd089bdba6dc8fc90b72a3ae8643c5d1ed5c4ce83a36092797c854ecc748efa9d4ae8db93606f128d323b16971a5cb1871e8b74e1ad4cb27ddaa16e85d10d418417820c7b4fc38bfa99b76db8446b8a7f8dc5ece7d2becd4ede3f55031cec253c441af21a0cdb8cfc7128f9965a6014821b89eb3640e882e78ee360d047bec35d5cb43e4d2672526129f0a6b35a39b34fbdd19ec181672b0b1dfd311adc4f0c7d4314680d818ae7b07ed3ee2c04d66533b4f04538e8b5256fb2c6eef9d3e359720eeb46601d0afae81b601f1a301acc3e0e8e363663b2e9efc4622fb3305912a2f5320a38c3efaec5b854222ad6266635ca27ef2e49e63439c420c5715a69158d5212c343960f3655f271ed68d3a9efb75c77e5dfb3b5d60ec3baf8adabdc39f84b155d16e00d98d958767ec74572055c473d3de6c945eec9703bbef419b54d0265464e589a72f20186d17096fdaf3e7bd3ba7d83e863c70c6975748dd4fa240059be4239b520ea681f8f2370b1094787db6616836db7e116494da02c752c80ad660ce887d313f890093702a71507309113623ed4678b57f0d9ef781228ee7ecd19978d1cb6614524c9c450391eb6a4cabb6b4fa4edcd681a4418266f97016f68c70d241cd7bb4e746c35aeab640b44984b6078bff682c30fdf782b38563478464b43903da802df26620881b4fa49f30946940a130d644543298ec73ce0027454807815fcb749dd218844775f97ee4679198265b6fe6be426e3aac406b2704089677e99b923e593aa82024e41f473b9d597d728a1c58a8f883910670e9ee21d841712d0ff5f84f4158b", 0x1000}, {&(0x7f0000000900)="8d5580621aa4755425b539d92722f65822e56c0e059075eb4be4f37f37a35ed9ca3119fac42841e599479966ed6e5c97feaca69270b7f977f38045135260e5ba8927b49e38daed96d48591d23278bcd3b5568b48141fdd8d98f285f0a747a7bd7db26d0b92067e60da83af23631fc76d2544f3e8e4ad855c8079c9da423eaf81d0ab838bf2b344640459a3dd58cd06f66a2868a14d89ad9e3249e4ed00862b85710a833517ea0511a4d40dfc2494225d0406c7371eaea28c9ef515c31617bacc1245352945c5b1feb1dcb890e7763e4a42f06055", 0xd4}, {&(0x7f0000000a00)="a210eb91735048", 0x7}, {&(0x7f0000000a40)="3d340418e7ac064119e594beb83550097e5ba3e2d275dde80b635b0a2c4a158aca02129cc885ea6f29a022f3b63a305109b60429640f223e22f3", 0x3a}], 0x8}, 0x44081) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x800000, 0x4, 0x20300, 0xfc}, 0x1c) 4m14.161541271s ago: executing program 1 (id=1358): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@ethernet={0x306, @local}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000200)="2818a42a96afd9b672d63d51b78280b0e1bf4b838e266229b7cc", 0x1a}, {&(0x7f0000000580)="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", 0xfc}], 0x2}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086255608c6051292834701020301090224000300000000090b1e0000fc05410009040000004624d0000904ea0000ff"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) connect$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x20, 0x8001, 0x7, 0xfffffffffffffe00, 0x0, 0x806, 0x5}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$notify(r3, 0x402, 0x5) openat(r3, &(0x7f0000000440)='./file1\x00', 0x2bc0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd700000000000040000"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) fcntl$setlease(r4, 0x400, 0x1) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000080)={0x0, 0x1, 0x1000000, 0x0, 0xffffffff, 0xfa000, 0x1a5e00}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 4m11.053639885s ago: executing program 1 (id=1371): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001e0001030200002000000000010000000c00038008000000", @ANYRES32, @ANYBLOB="40b6b14899c25b819067ca3c0c4d62ac45b52ca1e8a838c26d993468ce3610094043e709565f018e8e14f3abbdded71c80f1a6750236326a"], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000700)="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", 0x1b0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)}], 0x1}}], 0x2, 0x0) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x4, 0x80000001, 0x8}, &(0x7f0000000640)=0x10) r7 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd70000000001f29000000180001801400020064756d6d7930"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000005000000f80000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x13, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) write$cgroup_freezer_state(r9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r11 = landlock_create_ruleset(&(0x7f00000002c0)={0x2400, 0x2, 0x3}, 0x18, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r11, 0x7ffffffe, 0x0, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="05000000e6ff52f7a1b45fb4cecb"], 0x14}}, 0x0) 4m10.656294869s ago: executing program 2 (id=1373): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x178, 0x19, 0x1, 0x400, 0x25dfdbfe, {{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x4d5, 0x32}, 0x0, @in6=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x2, 0x0, 0x0, 0x3}]}]}, 0x178}}, 0x0) 4m10.647798422s ago: executing program 2 (id=1374): socket$tipc(0x1e, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x9, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c5, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200003, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x51, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0x10, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x800) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x134, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x114, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0xc}, {0x8, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0xfffffe85}, @AF_BRIDGE={0x4}]}]}, 0x134}}, 0x0) 4m10.447820753s ago: executing program 2 (id=1376): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x2, 0x80004}) fcntl$lock(r1, 0x5, &(0x7f0000000380)={0x1, 0x0, 0x20000000000103ff, 0x800000000}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$inet_opts(r2, 0x0, 0x8000000000000d, &(0x7f0000001440)="0994087d64", 0x5) setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r2, 0x0, 0x9, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r3, &(0x7f0000001e80)=""/96, 0x60) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x10000006, 0x1, &(0x7f0000000000)={0x60, 0x14, 0xfff, 0x1004}, 0x8, 0x8001, 0x2, 0x0, 0x1676ab35, 0x80000004, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000080001000200"/32], 0x20}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001440)={'wlan1\x00'}) 4m9.944787721s ago: executing program 2 (id=1380): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m9.891841427s ago: executing program 1 (id=1381): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0xf}}, @float={0xa, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x5f, 0x30, 0x0, 0x2e, 0x61]}}, 0x0, 0x43, 0x0, 0x1, 0x2, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xa9, &(0x7f0000000a00), 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x5, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000680)='syzkaller\x00', 0x3, 0x39, &(0x7f0000000400)=""/57, 0x41100, 0x5, '\x00', 0x0, @fallback=0x5, r2, 0x8, &(0x7f00000008c0)={0xfffffffe, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0xe, 0x36302c24, 0x3}, 0x10, r3, 0xffffffffffffffff, 0x5, &(0x7f0000000440)=[r0, r4, r5, r5], &(0x7f0000000d40)=[{0x7, 0x3, 0x10, 0x8}, {0x2005, 0x3, 0x0, 0x5}, {0x5, 0x3, 0xb, 0x7}, {0x3, 0x4, 0x5, 0x2}, {0x2, 0x2, 0x7, 0x6}], 0x10, 0x5296}, 0x94) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sysfs$3(0x3) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000100)=0x84) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee8000, 0x402}) ioctl$XFS_IOC_PATH_TO_HANDLE(r8, 0xc01c5869, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000180)='/dev/kvm\x00', 0x2, &(0x7f00000001c0)={@_ha_fsid={[0x10, 0x6]}, {0x36, 0x2, 0x10001, 0x3}}, 0x4, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x800}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4m9.8224473s ago: executing program 2 (id=1382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000000000000010000000000000000000000180000000000000000000000070000004404dc030100ff971100"], 0x60}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800090001000000fedbdf250a802000040300"], 0x1c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x48}}, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) read(r3, &(0x7f0000002480)=""/4096, 0x1000) 4m8.649981657s ago: executing program 2 (id=1386): unshare(0x60600) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x4082172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) syz_emit_ethernet(0x3f, &(0x7f00000009c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x31, 0x67, 0x4000, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x1d, 0x0, @gue={{0x2, 0x0, 0x1, 0x7}, "18d55c5862c0154a14b73ee0b4"}}}}}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) (fail_nth: 2) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000000000", 0x1d}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0684113, &(0x7f0000000000)={0x1, 0x401, 0xe2, 0x8, 0x0, 0x9, 0x9, 0x2, 0x6, 0x6, 0x5, 0x1}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r8, 0x8008551c, &(0x7f0000000340)={0x94d0, 0x1, [{0x1, 0x1}]}) socket(0xa, 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x44efff3a, 0x7, 0x4, 0x1}, 0xfffffffffffffed8) write(r9, 0x0, 0x0) 4m8.146810182s ago: executing program 1 (id=1387): unshare(0x60600) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x4082172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) syz_emit_ethernet(0x3f, &(0x7f00000009c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x31, 0x67, 0x4000, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x1d, 0x0, @gue={{0x2, 0x0, 0x1, 0x7}, "18d55c5862c0154a14b73ee0b4"}}}}}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000037, 0xa, 0xfffffffc) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x4, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff3, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xa}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000000000", 0x1d}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0684113, &(0x7f0000000000)={0x1, 0x401, 0xe2, 0x8, 0x0, 0x9, 0x9, 0x2, 0x6, 0x6, 0x5, 0x1}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r8, 0x8008551c, &(0x7f00000000c0)=ANY=[@ANYBLOB="d09400000100070000000000600098ce2dac2e3d9c82c37e1a355493549884f6fc889e6c0fe144f305c996e1562b525db23f14ad2aca"]) socket(0xa, 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x44efff3a, 0x7, 0x4, 0x1}, 0xfffffffffffffed8) write(r9, 0x0, 0x0) 3m53.584344065s ago: executing program 32 (id=1386): unshare(0x60600) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x4082172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) syz_emit_ethernet(0x3f, &(0x7f00000009c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x31, 0x67, 0x4000, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x1d, 0x0, @gue={{0x2, 0x0, 0x1, 0x7}, "18d55c5862c0154a14b73ee0b4"}}}}}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) (fail_nth: 2) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000000000", 0x1d}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0684113, &(0x7f0000000000)={0x1, 0x401, 0xe2, 0x8, 0x0, 0x9, 0x9, 0x2, 0x6, 0x6, 0x5, 0x1}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r8, 0x8008551c, &(0x7f0000000340)={0x94d0, 0x1, [{0x1, 0x1}]}) socket(0xa, 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x44efff3a, 0x7, 0x4, 0x1}, 0xfffffffffffffed8) write(r9, 0x0, 0x0) 3m53.029219299s ago: executing program 33 (id=1387): unshare(0x60600) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x4082172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) syz_emit_ethernet(0x3f, &(0x7f00000009c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x31, 0x67, 0x4000, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x1d, 0x0, @gue={{0x2, 0x0, 0x1, 0x7}, "18d55c5862c0154a14b73ee0b4"}}}}}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000037, 0xa, 0xfffffffc) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x4, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff3, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xa}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000000000", 0x1d}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0684113, &(0x7f0000000000)={0x1, 0x401, 0xe2, 0x8, 0x0, 0x9, 0x9, 0x2, 0x6, 0x6, 0x5, 0x1}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r8, 0x8008551c, &(0x7f00000000c0)=ANY=[@ANYBLOB="d09400000100070000000000600098ce2dac2e3d9c82c37e1a355493549884f6fc889e6c0fe144f305c996e1562b525db23f14ad2aca"]) socket(0xa, 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x44efff3a, 0x7, 0x4, 0x1}, 0xfffffffffffffed8) write(r9, 0x0, 0x0) 3m37.862042357s ago: executing program 5 (id=1466): r0 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fsetxattr$security_capability(r0, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0xffffffff, 0x1}, {0x0, 0x1}]}, 0x14, 0x0) fchown(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80000, 0xc1e) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x20, 0x0, 0x10, 0xad8a}]}, 0x8) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x10, 0x0, 0x1300) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2400488c) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0xc, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x5}, {0x25000, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0xff}, {0x3000, 0x5002, 0x10, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x2, 0x0, 0xfc}, {0x100000, 0x3000, 0xe, 0x2b, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x10000, 0x10, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x70000}, {0xb000}, 0xfdfcffdb, 0x0, 0x41000, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x1000000000000, 0x1]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$video(0x0, 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, 0x0) ioctl$VIDIOC_QUERYSTD(r7, 0x8008563f, &(0x7f00000002c0)) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000000c0)={0x58000, 0x0, 0x2, 0xfe, 0xe}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8c6, 0x4) socket$kcm(0x15, 0x5, 0x0) 3m36.927546526s ago: executing program 5 (id=1473): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="100a06000408010014001a80100004800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) (fail_nth: 6) 3m36.356398925s ago: executing program 5 (id=1475): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) close(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) getpid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000200000008000000060000000000000009000000000000000000000000000000ff0000000000008003000000000000000000000000000000ffffff7f58000000030000000080000009000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b"], 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000003b40)) sendmsg$unix(r1, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000006c0), 0xa, &(0x7f0000000100)=[@cred={{0x0, 0x1, 0x2, {r9, r7, r8}}}], 0x20, 0x40}, 0x4000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000200)=0x1) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00007000b578107a00"/20, @ANYRES32=0x0, @ANYBLOB="7b01000001c804001c0012800b00010062726964676500000c00028005002a0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040844) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 3m34.896032448s ago: executing program 5 (id=1484): syz_emit_ethernet(0x1a, &(0x7f0000000000)={@link_local={0x3}, @multicast, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@llc={0x4, {@snap={0xaa, 0x0, "c7", "49f792", 0x886c}}}}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000010c0), &(0x7f0000001100)='%pi6 \x00'}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001180)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5d, 0x5d, 0x5, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x78, 0x0, 0x6c}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x47, 0x1}, @datasec={0x7, 0x4, 0x0, 0xf, 0x1, [{0x4, 0x9, 0x9}, {0x5, 0x33, 0x2}, {0x3, 0x7, 0x200}, {0x2, 0x8, 0x5}], "e0"}]}, {0x0, [0x61, 0x61, 0x5f]}}, &(0x7f0000001240)=""/74, 0x7d, 0x4a, 0x0, 0x3f, 0x10000}, 0x28) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001380), 0x4) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@bloom_filter={0x1e, 0x1, 0x8, 0x4ade8d6b, 0x8404, r0, 0x2, '\x00', r1, r2, 0x1, 0x1, 0x4, 0x7, @value=r3}, 0x50) syz_emit_ethernet(0x1019, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x3, 0x1}, {0x8100, 0x0, 0x0, 0x1}}, {@x25={0x805, {0x0, 0x6, 0x1b, "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"}}}}, &(0x7f0000001080)={0x1, 0x4, [0xdad, 0xffd, 0x72f, 0x21a]}) 3m34.745554283s ago: executing program 5 (id=1486): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aaf9ad, 0x60e1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x4}, @IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}]}}}]}, 0x44}}, 0x2) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x1402, 0x200, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008003}, 0x4000000) 3m34.424262193s ago: executing program 5 (id=1487): bpf$PROG_LOAD(0x21, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3486dd6076db4000442f00fe80e800000000000000000000000021ff0200000000000000000000000000010320655800df6249ab025b56ef0086dd0800dd87"], 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000080)={0x0, 0x3a, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000014007f3727bd700000000000103d00003cc53960b4ce3f526c11ce096128f629b66fbb80902ceaa04687bfb62fb74d3c5ab4f7c8be5fd57b8a501137bded8fafce810f3ddeca4b1fa1f0c91f8164bd5cbc25c049b72ed859d122c14b7750fcfac89fae363cd558863a5dfb59eb6c3b22c7f8c3c702cd140716fae4d6e4705ddeac3fc29e00b6b7a5d2170ced4403314cbef6b799e49d3fababefe0c90c73ab22dd6fdde9f02fb1"], 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f00000010c0)=[{{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/125, 0x7d}, {&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x3, &(0x7f0000000d40)=""/19, 0x13}, 0x4}, {{&(0x7f0000000d80)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000280)=""/92, 0x5c}], 0x2, &(0x7f0000000fc0)=""/193, 0xc1}}], 0x2, 0x4000002b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, 0x0, &(0x7f0000000580)) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x6b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) rmdir(0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4}, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x4180) socket$igmp6(0xa, 0x3, 0x3a) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x40d00, 0x0) 3m33.76437875s ago: executing program 34 (id=1487): bpf$PROG_LOAD(0x21, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3486dd6076db4000442f00fe80e800000000000000000000000021ff0200000000000000000000000000010320655800df6249ab025b56ef0086dd0800dd87"], 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000080)={0x0, 0x3a, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000014007f3727bd700000000000103d00003cc53960b4ce3f526c11ce096128f629b66fbb80902ceaa04687bfb62fb74d3c5ab4f7c8be5fd57b8a501137bded8fafce810f3ddeca4b1fa1f0c91f8164bd5cbc25c049b72ed859d122c14b7750fcfac89fae363cd558863a5dfb59eb6c3b22c7f8c3c702cd140716fae4d6e4705ddeac3fc29e00b6b7a5d2170ced4403314cbef6b799e49d3fababefe0c90c73ab22dd6fdde9f02fb1"], 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f00000010c0)=[{{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/125, 0x7d}, {&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x3, &(0x7f0000000d40)=""/19, 0x13}, 0x4}, {{&(0x7f0000000d80)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000280)=""/92, 0x5c}], 0x2, &(0x7f0000000fc0)=""/193, 0xc1}}], 0x2, 0x4000002b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, 0x0, &(0x7f0000000580)) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x6b}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) rmdir(0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4}, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x4180) socket$igmp6(0xa, 0x3, 0x3a) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x40d00, 0x0) 3m29.89383339s ago: executing program 3 (id=1500): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x29, 0x5, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) syz_open_procfs(r2, &(0x7f00000010c0)='net/ip6_tables_targets\x00') r3 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r3, &(0x7f0000000040)=""/4109, 0x100d) r4 = socket(0x400000000010, 0x4, 0x10000000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r7 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) r8 = gettid() setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f0000001080)={0x2f, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x2, 'fo\x00', 0x15, 0x5, 0x68}, 0x2c) capget(&(0x7f0000000080)={0x19980330, r8}, &(0x7f00000000c0)={0x8, 0x8, 0x4, 0x6, 0xaa, 0x3}) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r9, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r10 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r7, 0x40285881, &(0x7f0000001100)={r1, 0x0, 0x9, 0x4, 0x4, 0x4}) fsetxattr$system_posix_acl(r10, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x10}, [], {0x4, 0x1}}, 0x24, 0x0) 3m28.834622292s ago: executing program 3 (id=1503): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x20004040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYRES16], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b}, 0x94) syz_open_dev$vim2m(0x0, 0x8, 0x2) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, &(0x7f0000001140)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x4000040) 3m27.363365923s ago: executing program 3 (id=1507): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003040)=@newtfilter={0x1040, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1014, 0x2, [@TCA_BPF_NAME={0x100e, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}}]}, 0x1040}}, 0x20004804) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x1a, &(0x7f0000000080)={&(0x7f0000000980)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x73, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in=@rand_addr=0x64010100}}]}, 0x1a0}}, 0x0) 3m26.911672942s ago: executing program 3 (id=1510): r0 = socket$kcm(0xa, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0xfeff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "0000883e00000000"}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x9, @private1, 0x8}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000040)="81", 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) 3m25.912419178s ago: executing program 3 (id=1512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'macvlan1\x00'}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x7fff, 0x3]}, 0x8) sendmsg$AUDIT_USER(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x3ed, 0x0, 0x70bd25, 0x25dfdbfd, "2852f45abc4490c503d251c06b23e8b0dede6aa4cf848cf854767277dcb6", ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0xc800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r3, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x29c}], 0x1, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x50, 0x0, 0xfffffffc, 0x0, 0xffff2aef, 0x5, 0x802, 0x8, 0x1000}}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000301019e"], 0x38}}, 0x0) 3m25.576925285s ago: executing program 3 (id=1513): socket$alg(0x26, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000240)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d323456511000000caaf6c26c274214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160000000000403622a590ef62f6b0f8eca0faed00000000", 0x78, 0x4000000, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFT_BATCH(r2, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001240)={&(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x694}, 0x1, 0x0, 0x0, 0x90}, 0x880) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x20040081) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write$uinput_user_dev(r5, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0x4cc59373, 0x0, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x1, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x4, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x80000001, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001001, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x2, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffffc, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x4, 0x7fffffff, 0x6], [0x1, 0xd, 0x7, 0x590, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x6, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x2, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0xffff, 0xb7, 0x3a1, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x7, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x5, 0x0, 0x4, 0x9, 0x6, 0x1, 0x6, 0x2, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0x16]}, 0x45c) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$ttynull(0xffffff9c, &(0x7f0000000040), 0x14202, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0x8f, 0x0, 0x2}) 3m25.094160686s ago: executing program 35 (id=1513): socket$alg(0x26, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000240)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d323456511000000caaf6c26c274214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160000000000403622a590ef62f6b0f8eca0faed00000000", 0x78, 0x4000000, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFT_BATCH(r2, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001240)={&(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x694}, 0x1, 0x0, 0x0, 0x90}, 0x880) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x20040081) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write$uinput_user_dev(r5, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0x4cc59373, 0x0, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x1, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x4, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x80000001, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001001, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x2, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffffc, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x4, 0x7fffffff, 0x6], [0x1, 0xd, 0x7, 0x590, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x6, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x2, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0xffff, 0xb7, 0x3a1, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x7, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x5, 0x0, 0x4, 0x9, 0x6, 0x1, 0x6, 0x2, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0x16]}, 0x45c) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$ttynull(0xffffff9c, &(0x7f0000000040), 0x14202, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0x8f, 0x0, 0x2}) 9.57044965s ago: executing program 8 (id=2238): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004840)=@newtfilter={0x390c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x2, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38d8, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xc}}, @TCA_MATCHALL_ACT={0x3880, 0x2, [@m_nat={0xe8, 0x1d, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x37, 0x8, 0x1ff, 0x4}, @multicast2, @dev={0xac, 0x14, 0x14, 0x16}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x7, 0x1, 0x9, 0x8f}, @private=0xa010100, @remote, 0x0, 0x1}}]}, {0x6d, 0x6, "74d8a48a6ab0a58475ee7fb7abfca93299b943be27332f3a673444986edbc60ad01fb7181370c1e5c974c8b1084561eb7eeab4f93f61536657870a0c4526aca97f82519090904a8e0cbb6c6be5d7027aa81ff7441e5697a08d014ec74e38651ba331c446029a6b0ccd"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x120, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x9, 0x0, 0x2, 0xcc8f}, 0x1, r3}}]}, {0xd1, 0x6, "e282664834090ff0a27a176d82be2442abaaa35f598eced5423fc14619c44c76467b66b2f6ec73a589a048572afca642a9d1319a9f98e0728ddd4b46215e7c3062ed31f08071acd09cc410082f2fb45b1ea90252cbbf406bdaa90a19bf983be1fd6009543e5aa4d2aeabbea65ededa92d4245014d931d96daea02148c6c10101d7caa3ce5d55a4df728a9f213165d215b6d1adb36ddf5eb995cf53ed852d0a58c7237e50771f63f5497be3c5decd255887b1fabb01f68feff910746949e8bb70a835ec70e3b5811904e991e8e8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x54, 0x6, 0x0, 0x0, {{0xd}, {0x4}, {0x23, 0x6, "58b0714d4687dd0e289df0ee006332a50fd6bc4c52d39e2f114be463bc2a18"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x1d60, 0x15, 0x0, 0x0, {{0xb}, {0x1c70, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x0, 0x7, 0xba6, 0xffff7ec5, 0x4, 0x9, 0x5, 0x4, 0x4, 0x101, 0x5, 0x9, 0x2, 0x3, 0x8, 0x5, 0xb, 0x1, 0x3, 0x400, 0x7, 0x1, 0xfff, 0x7fffffff, 0x4, 0x7fff, 0x7, 0x401, 0x9, 0x4b8, 0x7, 0x4, 0x94c, 0x300, 0x2e86, 0x6, 0x3ff, 0x3, 0x3ff, 0x7, 0x40, 0x8a35, 0x7, 0x4, 0xfffffffa, 0xe, 0x401, 0x73d, 0xd6a, 0xffffff51, 0xfffffff7, 0x691, 0x10001, 0x0, 0xc83b, 0xd, 0x8001, 0x4, 0x0, 0xff, 0x8, 0x1f9b, 0x3dc6, 0x7, 0x3, 0x8, 0x80000001, 0x7, 0x1, 0x0, 0x8, 0x7, 0x8, 0x4, 0x2, 0x1, 0x9, 0x81, 0x8, 0xfffffff9, 0x4, 0x3, 0x4a048d7b, 0x1, 0x9, 0x7f, 0xffffffff, 0xf6, 0x100, 0x6, 0x80000000, 0x7, 0xe0000000, 0x800, 0x39eb, 0x200, 0x9, 0x0, 0x9, 0x1, 0x1000, 0x8000, 0x5, 0xa, 0x5, 0x8001, 0xa564, 0xffffffff, 0xf, 0x101, 0x1b, 0xfffffff8, 0x200, 0xffff, 0x9, 0x6, 0x2d1, 0x400, 0xfff, 0x3, 0x7, 0x80000001, 0x6, 0x3, 0x8, 0x5, 0x6, 0x400, 0x5, 0x80000000, 0x15, 0x1, 0x8, 0x9, 0x100, 0x3, 0x2, 0x7fffffff, 0x9, 0xfffffffe, 0x6, 0x2, 0x6, 0xc, 0x7, 0xe, 0x7790, 0xfffffffa, 0x7, 0x0, 0x8, 0x7, 0xff, 0x0, 0x8, 0x7, 0xa2, 0xe, 0x4, 0x8, 0x10, 0x100, 0x5, 0xea, 0x7, 0x8, 0x7, 0x9, 0x2, 0x9, 0x1, 0x9, 0x9, 0x7, 0xfffffff6, 0x372e, 0x7, 0xd, 0x7, 0x8, 0x0, 0x6, 0x7, 0xffffffff, 0x9, 0x8, 0x4, 0x2bc, 0x6, 0x8, 0xfffffff8, 0x9, 0x8, 0x3, 0x6, 0x0, 0x1, 0x0, 0x41e, 0x8, 0x6, 0xb, 0x6, 0xc, 0x6, 0x5, 0x1, 0x0, 0x9, 0x1, 0x2, 0x4190a9da, 0x401, 0x3, 0x5934b7be, 0x8, 0x5, 0x9, 0x3ff, 0x2, 0x8001, 0x2, 0x10000, 0x33, 0x81, 0x5, 0xfffffff2, 0x10001, 0xb1f1, 0x9, 0x2, 0x0, 0x5, 0x1, 0x1, 0xa86, 0x10001, 0x2, 0x2, 0x6, 0x4, 0xff, 0xe, 0x7, 0x7, 0x96, 0x9, 0x8, 0x100000, 0x5, 0x7, 0x4, 0x7, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9, 0x6, 0x0, 0x6, 0x401, 0x7, 0xfffffb37, 0x6, 0x6df4, 0x24000, 0x9, 0x0, 0x3, 0x80000000, 0x9, 0x0, 0x1, 0x100, 0xa66, 0x8000, 0x8000, 0x1, 0x5, 0xf44, 0x7ff, 0xb, 0x0, 0x100, 0xf, 0xc, 0x7, 0x8, 0x4, 0x100, 0x81, 0x9, 0xfffffffb, 0x24000, 0xdf, 0x2, 0x101, 0x46, 0x1, 0x400, 0xffffffbf, 0x1ff, 0xffffffbb, 0x1, 0x6, 0x6b, 0x0, 0xe, 0x80, 0x2, 0x2, 0x9, 0x7, 0xf54, 0x0, 0x0, 0xee, 0x0, 0xe770, 0x9, 0x2000, 0x3, 0x5, 0x5, 0x4, 0x55e397fe, 0x7, 0x7fff, 0xffffff0a, 0x2, 0x4, 0x3, 0xf13, 0x10001, 0x5, 0x9, 0x3ec5d73f, 0x2, 0x8, 0x5, 0x8, 0x603, 0x9, 0x5, 0x4, 0xfffffffe, 0x7e320dc9, 0x7, 0x6, 0x7, 0xb467, 0xfffffff9, 0x8000, 0x4, 0xb4, 0x6, 0x200, 0x0, 0x8, 0xffff0000, 0x77d, 0xb, 0x2, 0x0, 0x4, 0x5, 0x7, 0x2, 0x401, 0x7fff, 0x8001, 0x0, 0x7, 0x9, 0x1, 0x0, 0x4, 0x3, 0x3, 0x3, 0xcef, 0x5, 0x7, 0x8, 0x4, 0x6, 0x40, 0xae, 0x0, 0x0, 0x2, 0x5, 0x5, 0x101, 0x81, 0x1, 0x3ff, 0x942c, 0x4, 0x2dcea23e, 0x3, 0xb, 0x6, 0x2, 0x2, 0x6, 0x2, 0x66b, 0x1000, 0x6, 0x8, 0x7, 0x0, 0x8, 0x0, 0x2, 0x5, 0x2, 0xf4d, 0x5, 0x5, 0x401, 0x0, 0x1e, 0x8, 0x2, 0x1, 0xb, 0x4, 0xfff, 0x2, 0x5, 0x4, 0x97, 0x3, 0x8, 0x0, 0x1, 0x401, 0x9, 0xe, 0x401, 0x0, 0xf026d802, 0x4, 0x1, 0x6, 0x400001, 0x8, 0x93, 0x3, 0x3, 0x8000, 0x40, 0x0, 0x4, 0x4, 0x8, 0x3, 0x1, 0x3, 0x40, 0x5, 0xa, 0x1, 0x0, 0x7, 0xfffffff7, 0x89, 0x4, 0xfffffff9, 0xff, 0xc, 0x1, 0x3, 0xfffffff7, 0x40, 0x8001, 0x6d6, 0xad3, 0x1, 0x7, 0x0, 0x1, 0xb3, 0x8, 0xe, 0x3, 0x7, 0x9b8912e, 0x136, 0x754, 0x3, 0x1ff, 0x7, 0xd, 0x7ff, 0x80000000, 0x3, 0x0, 0x7, 0x8001, 0x2e8b, 0x4, 0x9, 0x9, 0x6, 0x7, 0x401, 0x9, 0x7ff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x9, 0x3, 0x6768, 0x8, 0x9cb, 0x6, 0x0, 0x6, 0x2, 0x9, 0x4, 0x8, 0x8, 0x10, 0xffffffff, 0x4, 0xd, 0x3ff, 0xff, 0x8, 0xffffffff, 0x5, 0x8, 0x1ff, 0x6, 0xc, 0x7, 0x3e8, 0x9, 0x10, 0x20, 0xff, 0xa, 0x5, 0x200, 0x100, 0x8, 0xda, 0x8, 0x2, 0x10001, 0xbd, 0xfff, 0x4, 0x2, 0xa7, 0xfff, 0xd, 0x4, 0x2, 0xfff, 0x1, 0x3, 0x200, 0x6, 0x0, 0x1, 0x0, 0x7ff, 0x59, 0x7, 0x7f, 0x6, 0x8000, 0x80000000, 0x10000, 0x48, 0x3, 0x8f, 0xbacf, 0x1f, 0x87, 0x9, 0x1, 0x72, 0x10000, 0x8, 0xbc, 0x1, 0x6, 0xffffffff, 0xc, 0x2, 0x7, 0xfff, 0x3, 0x4, 0x3, 0x6, 0x5, 0x7, 0x2, 0x8, 0x5, 0x0, 0x7fffffff, 0x4, 0x1, 0xfff, 0xffff, 0x41, 0x7fff, 0xffffffff, 0xffffffa9, 0x0, 0x7fff, 0x0, 0x2, 0x1, 0xfff, 0x8, 0x1, 0x4000000, 0x10001, 0xe7, 0x0, 0xfffffffc, 0x7f, 0x4, 0x6, 0x3, 0x39b, 0x3, 0xffffff00, 0x1ff, 0x6c, 0x8, 0x3, 0x4, 0x7, 0x7, 0x8000, 0x8, 0x7f, 0x8, 0x7fff, 0x5, 0x1, 0x3, 0x3, 0x8, 0x4, 0x6, 0x0, 0xb8e, 0x4c, 0x800, 0x5, 0x401, 0x101, 0x7, 0x3ff, 0x200, 0x1, 0x3, 0x4, 0x4, 0xaf, 0x0, 0x7, 0x8, 0x6, 0x624f, 0x6, 0x8, 0x2, 0x39, 0x2, 0x1, 0x5, 0x7, 0x0, 0x538f5a87, 0x8, 0x10001, 0xe0000000, 0x8001, 0x8, 0xc, 0x6, 0x22, 0x5, 0xfffffff8, 0xf, 0x3, 0x7, 0x7, 0x0, 0x8, 0x4, 0xffff, 0x2, 0x9, 0xba, 0x7ff, 0x2, 0x9, 0x6, 0x9, 0xf7bd, 0x70d, 0xc5d, 0x8000, 0x9, 0xfffff001, 0x80000000, 0xfffffa9c, 0x3, 0x3, 0x9, 0x4, 0x5, 0x5, 0x9, 0x1, 0x81, 0x7fff, 0x2, 0x9, 0x4, 0x7fff, 0x2, 0x200, 0x3, 0x2a0, 0x7, 0x7, 0x7ff, 0x5, 0x1000, 0x13800000, 0xfa0, 0x3, 0x9, 0x608, 0xfffffff4, 0x8a, 0x9, 0x2, 0x2e, 0x5, 0x80, 0x10, 0x9, 0x8, 0x9, 0x1, 0xff, 0x7ff, 0x80, 0x9, 0x46, 0x1, 0x21, 0x6942]}], [@TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x3ff, 0x9, 0x3, 0x5, 0x8000, 0x2, 0x5, 0x96, 0x1, 0x3, 0x8, 0x2, 0x8, 0x100, 0x5, 0x0, 0x1ea, 0x2, 0xd, 0x5, 0x81, 0x1, 0x81, 0x2, 0x0, 0x0, 0x4b5, 0x9, 0x7, 0x2, 0x9, 0x5, 0x8000, 0xa9e1, 0x6, 0x7, 0x0, 0x0, 0x101, 0xffffffe7, 0x10, 0xfffffff7, 0x10001, 0x0, 0x10000, 0xe000000, 0x4, 0x7, 0x3, 0x6, 0xc8a, 0x3, 0x7ff, 0x3, 0x7f, 0x3, 0x6, 0x4, 0xc, 0xfffffffc, 0x8, 0x0, 0x2a2a, 0x100, 0x80000000, 0x364f, 0x5, 0x600, 0x0, 0x3, 0x81, 0x6, 0x0, 0x0, 0xf6c, 0x7fffffff, 0xffff958b, 0x763, 0x7, 0x5, 0x7, 0x4, 0x1, 0x80000001, 0xfffffffa, 0x4f, 0x7, 0x6, 0x6, 0xa2, 0x7ff, 0x8, 0x100, 0xe3, 0x0, 0x6, 0x8, 0x7f, 0x1, 0x3, 0x5, 0x1, 0x0, 0xba3c, 0x10000, 0x4, 0x571, 0x8, 0x9, 0x2, 0x0, 0x0, 0x2, 0xfffffffd, 0x4, 0x8, 0x6, 0x800, 0x9, 0x6, 0x3, 0x9, 0x3ff, 0x7fffffff, 0xe, 0xfbe, 0x4, 0x0, 0x81, 0x0, 0x6, 0x6, 0x1000, 0x5, 0x5, 0x10, 0x9, 0x1c85, 0xe, 0x5, 0x8, 0x4, 0x3ff, 0xfd6, 0x0, 0x153d9f83, 0x7, 0x6, 0x8, 0x0, 0xb85b, 0x800000, 0xf, 0x1, 0x8, 0x7ff, 0x1, 0x0, 0x32b7, 0x9, 0x4, 0xffffffff, 0x8071, 0x1, 0x0, 0x0, 0x80000000, 0x2, 0x9, 0x2664, 0x40, 0x6, 0x7, 0xfff, 0x4, 0xf, 0x5, 0x4, 0x5, 0x5, 0x4, 0xb, 0x3, 0x40, 0x5, 0x3, 0x7, 0x5, 0xffffffff, 0x2aa, 0x0, 0xb242, 0x7, 0x0, 0xe1ae9681, 0x4, 0x40, 0x2, 0xfffffff8, 0x4, 0x7, 0xb, 0x5, 0x6, 0xbd, 0x8ae, 0x1, 0x2, 0x4, 0x6, 0x1000000, 0x2, 0xc77b, 0x10000, 0x5, 0xf, 0x1, 0x1, 0x7, 0x80000001, 0x3, 0x1, 0xa2, 0x9, 0x0, 0xffffffff, 0xe, 0x2, 0xf6, 0x6, 0x2, 0x9, 0x8000, 0x3b, 0xb, 0x8a, 0x7, 0x36c, 0x5, 0x0, 0x0, 0xffffffff, 0x4, 0xb, 0x4, 0x2, 0x2, 0x10, 0x334, 0x7, 0x5, 0x8, 0x1, 0x0, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x3, 0x0, 0x4118, 0x0, 0x6, 0xfffff674, 0xe9, 0x7, 0x401, 0x5, 0x2, 0x0, 0x3, 0x4, 0x4, 0x3, 0x8fa, 0x2, 0x3, 0x7, 0x6, 0xfffffffc, 0x9, 0x1, 0x9, 0x8, 0xb2, 0x40, 0x5, 0x200, 0x0, 0x8, 0x2, 0xffffffff, 0x8, 0xdd, 0x3, 0x7, 0x80000000, 0x5, 0x0, 0x1400, 0x9, 0xec2, 0xffffffff, 0x2, 0x4, 0xd243, 0x8, 0x916, 0x7fffffff, 0x5, 0xffffffd1, 0x7, 0x1, 0x101, 0x3, 0xe51, 0x1, 0x5, 0x1, 0x2, 0x6, 0x5, 0xff, 0x4, 0x4, 0x8, 0x9, 0x7fff, 0x7, 0x4, 0x7, 0xffff7fff, 0x2, 0x7ff, 0x8, 0xf, 0x5, 0x6, 0x0, 0x1, 0xdb, 0x3, 0x4, 0x5, 0x80, 0xa90a, 0x8, 0xe16, 0x5, 0x0, 0x7c, 0xa00, 0x2c4, 0x4, 0x6, 0x1, 0x7, 0x0, 0x5, 0x15d, 0x7, 0x5, 0x5, 0x9, 0x1, 0x1000, 0x200, 0x9, 0x0, 0x9, 0x2, 0x64, 0x2, 0x6, 0x4, 0x80, 0x7, 0x9, 0x8, 0xfffffff8, 0x1, 0x3ff, 0x7, 0x8, 0x0, 0x7, 0x1, 0x8, 0x6e2029a9, 0x9, 0xd, 0x2, 0x2, 0x9, 0x2, 0x1, 0x3e, 0xfffffffe, 0x8, 0x40, 0x0, 0x33225d8e, 0x2, 0x7ff, 0x2000000, 0x6fa67550, 0x2, 0x6d4, 0x9, 0xa, 0x2, 0xffff, 0x8, 0x0, 0x7ab, 0x10, 0x9, 0x7, 0xfffffff8, 0x4, 0x8, 0x7, 0x9, 0x5, 0xffff61ef, 0x1, 0x5, 0x3, 0xc5b, 0x8, 0x5, 0x12, 0x0, 0x5, 0xfa60, 0xe7, 0x8, 0x7f, 0x7f, 0xfffffffc, 0x3, 0x7, 0x0, 0x3, 0x10, 0x0, 0x1, 0x9, 0x7ff, 0x200, 0x917, 0x0, 0x4e6, 0xc10c, 0x1ff, 0x17e9, 0x7, 0x9, 0xfffffff1, 0x0, 0x8, 0x9, 0x7, 0x7ff, 0x8, 0xffffff01, 0x6, 0x7, 0x1000, 0x80000000, 0x4, 0x9, 0x2, 0x401, 0x8, 0xd94, 0x3, 0x3, 0x80000000, 0xf4a2, 0x8, 0x7, 0x9a, 0x1c79, 0xfc, 0x7, 0x7, 0x9, 0x3, 0x7fffffff, 0x8, 0x7, 0x8, 0x0, 0x80000000, 0x0, 0x3, 0x1ff, 0x1, 0x8, 0xe66, 0x8, 0x21c, 0x8, 0xc0, 0x2, 0x3, 0x300, 0x9, 0x5, 0x2, 0x6, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x318}, @TCA_POLICE_RATE64={0xc, 0x8, 0x52}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x7, 0x5, 0x9, 0x3cd, 0x1, 0xffffb9a5, 0xab5c, 0xd920000, 0x5, 0x8, 0x4, 0x1, 0x8, 0x6, 0x4, 0x6, 0x10000, 0x5, 0x8, 0x2, 0x0, 0x10001, 0x5, 0x31, 0x3, 0xfffffffd, 0x5, 0x3, 0x8, 0x6, 0x4, 0x0, 0x7, 0x8, 0xd50, 0x8, 0xe, 0x10000, 0xfffffffa, 0xa, 0x8d, 0x1, 0x6, 0x9, 0x6, 0xffffffff, 0x9, 0x94, 0x8, 0xc4d, 0x100, 0x0, 0x9, 0xfffffff8, 0x1, 0x7, 0x10001, 0x10001, 0x9, 0x8, 0xffff, 0x10000, 0x3, 0xc, 0xe2db, 0x4dad4a9f, 0x7, 0x9, 0x10000, 0x1, 0x960, 0xffff, 0x2add, 0x94, 0x9fd, 0x7, 0x1000, 0x0, 0xc, 0x8001, 0x1000, 0x4, 0x7ff, 0x7e98, 0x2, 0x3, 0x7, 0x179, 0x7, 0x10000, 0x7, 0x10000, 0x9, 0x7fff, 0xa9, 0x3ff, 0x2, 0x504b4f48, 0x0, 0x5, 0x5, 0x5, 0x80000001, 0x8000, 0x7, 0x234, 0x1, 0x6, 0x3, 0x6, 0x101, 0x0, 0x4, 0x4, 0xfffffffc, 0x5, 0xd3be, 0x37a, 0xfff, 0xa1, 0x6, 0x67136d38, 0x1, 0x3, 0x7, 0x2, 0xfffffffe, 0xc02a, 0x2, 0x6, 0x5, 0x7fff, 0x1, 0x4, 0xa1, 0x5, 0x5, 0x48, 0x400, 0x61c2, 0x9, 0x2d, 0x3, 0x9, 0x4, 0x8, 0x2, 0xfffffff6, 0x4bd3, 0xcd98, 0xfffffffb, 0x1, 0xc, 0xc, 0x3, 0x8, 0x419d, 0x74a, 0x3, 0x5, 0x1, 0x7, 0xb07, 0x2, 0x0, 0x8, 0x3, 0x0, 0x9, 0xfffffff2, 0xd, 0x2, 0x0, 0x80000000, 0x5, 0xa, 0x1, 0x4f, 0x81, 0x5, 0xfff, 0x9, 0xfffffffe, 0x6, 0x2, 0x6b7a, 0xff, 0x3, 0x5, 0x9, 0x2, 0x2, 0x7fffffff, 0x10, 0x400, 0xa57, 0x7f, 0x8, 0xe93, 0xffff2b85, 0x3ff, 0x1, 0x8, 0x8, 0x7f, 0xd13, 0x9, 0x10001, 0x7d, 0x7cfe, 0x4, 0x7, 0x7, 0x3, 0xfff, 0x5, 0xf6, 0x6, 0x0, 0x820, 0x89, 0x7fff, 0x4cf, 0xd, 0x800000, 0x2, 0x68, 0x4, 0x100, 0xd, 0xfffffffe, 0x318, 0x5, 0xff, 0xd1e, 0x7, 0x10, 0x10001, 0x200, 0x59, 0xe, 0xf7, 0x4, 0x6, 0xcbf, 0x3, 0x2, 0x8, 0x7fff, 0x0, 0x7f, 0x0, 0xba4f, 0x5, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc2}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x1, 0x5, 0x5, 0x3, 0xfffffff8, 0x7, 0x6, 0xd, 0x3, 0x3, 0x7ff, 0x7fffffff, 0x3, 0xd9c, 0x1, 0x5, 0x1, 0x0, 0x5, 0x7fffffff, 0x400, 0x3, 0x0, 0x401, 0x70c, 0xd5, 0x2, 0x7fff, 0x8, 0x101, 0xffff, 0x2, 0x7, 0x2158179d, 0xfffffffa, 0x2, 0xfff, 0x10001, 0xbc, 0x7f, 0x0, 0xd, 0xe, 0x401, 0xfffffffb, 0x946, 0x80000000, 0x7, 0xe5adde8, 0x8, 0x4, 0x68a5c460, 0x0, 0x1, 0xe170, 0x1, 0x4, 0x6, 0x7193bccc, 0x400, 0x7, 0x7f, 0x5, 0x7f, 0x3, 0x10, 0x8, 0x400, 0x7f, 0x4, 0xcd, 0x8, 0x4, 0x1674, 0x5, 0x8, 0x9, 0xc, 0x8, 0x0, 0x1, 0x7fff, 0x80000001, 0x6833, 0x6, 0x3, 0xc45, 0x10001, 0x1b5b, 0x5, 0x2, 0x9, 0x94, 0x4, 0x34, 0xfffffffc, 0x76, 0x120000, 0x0, 0x7, 0x3, 0x10000, 0x9, 0xff, 0xfffffffa, 0x6, 0x2, 0x2, 0x9, 0x1, 0x3ff, 0x9, 0x10, 0x2, 0x81, 0x7f, 0x2, 0x3a2, 0x1, 0x6, 0x1000, 0x6, 0x1ff, 0xb6, 0x6, 0x1, 0x0, 0x7, 0x0, 0x0, 0xc, 0x4, 0xfffffffb, 0x7, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7fffffff, 0x0, 0x5, 0x5, 0x0, 0x5, 0x2a1f, 0x20000000, 0x5, 0x6, 0x3, 0x1, 0x1, 0x0, 0x3ff, 0x3, 0x3, 0xcb9, 0x6, 0x4, 0xd3, 0x1f9, 0x4, 0x2, 0x7fffffff, 0xe, 0x60de1110, 0x1, 0x0, 0x192da4c1, 0x4, 0x4, 0x3, 0x20e, 0x2, 0x2000000, 0x2, 0xef6, 0x8, 0x1, 0x8d, 0x0, 0x2, 0x2, 0x146, 0x6, 0x4, 0x2, 0x5, 0x9, 0x2, 0x5cf, 0x10000, 0xc2f3, 0x32, 0x3, 0x9, 0x8, 0x3, 0x24000000, 0x5, 0x5, 0x82b6, 0x1, 0x4, 0x6, 0x7, 0xd, 0x4, 0xd, 0x2, 0x7, 0x7, 0x2, 0xf, 0x3, 0x1, 0x3, 0x26d, 0x1, 0xc, 0x8, 0x5, 0x6, 0x7, 0x101, 0x8, 0x4, 0x7b4b, 0x7, 0x2, 0x5, 0x9, 0x2, 0x8, 0x7ff, 0x7fffffff, 0xfff, 0x4, 0x1ff, 0x0, 0x5, 0x2, 0x2, 0x5, 0x200, 0x5, 0x9, 0xe, 0xf4f, 0x9, 0xa03, 0x2, 0x5, 0xad4, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe}], []]}, {0xc8, 0x6, "f20a97be219e45bf341faa944864f989851e2ebae1ba00be6172a15ceef915d648e1cdb9d073ca9873dc47290d8c8d53189781df305693f2a673ec72acb3b68739fae6034dfd8467b625de19693efa5907f582a6f43557ac874d55b7631c9e1be4bad08d443739b7a5d6d152e4ce8056e7c573a8a9f84f45a89a89ebe4de3f609c74a8d55b5af362e042c67238dc3ee0915256a11a24dc9d8b9440aefd3900e394180df006f3d69a7116aae11a3f33439e12c4aace5b8427004d954a7afd5205055db22f"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xf4, 0xb, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x200000}]}, {0x9d, 0x6, "bec2e3eff0ffdc0b8d6949760a2d5353fbc6942159279da0de2cfec4d11f24163e883cf81fc3cd07dbc3a2419b2dec40ad7d5e0b7d6739a4e1eb8082c652baf200614261c86e1e7396961053bffc11983925beae4fe98f44c59a128f2b3b31ccd3fb84e6e0027f82965244650f012975eb7cafa8bd65d025fc83ee466d99528b6c83c1bc1b56ecb005eef66d4b1ec968a84c598e5d54582fa5"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_nat={0x1bc, 0x11, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8, 0x6, 0xff, 0x6}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc0, 0x27, 0x4, 0x3, 0xfffffffc}, @private=0xa010102, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0x0, 0x10000, 0x95c}, @private=0xa010101, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x3, 0x4, 0x7, 0x200}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x7, 0x3, 0x6, 0x5}, @multicast1, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffe, 0xf, 0x10000000, 0x58b, 0x2}, @local, @private=0xa010101, 0xff000000}}]}, {0xa1, 0x6, "e3e5bc498cab06ba40fd40c20959e385b4fb777cd015059e05d99f8322a10aed68a4eef74c232851d4b14ed204bd94160400fbc5edee9823e460153087edc1e2b2957212ea149899668525d41492a19bf8528fa362246ae08634d2f900a01ad46fe0881064dc19bbbcdcb735860c0c815d4b8938c706f1861db52cc920ae575002ea99d41927b175b6021f187fdfdc02bf6c78d94738f53861196bbced"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x500, 0xa, 0x0, 0x0, {{0xb}, {0x458, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x3, 0x2, 0x51, 0x11, {0x1, 0x0, 0x80, 0x800, 0x0, 0x6}, {0x9, 0x1, 0x1, 0x5c4, 0xb, 0xd}, 0xd, 0x2, 0x101}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x4d, 0x977, 0xff, 0x7, 0x4, 0x0, 0x40, 0x0, 0xfffffff5, 0x5d8, 0x8, 0xfff, 0x4, 0x1, 0x3, 0x66, 0xa, 0xb1, 0xc5, 0x1ff, 0x4, 0x4, 0x7, 0xb, 0x7f, 0x2, 0xfffff800, 0xfffffffe, 0x9, 0xfffffffa, 0xfffffffe, 0xb, 0x2, 0x59, 0x4, 0x81, 0x7, 0x8, 0xe26, 0x9, 0xa060, 0x3, 0x5cd6, 0xbd00000, 0x6, 0x9, 0x3d, 0x8, 0xe, 0x600, 0x252, 0x40004000, 0x3, 0x80000001, 0x7, 0x76b, 0x401, 0xf, 0x0, 0xfffffff9, 0x0, 0x3, 0x4010000, 0x1800, 0x3, 0x3, 0x8000, 0x9, 0x2, 0x10001, 0xfffffffe, 0x8, 0x0, 0x0, 0x2, 0x4, 0xfa, 0x10, 0x3000000, 0xca, 0x0, 0x6, 0x2, 0x1000, 0x6, 0x0, 0x2, 0xe, 0x2, 0x6, 0x100, 0x3ff, 0xfffffffd, 0x8, 0xf8, 0x9, 0x6, 0x10001, 0x3, 0x3ff, 0x3, 0x10, 0x3ff, 0x0, 0x7, 0x5, 0x4, 0x2, 0x5, 0x1, 0x9, 0x5, 0x8000, 0xfffffeff, 0x1, 0x80, 0x2, 0x5, 0x6, 0x9, 0x1, 0xfa, 0x5, 0x2, 0x1, 0x2, 0xfffffff8, 0x7, 0x0, 0xffffff00, 0xb1, 0x9, 0x8, 0x800, 0x8, 0x7, 0x6, 0xe95e, 0x0, 0x200, 0x9, 0x10, 0x4, 0x4, 0xffffffff, 0x4, 0xfffffffc, 0x0, 0x8, 0xe, 0x5, 0x7f, 0x9, 0xce9, 0x5, 0xc0e9, 0x6, 0xffff, 0x2, 0x3, 0x1ff, 0x800, 0xc74, 0xa, 0xe000000, 0xe40, 0xb73, 0x10000000, 0x9, 0x6, 0x40, 0x1ff, 0x5, 0x9, 0x5, 0x5, 0x5, 0x8, 0x7f, 0x886, 0x1, 0xc7, 0x12b02e14, 0x8000, 0x3, 0x9, 0x3, 0xd, 0xb, 0x1, 0xd, 0x4, 0x6, 0x401, 0x8, 0x0, 0x4, 0x7, 0xa9, 0x6, 0x2, 0x3, 0x3, 0x0, 0x51f7, 0x7, 0x5, 0x5, 0x2, 0x1, 0x8001, 0x1000, 0xc3d7, 0x0, 0x4, 0x1, 0x9, 0x5, 0x0, 0x26, 0xfff, 0x62, 0xffffffff, 0x3, 0x4389, 0x5, 0x1, 0x1, 0x7, 0x4, 0x4f31, 0x6906, 0x4, 0x86, 0x2, 0x6645f3e6, 0x4, 0x8, 0x2, 0xc, 0x3ff, 0xfffffffb, 0x10000, 0x4, 0x3, 0x3, 0x0, 0x2, 0xce83, 0xb32a, 0xa, 0x65, 0xdd1, 0x65b]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]]}, {0x7d, 0x6, "6d26377fbc89b2b669e9e8a06245af1d6a63dfb6807de9709679660b23c2913ef712e28a07788a4c6dd8fb80e6b23c9b1afddd535accab478e4221384d955582a8b73e69c0c04a6a33c6e9816735e0b5a36c4e0d457009633f5520963d348231d82d85b55dee25986e2cc4aee2039f7138eeef8084f4619c9e"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x1070, 0x6, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x93, 0x6, 0x5, 0x5, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x10001, 0x5, 0x9, 0x8}, 0x2, r3}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0xa0, 0x5, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x4, 0xffffffffffffffff, 0x800, 0xe}}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x80000000}]}, {0x42, 0x6, "cef78154e4a1b4e2f21c1eed6e4a96ce5530b9bd593a75666c0478f11a8820df9cab7798a28be81994f1a9e4b14490dc5b8cf92107c4093dfc6743501929"}, {0xc}, {0xc, 0x8, {0x1, 0x6}}}}]}]}}]}, 0x390c}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 9.502171862s ago: executing program 8 (id=2239): syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaabbaa"], 0x0) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB]) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @empty, 0x0, 0x9, [@private=0xa010102, @loopback, @local, @local, @remote, @multicast1, @remote, @broadcast, @rand_addr=0x64010102]}, 0x34) chmod(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) setsockopt$sock_timeval(r3, 0x1, 0x2, 0x0, 0x48) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r5, 0xc0805841, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000080) close_range(r0, 0xffffffffffffffff, 0x0) 9.385810092s ago: executing program 6 (id=2241): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000840)={0xe, 0x0, [{0x40000000, 0x6, 0x1, 0x7, 0x40006, 0x100, 0x2}, {0x40000001, 0x4, 0x0, 0x7fff, 0x27, 0x7, 0x5}, {0x80000007, 0x8, 0x0, 0x2, 0xbb69, 0x5, 0xffff}, {0xb, 0xf5f, 0x2000000, 0x7, 0x4, 0x6, 0x7ffffffd}, {0xd, 0x2bb, 0x1, 0xd, 0x5, 0x62, 0x9}, {0x2, 0x1, 0x5, 0x9, 0x6, 0x4, 0x3}, {0x1, 0x8d3d, 0x6, 0x9, 0x3ff, 0x1, 0x3}, {0xc0000000, 0x4, 0x0, 0x8000, 0x5, 0x8001, 0x401}, {0x2, 0xfffffffc, 0x0, 0x7, 0xe, 0xb, 0x5}, {0x40000000, 0x5, 0x1, 0x2, 0xd, 0x9, 0x8}, {0x0, 0x9, 0x0, 0x8, 0x7fffffff, 0x2, 0xffffff01}, {0x40000000, 0xf8ab, 0x2, 0x1, 0x4, 0x1000, 0x2d}, {0x80000007, 0xc, 0x4, 0x3, 0x6, 0x4, 0xb}, {0x0, 0x6, 0x0, 0x2, 0x6, 0x1, 0x426b}]}) 9.249013881s ago: executing program 6 (id=2242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_ACT={0x64, 0x3, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9, 0x1}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8848}, 0x40c0) 9.099994938s ago: executing program 6 (id=2243): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x123802, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0x2c, 0x43, 0x1, 0xfffffffe, 0x25dfdbf8, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0xde, 0x0, 0x0, @fd}, @typed={0x8, 0x62, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc044}, 0xc000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x6}, [@exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = dup(r0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x39) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) renameat(r6, &(0x7f0000000000)='./file0\x00', r6, &(0x7f0000000340)='./file0\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r7, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000880}, 0x10000881) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) 8.274694701s ago: executing program 8 (id=2246): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r5, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c4601040202be05000000000000020006000400000019000000380000005e020000d30a00000400200001"], 0x758) close(r5) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x40000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180800b64e0000002415c676a0c3ed5aff110000a6237eb3737783e753820ec8af7a0000000015d78bba65790843a36800000069c1458f7e12c5ba1104b263998c40ee4221e5b375d168d28c0f6658a5a9b640e3ec962301f3446013fa72b29f98e6cb8b71fe2e16b789aae99de138d6225ba150364af27c6ed1d585fc6e892b106c2a27361ace09ecc85545f8503ca9e40c0c05e32cabd9b50ccb26ecbb99247fde8609dd14b91d6d732feac0", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000140)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x306, @broadcast}, 0x6a, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'bridge_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) ioprio_set$pid(0x1, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 6.075508376s ago: executing program 8 (id=2252): r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) socket$inet(0xa, 0x801, 0x84) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x2, 0x3ed2, {0x0}, {}, 0x7, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0xff, 0x7, 0x101}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280), 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$dsp(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(0xffffffffffffffff, 0x54a6) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000002e00202e2d5318374b0027bd7000000f000104000000367edf7c3af8402da207fd090f8b79566e000054cc68a21e87a740bfc261bec2fdd8dc4e71b761c523b9a1ebcb177bc2cc53a85e027c1d665daa03840e2db84b309f01f21b00d0ee607e3377fd6fd7a8c904234bab1fc2afc48c2d34068c7f60"], 0x14}, 0x1, 0x0, 0x0, 0x46814}, 0x40) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000180)={{&(0x7f00005ca000/0x3000)=nil, 0x3000}, 0x1}) 5.992805305s ago: executing program 6 (id=2253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_ACT={0x64, 0x3, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9, 0x1}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8848}, 0x40c0) 5.883827131s ago: executing program 6 (id=2254): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr(r0, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='user.incfs.size\x00', 0x0, 0xde) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(0x0, 0x0, &(0x7f0000000800)={[], 0x1f}) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000040)=0x9) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e21, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000300)={0x15, 0x110, 0xfa08, {r3, 0xfffffffe, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @broadcast}}}, 0x118) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007b80)=ANY=[@ANYBLOB="12010000000000106a058400000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220b000000b04f344ca67bab"], 0x0}, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x2, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x4, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x100}, {0x200, 0x3ff}, {0x5, 0x1}, {0x7eb, 0x8}, {0x2007ff, 0xf0}, {0x6}], 0x3, 0xbf, 0x8, 0x0, 0x5}}, 0xfff}) io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x2, 0xfffffffd, 0x4}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) listen(r7, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x802) socket$can_bcm(0x1d, 0x2, 0x2) 5.316770714s ago: executing program 4 (id=2255): socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) unshare(0x28000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x80, 0x0, {0xffffffffffffffff, 0x2, 0x400000b, 0x0, 0xfbfffffe}, 0xfffffffe}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x3, 0x0, 0x200000000000000, 0xffffffffffffffff}, 0x800}}, 0xb8}, 0x1, 0x0, 0x0, 0x840}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 5.154204516s ago: executing program 4 (id=2256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0xb, 0x10007a, 0x100000}, 0x20) r2 = openat$zero(0xffffff9c, &(0x7f00000000c0), 0x400000, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000000002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r9, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x1, 0x0, r8, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d40)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) getrandom(&(0x7f0000001f40)=""/4, 0x4, 0x3) setns(r2, 0x8000000) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x21) syz_kvm_setup_cpu$x86(r10, r2, &(0x7f0000898000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000300)="650f35baf80c66b8c217288a66efbafc0cb89318ef660f71f7570f74260600260f01c03e0f08f4650f080f20e06635002000000f22e00f9932", 0x39}], 0x1, 0x69, &(0x7f00000003c0), 0x0) r11 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r12, {0x8}, {0xfff2, 0xffff}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1ce}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 4.831958257s ago: executing program 4 (id=2260): quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000000c0)=@nullb, 0x0, 0x0) (fail_nth: 2) 4.73736795s ago: executing program 0 (id=2261): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x2163, &(0x7f00000001c0)={0x0, 0xf531, 0x80, 0x1, 0x32}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x128, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0xe4, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0xffffffffffffffc3, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x150}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x0) r1 = socket$packet(0x11, 0x2, 0x300) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e6700000005000000f47e6aeb880000000000"], 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000200)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB], 0x28}}, 0x0) r5 = io_uring_setup(0x5199, &(0x7f0000000300)={0x0, 0x417a, 0x40, 0x8001002, 0x3a7}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0xac40, 0x0) read(r6, &(0x7f0000000040)=""/148, 0xffffff96) sendto$packet(r1, &(0x7f0000002040)='\x00\x00\x00\x00', 0x4, 0xb01, &(0x7f00000004c0)={0x11, 0x8100, 0x0, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) socket$vsock_stream(0x28, 0x1, 0x0) 4.732272177s ago: executing program 4 (id=2262): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0xf}}, @float={0xa, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x5f, 0x30, 0x0, 0x2e, 0x61]}}, 0x0, 0x43, 0x0, 0x1, 0x2, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xa9, &(0x7f0000000a00), 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a000000", @ANYRES32=0x1, @ANYBLOB="0200"/18, @ANYRES32, @ANYBLOB="050000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x5, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x3, 0x39, &(0x7f0000000400)=""/57, 0x41100, 0x5, '\x00', 0x0, @fallback=0x5, r2, 0x8, &(0x7f00000008c0)={0xfffffffe, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0xe, 0x36302c24, 0x3}, 0x10, r3, 0xffffffffffffffff, 0x5, &(0x7f0000000440)=[r0, r4, r5, r5], &(0x7f0000000d40)=[{0x7, 0x3, 0x10, 0x8}, {0x2005, 0x3, 0x0, 0x5}, {0x5, 0x3, 0xb, 0x7}, {0x3, 0x4, 0x5, 0x2}, {0x2, 0x2, 0x7, 0x6}], 0x10, 0x5296}, 0x94) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sysfs$3(0x3) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000100)=0x84) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee8000, 0x402}) ioctl$XFS_IOC_PATH_TO_HANDLE(r8, 0xc01c5869, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000180)='/dev/kvm\x00', 0x2, &(0x7f00000001c0)={@_ha_fsid={[0x10, 0x6]}, {0x36, 0x2, 0x10001, 0x3}}, 0x4, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x800}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.497940656s ago: executing program 8 (id=2263): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x123802, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0x2c, 0x43, 0x1, 0xfffffffe, 0x25dfdbf8, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0xde, 0x0, 0x0, @fd}, @typed={0x8, 0x62, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc044}, 0xc000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x6}, [@exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = dup(r0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x39) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) renameat(r6, &(0x7f0000000000)='./file0\x00', r6, &(0x7f0000000340)='./file0\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r7, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000880}, 0x10000881) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) 4.496243259s ago: executing program 0 (id=2264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_ACT={0x64, 0x3, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9, 0x1}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8848}, 0x40c0) 4.315633806s ago: executing program 0 (id=2265): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f0000289000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000c67000/0x3000)=nil) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) r0 = userfaultfd(0x80001) r1 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20002002}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x40000000}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0xff800000, 0xc0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) munmap(&(0x7f0000446000/0x3000)=nil, 0x3000) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 4.113163571s ago: executing program 0 (id=2266): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x0, &(0x7f0000006680)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x80) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="e4050000160001000000000000000000e0000001000000000006000000000000fe88000000000000000000000000000100000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000033000000fc02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000200001f09000000000000000700000091230000ab0002006374722d6165732d636500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018030000cb8e892a23aa1faff0ca08bcbcbdbc09e75ff9da23961c863111c13df0946d7a81e1c2b09c76fcf63fb2c652f7b14ba657fcd70fd3f77a374e34293d4ba244e3cf40159c91ce8cdc34e3a34ab610b6850258e91a237498beb1255d172c7cc2954e098900050019006c00000034011100fe880000000000000000000000000001fc010000000000000000000000000000ff010000000000000000000000000001e00000020000000000000000000000006c030000000000000a000200e000000200000000000000000000000000000000000000000000000000000001e0000001000000000000000000000000e00000010000000000000000000000002b040000033500000200020000000000000000000000000000000000fc00000000000000000000000000000000000000000000000000fffffffffffffc0200000000000000000000000000013c010000043500000a000a0020010000000000000000000000000000fc010000000000000000000000000000fe800000000000000000000000000041200100000000000000000000000000012b020000023500000a000a00680002006362632873657270656e7429000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000099b141b8ba9cb9738c58120c314c63cfe34ee9f151be50560b3f1d38ddb4c6884401050000000000000000000000000000000000000004d33300000002000000ff010000000000000000000000000001053500000200e0002000000004000000050000000a010101000000000000000000000000000004d3330000000a000000e00000020000000000000000000000000635000000020400ffffffff0100000001000000e0000002000000000000000000000000000004d5330000000a000000fc0000000000000000000000000000010735000001011f007f0000000700000000002000fe8000000000000000000000000000aa000004d33300000000000000fe8000000000000000000000000000bb02350000030202005d03000009000000ffffff7ffc020000000000000000000000000000000004d32b0000000a000000fe8000000000000000000000000000aa04350000000080000000000003000000020000000c000f"], 0x5e4}}, 0x50) 3.54097725s ago: executing program 4 (id=2267): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f00004fe000/0x4000)=nil) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x1, 0x1}, 0x20) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)=ANY=[@ANYRES16=r0], &(0x7f0000000180), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000001140)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r2, &(0x7f00000002c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x43c001) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x1000, 0x100000000, 0x1}, 0x7}, 0x20, 0x1, 0x0) 2.782186043s ago: executing program 6 (id=2269): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r1 = epoll_create(0xefe6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) unshare(0x2000400) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000003c0)={0x20, 0x0, 0x2, "3582"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) syz_usb_connect(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xa3, 0x69, 0xf2, 0x40, 0x4e8, 0xff30, 0x2711, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x3, 0x80, 0x0, "", [{{0x9, 0x4, 0x51, 0xc, 0x2, 0xbc, 0x34, 0x46, 0x48, [], [{{0x9, 0x5, 0xc, 0xc, 0x200, 0x3, 0x9}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0xf9, 0x5, 0x9}}]}}]}}]}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002700)={0x68, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4004002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x38011, r3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x3000, 0x0, 0x9) socket$netlink(0x10, 0x3, 0x12) r6 = socket$inet6(0xa, 0x4, 0x0) getsockopt$bt_hci(r6, 0x84, 0x85, 0x0, 0x0) 2.74556674s ago: executing program 7 (id=2270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) recvmsg(r0, &(0x7f00000006c0)={&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f0000000580)=[{&(0x7f0000000300)=""/74, 0x4a}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/156, 0x9c}, {&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f00000004c0)=""/114, 0x72}, {&(0x7f0000000540)=""/44, 0x2c}], 0x6, &(0x7f00000005c0)=""/252, 0xfc}, 0x10000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 2.286399459s ago: executing program 7 (id=2271): socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x300) 2.214033909s ago: executing program 7 (id=2272): unshare(0x60600) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x4082172, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) 2.146165977s ago: executing program 7 (id=2273): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x80000026) r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x943a, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x4, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080)=0x2, 0x7f03) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5a1c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) 1.967643306s ago: executing program 7 (id=2274): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) open_tree(r0, &(0x7f0000000640)='\x00', 0x81101) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket(0x2, 0x1, 0x501) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) getgroups(0x27, &(0x7f0000002540)) shutdown(r2, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) close(r1) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0xd, 0x4}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff6, 0xf}, {0xffe2, 0xe}, {0xd, 0xfff4}}}, 0x24}}, 0x1001) 1.154951638s ago: executing program 8 (id=2275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x701, 0x0, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd70000000000004000000080018000cac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.029361408s ago: executing program 0 (id=2276): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x2163, &(0x7f00000001c0)={0x0, 0xf531, 0x80, 0x1, 0x32}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x128, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0xe4, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0xffffffffffffffc3, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x150}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x0) r1 = socket$packet(0x11, 0x2, 0x300) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e6700000005000000f47e6aeb880000000000"], 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000200)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="280000001e0021ff070000000000000007000000"], 0x28}}, 0x0) r5 = io_uring_setup(0x5199, &(0x7f0000000300)={0x0, 0x417a, 0x40, 0x8001002, 0x3a7}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0xac40, 0x0) read(r6, &(0x7f0000000040)=""/148, 0xffffff96) sendto$packet(r1, &(0x7f0000002040)='\x00\x00\x00\x00', 0x4, 0xb01, &(0x7f00000004c0)={0x11, 0x8100, 0x0, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) socket$vsock_stream(0x28, 0x1, 0x0) 832.901136ms ago: executing program 0 (id=2277): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0xf}}, @float={0xa, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x5f, 0x30, 0x0, 0x2e, 0x61]}}, 0x0, 0x43, 0x0, 0x1, 0x2, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xa9, &(0x7f0000000a00), 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a000000", @ANYRES32=0x1, @ANYBLOB="0200"/18, @ANYRES32, @ANYBLOB="050000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x5, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x3, 0x39, &(0x7f0000000400)=""/57, 0x41100, 0x5, '\x00', 0x0, @fallback=0x5, r2, 0x8, &(0x7f00000008c0)={0xfffffffe, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0xe, 0x36302c24, 0x3}, 0x10, r3, 0xffffffffffffffff, 0x5, &(0x7f0000000440)=[r0, r4, r5, r5], &(0x7f0000000d40)=[{0x7, 0x3, 0x10, 0x8}, {0x2005, 0x3, 0x0, 0x5}, {0x5, 0x3, 0xb, 0x7}, {0x3, 0x4, 0x5, 0x2}, {0x2, 0x2, 0x7, 0x6}], 0x10, 0x5296}, 0x94) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sysfs$3(0x3) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000100)=0x84) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee8000, 0x402}) ioctl$XFS_IOC_PATH_TO_HANDLE(r8, 0xc01c5869, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000180)='/dev/kvm\x00', 0x2, &(0x7f00000001c0)={@_ha_fsid={[0x10, 0x6]}, {0x36, 0x2, 0x10001, 0x3}}, 0x4, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x800}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 395.969991ms ago: executing program 4 (id=2278): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192-generic\x00'}, 0x58) sendto$unix(r0, &(0x7f0000001300)="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", 0x1000, 0x40, &(0x7f0000002300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x1416, 0x10}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x2004c0d1}, 0x800e805) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r2) read$FUSE(r2, &(0x7f00000036c0)={0x2020}, 0x2020) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000740)="c248b6bc820fae9d020000000e6801b36a419543643cecdae9ac0000045db941af3f", 0x22) 0s ago: executing program 7 (id=2279): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffbb, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) preadv(r0, &(0x7f0000003640)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1, 0x6, 0x4) kernel console output (not intermixed with test programs): 39][T10663] usb 9-1: USB disconnect, device number 19 [ 537.280894][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 537.305885][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.327618][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.355008][ T5689] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 537.368333][ T9] usb 8-1: string descriptor 0 read error: -22 [ 537.384457][ T9] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 537.399267][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.422595][ T9] usb 8-1: selecting invalid altsetting 1 [ 537.433822][ T9] usb 8-1: unit 3 not found! [ 537.507222][ T5689] usb 5-1: device descriptor read/64, error -71 [ 537.617370][ T5689] usb usb5-port1: attempt power cycle [ 537.623476][ T9] usb 8-1: cannot request logical cluster ID: 0 (err: -5) [ 537.633014][ T9] usb 8-1: invalid MIXER UNIT descriptor 6 [ 537.664940][T10667] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 537.674958][T10663] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 537.708061][ T9] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 537.825950][T10667] usb 1-1: no configurations [ 537.833441][ T9] usb 8-1: USB disconnect, device number 22 [ 537.843920][T10667] usb 1-1: can't read configurations, error -22 [ 537.850604][T10663] usb 9-1: Using ep0 maxpacket: 8 [ 537.863726][T10663] usb 9-1: config 2 has an invalid interface number: 31 but max is 0 [ 537.873409][T10663] usb 9-1: config 2 has no interface number 0 [ 537.880971][T10663] usb 9-1: config 2 interface 31 has no altsetting 0 [ 537.889408][T10663] usb 9-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 537.898568][T10663] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.906836][T10663] usb 9-1: Product: syz [ 537.911136][T10663] usb 9-1: Manufacturer: syz [ 537.915884][T10663] usb 9-1: SerialNumber: syz [ 537.964942][ T5689] usb 5-1: new low-speed USB device number 90 using dummy_hcd [ 537.985706][ T5689] usb 5-1: device descriptor read/8, error -71 [ 537.995368][T10667] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 538.166481][T10667] usb 1-1: no configurations [ 538.171296][T10667] usb 1-1: can't read configurations, error -22 [ 538.178187][T10667] usb usb1-port1: attempt power cycle [ 538.225086][ T5689] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 538.246484][ T5689] usb 5-1: device descriptor read/8, error -71 [ 538.355674][ T5689] usb usb5-port1: unable to enumerate USB device [ 538.457520][T12623] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1908810531 (122163873984 ns) > initial count (42142760512 ns). Using initial count to start timer. [ 538.535107][T10667] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 538.551885][T10663] ch9200 9-1:2.31: probe with driver ch9200 failed with error -22 [ 538.576766][T10663] usb 9-1: USB disconnect, device number 20 [ 538.587403][T10667] usb 1-1: no configurations [ 538.597472][T10667] usb 1-1: can't read configurations, error -22 [ 538.745284][T10667] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 538.791075][T10667] usb 1-1: no configurations [ 538.795855][T10667] usb 1-1: can't read configurations, error -22 [ 538.802351][T10667] usb usb1-port1: unable to enumerate USB device [ 539.425244][T10663] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 539.564959][T10663] usb 9-1: device descriptor read/64, error -71 [ 539.694925][ T5689] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 539.773878][T12651] xt_bpf: check failed: parse error [ 539.815036][T10663] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 539.844981][ T5689] usb 5-1: Using ep0 maxpacket: 32 [ 539.854458][ T5689] usb 5-1: config 3 has an invalid interface number: 147 but max is 3 [ 539.862933][ T5689] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 539.878648][ T5689] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 539.887646][ T5689] usb 5-1: config 3 has no interface number 0 [ 539.895391][ T5689] usb 5-1: config 3 interface 147 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 539.908805][ T5689] usb 5-1: config 3 interface 147 has no altsetting 0 [ 539.926378][ T5689] usb 5-1: New USB device found, idVendor=4855, idProduct=0091, bcdDevice=b8.57 [ 539.944266][ T5689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.952465][ T5689] usb 5-1: Product: syz [ 539.957318][ T5689] usb 5-1: Manufacturer: ç­ä¤ˆá–毟퓱䑗骺홃ꩠ办 [ 539.964652][ T5689] usb 5-1: SerialNumber: syz [ 539.970458][T10663] usb 9-1: device descriptor read/64, error -71 [ 540.085832][T10663] usb usb9-port1: attempt power cycle [ 540.201023][ T5689] usb 5-1: USB disconnect, device number 92 [ 540.445163][T10663] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 540.486168][T10663] usb 9-1: device descriptor read/8, error -71 [ 540.747460][T10663] usb 9-1: new low-speed USB device number 24 using dummy_hcd [ 540.758443][T12661] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1904'. [ 540.787557][T10663] usb 9-1: device descriptor read/8, error -71 [ 540.825423][ T5689] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 540.908673][T10663] usb usb9-port1: unable to enumerate USB device [ 540.998807][ T5689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.011382][ T5689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 541.034561][ T5689] usb 1-1: config 1 has no interface number 0 [ 541.041121][ T5689] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.057044][ T5689] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 541.067123][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.075229][ T5689] usb 1-1: Product: syz [ 541.079525][ T5689] usb 1-1: Manufacturer: syz [ 541.084145][ T5689] usb 1-1: SerialNumber: syz [ 541.097710][ T5689] usb 1-1: selecting invalid altsetting 1 [ 541.135047][T10667] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 541.296501][T10667] usb 5-1: Using ep0 maxpacket: 32 [ 541.306516][T10667] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 541.316952][T10667] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.329387][T10667] usb 5-1: config 0 has no interface number 0 [ 541.338270][T10667] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 541.348438][T10667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.358224][T10667] usb 5-1: Product: syz [ 541.362805][T10667] usb 5-1: Manufacturer: syz [ 541.369514][T10667] usb 5-1: SerialNumber: syz [ 541.377255][T10667] usb 5-1: config 0 descriptor?? [ 541.506966][ T5689] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 541.515790][ T5689] cdc_ncm 1-1:1.1: bind() failure [ 541.527468][ T5689] usb 1-1: USB disconnect, device number 120 [ 542.141432][T12673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.151435][T12673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.367044][T10667] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 542.481397][T12690] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1913'. [ 542.495478][T12690] openvswitch: netlink: Flow actions attr not present in new flow. [ 542.545760][T10667] usb 1-1: no configurations [ 542.551764][T10667] usb 1-1: can't read configurations, error -22 [ 542.685002][T10667] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 542.855697][T10667] usb 1-1: no configurations [ 542.866366][T10667] usb 1-1: can't read configurations, error -22 [ 542.883238][T10667] usb usb1-port1: attempt power cycle [ 543.245225][T10667] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 543.287872][T10667] usb 1-1: no configurations [ 543.301920][T10667] usb 1-1: can't read configurations, error -22 [ 543.455106][T10667] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 543.488369][T10667] usb 1-1: no configurations [ 543.493586][T10667] usb 1-1: can't read configurations, error -22 [ 543.500597][T10667] usb usb1-port1: unable to enumerate USB device [ 543.678323][T12704] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1917'. [ 543.835869][T12709] FAULT_INJECTION: forcing a failure. [ 543.835869][T12709] name failslab, interval 1, probability 0, space 0, times 0 [ 543.854925][T10667] usb 5-1: USB disconnect, device number 93 [ 543.868985][T12709] CPU: 1 UID: 0 PID: 12709 Comm: syz.8.1918 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.869012][T12709] Tainted: [L]=SOFTLOCKUP [ 543.869019][T12709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.869030][T12709] Call Trace: [ 543.869038][T12709] [ 543.869045][T12709] dump_stack_lvl+0xe8/0x150 [ 543.869070][T12709] should_fail_ex+0x412/0x560 [ 543.869098][T12709] should_failslab+0xa8/0x100 [ 543.869125][T12709] __kmalloc_noprof+0xe8/0x760 [ 543.869149][T12709] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 543.869180][T12709] tomoyo_realpath_from_path+0xe3/0x5d0 [ 543.869206][T12709] ? tomoyo_domain+0xd7/0x130 [ 543.869239][T12709] ? tomoyo_path_number_perm+0x219/0x630 [ 543.869260][T12709] tomoyo_path_number_perm+0x246/0x630 [ 543.869284][T12709] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 543.869304][T12709] ? __lock_acquire+0x6b5/0x2cf0 [ 543.869358][T12709] ? __fget_files+0x2a/0x420 [ 543.869384][T12709] ? __fget_files+0x3a0/0x420 [ 543.869403][T12709] ? __fget_files+0x2a/0x420 [ 543.869427][T12709] security_file_ioctl_compat+0xc3/0x2a0 [ 543.869450][T12709] __ia32_compat_sys_ioctl+0x139/0x950 [ 543.869479][T12709] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 543.869508][T12709] ? __fget_files+0x3a0/0x420 [ 543.869533][T12709] ? fput+0xa0/0xd0 [ 543.869552][T12709] ? ksys_write+0x242/0x270 [ 543.869584][T12709] __do_fast_syscall_32+0x229/0x6e0 [ 543.869614][T12709] ? do_fast_syscall_32+0x33/0x70 [ 543.869635][T12709] ? lockdep_hardirqs_on+0x7a/0x110 [ 543.869656][T12709] ? asm_int80_emulation+0x1a/0x20 [ 543.869672][T12709] ? do_int80_emulation+0x286/0x530 [ 543.869695][T12709] ? trace_irq_disable+0x3b/0x140 [ 543.869722][T12709] do_fast_syscall_32+0x33/0x70 [ 543.869746][T12709] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 543.869766][T12709] RIP: 0023:0xf7f1601c [ 543.869783][T12709] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 543.869798][T12709] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 543.869818][T12709] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000540a [ 543.869831][T12709] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.869841][T12709] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 543.869852][T12709] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 543.869863][T12709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 543.869890][T12709] [ 543.871083][T12709] ERROR: Out of memory at tomoyo_realpath_from_path. [ 544.587790][T10667] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 544.755074][T10667] usb 5-1: Using ep0 maxpacket: 16 [ 544.762837][T10667] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.773229][T10667] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.792542][T10667] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 544.802020][T10667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.810048][T10667] usb 5-1: Product: syz [ 544.814339][T10667] usb 5-1: Manufacturer: syz [ 544.819051][T10667] usb 5-1: SerialNumber: syz [ 544.835007][T10667] usb 5-1: 0:2 : does not exist [ 545.055837][T12718] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1923'. [ 545.176644][T10667] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 545.277092][T10667] usb 5-1: USB disconnect, device number 94 [ 545.338735][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 545.775734][T12755] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 545.905071][T10667] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 546.054900][T10667] usb 9-1: Using ep0 maxpacket: 16 [ 546.061884][T10667] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.072579][T10667] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 546.083954][T10667] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 546.093642][T10667] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 546.103321][T10667] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.105366][ T1575] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 546.124806][T10667] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 546.134429][T10667] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 546.142515][T10663] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 546.150512][T10667] usb 9-1: Manufacturer: syz [ 546.158768][T10667] usb 9-1: config 0 descriptor?? [ 546.277165][ T1575] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.287718][ T1575] usb 5-1: config 0 has no interfaces? [ 546.293237][ T1575] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 546.302327][ T1575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.306633][T10663] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 546.313369][ T1575] usb 5-1: config 0 descriptor?? [ 546.328525][T10663] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.343335][T10663] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 546.352703][T10663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.361007][T10663] usb 1-1: Product: syz [ 546.365677][T10663] usb 1-1: Manufacturer: syz [ 546.370336][T10663] usb 1-1: SerialNumber: syz [ 546.382402][T10663] rtl8150 1-1:1.0: couldn't find required endpoints [ 546.390819][T10663] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 546.435406][T10667] rc_core: IR keymap rc-hauppauge not found [ 546.444452][T10667] Registered IR keymap rc-empty [ 546.449773][T10667] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 546.474972][T10667] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 546.496570][T10667] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 546.510207][T10667] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input89 [ 546.524914][T10667] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 546.543160][T12760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.551686][T10667] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 546.552079][T12760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.575097][T10667] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 546.595100][T10667] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 546.634981][T10667] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 546.654970][T10667] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 546.675370][T10667] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 546.689225][ T1575] usb 1-1: USB disconnect, device number 125 [ 546.694976][T10667] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 546.715071][T10667] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 546.735008][T10667] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 546.758742][T10667] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 546.767933][T10667] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 546.841045][T10667] usb 9-1: USB disconnect, device number 25 [ 548.142622][T12791] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 548.825008][T10663] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 548.864987][ T5689] usb 5-1: USB disconnect, device number 95 [ 549.006874][T10663] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 549.022448][T10663] usb 9-1: config 0 has no interface number 0 [ 549.038613][T10663] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 549.053721][T10663] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.072326][T10663] usb 9-1: config 0 descriptor?? [ 549.103078][T10663] usb 9-1: selecting invalid altsetting 1 [ 549.126553][T10663] dvb_ttusb_budget: ttusb_init_controller: error [ 549.146974][T10663] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 549.183732][T12816] netlink: 'syz.0.1953': attribute type 1 has an invalid length. [ 549.222589][T10663] DVB: Unable to find symbol cx22700_attach() [ 549.258563][ T5689] usb 5-1: new low-speed USB device number 96 using dummy_hcd [ 549.280662][T10663] DVB: Unable to find symbol tda10046_attach() [ 549.303194][T10663] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 549.327709][T10663] usb 9-1: USB disconnect, device number 26 [ 549.426404][ T5689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 549.445951][ T5689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1072, setting to 8 [ 549.464405][ T5689] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 549.483833][ T5689] usb 5-1: New USB device found, idVendor=0853, idProduct=0313, bcdDevice= 0.00 [ 549.500332][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.524677][ T5689] usb 5-1: config 0 descriptor?? [ 549.542197][T12814] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 549.772711][ T5689] usbhid 5-1:0.0: can't add hid device: -71 [ 549.791312][ T5689] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 549.818626][ T5689] usb 5-1: USB disconnect, device number 96 [ 549.933528][T12830] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 551.087195][T12854] netlink: 'syz.8.1963': attribute type 1 has an invalid length. [ 551.174955][ T1575] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 551.347369][ T1575] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.371350][ T1575] usb 1-1: config 0 has no interfaces? [ 551.387530][ T1575] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 551.423109][ T1575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.453966][ T1575] usb 1-1: config 0 descriptor?? [ 551.542951][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 551.542967][ T30] audit: type=1326 audit(1778389679.110:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.1965" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1601c code=0x7ffc0000 [ 551.580712][ T30] audit: type=1326 audit(1778389679.150:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.1965" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1601c code=0x7ffc0000 [ 551.629189][ T30] audit: type=1326 audit(1778389679.150:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.1965" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f1601c code=0x7ffc0000 [ 551.657702][ T30] audit: type=1326 audit(1778389679.150:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.1965" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1601c code=0x7ffc0000 [ 551.692474][T12851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.709201][T12851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.728704][ T30] audit: type=1326 audit(1778389679.150:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.1965" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1601c code=0x7ffc0000 [ 551.756546][ T30] audit: type=1326 audit(1778389679.150:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.1965" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f1601c code=0x7ffc0000 [ 551.783301][ T30] audit: type=1326 audit(1778389679.150:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.1965" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1601c code=0x7ffc0000 [ 551.814030][ T30] audit: type=1326 audit(1778389679.150:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.1965" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1601c code=0x7ffc0000 [ 551.855553][ T30] audit: type=1326 audit(1778389679.150:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.1965" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f1601c code=0x7ffc0000 [ 551.880757][ T30] audit: type=1326 audit(1778389679.150:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12859 comm="syz.8.1965" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1601c code=0x7ffc0000 [ 552.005662][T12868] tipc: Can't bind to reserved service type 1 [ 552.014377][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1966'. [ 552.319322][T12872] netlink: 'syz.4.1968': attribute type 21 has an invalid length. [ 552.358626][T12872] IPv6: NLM_F_CREATE should be specified when creating new route [ 552.426190][T12872] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 552.433454][T12872] IPv6: NLM_F_CREATE should be set when creating new route [ 552.440762][T12872] IPv6: NLM_F_CREATE should be set when creating new route [ 552.448018][T12872] IPv6: NLM_F_CREATE should be set when creating new route [ 552.822838][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1969'. [ 552.885471][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1969'. [ 552.912652][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1969'. [ 552.946460][T12877] netlink: 'syz.8.1969': attribute type 1 has an invalid length. [ 552.973140][T12873] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 552.993276][T12873] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 553.010549][T12877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.032216][T12878] bond0: (slave dummy0): making interface the new active one [ 553.060085][T12878] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 553.742490][T12896] netlink: 'syz.4.1974': attribute type 3 has an invalid length. [ 553.950954][ T9] usb 1-1: USB disconnect, device number 126 [ 554.314968][T10663] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 554.505564][T10663] usb 5-1: Using ep0 maxpacket: 16 [ 554.515955][T10663] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 554.527259][T10663] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.535946][T10663] usb 5-1: Product: syz [ 554.540311][T10663] usb 5-1: Manufacturer: syz [ 554.547674][T10663] usb 5-1: SerialNumber: syz [ 554.557214][T10663] usb 5-1: config 0 descriptor?? [ 554.973698][T10663] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 555.007532][T10663] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 555.037195][T10663] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 555.047166][T10663] usb 5-1: media controller created [ 555.071888][T10663] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 555.186450][T12916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.201146][T12916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.212125][T10663] zl10353_read_register: readreg error (reg=127, ret==0) [ 555.227157][T10663] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 555.236112][T10663] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 555.255104][T10663] usb 5-1: USB disconnect, device number 97 [ 555.336989][T10663] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 555.519391][T12939] FAULT_INJECTION: forcing a failure. [ 555.519391][T12939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.532666][T12939] CPU: 0 UID: 0 PID: 12939 Comm: syz.0.1987 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.532693][T12939] Tainted: [L]=SOFTLOCKUP [ 555.532700][T12939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 555.532710][T12939] Call Trace: [ 555.532718][T12939] [ 555.532726][T12939] dump_stack_lvl+0xe8/0x150 [ 555.532745][T12939] should_fail_ex+0x412/0x560 [ 555.532761][T12939] _copy_to_user+0x31/0xb0 [ 555.532777][T12939] simple_read_from_buffer+0xe1/0x170 [ 555.532791][T12939] proc_fail_nth_read+0x1bb/0x230 [ 555.532806][T12939] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 555.532820][T12939] ? rw_verify_area+0x2a6/0x4d0 [ 555.532835][T12939] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 555.532848][T12939] vfs_read+0x20c/0xa70 [ 555.532864][T12939] ? __pfx___mutex_lock+0x10/0x10 [ 555.532880][T12939] ? __pfx_vfs_read+0x10/0x10 [ 555.532894][T12939] ? __fget_files+0x2a/0x420 [ 555.532908][T12939] ? __fget_files+0x3a0/0x420 [ 555.532919][T12939] ? __fget_files+0x2a/0x420 [ 555.532935][T12939] ksys_read+0x150/0x270 [ 555.532950][T12939] ? __pfx_ksys_read+0x10/0x10 [ 555.532966][T12939] ? asm_int80_emulation+0x1a/0x20 [ 555.532979][T12939] do_int80_emulation+0x181/0x530 [ 555.532993][T12939] ? trace_irq_disable+0x3b/0x140 [ 555.533008][T12939] ? asm_int80_emulation+0x1a/0x20 [ 555.533017][T12939] ? clear_bhb_loop+0x40/0x90 [ 555.533027][T12939] ? clear_bhb_loop+0x40/0x90 [ 555.533038][T12939] asm_int80_emulation+0x1a/0x20 [ 555.533048][T12939] RIP: 0023:0xf71c616b [ 555.533057][T12939] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 555.533066][T12939] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 555.533077][T12939] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54865d0 [ 555.533084][T12939] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 555.533089][T12939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 555.533095][T12939] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 555.533100][T12939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 555.533114][T12939] [ 556.065247][ T29] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 556.247493][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.273228][ T29] usb 1-1: config 0 has no interfaces? [ 556.293202][ T29] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 556.331942][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.376854][ T29] usb 1-1: config 0 descriptor?? [ 556.605670][T12943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.617952][T12943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.630243][T12966] FAULT_INJECTION: forcing a failure. [ 556.630243][T12966] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 556.690061][T12966] CPU: 0 UID: 0 PID: 12966 Comm: syz.4.1995 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.690085][T12966] Tainted: [L]=SOFTLOCKUP [ 556.690090][T12966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 556.690095][T12966] Call Trace: [ 556.690100][T12966] [ 556.690105][T12966] dump_stack_lvl+0xe8/0x150 [ 556.690122][T12966] should_fail_ex+0x412/0x560 [ 556.690139][T12966] prepare_alloc_pages+0x22a/0x650 [ 556.690158][T12966] __alloc_frozen_pages_noprof+0x12f/0x380 [ 556.690176][T12966] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 556.690193][T12966] ? __pfx_policy_nodemask+0x10/0x10 [ 556.690208][T12966] ? unwind_next_frame+0xa6/0x2550 [ 556.690225][T12966] alloc_pages_mpol+0x235/0x490 [ 556.690243][T12966] alloc_pages_noprof+0xac/0x2a0 [ 556.690259][T12966] pte_alloc_one+0x22/0x370 [ 556.690273][T12966] do_pte_missing+0x1214/0x33f0 [ 556.690289][T12966] ? mtree_range_walk+0x6f9/0x8b0 [ 556.690311][T12966] handle_mm_fault+0x1bd7/0x3170 [ 556.690333][T12966] ? handle_mm_fault+0xee/0x3170 [ 556.690348][T12966] ? __pfx_handle_mm_fault+0x10/0x10 [ 556.690365][T12966] ? __lock_acquire+0x6b5/0x2cf0 [ 556.690379][T12966] ? lock_mm_and_find_vma+0xa7/0x340 [ 556.690394][T12966] do_user_addr_fault+0x75b/0x1340 [ 556.690412][T12966] exc_page_fault+0x6a/0xc0 [ 556.690427][T12966] asm_exc_page_fault+0x26/0x30 [ 556.690437][T12966] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 556.690449][T12966] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 556.690457][T12966] RSP: 0018:ffffc9000d80fe10 EFLAGS: 00050216 [ 556.690468][T12966] RAX: 00007ffffffff001 RBX: 0000000000000020 RCX: 0000000000000020 [ 556.690474][T12966] RDX: 0000000000000001 RSI: 0000000080000500 RDI: ffff88802bc3c440 [ 556.690481][T12966] RBP: 0000000000000020 R08: ffff88802bc3c45f R09: 1ffff1100578788b [ 556.690488][T12966] R10: dffffc0000000000 R11: ffffed100578788c R12: 0000000000000020 [ 556.690494][T12966] R13: dffffc0000000000 R14: ffff88802bc3c440 R15: 0000000080000500 [ 556.690509][T12966] _copy_from_user+0x7a/0xb0 [ 556.690525][T12966] memdup_user+0x5e/0xd0 [ 556.690536][T12966] security_setselfattr+0x8d/0x830 [ 556.690552][T12966] __ia32_sys_lsm_set_self_attr+0x9a/0xb0 [ 556.690566][T12966] __do_fast_syscall_32+0x229/0x6e0 [ 556.690581][T12966] ? do_fast_syscall_32+0x33/0x70 [ 556.690595][T12966] ? lockdep_hardirqs_on+0x7a/0x110 [ 556.690608][T12966] ? asm_int80_emulation+0x1a/0x20 [ 556.690616][T12966] ? do_int80_emulation+0x286/0x530 [ 556.690630][T12966] ? trace_irq_disable+0x3b/0x140 [ 556.690647][T12966] do_fast_syscall_32+0x33/0x70 [ 556.690661][T12966] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 556.690673][T12966] RIP: 0023:0xf7ff901c [ 556.690683][T12966] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 556.690691][T12966] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 00000000000001cc [ 556.690700][T12966] RAX: ffffffffffffffda RBX: 0000000000000067 RCX: 0000000080000500 [ 556.690707][T12966] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 556.690712][T12966] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 556.690718][T12966] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 556.690723][T12966] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 556.690737][T12966] [ 557.530285][T12979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.567137][T12978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.662769][T12982] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1998'. [ 558.889826][ T29] usb 1-1: USB disconnect, device number 127 [ 559.008747][T12989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2001'. [ 559.027804][T12989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2001'. [ 559.258557][T10663] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 559.416825][T10663] usb 5-1: unable to get BOS descriptor or descriptor too short [ 559.425749][T10663] usb 5-1: config 5 has an invalid interface number: 241 but max is 3 [ 559.433954][T10663] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 559.444141][T10663] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 4 [ 559.453054][T10663] usb 5-1: config 5 has no interface number 0 [ 559.459210][T10663] usb 5-1: config 5 interface 241 altsetting 135 has an invalid descriptor for endpoint zero, skipping [ 559.470253][T10663] usb 5-1: config 5 interface 241 altsetting 135 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 559.481557][T10663] usb 5-1: config 5 interface 241 altsetting 135 endpoint 0x9 has invalid wMaxPacketSize 0 [ 559.491793][T10663] usb 5-1: config 5 interface 241 altsetting 135 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 559.505184][T10663] usb 5-1: config 5 interface 241 has no altsetting 0 [ 559.513901][T10663] usb 5-1: New USB device found, idVendor=06cd, idProduct=0101, bcdDevice=14.a6 [ 559.523005][T10663] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.531020][T10663] usb 5-1: Product: syz [ 559.535195][T10663] usb 5-1: Manufacturer: syz [ 559.539812][T10663] usb 5-1: SerialNumber: syz [ 559.756865][T10663] keyspan 5-1:5.241: Keyspan - (without firmware) converter detected [ 559.771799][T10663] usb 5-1: USB disconnect, device number 98 [ 559.780185][T10663] keyspan 5-1:5.241: device disconnected [ 560.204970][ T9] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 560.215065][ T5689] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 560.345227][ T5689] usb 1-1: device descriptor read/64, error -71 [ 560.361170][T13014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2009'. [ 560.406788][T13014] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.414462][T13014] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.488913][T13014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.568610][ T137] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.578903][ T137] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.585379][ T5689] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 560.596950][ T137] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.606547][ T137] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.725485][ T5689] usb 1-1: device descriptor read/64, error -71 [ 560.837527][ T5689] usb usb1-port1: attempt power cycle [ 560.944936][T10667] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 561.106706][T10667] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.116901][T10667] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 561.126009][T10667] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 561.135153][T10667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.147267][T10667] usb 5-1: config 0 descriptor?? [ 561.175069][ T5689] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 561.196028][ T5689] usb 1-1: device descriptor read/8, error -71 [ 561.361430][T13021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.371465][T13021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.435091][ T5689] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 561.456164][ T5689] usb 1-1: device descriptor read/8, error -71 [ 561.565889][ T5689] usb usb1-port1: unable to enumerate USB device [ 562.759905][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.768531][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.837581][T13043] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2017'. [ 562.846802][T13043] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2017'. [ 562.855794][T13043] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2017'. [ 562.891068][ T9] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 562.899694][ T9] usb 9-1: can't read configurations, error -71 [ 563.227925][T13057] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 563.454930][ T1575] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 563.615045][ T1575] usb 1-1: Using ep0 maxpacket: 32 [ 563.626689][ T1575] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.637397][ T1575] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 563.649190][ T1575] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 563.658773][ T1575] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.667055][ T1575] usb 1-1: Product: syz [ 563.671390][ T1575] usb 1-1: Manufacturer: syz [ 563.678242][ T1575] usb 1-1: SerialNumber: syz [ 563.687166][ T1575] usb 1-1: config 0 descriptor?? [ 563.712830][T10663] usb 5-1: USB disconnect, device number 99 [ 563.919036][T13054] fuse: Bad value for 'fd' [ 564.007278][T13067] FAULT_INJECTION: forcing a failure. [ 564.007278][T13067] name failslab, interval 1, probability 0, space 0, times 0 [ 564.022074][T13067] CPU: 0 UID: 0 PID: 13067 Comm: syz.6.2025 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.022102][T13067] Tainted: [L]=SOFTLOCKUP [ 564.022108][T13067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 564.022118][T13067] Call Trace: [ 564.022126][T13067] [ 564.022133][T13067] dump_stack_lvl+0xe8/0x150 [ 564.022158][T13067] should_fail_ex+0x412/0x560 [ 564.022185][T13067] should_failslab+0xa8/0x100 [ 564.022209][T13067] ? skb_clone+0x212/0x3a0 [ 564.022233][T13067] kmem_cache_alloc_noprof+0x87/0x650 [ 564.022254][T13067] ? apparmor_capable+0x126/0x170 [ 564.022286][T13067] skb_clone+0x212/0x3a0 [ 564.022328][T13067] ? nfnetlink_rcv+0x4b0/0x27b0 [ 564.022352][T13067] nfnetlink_rcv+0x4de/0x27b0 [ 564.022382][T13067] ? lockdep_hardirqs_on+0x7a/0x110 [ 564.022405][T13067] ? __local_bh_enable_ip+0xd0/0x130 [ 564.022422][T13067] ? __dev_queue_xmit+0x2b6/0x3950 [ 564.022444][T13067] ? __dev_queue_xmit+0x1fe5/0x3950 [ 564.022466][T13067] ? __sys_sendmsg+0x183/0x260 [ 564.022495][T13067] ? __dev_queue_xmit+0x2b6/0x3950 [ 564.022521][T13067] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 564.022555][T13067] ? ref_tracker_free+0x693/0x840 [ 564.022581][T13067] ? __pfx_ref_tracker_free+0x10/0x10 [ 564.022617][T13067] ? skb_clone+0x246/0x3a0 [ 564.022644][T13067] ? __netlink_deliver_tap+0x807/0x850 [ 564.022666][T13067] ? netlink_deliver_tap+0x2e/0x1b0 [ 564.022694][T13067] ? netlink_deliver_tap+0x2e/0x1b0 [ 564.022714][T13067] ? netlink_deliver_tap+0x2e/0x1b0 [ 564.022741][T13067] netlink_unicast+0x75c/0x8e0 [ 564.022771][T13067] netlink_sendmsg+0x813/0xb40 [ 564.022802][T13067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.022827][T13067] ? aa_sock_msg_perm+0xf1/0x1b0 [ 564.022849][T13067] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.022875][T13067] ____sys_sendmsg+0x972/0x9f0 [ 564.022905][T13067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.022932][T13067] ? kstrtoull+0x12f/0x1d0 [ 564.022958][T13067] ___sys_sendmsg+0x2a5/0x360 [ 564.022978][T13067] ? __lock_acquire+0x6b5/0x2cf0 [ 564.023000][T13067] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.023024][T13067] ? get_pid_task+0x20/0x1f0 [ 564.023045][T13067] ? get_pid_task+0x20/0x1f0 [ 564.023062][T13067] ? get_pid_task+0x20/0x1f0 [ 564.023106][T13067] ? __fget_files+0x2a/0x420 [ 564.023125][T13067] ? __fget_files+0x3a0/0x420 [ 564.023152][T13067] __sys_sendmsg+0x183/0x260 [ 564.023177][T13067] ? __pfx___sys_sendmsg+0x10/0x10 [ 564.023220][T13067] __do_fast_syscall_32+0x229/0x6e0 [ 564.023244][T13067] ? do_fast_syscall_32+0x33/0x70 [ 564.023266][T13067] ? lockdep_hardirqs_on+0x7a/0x110 [ 564.023288][T13067] ? asm_int80_emulation+0x1a/0x20 [ 564.023304][T13067] ? do_int80_emulation+0x286/0x530 [ 564.023333][T13067] ? trace_irq_disable+0x3b/0x140 [ 564.023360][T13067] do_fast_syscall_32+0x33/0x70 [ 564.023385][T13067] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 564.023406][T13067] RIP: 0023:0xf708f01c [ 564.023422][T13067] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 564.023437][T13067] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 564.023455][T13067] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 564.023468][T13067] RDX: 000000002000c0c2 RSI: 0000000000000000 RDI: 0000000000000000 [ 564.023479][T13067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.023489][T13067] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 564.023500][T13067] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.023526][T13067] [ 564.185021][T10663] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 564.497983][T13071] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2026'. [ 564.562802][T10663] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 564.576341][T10663] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.586243][T10663] usb 5-1: Product: syz [ 564.590520][T10663] usb 5-1: Manufacturer: syz [ 564.600550][T10663] usb 5-1: SerialNumber: syz [ 565.450328][T10663] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 565.487041][T10663] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 565.509814][T10663] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 565.524604][T10663] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 565.621078][T10663] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 565.653734][T10663] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 565.682194][T10663] usb 5-1: USB disconnect, device number 100 [ 566.098059][ T9] usb 1-1: USB disconnect, device number 6 [ 566.427379][T13106] FAULT_INJECTION: forcing a failure. [ 566.427379][T13106] name failslab, interval 1, probability 0, space 0, times 0 [ 566.442765][T13106] CPU: 0 UID: 0 PID: 13106 Comm: syz.0.2035 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.442793][T13106] Tainted: [L]=SOFTLOCKUP [ 566.442801][T13106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 566.442811][T13106] Call Trace: [ 566.442818][T13106] [ 566.442826][T13106] dump_stack_lvl+0xe8/0x150 [ 566.442852][T13106] should_fail_ex+0x412/0x560 [ 566.442879][T13106] should_failslab+0xa8/0x100 [ 566.442905][T13106] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 566.442927][T13106] ? __alloc_skb+0x186/0x7d0 [ 566.442948][T13106] ? __alloc_skb+0x1d0/0x7d0 [ 566.442965][T13106] ? __local_bh_enable_ip+0xd0/0x130 [ 566.442986][T13106] __alloc_skb+0x1d0/0x7d0 [ 566.443011][T13106] netlink_sendmsg+0x5d4/0xb40 [ 566.443041][T13106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.443067][T13106] ? aa_sock_msg_perm+0xf1/0x1b0 [ 566.443098][T13106] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 566.443121][T13106] ____sys_sendmsg+0x972/0x9f0 [ 566.443152][T13106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 566.443178][T13106] ? kstrtoull+0x12f/0x1d0 [ 566.443203][T13106] ___sys_sendmsg+0x2a5/0x360 [ 566.443221][T13106] ? __lock_acquire+0x6b5/0x2cf0 [ 566.443242][T13106] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.443267][T13106] ? get_pid_task+0x20/0x1f0 [ 566.443289][T13106] ? get_pid_task+0x20/0x1f0 [ 566.443309][T13106] ? get_pid_task+0x20/0x1f0 [ 566.443352][T13106] ? __fget_files+0x2a/0x420 [ 566.443372][T13106] ? __fget_files+0x3a0/0x420 [ 566.443401][T13106] __sys_sendmsg+0x183/0x260 [ 566.443427][T13106] ? __pfx___sys_sendmsg+0x10/0x10 [ 566.443470][T13106] __do_fast_syscall_32+0x229/0x6e0 [ 566.443495][T13106] ? do_fast_syscall_32+0x33/0x70 [ 566.443516][T13106] ? lockdep_hardirqs_on+0x7a/0x110 [ 566.443538][T13106] ? asm_int80_emulation+0x1a/0x20 [ 566.443555][T13106] ? do_int80_emulation+0x286/0x530 [ 566.443577][T13106] ? trace_irq_disable+0x3b/0x140 [ 566.443604][T13106] do_fast_syscall_32+0x33/0x70 [ 566.443629][T13106] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 566.443650][T13106] RIP: 0023:0xf7fc501c [ 566.443666][T13106] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 566.443681][T13106] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 566.443700][T13106] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 566.443712][T13106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 566.443723][T13106] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 566.443732][T13106] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 566.443742][T13106] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 566.443771][T13106] [ 567.220061][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2040'. [ 567.230154][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2040'. [ 567.240839][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2040'. [ 567.254952][ T9] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 567.291594][T13124] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 567.385011][T10667] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 567.404907][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 567.411729][ T9] usb 5-1: config 0 has no interfaces? [ 567.418586][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 567.428163][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.446510][ T9] usb 5-1: config 0 descriptor?? [ 567.555062][T10667] usb 9-1: Using ep0 maxpacket: 32 [ 567.569750][T10667] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 567.585094][T10667] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.601575][T10667] usb 9-1: config 0 has no interface number 0 [ 567.616750][T10667] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 567.632002][T10667] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.646947][T10667] usb 9-1: Product: syz [ 567.661301][T10667] usb 9-1: Manufacturer: syz [ 567.668051][T10667] usb 9-1: SerialNumber: syz [ 567.675927][T10667] usb 9-1: config 0 descriptor?? [ 567.774958][T10663] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 567.948652][T10663] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 567.981203][T10663] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.013463][T10663] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 568.042565][T10663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.075681][T10663] usb 1-1: config 0 descriptor?? [ 568.205869][ T1575] usb 5-1: USB disconnect, device number 101 [ 568.495033][T13120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.524339][T13120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.555246][T10663] hid_parser_main: 315 callbacks suppressed [ 568.555270][T10663] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 568.572426][T10663] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 568.630511][T10663] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 568.659856][T10663] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 568.680527][T10663] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 568.711877][T10663] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 568.734501][T10663] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 568.742773][T10663] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 568.758571][T10663] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 568.772292][T10663] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 568.787174][T10663] kovaplus 0003:1E7D:2D50.003F: collection stack underflow [ 568.800420][T10663] kovaplus 0003:1E7D:2D50.003F: item 0 0 0 12 parsing failed [ 568.813853][T10663] kovaplus 0003:1E7D:2D50.003F: parse failed [ 568.825537][T10663] kovaplus 0003:1E7D:2D50.003F: probe with driver kovaplus failed with error -22 [ 568.924918][ T29] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 569.075105][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 569.082920][ T29] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 569.091825][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.102473][ T29] usb 5-1: config 0 has no interface number 0 [ 569.113379][ T29] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 569.123840][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.133090][ T29] usb 5-1: Product: syz [ 569.137430][ T29] usb 5-1: Manufacturer: syz [ 569.142266][ T29] usb 5-1: SerialNumber: syz [ 569.149528][ T29] usb 5-1: config 0 descriptor?? [ 569.569107][T13140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.578322][T13140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.982519][ T9] usb 9-1: USB disconnect, device number 29 [ 570.061873][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2050'. [ 570.137866][T10663] usb 5-1: USB disconnect, device number 102 [ 570.194481][T13159] binder_alloc: 13158: binder_alloc_buf, no vma [ 570.217917][T13162] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 570.254838][T13162] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2052'. [ 570.273153][T13162] syzkaller1: entered promiscuous mode [ 570.279584][T13162] syzkaller1: entered allmulticast mode [ 570.355838][T13165] fuse: Unknown parameter 'grou00000000000000000000' [ 570.372757][T10663] usb 1-1: USB disconnect, device number 7 [ 570.765072][T10663] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 570.954956][T10663] usb 1-1: Using ep0 maxpacket: 16 [ 570.972950][T10663] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.018471][T10663] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 571.045333][T10663] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 571.075322][T13176] netlink: 392 bytes leftover after parsing attributes in process `syz.4.2056'. [ 571.089599][T10663] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 571.121426][T10663] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.147871][T10663] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 571.165285][T10663] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 571.176238][T10663] usb 1-1: Manufacturer: syz [ 571.199529][T10663] usb 1-1: config 0 descriptor?? [ 571.503057][T13187] netlink: 'syz.7.2059': attribute type 13 has an invalid length. [ 571.518111][T10663] rc_core: IR keymap rc-hauppauge not found [ 571.530354][T10663] Registered IR keymap rc-empty [ 571.540962][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 571.584989][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 571.605699][T10663] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 571.624665][T10663] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input91 [ 571.628486][T13167] netlink: 1264 bytes leftover after parsing attributes in process `syz.0.2054'. [ 571.673810][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 571.705042][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 571.734998][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 571.773889][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 571.816369][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 571.845141][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 571.866114][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 571.885977][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 571.915129][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 571.946806][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 571.972617][T10663] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 571.988181][T10663] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 572.012173][T10663] usb 1-1: USB disconnect, device number 8 [ 572.713417][T13210] fuse: Unknown parameter 'grou00000000000000000000' [ 572.864989][T10663] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 573.055022][T10663] usb 1-1: Using ep0 maxpacket: 32 [ 573.069551][T10663] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 573.091161][T10663] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.114969][T10663] usb 1-1: config 0 has no interface number 0 [ 573.128722][T10663] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 573.153749][T10663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.169100][T10663] usb 1-1: Product: syz [ 573.178225][T10663] usb 1-1: Manufacturer: syz [ 573.183376][T10663] usb 1-1: SerialNumber: syz [ 573.201926][T10663] usb 1-1: config 0 descriptor?? [ 573.421039][T13216] openvswitch: netlink: IP tunnel dst address not specified [ 573.646609][T13202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.671400][T13202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.814944][T10663] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 573.975235][T10663] usb 5-1: Using ep0 maxpacket: 16 [ 573.982518][T10663] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.993371][T10663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 574.011493][T10663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 574.027397][T10663] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 574.042279][T10663] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.078402][T10663] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 574.088533][T10663] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 574.117073][T10663] usb 5-1: Manufacturer: syz [ 574.126332][T10663] usb 5-1: config 0 descriptor?? [ 574.303378][T10667] usb 1-1: USB disconnect, device number 9 [ 574.361457][ T5689] hid_parser_main: 111 callbacks suppressed [ 574.361477][ T5689] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 574.398912][ T5689] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 574.412214][T13236] FAULT_INJECTION: forcing a failure. [ 574.412214][T13236] name failslab, interval 1, probability 0, space 0, times 0 [ 574.418534][ T5689] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz0] on syz0 [ 574.436500][T13236] CPU: 1 UID: 0 PID: 13236 Comm: syz.0.2072 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.436527][T13236] Tainted: [L]=SOFTLOCKUP [ 574.436534][T13236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 574.436545][T13236] Call Trace: [ 574.436553][T13236] [ 574.436561][T13236] dump_stack_lvl+0xe8/0x150 [ 574.436585][T13236] should_fail_ex+0x412/0x560 [ 574.436610][T13236] should_failslab+0xa8/0x100 [ 574.436634][T13236] ? __pmd_alloc+0xc1/0x5c0 [ 574.436654][T13236] kmem_cache_alloc_noprof+0x87/0x650 [ 574.436681][T13236] __pmd_alloc+0xc1/0x5c0 [ 574.436704][T13236] handle_mm_fault+0xe96/0x3170 [ 574.436735][T13236] ? handle_mm_fault+0xee/0x3170 [ 574.436760][T13236] ? __pfx_handle_mm_fault+0x10/0x10 [ 574.436798][T13236] ? lock_mm_and_find_vma+0xa7/0x340 [ 574.436825][T13236] do_user_addr_fault+0x75b/0x1340 [ 574.436860][T13236] exc_page_fault+0x6a/0xc0 [ 574.436885][T13236] asm_exc_page_fault+0x26/0x30 [ 574.436901][T13236] RIP: 0010:check_zeroed_user+0x75/0x170 [ 574.436927][T13236] Code: 89 ee e8 1e 9d 13 fd 48 89 df 4c 89 fe e8 13 9d 13 fd 4c 39 fb 0f 82 e4 00 00 00 4c 39 eb 0f 87 db 00 00 00 0f 01 cb 0f ae e8 <49> 8b 1f 8d 0c ed 00 00 00 00 48 d3 eb 48 d3 e3 bf 08 00 00 00 4c [ 574.436942][T13236] RSP: 0018:ffffc90003747ca8 EFLAGS: 00050287 [ 574.436959][T13236] RAX: ffffffff84b2271d RBX: 00000000800018ac RCX: ffff88802f4e9ec0 [ 574.436972][T13236] RDX: 0000000000000000 RSI: 00000000800018a0 RDI: 00000000800018ac [ 574.436984][T13236] RBP: 0000000000000000 R08: ffff88801bebd8fb R09: 1ffff110037d7b1f [ 574.436997][T13236] R10: dffffc0000000000 R11: ffffed10037d7b20 R12: 000000000000000c [ 574.437009][T13236] R13: 00007ffffffff000 R14: 000000000000000c R15: 00000000800018a0 [ 574.437028][T13236] ? check_zeroed_user+0x5d/0x170 [ 574.437058][T13236] ? check_zeroed_user+0x5d/0x170 [ 574.437084][T13236] wants_mount_setattr+0x181/0x8e0 [ 574.437110][T13236] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 574.437135][T13236] ? __pfx_vfs_write+0x10/0x10 [ 574.437162][T13236] ? __pfx_wants_mount_setattr+0x10/0x10 [ 574.437200][T13236] __se_sys_mount_setattr+0x16a/0x280 [ 574.437227][T13236] ? __pfx___se_sys_mount_setattr+0x10/0x10 [ 574.437261][T13236] ? __ia32_sys_mount_setattr+0x20/0xc0 [ 574.437285][T13236] __do_fast_syscall_32+0x229/0x6e0 [ 574.437311][T13236] ? do_fast_syscall_32+0x33/0x70 [ 574.437333][T13236] ? lockdep_hardirqs_on+0x7a/0x110 [ 574.437355][T13236] ? asm_int80_emulation+0x1a/0x20 [ 574.437371][T13236] ? do_int80_emulation+0x286/0x530 [ 574.437392][T13236] ? trace_irq_disable+0x3b/0x140 [ 574.437419][T13236] do_fast_syscall_32+0x33/0x70 [ 574.437443][T13236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 574.437464][T13236] RIP: 0023:0xf7fc501c [ 574.437479][T13236] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 574.437492][T13236] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 00000000000001ba [ 574.437509][T13236] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000000000 [ 574.437519][T13236] RDX: 0000000000000000 RSI: 0000000080001880 RDI: 000000000000002c [ 574.437529][T13236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 574.437539][T13236] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 574.437549][T13236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 574.437575][T13236] [ 574.606478][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f36000: rx timeout, send abort [ 574.659486][T10663] rc_core: IR keymap rc-hauppauge not found [ 574.672981][T13222] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.2069'. [ 574.673363][T10663] Registered IR keymap rc-empty [ 574.807605][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 574.834992][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 574.856395][T10663] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 574.870793][T10663] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input92 [ 574.885282][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 574.904957][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 574.934972][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 574.975127][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 574.996105][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 575.015266][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 575.034983][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 575.064970][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 575.092241][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 575.115442][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f37c00: rx timeout, send abort [ 575.125141][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 575.146740][T10663] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 575.157338][T10663] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 575.163122][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f36000: abort rx timeout. Force session deactivation [ 575.171408][T10663] usb 5-1: USB disconnect, device number 103 [ 575.216723][ T6244] udevd[6244]: setting owner of /dev/bus/usb/005/103 to uid=0, gid=0 failed: No such file or directory [ 575.407180][T13253] fuse: Unknown parameter 'grou00000000000000000000' [ 575.623690][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f37c00: abort rx timeout. Force session deactivation [ 575.734909][T10663] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 575.924879][T10663] usb 5-1: Using ep0 maxpacket: 16 [ 575.949043][T10663] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.982900][T10663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.014770][T10663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 576.041914][T10663] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 576.079660][T10663] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.134047][T10663] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 576.181903][T10663] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 576.222192][T10663] usb 5-1: Manufacturer: syz [ 576.236052][T10663] usb 5-1: config 0 descriptor?? [ 576.259544][T13266] syzkaller0: entered promiscuous mode [ 576.269676][T13266] syzkaller0: entered allmulticast mode [ 576.307168][ T1575] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 576.495395][ T1575] usb 1-1: Using ep0 maxpacket: 16 [ 576.509179][ T1575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.539375][ T1575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.566883][ T1575] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 576.593272][ T1575] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 576.650350][ T1575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.667296][ T1575] usb 1-1: config 0 descriptor?? [ 576.801733][T13280] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.2078'. [ 576.812383][T13280] unsupported nla_type 63503 [ 577.298781][ T1575] usbhid 1-1:0.0: can't add hid device: -71 [ 577.310135][ T1575] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 577.321414][ T1575] usb 1-1: USB disconnect, device number 10 [ 577.862170][T13294] fuse: Unknown parameter 'group_i00000000000000000000' [ 577.982007][T13297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2092'. [ 578.525598][T10663] rc_core: IR keymap rc-hauppauge not found [ 578.534025][T10663] Registered IR keymap rc-empty [ 578.540027][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 578.565388][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 578.585785][T10663] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 578.599118][T10663] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input93 [ 578.613691][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 578.645031][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 578.676461][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 578.695021][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 578.714945][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 578.734986][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 578.755174][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 578.785060][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 578.805210][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 578.824932][T10663] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 578.846330][T10663] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 578.854363][T10663] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 578.867419][T10663] usb 5-1: USB disconnect, device number 104 [ 609.472151][T13317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.544897][T10667] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 609.704856][T10667] usb 1-1: Using ep0 maxpacket: 8 [ 609.713991][T10667] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 609.731396][T10667] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 609.757007][T10667] usb 1-1: config 3 has no interface number 0 [ 609.766872][T10667] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 609.791742][T10667] usb 1-1: config 3 interface 45 has no altsetting 0 [ 609.808518][T10667] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 609.822749][T10667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.831418][T10667] usb 1-1: Product: syz [ 609.836246][T10667] usb 1-1: Manufacturer: syz [ 609.840957][T10667] usb 1-1: SerialNumber: syz [ 609.849112][T13317] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2095'. [ 610.070545][T10667] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 610.210460][T10667] usb 1-1: USB disconnect, device number 11 [ 610.390794][T13327] udevd[13327]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.519450][T13329] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 610.877138][ T10] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 610.914980][ T5689] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 611.045370][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 611.076814][ T5689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.098163][ T5689] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 611.114169][ T10] usb 9-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 611.129347][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.137929][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.155983][ T10] usb 9-1: Product: syz [ 611.162840][ T5689] usb 5-1: config 0 descriptor?? [ 611.173090][ T10] usb 9-1: Manufacturer: syz [ 611.189872][ T10] usb 9-1: SerialNumber: syz [ 611.207311][ T10] usb 9-1: config 0 descriptor?? [ 611.223028][ T10] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 611.238055][ T10] pctv452e: pctv452e_power_ctrl: 1 [ 611.238055][ T10] [ 611.251367][ T10] usb 9-1: selecting invalid altsetting 3 [ 611.264176][ T10] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 611.264176][ T10] [ 611.295241][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 611.333299][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 611.362231][ T10] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 611.380414][ T10] usb 9-1: media controller created [ 611.394758][ T5689] usbhid 5-1:0.0: can't add hid device: -71 [ 611.403647][ T10] dvb-usb: bulk message failed: -22 (8/0) [ 611.414154][ T5689] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 611.440653][ T10] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 611.450889][ T5689] usb 5-1: USB disconnect, device number 105 [ 611.466615][ T10] dvb-usb: MAC address reading failed. [ 611.508861][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 611.665539][ T10] DVB: Unable to find symbol stb0899_attach() [ 611.711412][ T10] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 611.855197][ T10] rc_core: IR keymap rc-tt-1500 not found [ 611.861937][ T10] Registered IR keymap rc-empty [ 611.871091][ T10] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 611.934939][ T5689] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 611.998174][ T10] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input94 [ 612.026208][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 612.050097][ T10] pctv452e: pctv452e_power_ctrl: 0 [ 612.050097][ T10] [ 612.071202][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 612.135182][ T5689] usb 5-1: Using ep0 maxpacket: 32 [ 612.152439][ T5689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.166880][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 612.198439][ T10] dvb-usb: error -22 while querying for an remote control event. [ 612.231141][ T5689] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 612.284935][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.312085][ T5689] usb 5-1: config 0 descriptor?? [ 612.338220][ T5689] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 612.364224][ T5689] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 612.375347][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 612.403587][ T10] dvb-usb: error -22 while querying for an remote control event. [ 612.535015][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 612.541678][T13350] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2105'. [ 612.558115][ T10] dvb-usb: error -22 while querying for an remote control event. [ 612.574086][T13350] mmap: syz.7.2105 (13350): VmData 37384192 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 612.685896][T13350] SET target dimension over the limit! [ 612.706079][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 612.717687][ T10] dvb-usb: error -22 while querying for an remote control event. [ 612.845225][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 612.869159][ T10] dvb-usb: error -22 while querying for an remote control event. [ 612.996341][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 613.023677][ T10] dvb-usb: error -22 while querying for an remote control event. [ 613.160924][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 613.194628][ T10] dvb-usb: error -22 while querying for an remote control event. [ 613.355476][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 613.380554][ T10] dvb-usb: error -22 while querying for an remote control event. [ 613.524994][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 613.544725][ T10] dvb-usb: error -22 while querying for an remote control event. [ 613.685223][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 613.709323][ T10] dvb-usb: error -22 while querying for an remote control event. [ 613.717855][ T1575] usb 9-1: USB disconnect, device number 30 [ 613.963882][ T1575] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 614.092589][T13357] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2107'. [ 614.148873][T13361] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2107'. [ 614.512621][ T1575] usb 5-1: USB disconnect, device number 106 [ 614.533686][ T1575] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 614.576779][T13371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2111'. [ 614.610715][T13371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2111'. [ 614.835765][T13360] atomic_op ffff88802b52f198 conn xmit_atomic 0000000000000000 [ 615.070275][T13387] €Â: renamed from virt_wifi0 [ 617.998681][T13431] FAULT_INJECTION: forcing a failure. [ 617.998681][T13431] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 618.021305][T13431] CPU: 1 UID: 0 PID: 13431 Comm: syz.4.2124 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.021325][T13431] Tainted: [L]=SOFTLOCKUP [ 618.021329][T13431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 618.021335][T13431] Call Trace: [ 618.021340][T13431] [ 618.021345][T13431] dump_stack_lvl+0xe8/0x150 [ 618.021363][T13431] should_fail_ex+0x412/0x560 [ 618.021380][T13431] prepare_alloc_pages+0x22a/0x650 [ 618.021400][T13431] __alloc_frozen_pages_noprof+0x12f/0x380 [ 618.021417][T13431] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 618.021435][T13431] ? __pfx_policy_nodemask+0x10/0x10 [ 618.021453][T13431] ? __lock_acquire+0x6b5/0x2cf0 [ 618.021466][T13431] alloc_pages_mpol+0x235/0x490 [ 618.021484][T13431] folio_alloc_mpol_noprof+0x39/0x160 [ 618.021501][T13431] vma_alloc_folio_noprof+0xe1/0x1e0 [ 618.021518][T13431] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 618.021534][T13431] ? __pte_offset_map+0x29/0x240 [ 618.021546][T13431] ? __pte_offset_map+0x29/0x240 [ 618.021559][T13431] do_pte_missing+0x159d/0x33f0 [ 618.021579][T13431] ? handle_mm_fault+0xee/0x3170 [ 618.021593][T13431] handle_mm_fault+0x1bd7/0x3170 [ 618.021612][T13431] ? handle_mm_fault+0xee/0x3170 [ 618.021627][T13431] ? __pfx_handle_mm_fault+0x10/0x10 [ 618.021645][T13431] ? __pfx___up_read+0x10/0x10 [ 618.021660][T13431] ? lock_mm_and_find_vma+0xa7/0x340 [ 618.021676][T13431] do_user_addr_fault+0x75b/0x1340 [ 618.021697][T13431] exc_page_fault+0x6a/0xc0 [ 618.021713][T13431] asm_exc_page_fault+0x26/0x30 [ 618.021723][T13431] RIP: 0010:rep_stos_alternative+0x5b/0x80 [ 618.021734][T13431] Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 <48> 89 47 38 48 83 c7 40 48 83 e9 40 48 83 f9 40 73 d3 83 f9 08 73 [ 618.021743][T13431] RSP: 0018:ffffc90013407e88 EFLAGS: 00050202 [ 618.021753][T13431] RAX: 0000000000000000 RBX: 00000000fffffe0b RCX: 00000000ffffce4b [ 618.021760][T13431] RDX: 0000000000000000 RSI: ffffffff8e2199da RDI: 0000000080002fc2 [ 618.021766][T13431] RBP: ffffc90013407f01 R08: ffffffff82187fff R09: ffff88802ffe3438 [ 618.021773][T13431] R10: dffffc0000000000 R11: fffffbfff184056c R12: 00007ffffffff000 [ 618.021780][T13431] R13: ffffc90013407f48 R14: 0000000080000002 R15: 000000017ffffe0d [ 618.021791][T13431] ? __might_fault+0xaf/0x130 [ 618.021809][T13431] keyctl_capabilities+0xf1/0x160 [ 618.021823][T13431] __do_fast_syscall_32+0x229/0x6e0 [ 618.021838][T13431] ? do_fast_syscall_32+0x33/0x70 [ 618.021852][T13431] ? lockdep_hardirqs_on+0x7a/0x110 [ 618.021865][T13431] ? asm_int80_emulation+0x1a/0x20 [ 618.021874][T13431] ? do_int80_emulation+0x286/0x530 [ 618.021888][T13431] ? trace_irq_disable+0x3b/0x140 [ 618.021905][T13431] do_fast_syscall_32+0x33/0x70 [ 618.021920][T13431] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 618.021932][T13431] RIP: 0023:0xf7ff901c [ 618.021941][T13431] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 618.021949][T13431] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000120 [ 618.021959][T13431] RAX: ffffffffffffffda RBX: 000000000000001f RCX: 0000000080000000 [ 618.021966][T13431] RDX: 00000000fffffe0d RSI: 0000000000000000 RDI: 0000000000000000 [ 618.021972][T13431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.021977][T13431] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 618.021982][T13431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.021996][T13431] [ 618.691650][T13436] fuse: Unknown parameter 'group_i00000000000000000000' [ 618.740422][T13439] netlink: 'syz.8.2126': attribute type 5 has an invalid length. [ 619.055051][ T10] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 619.214875][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 619.228255][ T10] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 619.237873][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.252143][ T10] usb 9-1: Product: syz [ 619.264615][ T10] usb 9-1: Manufacturer: syz [ 619.275455][ T10] usb 9-1: SerialNumber: syz [ 619.290470][ T10] usb 9-1: config 0 descriptor?? [ 619.307518][ T10] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 619.664887][T10667] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 619.827805][T10667] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 619.846942][T10667] usb 1-1: config 0 interface 0 has no altsetting 0 [ 619.858222][T10667] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 619.870532][T10667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.887699][T10667] usb 1-1: config 0 descriptor?? [ 620.311105][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'. [ 620.326876][T10667] lua 0003:1E7D:2C2E.0041: unknown main item tag 0x1 [ 620.333939][T10667] lua 0003:1E7D:2C2E.0041: report_id 52101 is invalid [ 620.342654][T10667] lua 0003:1E7D:2C2E.0041: item 0 2 1 8 parsing failed [ 620.350577][T10667] lua 0003:1E7D:2C2E.0041: parse failed [ 620.358450][T10667] lua 0003:1E7D:2C2E.0041: probe with driver lua failed with error -22 [ 620.444021][T13461] netlink: 'syz.6.2133': attribute type 1 has an invalid length. [ 620.475705][T13461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 620.501599][T13461] gretap1: entered promiscuous mode [ 620.510725][T13461] bond1: (slave gretap1): making interface the new active one [ 620.519980][T13461] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 620.551731][T10667] usb 1-1: USB disconnect, device number 12 [ 620.589923][T13461] macvlan2: entered promiscuous mode [ 620.598796][T13461] macvlan2: entered allmulticast mode [ 620.625688][ T10] ssu100 9-1:0.0: probe with driver ssu100 failed with error -110 [ 621.094896][T10667] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 621.148169][T13470] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.2136'. [ 621.244888][T10667] usb 5-1: Using ep0 maxpacket: 8 [ 621.251941][T10667] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 621.260568][T10667] usb 5-1: config 0 has no interface number 0 [ 621.267006][T10667] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 621.278723][T10667] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 621.291330][T13474] netlink: 'syz.6.2138': attribute type 1 has an invalid length. [ 621.299382][T10667] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 621.311033][T10667] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 621.325393][T10667] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 621.334499][T10667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.346932][T10667] usb 5-1: config 0 descriptor?? [ 621.361714][T10667] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 621.656064][ T5689] usb 5-1: USB disconnect, device number 107 [ 621.666289][ T5689] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 621.767381][T10667] usb 9-1: USB disconnect, device number 31 [ 621.897895][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 621.897913][ T30] audit: type=1326 audit(1778389749.470:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.8.2143" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1601c code=0x7ffc0000 [ 621.931483][ T30] audit: type=1326 audit(1778389749.470:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.8.2143" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1601c code=0x7ffc0000 [ 621.981176][ T30] audit: type=1326 audit(1778389749.490:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.8.2143" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf7f1601c code=0x7ffc0000 [ 622.047315][ T30] audit: type=1326 audit(1778389749.490:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.8.2143" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1601c code=0x7ffc0000 [ 622.090739][ T30] audit: type=1326 audit(1778389749.490:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.8.2143" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1601c code=0x7ffc0000 [ 622.116780][ T5689] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 622.189526][T13497] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2147'. [ 622.288777][ T5689] usb 5-1: Using ep0 maxpacket: 16 [ 622.296900][ T5689] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.307834][ T5689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 622.321278][ T5689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 622.332101][ T5689] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 622.342765][ T5689] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 622.346882][T13503] syzkaller0: entered promiscuous mode [ 622.357388][ T5689] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 622.361383][T13503] syzkaller0: entered allmulticast mode [ 622.371178][ T5689] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 622.384555][ T5689] usb 5-1: Manufacturer: syz [ 622.399898][ T5689] usb 5-1: config 0 descriptor?? [ 622.446744][ T5625] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 622.592031][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2151'. [ 622.624931][ T5625] usb 9-1: Using ep0 maxpacket: 32 [ 622.638038][ T5625] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 622.651889][ T5625] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.662317][ T5625] usb 9-1: config 0 has no interface number 0 [ 622.670149][ T5625] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 622.680667][ T5625] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.685058][ T5689] rc_core: IR keymap rc-hauppauge not found [ 622.691221][ T5625] usb 9-1: Product: syz [ 622.697206][ T5689] Registered IR keymap rc-empty [ 622.699019][ T5625] usb 9-1: Manufacturer: syz [ 622.703686][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 622.708553][ T5625] usb 9-1: SerialNumber: syz [ 622.721890][ T5625] usb 9-1: config 0 descriptor?? [ 622.735808][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 622.756818][ T5689] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 622.772935][ T5689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input95 [ 622.788561][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 622.826812][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 622.855250][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 622.885070][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 622.906247][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 622.927019][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 622.944932][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 622.965275][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 622.986194][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 623.015011][ T5689] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 623.057388][ T5689] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 623.075927][ T30] audit: type=1800 audit(1778389750.640:648): pid=13483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2141" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 623.097678][ T5689] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 623.110703][T13514] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 623.171787][T13493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.195957][T13493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.213513][ T5625] usb 5-1: USB disconnect, device number 108 [ 623.883393][ T5689] usb 9-1: USB disconnect, device number 32 [ 624.035062][ T5625] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 624.199050][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.207476][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.229224][ T5625] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 624.268214][ T5625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.304536][ T5625] usb 5-1: config 0 descriptor?? [ 624.332920][ T5625] pwc: Samsung MPC-C10 USB webcam detected. [ 624.544666][ T5625] pwc: send_video_command error -71 [ 624.557750][ T5625] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 624.580767][ T5625] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 624.617086][ T5625] usb 5-1: USB disconnect, device number 109 [ 625.055160][ T5625] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 625.246454][ T5625] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 625.282965][ T5625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.322349][ T5625] usb 5-1: config 0 descriptor?? [ 625.369499][ T5625] pwc: Samsung MPC-C10 USB webcam detected. [ 625.495242][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2161'. [ 625.522480][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2161'. [ 625.575536][ T5625] pwc: send_video_command error -71 [ 625.597013][ T5625] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 625.622613][ T5625] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 625.660742][ T5625] usb 5-1: USB disconnect, device number 110 [ 625.825664][T13507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.608410][T13572] netlink: 'syz.4.2165': attribute type 1 has an invalid length. [ 626.684309][T13576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 626.691551][T13576] IPv6: NLM_F_CREATE should be set when creating new route [ 626.698796][T13576] IPv6: NLM_F_CREATE should be set when creating new route [ 626.706000][T13576] IPv6: NLM_F_CREATE should be set when creating new route [ 626.772042][T13577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 627.612899][T13584] FAULT_INJECTION: forcing a failure. [ 627.612899][T13584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.630073][T13584] CPU: 1 UID: 0 PID: 13584 Comm: syz.0.2172 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.630092][T13584] Tainted: [L]=SOFTLOCKUP [ 627.630096][T13584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 627.630103][T13584] Call Trace: [ 627.630108][T13584] [ 627.630113][T13584] dump_stack_lvl+0xe8/0x150 [ 627.630129][T13584] should_fail_ex+0x412/0x560 [ 627.630146][T13584] _copy_from_user+0x2d/0xb0 [ 627.630162][T13584] kstrtouint_from_user+0xd6/0x180 [ 627.630176][T13584] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 627.630197][T13584] proc_fail_nth_write+0x8e/0x210 [ 627.630216][T13584] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 627.630244][T13584] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 627.630263][T13584] vfs_write+0x29a/0xb90 [ 627.630282][T13584] ? __pfx_vfs_write+0x10/0x10 [ 627.630298][T13584] ? __fget_files+0x2a/0x420 [ 627.630312][T13584] ? __fget_files+0x3a0/0x420 [ 627.630323][T13584] ? __fget_files+0x2a/0x420 [ 627.630339][T13584] ksys_write+0x150/0x270 [ 627.630355][T13584] ? __pfx_ksys_write+0x10/0x10 [ 627.630371][T13584] ? asm_int80_emulation+0x1a/0x20 [ 627.630384][T13584] do_int80_emulation+0x181/0x530 [ 627.630399][T13584] ? trace_irq_disable+0x3b/0x140 [ 627.630414][T13584] ? asm_int80_emulation+0x1a/0x20 [ 627.630423][T13584] ? clear_bhb_loop+0x40/0x90 [ 627.630433][T13584] ? clear_bhb_loop+0x40/0x90 [ 627.630445][T13584] asm_int80_emulation+0x1a/0x20 [ 627.630455][T13584] RIP: 0023:0xf71c616b [ 627.630465][T13584] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 627.630473][T13584] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 627.630484][T13584] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54865d0 [ 627.630492][T13584] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 627.630497][T13584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 627.630503][T13584] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 627.630509][T13584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 627.630523][T13584] [ 627.887121][T13586] tipc: Started in network mode [ 627.892027][T13586] tipc: Node identity 4246, cluster identity 4711 [ 627.898808][T13586] tipc: Node number set to 16966 [ 628.021697][T13590] netlink: 'syz.0.2175': attribute type 11 has an invalid length. [ 628.034004][T13590] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.2175'. [ 628.186709][ T30] audit: type=1326 audit(1778389755.760:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13596 comm="syz.4.2177" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff901c code=0x7ffc0000 [ 628.218456][T13597] ip6t_rpfilter: unknown options [ 628.247166][ T30] audit: type=1326 audit(1778389755.790:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13596 comm="syz.4.2177" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff901c code=0x7ffc0000 [ 628.278711][T13598] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2174'. [ 628.305408][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 628.323773][ T30] audit: type=1326 audit(1778389755.790:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13596 comm="syz.4.2177" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff901c code=0x7ffc0000 [ 628.361344][ T30] audit: type=1326 audit(1778389755.790:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13596 comm="syz.4.2177" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff901c code=0x7ffc0000 [ 628.404292][ T30] audit: type=1326 audit(1778389755.790:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13596 comm="syz.4.2177" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7ff901c code=0x7ffc0000 [ 628.430148][ T30] audit: type=1326 audit(1778389755.800:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13596 comm="syz.4.2177" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff901c code=0x7ffc0000 [ 628.459860][ T30] audit: type=1326 audit(1778389755.800:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13596 comm="syz.4.2177" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff901c code=0x7ffc0000 [ 628.484457][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 628.496538][ T10] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.509075][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 628.517343][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 628.533877][ T30] audit: type=1326 audit(1778389755.800:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13596 comm="syz.4.2177" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf7ff901c code=0x7ffc0000 [ 628.558551][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.569440][ T10] usb 1-1: config 0 descriptor?? [ 628.578615][ T30] audit: type=1326 audit(1778389755.800:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13596 comm="syz.4.2177" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff901c code=0x7ffc0000 [ 628.935190][T13609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 628.942448][T13609] IPv6: NLM_F_CREATE should be set when creating new route [ 628.949701][T13609] IPv6: NLM_F_CREATE should be set when creating new route [ 628.956912][T13609] IPv6: NLM_F_CREATE should be set when creating new route [ 628.987280][T13609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 628.989921][ T10] logitech 0003:046D:C626.0042: unknown main item tag 0x0 [ 629.003516][ T10] logitech 0003:046D:C626.0042: unknown main item tag 0x0 [ 629.010830][ T10] logitech 0003:046D:C626.0042: unknown main item tag 0x0 [ 629.019539][ T10] logitech 0003:046D:C626.0042: unknown main item tag 0x0 [ 629.027180][ T10] logitech 0003:046D:C626.0042: unknown main item tag 0x0 [ 629.034971][ T10] logitech 0003:046D:C626.0042: unknown main item tag 0x0 [ 629.044629][ T10] logitech 0003:046D:C626.0042: unknown main item tag 0x0 [ 629.052075][ T10] logitech 0003:046D:C626.0042: unknown main item tag 0x0 [ 629.059407][ T10] logitech 0003:046D:C626.0042: unknown main item tag 0x0 [ 629.068252][ T10] logitech 0003:046D:C626.0042: unknown main item tag 0x0 [ 629.096850][ T10] logitech 0003:046D:C626.0042: hidraw0: USB HID v0.08 Device [HID 046d:c626] on usb-dummy_hcd.0-1/input0 [ 629.237247][ T10] usb 1-1: USB disconnect, device number 13 [ 630.035279][ T10] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 630.109035][T13638] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2191'. [ 630.135078][T10663] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 630.208102][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 630.240898][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 630.261534][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 630.272918][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 630.308567][ T10] usb 9-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 630.318638][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.324875][T10663] usb 1-1: Using ep0 maxpacket: 16 [ 630.327036][ T10] usb 9-1: Product: syz [ 630.333828][T10663] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.336719][ T10] usb 9-1: Manufacturer: syz [ 630.351998][ T10] usb 9-1: SerialNumber: syz [ 630.358055][T10663] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 630.360586][ T10] usb 9-1: config 0 descriptor?? [ 630.370837][T10663] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 630.382074][ T10] ums-isd200 9-1:0.0: USB Mass Storage device detected [ 630.384010][T10663] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 630.400660][T10663] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 630.416848][T10663] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 630.426161][T10663] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 630.434216][T10663] usb 1-1: Manufacturer: syz [ 630.441683][T10663] usb 1-1: config 0 descriptor?? [ 630.484977][ T5625] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 630.600013][ T10] ums-isd200 9-1:0.0: probe with driver ums-isd200 failed with error -22 [ 630.655429][ T5625] usb 5-1: Using ep0 maxpacket: 32 [ 630.662945][ T5625] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 630.671235][ T5625] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.681608][ T5625] usb 5-1: config 0 has no interface number 0 [ 630.692885][ T5625] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 630.702189][ T5625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.710374][ T5625] usb 5-1: Product: syz [ 630.714584][ T5625] usb 5-1: Manufacturer: syz [ 630.720531][ T5625] usb 5-1: SerialNumber: syz [ 630.727587][ T5625] usb 5-1: config 0 descriptor?? [ 631.147787][T13641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.167216][T13641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.279859][T13664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 631.290748][T13664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 631.814440][ T10] usb 5-1: USB disconnect, device number 111 [ 632.204888][ T10] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 632.357843][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.370877][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 632.380310][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.388429][ T10] usb 5-1: Product: syz [ 632.392752][ T10] usb 5-1: Manufacturer: syz [ 632.397629][ T10] usb 5-1: SerialNumber: syz [ 632.408685][ T10] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 632.608477][ T10] usb 5-1: USB disconnect, device number 112 [ 632.642952][ T5625] usb 9-1: USB disconnect, device number 33 [ 632.975065][T10663] rc_core: IR keymap rc-hauppauge not found [ 632.983642][T10663] Registered IR keymap rc-empty [ 632.989635][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 632.999864][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2204'. [ 633.009305][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2204'. [ 633.018332][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.045903][T10663] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 633.059786][T10663] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input96 [ 633.075520][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.096731][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.104882][ T10] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 633.114907][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.136279][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.185081][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.223341][T13681] xt_connbytes: Forcing CT accounting to be enabled [ 633.224953][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.267336][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.276904][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 633.289003][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'. [ 633.307002][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.320594][ T10] usb 9-1: config 129 has an invalid interface number: 135 but max is 0 [ 633.334876][ T10] usb 9-1: config 129 has an invalid interface number: 5 but max is 0 [ 633.337364][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.344075][ T10] usb 9-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 633.365955][ T10] usb 9-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 633.375503][ T10] usb 9-1: config 129 has no interface number 0 [ 633.381866][ T10] usb 9-1: config 129 has no interface number 1 [ 633.384901][T10663] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.397586][ T10] usb 9-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 633.413047][ T10] usb 9-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 633.424406][ T10] usb 9-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 633.428430][T10663] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 633.437913][ T10] usb 9-1: config 129 interface 135 has no altsetting 0 [ 633.446408][T10663] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 633.473006][ T10] usb 9-1: config 129 interface 5 has no altsetting 0 [ 633.487073][T10663] usb 1-1: USB disconnect, device number 14 [ 633.501227][ T10] usb 9-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 633.514218][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.533757][ T10] usb 9-1: SerialNumber: Е [ 633.643734][T13697] FAULT_INJECTION: forcing a failure. [ 633.643734][T13697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.671936][T13697] CPU: 0 UID: 0 PID: 13697 Comm: syz.0.2209 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.671968][T13697] Tainted: [L]=SOFTLOCKUP [ 633.671975][T13697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 633.671986][T13697] Call Trace: [ 633.671993][T13697] [ 633.672001][T13697] dump_stack_lvl+0xe8/0x150 [ 633.672027][T13697] should_fail_ex+0x412/0x560 [ 633.672055][T13697] _copy_from_user+0x2d/0xb0 [ 633.672080][T13697] move_addr_to_kernel+0x7e/0x160 [ 633.672101][T13697] get_compat_msghdr+0x3d8/0x4c0 [ 633.672131][T13697] ? __pfx_get_compat_msghdr+0x10/0x10 [ 633.672157][T13697] ? kstrtoull+0x12f/0x1d0 [ 633.672183][T13697] ___sys_sendmsg+0x201/0x360 [ 633.672205][T13697] ? __lock_acquire+0x6b5/0x2cf0 [ 633.672228][T13697] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.672254][T13697] ? get_pid_task+0x20/0x1f0 [ 633.672275][T13697] ? get_pid_task+0x20/0x1f0 [ 633.672293][T13697] ? get_pid_task+0x20/0x1f0 [ 633.672337][T13697] ? __fget_files+0x2a/0x420 [ 633.672357][T13697] ? __fget_files+0x3a0/0x420 [ 633.672384][T13697] __sys_sendmsg+0x183/0x260 [ 633.672408][T13697] ? __pfx___sys_sendmsg+0x10/0x10 [ 633.672448][T13697] __do_fast_syscall_32+0x229/0x6e0 [ 633.672480][T13697] ? do_fast_syscall_32+0x33/0x70 [ 633.672503][T13697] ? lockdep_hardirqs_on+0x7a/0x110 [ 633.672525][T13697] ? asm_int80_emulation+0x1a/0x20 [ 633.672542][T13697] ? do_int80_emulation+0x286/0x530 [ 633.672564][T13697] ? trace_irq_disable+0x3b/0x140 [ 633.672591][T13697] do_fast_syscall_32+0x33/0x70 [ 633.672615][T13697] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 633.672636][T13697] RIP: 0023:0xf7fc501c [ 633.672652][T13697] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 633.672667][T13697] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 633.672685][T13697] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 633.672697][T13697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 633.672708][T13697] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 633.672718][T13697] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 633.672729][T13697] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 633.672755][T13697] [ 633.984263][T13702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2211'. [ 634.007780][T13702] IPVS: length: 151 != 8 [ 634.303301][T13705] nvme_fabrics: missing parameter 'transport=%s' [ 634.310019][T13705] nvme_fabrics: missing parameter 'nqn=%s' [ 635.225092][ T5689] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 635.379587][ T5689] usb 5-1: unable to get BOS descriptor or descriptor too short [ 635.388714][ T5689] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.399233][ T5689] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 635.418788][ T5689] usb 5-1: string descriptor 0 read error: -22 [ 635.425863][ T5689] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 635.435090][ T5689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.460892][ T5689] usb 5-1: selecting invalid altsetting 1 [ 635.483990][ T5689] usb 5-1: unit 3 not found! [ 635.658267][ T5689] usb 5-1: cannot request logical cluster ID: 0 (err: -5) [ 635.667060][ T5689] usb 5-1: invalid MIXER UNIT descriptor 6 [ 635.830188][ T5689] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 635.839408][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 635.863625][ T10] usb 9-1: MIDIStreaming interface descriptor not found [ 635.950210][T13727] vlan2: entered promiscuous mode [ 635.962112][T13727] bridge0: entered promiscuous mode [ 636.032300][ T10] usb 9-1: USB disconnect, device number 34 [ 636.695093][T10663] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 636.864857][T10663] usb 9-1: Using ep0 maxpacket: 32 [ 636.872131][T10663] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 636.880839][T10663] usb 9-1: config 0 has no interface number 0 [ 636.890946][T10663] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 636.905935][T10663] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.914373][T10663] usb 9-1: Product: syz [ 636.919786][T10663] usb 9-1: Manufacturer: syz [ 636.929503][T10663] usb 9-1: SerialNumber: syz [ 636.941814][T10663] usb 9-1: config 0 descriptor?? [ 636.949469][T13750] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 636.961512][T10663] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 636.973004][T13750] xt_hashlimit: max too large, truncated to 1048576 [ 637.187266][ T10] hid_parser_main: 28 callbacks suppressed [ 637.187285][ T10] hid-generic 0000:0000:0000.0043: unknown main item tag 0x7 [ 637.208290][ T10] hid-generic 0000:0000:0000.0043: ignoring exceeding usage max [ 637.219585][ T10] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 637.227635][ T10] hid-generic 0000:0000:0000.0043: unknown main item tag 0x6 [ 637.237055][ T10] hid-generic 0000:0000:0000.0043: reserved main item tag 0xd [ 637.242981][T10663] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 637.254450][ T10] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz0] on syz0 [ 637.275932][T10663] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 637.378544][T13763] fido_id[13763]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 637.449924][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 637.605056][T10663] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 637.682282][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 637.683132][ T10] usb 9-1: USB disconnect, device number 35 [ 637.703752][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 637.723665][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 637.741038][ T10] quatech2 9-1:0.51: device disconnected [ 637.756982][T10663] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 637.769675][T10663] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 637.782941][T10663] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 637.793360][T10663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.802193][T10663] usb 1-1: Product: syz [ 637.806665][T10663] usb 1-1: Manufacturer: syz [ 637.811296][T10663] usb 1-1: SerialNumber: syz [ 637.924632][ T1575] usb 5-1: USB disconnect, device number 113 [ 638.833046][T13765] FAULT_INJECTION: forcing a failure. [ 638.833046][T13765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.847548][T13765] CPU: 0 UID: 0 PID: 13765 Comm: syz.0.2234 Tainted: G L syzkaller #0 PREEMPT(full) [ 638.847577][T13765] Tainted: [L]=SOFTLOCKUP [ 638.847583][T13765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 638.847594][T13765] Call Trace: [ 638.847602][T13765] [ 638.847610][T13765] dump_stack_lvl+0xe8/0x150 [ 638.847638][T13765] should_fail_ex+0x412/0x560 [ 638.847665][T13765] _copy_from_iter+0x1d3/0x1670 [ 638.847691][T13765] ? rcu_is_watching+0x15/0xb0 [ 638.847718][T13765] ? __pfx__copy_from_iter+0x10/0x10 [ 638.847747][T13765] ? netlink_sendmsg+0x650/0xb40 [ 638.847770][T13765] ? skb_put+0x11b/0x210 [ 638.847795][T13765] netlink_sendmsg+0x6c0/0xb40 [ 638.847826][T13765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.847852][T13765] ? aa_sock_msg_perm+0xf1/0x1b0 [ 638.847877][T13765] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 638.847903][T13765] ____sys_sendmsg+0x972/0x9f0 [ 638.847941][T13765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 638.847968][T13765] ? kstrtoull+0x12f/0x1d0 [ 638.847993][T13765] ___sys_sendmsg+0x2a5/0x360 [ 638.848014][T13765] ? get_pid_task+0x20/0x1f0 [ 638.848039][T13765] ? __pfx____sys_sendmsg+0x10/0x10 [ 638.848065][T13765] ? get_pid_task+0x20/0x1f0 [ 638.848086][T13765] ? get_pid_task+0x20/0x1f0 [ 638.848105][T13765] ? get_pid_task+0x20/0x1f0 [ 638.848153][T13765] ? __pfx_vfs_write+0x10/0x10 [ 638.848184][T13765] __sys_sendmsg+0x183/0x260 [ 638.848210][T13765] ? __pfx___sys_sendmsg+0x10/0x10 [ 638.848254][T13765] __do_fast_syscall_32+0x229/0x6e0 [ 638.848279][T13765] ? do_fast_syscall_32+0x33/0x70 [ 638.848302][T13765] ? lockdep_hardirqs_on+0x7a/0x110 [ 638.848325][T13765] ? asm_int80_emulation+0x1a/0x20 [ 638.848342][T13765] ? do_int80_emulation+0x286/0x530 [ 638.848371][T13765] do_fast_syscall_32+0x33/0x70 [ 638.848395][T13765] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 638.848417][T13765] RIP: 0023:0xf7fc501c [ 638.848434][T13765] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 638.848449][T13765] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 638.848468][T13765] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000240 [ 638.848481][T13765] RDX: 0000000000008840 RSI: 0000000000000000 RDI: 0000000000000000 [ 638.848492][T13765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 638.848502][T13765] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 638.848513][T13765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 638.848540][T13765] [ 639.174504][T13792] netlink: zone id is out of range [ 639.180577][T13792] netlink: del zone limit has 4 unknown bytes [ 639.203853][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2244'. [ 639.231095][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2244'. [ 639.315622][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2244'. [ 639.560368][T10663] cdc_ncm 1-1:1.0: bind() failure [ 639.588538][T10663] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 639.597359][T10663] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 639.610054][T10663] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 639.631844][T10663] usb 1-1: USB disconnect, device number 15 [ 639.705131][ T1575] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 639.840173][T13804] Invalid argument reading file caps for ./file0 [ 639.875029][ T1575] usb 5-1: Using ep0 maxpacket: 16 [ 639.887067][ T1575] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.914224][ T1575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 639.942157][ T1575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 639.962543][ T1575] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 639.982439][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2246'. [ 639.994670][ T1575] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.024144][ T1575] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 640.048713][ T1575] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 640.075750][T10663] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 640.084047][ T1575] usb 5-1: Manufacturer: syz [ 640.097454][ T1575] usb 5-1: config 0 descriptor?? [ 640.224014][T13804] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 640.280073][T10663] usb 1-1: unable to get BOS descriptor or descriptor too short [ 640.302134][ T5625] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 640.310370][T10663] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.343171][T10663] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 640.374307][T10663] usb 1-1: string descriptor 0 read error: -22 [ 640.383364][T10663] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 640.403112][T10663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.437771][T10663] usb 1-1: selecting invalid altsetting 1 [ 640.470885][T10663] usb 1-1: unit 3 not found! [ 640.637041][T10663] usb 1-1: cannot request logical cluster ID: 0 (err: -5) [ 640.664251][T10663] usb 1-1: invalid MIXER UNIT descriptor 6 [ 640.678658][T13812] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.2245'. [ 640.818820][T10663] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 642.566822][ T1575] rc_core: IR keymap rc-hauppauge not found [ 642.574726][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2255'. [ 642.583713][ T1575] Registered IR keymap rc-empty [ 642.588821][ T1575] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.599944][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2255'. [ 642.614610][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2255'. [ 642.626263][ T1575] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.656232][ T1575] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 642.690728][ T1575] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input97 [ 642.708110][ T10] usb 1-1: USB disconnect, device number 16 [ 642.766770][ T1575] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.782501][T13832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2256'. [ 642.796886][ T1575] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.828924][ T1575] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.865343][ T1575] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.885238][ T1575] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.933950][ T1575] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.965987][ T1575] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.004998][ T1575] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.035312][ T1575] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.054984][ T1575] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.086580][ T1575] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 643.101377][ T1575] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 643.122128][ T1575] usb 5-1: USB disconnect, device number 114 [ 643.501409][T13850] netlink: zone id is out of range [ 643.517036][T13850] netlink: del zone limit has 4 unknown bytes [ 643.954930][ T1575] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 643.975240][ T10] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 644.115030][ T1575] usb 1-1: Using ep0 maxpacket: 16 [ 644.127101][ T1575] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.142075][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 644.156769][ T1575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 644.172540][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 644.194928][ T1575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 644.207415][ T10] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 644.218384][ T1575] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 644.231119][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.240790][ T1575] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.263541][ T10] usb 9-1: config 0 descriptor?? [ 644.279467][ T1575] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 644.294875][ T1575] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 644.318010][ T1575] usb 1-1: Manufacturer: syz [ 644.343595][ T1575] usb 1-1: config 0 descriptor?? [ 644.664895][T10663] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 644.711197][ T10] kovaplus 0003:1E7D:2D50.0044: unknown main item tag 0x0 [ 644.729386][ T10] kovaplus 0003:1E7D:2D50.0044: unknown main item tag 0x0 [ 644.737274][ T10] kovaplus 0003:1E7D:2D50.0044: unknown main item tag 0x0 [ 644.773956][ T10] kovaplus 0003:1E7D:2D50.0044: unknown main item tag 0x0 [ 644.802282][ T10] kovaplus 0003:1E7D:2D50.0044: unknown main item tag 0x0 [ 644.806449][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2268'. [ 644.827789][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2268'. [ 644.836978][ T10] kovaplus 0003:1E7D:2D50.0044: unknown main item tag 0x0 [ 644.851813][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2268'. [ 644.863661][ T10] kovaplus 0003:1E7D:2D50.0044: unknown main item tag 0x0 [ 644.867091][T10663] usb 5-1: unable to get BOS descriptor or descriptor too short [ 644.878906][ T10] kovaplus 0003:1E7D:2D50.0044: unknown main item tag 0x0 [ 644.894317][ T10] kovaplus 0003:1E7D:2D50.0044: unknown main item tag 0x0 [ 644.897081][T10663] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.925070][T13861] netlink: 1264 bytes leftover after parsing attributes in process `syz.0.2266'. [ 644.939521][ T10] kovaplus 0003:1E7D:2D50.0044: unknown main item tag 0x0 [ 644.949943][ T65] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.962592][ T10] kovaplus 0003:1E7D:2D50.0044: collection stack underflow [ 644.973188][ T10] kovaplus 0003:1E7D:2D50.0044: item 0 0 0 12 parsing failed [ 644.977468][T10663] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 645.016862][ T10] kovaplus 0003:1E7D:2D50.0044: parse failed [ 645.032322][T10663] usb 5-1: string descriptor 0 read error: -22 [ 645.037631][ T10] kovaplus 0003:1E7D:2D50.0044: probe with driver kovaplus failed with error -22 [ 645.081316][T10663] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 645.110934][T10663] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.152313][T10663] usb 5-1: selecting invalid altsetting 1 [ 645.169854][T10663] usb 5-1: unit 3 not found! [ 645.267918][ T65] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.345106][T10663] usb 5-1: cannot request logical cluster ID: 0 (err: -5) [ 645.355017][T10663] usb 5-1: invalid MIXER UNIT descriptor 6 [ 645.393916][T13863] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 645.459100][T10663] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 645.530515][ T65] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.619408][ T65] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.238664][ T65] team0: Port device bond0 removed [ 646.248974][ T65] bond0 (unregistering): Released all slaves [ 646.342701][ T65] tipc: Left network mode [ 646.534968][T10663] usb 9-1: USB disconnect, device number 36 [ 646.585560][ T5289] 8021q: adding VLAN 0 to HW filter on device eth13 [ 646.801538][ T65] hsr_slave_0: left promiscuous mode [ 646.829247][ T65] hsr_slave_1: left promiscuous mode [ 646.862751][ T65] veth1_macvtap: left promiscuous mode [ 646.868794][ T1575] rc_core: IR keymap rc-hauppauge not found [ 646.877710][ T65] veth0_macvtap: left promiscuous mode [ 646.886525][ T1575] Registered IR keymap rc-empty [ 646.897587][ T1575] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 646.935105][ T1575] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 646.980334][ T1575] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 647.020496][ T1575] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input98 [ 647.069783][ T1575] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.117370][ T1575] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.135601][ T1575] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.165380][ T1575] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.206877][ T1575] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.244912][ T1575] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.281489][ T1575] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.314947][ T1575] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.348927][ T1575] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.384046][ T10] usb 5-1: USB disconnect, device number 115 [ 647.390659][ T1575] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.449449][ T1575] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 647.475141][ T1575] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 647.509518][ T1575] usb 1-1: USB disconnect, device number 17 [ 647.918926][ T5289] 8021q: adding VLAN 0 to HW filter on device eth14 [ 647.967494][T13922] ================================================================== [ 647.975587][T13922] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 647.984206][T13922] Write of size 1280 at addr ffffc900039b4b40 by task vivid-000-vid-c/13922 [ 647.992862][T13922] [ 647.995175][T13922] CPU: 1 UID: 0 PID: 13922 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 647.995196][T13922] Tainted: [L]=SOFTLOCKUP [ 647.995202][T13922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 647.995210][T13922] Call Trace: [ 647.995218][T13922] [ 647.995225][T13922] dump_stack_lvl+0xe8/0x150 [ 647.995243][T13922] print_address_description+0x55/0x1e0 [ 647.995258][T13922] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 647.995273][T13922] print_report+0x58/0x70 [ 647.995285][T13922] kasan_report+0x117/0x150 [ 647.995304][T13922] ? irqentry_exit+0x218/0x760 [ 647.995322][T13922] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 647.995341][T13922] kasan_check_range+0x264/0x2c0 [ 647.995359][T13922] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 647.995375][T13922] __asan_memcpy+0x40/0x70 [ 647.995392][T13922] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 647.995430][T13922] vivid_thread_vid_cap_tick+0x1021/0x5fd0 [ 647.995455][T13922] ? ktime_get+0x45/0x220 [ 647.995474][T13922] ? vivid_thread_vid_cap_tick+0xd41/0x5fd0 [ 647.995502][T13922] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 647.995519][T13922] ? lockdep_hardirqs_on+0x7a/0x110 [ 647.995537][T13922] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 647.995559][T13922] ? vivid_thread_vid_cap+0x491/0x1190 [ 647.995584][T13922] vivid_thread_vid_cap+0x909/0x1190 [ 647.995602][T13922] ? __lock_acquire+0x6b5/0x2cf0 [ 647.995624][T13922] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 647.995646][T13922] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 647.995663][T13922] ? __kthread_parkme+0x7a/0x1f0 [ 647.995680][T13922] kthread+0x388/0x470 [ 647.995696][T13922] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 647.995715][T13922] ? __pfx_kthread+0x10/0x10 [ 647.995731][T13922] ret_from_fork+0x514/0xb70 [ 647.995751][T13922] ? __pfx_ret_from_fork+0x10/0x10 [ 647.995765][T13922] ? __switch_to+0xc79/0x1410 [ 647.995784][T13922] ? __pfx_kthread+0x10/0x10 [ 647.995800][T13922] ret_from_fork_asm+0x1a/0x30 [ 647.995820][T13922] [ 647.995825][T13922] [ 648.190958][T13922] The buggy address belongs to a 3-page vmalloc region starting at 0xffffc900039b2000 allocated at vb2_vmalloc_alloc+0xef/0x360 [ 648.204160][T13922] The buggy address belongs to the physical page: [ 648.210564][T13922] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880a7220540 pfn:0xa7220 [ 648.220609][T13922] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 648.227704][T13922] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 648.236268][T13922] raw: ffff8880a7220540 0000000000000000 00000001ffffffff 0000000000000000 [ 648.244826][T13922] page dumped because: kasan: bad access detected [ 648.251235][T13922] page_owner tracks the page as allocated [ 648.256928][T13922] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 13921, tgid 13919 (syz.7.2279), ts 647956158055, free_ts 647956101525 [ 648.276270][T13922] post_alloc_hook+0x231/0x280 [ 648.281036][T13922] get_page_from_freelist+0x24ba/0x2540 [ 648.286574][T13922] __alloc_frozen_pages_noprof+0x18d/0x380 [ 648.292374][T13922] __alloc_pages_noprof+0x10/0x100 [ 648.297472][T13922] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 648.302916][T13922] alloc_pages_bulk_mempolicy_noprof+0x34e/0x1680 [ 648.309332][T13922] __vmalloc_node_range_noprof+0xad1/0x1750 [ 648.315213][T13922] vmalloc_user_noprof+0xad/0xe0 [ 648.320137][T13922] vb2_vmalloc_alloc+0xef/0x360 [ 648.324977][T13922] __vb2_queue_alloc+0x9c5/0x15a0 [ 648.329984][T13922] vb2_core_reqbufs+0xc1f/0x1410 [ 648.334902][T13922] __vb2_init_fileio+0x318/0xff0 [ 648.339822][T13922] __vb2_perform_fileio+0x282/0x1620 [ 648.345091][T13922] vb2_fop_read+0x273/0x360 [ 648.349580][T13922] v4l2_read+0x19c/0x2c0 [ 648.353808][T13922] vfs_readv+0x587/0x840 [ 648.358033][T13922] page last free pid 13921 tgid 13919 stack trace: [ 648.364512][T13922] __free_frozen_pages+0xbc7/0xd30 [ 648.369628][T13922] __kasan_populate_vmalloc+0x1b2/0x1d0 [ 648.375159][T13922] alloc_vmap_area+0xd47/0x1480 [ 648.379993][T13922] __get_vm_area_node+0x1f8/0x300 [ 648.385001][T13922] __vmalloc_node_range_noprof+0x36a/0x1750 [ 648.390878][T13922] vmalloc_user_noprof+0xad/0xe0 [ 648.395800][T13922] vb2_vmalloc_alloc+0xef/0x360 [ 648.400637][T13922] __vb2_queue_alloc+0x9c5/0x15a0 [ 648.405643][T13922] vb2_core_reqbufs+0xc1f/0x1410 [ 648.410561][T13922] __vb2_init_fileio+0x318/0xff0 [ 648.415483][T13922] __vb2_perform_fileio+0x282/0x1620 [ 648.420783][T13922] vb2_fop_read+0x273/0x360 [ 648.425277][T13922] v4l2_read+0x19c/0x2c0 [ 648.429504][T13922] vfs_readv+0x587/0x840 [ 648.433725][T13922] __ia32_compat_sys_preadv+0x1c6/0x2c0 [ 648.439256][T13922] __do_fast_syscall_32+0x229/0x6e0 [ 648.444442][T13922] [ 648.446748][T13922] Memory state around the buggy address: [ 648.452357][T13922] ffffc900039b4f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 648.460397][T13922] ffffc900039b4f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 648.468436][T13922] >ffffc900039b5000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 648.476473][T13922] ^ [ 648.480520][T13922] ffffc900039b5080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 648.488558][T13922] ffffc900039b5100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 648.496596][T13922] ================================================================== [ 648.677779][T13922] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 648.685027][T13922] CPU: 0 UID: 0 PID: 13922 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 648.696396][T13922] Tainted: [L]=SOFTLOCKUP [ 648.700711][T13922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 648.710769][T13922] Call Trace: [ 648.714042][T13922] [ 648.716971][T13922] vpanic+0x56c/0xa60 [ 648.720983][T13922] ? __pfx_vpanic+0x10/0x10 [ 648.725495][T13922] ? __pfx___schedule+0x10/0x10 [ 648.730360][T13922] panic+0xc5/0xd0 [ 648.734097][T13922] ? __pfx_panic+0x10/0x10 [ 648.738506][T13922] ? preempt_schedule_common+0x82/0xd0 [ 648.743957][T13922] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 648.749573][T13922] check_panic_on_warn+0x89/0xb0 [ 648.754506][T13922] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 648.760127][T13922] end_report+0x73/0x170 [ 648.764358][T13922] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 648.770017][T13922] kasan_report+0x128/0x150 [ 648.774506][T13922] ? irqentry_exit+0x218/0x760 [ 648.779257][T13922] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 648.784883][T13922] kasan_check_range+0x264/0x2c0 [ 648.789819][T13922] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 648.795439][T13922] __asan_memcpy+0x40/0x70 [ 648.799848][T13922] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 648.805311][T13922] vivid_thread_vid_cap_tick+0x1021/0x5fd0 [ 648.811110][T13922] ? ktime_get+0x45/0x220 [ 648.815428][T13922] ? vivid_thread_vid_cap_tick+0xd41/0x5fd0 [ 648.821315][T13922] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 648.827110][T13922] ? lockdep_hardirqs_on+0x7a/0x110 [ 648.832294][T13922] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 648.838438][T13922] ? vivid_thread_vid_cap+0x491/0x1190 [ 648.843894][T13922] vivid_thread_vid_cap+0x909/0x1190 [ 648.849168][T13922] ? __lock_acquire+0x6b5/0x2cf0 [ 648.854107][T13922] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 648.859833][T13922] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 648.865644][T13922] ? __kthread_parkme+0x7a/0x1f0 [ 648.870581][T13922] kthread+0x388/0x470 [ 648.874656][T13922] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 648.880388][T13922] ? __pfx_kthread+0x10/0x10 [ 648.884971][T13922] ret_from_fork+0x514/0xb70 [ 648.889555][T13922] ? __pfx_ret_from_fork+0x10/0x10 [ 648.894682][T13922] ? __switch_to+0xc79/0x1410 [ 648.899357][T13922] ? __pfx_kthread+0x10/0x10 [ 648.903937][T13922] ret_from_fork_asm+0x1a/0x30 [ 648.908698][T13922] [ 648.912379][T13922] Kernel Offset: disabled [ 648.916721][T13922] Rebooting in 86400 seconds..