last executing test programs: 4m4.797700231s ago: executing program 4 (id=27): r0 = fsmount(0xffffffffffffffff, 0x1, 0x72) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) io_uring_setup(0x4c22, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/resume_offset', 0x149a82, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r6, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m3.836158043s ago: executing program 4 (id=32): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_procfs(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000180)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbe66}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) r5 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x48e9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x44cd, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x2, 0x0) fcntl$setstatus(r6, 0x4, 0x2000) r8 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1020, 0x1, 0x13, r8, 0x81000000) 4m1.322789736s ago: executing program 4 (id=39): r0 = fsmount(0xffffffffffffffff, 0x1, 0x72) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) io_uring_setup(0x4c22, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/resume_offset', 0x149a82, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r5, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) 3m59.876092908s ago: executing program 4 (id=42): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004084) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000001680)=ANY=[@ANYBLOB="2d22db67c5f6efc83d52b9088e003bfbd2510156c16e37916ac445548003644464c5313e6d8930fd750a2b05deeeeac61fd26811f86a6dd378ec18b400a81e4a1e07f97f9ea23d475c1f899182e18d68a0d7a90ce529ab296716927f6381b97c7506f6bd975e23afd2a37fadec296343cc5ddd024c7fb4697af677ee2c68ce0e2764778c7b61b86743bc5ceb3032d00de7b0a447a5692b82ae08e6e23b18fcd32f1151fa08732e5f5e2d6a93735ce8d55ec6231b8584e53204365ede27630981440f901af43a066c44c871638b3c057b9ef40bf1eda19827d638f952773f0bba392e4c60c105d1e2b076742d450cc2e72883e5a11b5e32e243d156312645ca2bc15477323a8c6d0a02330468ea2c42cc2fad3949beb24e9468847c3ffbbacd982d537744bdb4401bebbbda60372e9f545b1d67c2a40cddc952e274220e1871d2d61eb64fc96d566158c077ac1f3ce3e116bd3be121a5656f3d3a8142010e37c9da746666b4b4aef4120195f2313884c7f09460e7448ed9711a7eefb0c49d08b305933b7b6085d93e2c932795caf53b798012c0d2fd854b8a857e52959127818e01f174c9a16e88c8a6ac1d6967549b005675dcbd4e8792777420f7f5add7139d7c38de1e9cc0d51f17a9566264a9b332258644675af4b1c29ce830bdfdc439ffa82f901602a08d0b68ac68ff60bd2546045478b362a8f983553fcfebb7e85732d6cdb088e083f2a2512d427547a6ac2e24c3992026966582a7ba553cc45319ff0e3ed5cf6ef498e0145cc8f71db5f63707b07e25cff043c4c27942891d0682d95f8dbc894414110ed732886fe68748ca41cd5adb26fcdd8cdd3e2a0f89e2fa1104f12500d7116ea2c2f7420f433d0a091adcca28d4ec4618b9585515f5967ce88c22d3ce71748c4e7c4684cd9fae6427866ea433e5cd58512a4448283de840598079925f753bcca7aa0e0fd4771f8f2166abfe5af34c98f0de382c81ea21d110074c32741b7237641af4cde41f111adffa593b2b9d512a4f158f9883cb33b7da979c12bfc9125cf47ff8d461f0ced221b04c7635802d233b134e8fa4185c915558564e8126900757b0c0d24247a0beb6f8fae9350cc5b5f6d8af0b69d85127f13eb4de8e5a2c03aa4b181de179c9cfb8f31a2fc270061c6e180eaf3f37286f306654103f2ba0d2f43b37a78895dfeeaa5c442ed7e777f754df2d64aeb4b0b30a1fb80095689306e0c0e2a7143bccae2abe3d3ae4b326a5d6263f373eca11d6385c922188dc140731d394b88c4394ebd806f4e477da4e3ede30f16992e611803b463cbd6ea13c2fb112a1f1676521ca5617bb5ab305daaa0ae12c5011e3aee86995cc11b20fa141abf1732a5eb96fe9c1a568347603f4e451e30aa4928228c4207335d59bb1778f56e23d25627906ac37ed576f1044149de173d18e6588715dd313241518a409f5c9e831b7f7f9b35de7ca34139d09b8087b78a8b580195b3d3aefd71886f6e2e5cda02e126f138b844d77831b39820cef9f937bd61ba5b3c977e883303263fe11841b810e10fd5c6f7484df0773e7242328330a225f71ed11c4780dcd0e5ad919488222a2ac5561dfd7cdb8d9272bce16ad9a151f6b6855cbbd68940ca9d94b06ba33ef3654f3c149dde9dbb7f07920d8caaa161dd693c66e4a65c27d298bec5c1511b9614f1a2fdbc109a118e36a7ec90df03cb17b495f32cf483dbc31c5737d6c01243b944eeeb7034660f5e59e55b9fa0347891ff5365776e37836a6ea8f43619768d74340e64f4a8e1769bb6909c8ba9b2a66634bb9602db07fb6e54b10bb48ef83a605851793c37f117e08643cf9d40215b2a218cac46534fca82f10401d236f468cd591343b37942a03b6d82031fa5d38b2dea3ca661bea8942e54cdf016e9867dcc6ea78d579c35fb9b15f863a25d3aa25266d8eb2c7cad3602e04ef7cd4e8064c6aff2fa40abf6142dad310d0f1f88d8c7bfe7c531e8cac4634542f7862c6b8f69835370ebfd798567daff5b91ec8e22e6d7d63f1af31f91ae2904c141301519eb3b68171ca8f939a64a083413c4276671500cd39fa7909378177705e89ef9751ed47f78af10d83216f586a4aa4ab386206a52527149667e9d2faa6868d8ebcd4cdb4e00e5e6ac8ef11f4286e735300fabe54c02296874c850af799bbda5c8c91cc84160f78e90b33bcc0f61a9d7440948ab36e81299090c48da9a6e8eb472c746c11018c69cd6973ab23f492012d14d80efd5654ae6d69c6b42d67761338829b2be54f0154735a9a87f9e9c0743f26cd6538474ce89ed8775eba555023568ba11ed9cb767cfcde706ae60c6bf47c9e8666c53c6a93e1d8e839bcb9dd71200bfd9f0783cacaa1a8e5c94043ce0cde9dd49c4cfeaef64308caba7cc179d4a0d6f32ccaecd7758e396c0207b474481e23b110a1c746ead75da1f43ebacbc35fe423bc77e0a407b35231624f8e1ef99f0f02ba4213b5f2851a2cfaba5e247d93e28d56c7ef0210ef4d5762f2d27030a3ac936794222a7420e7f17bfe513e802cb45014ed30812b379f30ef89c1a6ac170e07db2cb7e558b6a53df82f3d631cc2b0d4e3786b71c789857563e363a1ec33d14c69a3697c6fe1040f5e3b66562a69055818f54da0e3c6d7252fbef622123e9ee5e6e4457db2d32a3fe598b531aff7e62b527dcc0bcbfa1de1dc9bb4295239092db9e89d30ab79a50d81aa042fda3a0973189a0174febde58ec059eeb33aa9d2e9a0696e9fb454e38d31a841b16673bb64be1421777255fdb92a40b7e64d7ec5fd60bb7cb4a248ef6771f283885d4e6a8db03f45d1064c1a3775050fabc450ec602139cafe31b3f9868592c8f0e5b196a737f150d38c8adc97dbef747ded60c24f0ab9b89e340a0a30e8ae07e67282426049e905edba07ba4c92fe3f8e80f794ca50e2262bfb356e21a760e84a964368fb4fd3b6a8f2dbd715956279e10e5524b67a08a080082f7358700a69f030a9079e004ab2c7e238d0150487aadaa92b64c3add817e3282f4be11dc87ad07f9ed06a69fcf4be66bd06e6ffdcb353a6f08b70dfc0fef59b5bbfab8b8283a0717fad763fbb7507fe14ed5131753d065def1218706fefb0e1688499bb28d002ebbd44fdcef06bc2120eee6b871b69b6f18c40209d066009164bcd5b748090da3dd820e4d62c31f9b081b9594e7d5d7705fbd4d153eca9d8b3de3454f42ee380cccf4d8b67a504959fd999c3c7c860d4cf828532f336a04716945496149d69491dc453ee1af7912e2d6e770d379c234f04953452011030efc517a9af8b4cca02ee651a514130872dde4e66d171357fe1e9a546223e6388a82e0c07d2d0f487f674f1e27b7d690bb16f5586d54a427b9a94dc3c6f32227526e8ca294c1356c52a075d7b79b0dd5a431bc85f3b6bde6f26e78da6ac9621e24c740cfafe153d3fcf1556c56fe94b32c67f21d1228eef246fd342cb1719a834e5e802244b8c97cb676f62472a0dbd0fd276b88db358b14ae24089a22ae2136d1d953c4dd4043c4d19add7b8939d69112b04332ca9f629a9e3134606dacd745cdd72558e3a0453ad37b10f6eed6b5561a896996df4ade2e21e2a9eb8eef5d544b8ea8366cb6b097ac6478ae6444714ad129c134e7ed7cb83b6c8e3c2b3aa96ab34771dd5e8ffbb25809d6f23e49246e2363ce04f1fb49bf88e53dac53c8b0c2fb8e1d8d4eb6439266493804d7e148f3715330aa4e2c2447275563740ec3436083fbc7a866f845229ed1dd73c8558380f2f2ea316bc4a53e545219c27cc5bd70855788ae9079c5328066a5088f67f4cc9d4274c2190618f1e4e243a0c3f7789cb3af5f279412df7e05418dbe1cc61cb70161db91829d336727592d425f40325a13802c29aab7cd282c98111f40c27d7d2d3db9c234db0b78ff309394898549c5ead87c3dfb82c79ca1b62c1bc4596427c5af15fa6bfb041590a27c427df5c5b0542111a33291c7de4cedb6e9c86de609756c7d8eeeee6d5bf6b5388aa834ba81ec45e6a6fc3fe67a6c18fe8c798dfdc905cb5307623665c322b7b724077d13c1e96157034434e971cc45da0652ce18fa2ce917a9b9bb4c40ef5e619b341b4b5d64eaa87a1b9802b8e903aaa255be3c66436ae3388be0ca8a12e83512a3d968928d447d852a2081455d3ab3ced69fde205e6a4de5c5a3d1b3512abb073c75a08f4f8e12e1ef184e986933f07b58aa9823b3b907cc8c484a8917430554a13efd7f259e047052b7f986179d20e4dd6d15d68bc0062fd0689ecf96a5727bd8a2d092346dfd69b398aef87a449cea831e38762dece58e66da750e99d5e2ed8d6eeca27645d16ab33577ca9c86d6eee359c6c2d7cfb9fce8bdb676025587d997e9a4b7e2d9315adf32a34ee6c430c1b47ed5dd323f88a1365eda84bba0896c2950d3cb902b2446b7be43aea60accc32e5b42f8265e12630b54663158f5b0225488c51f84607a52e8b567fcd5dfa5662c87362f906788404e25673fc5ecff28ffadb53831c877931283f9da635bc8479c064b596f7073e01a3a8ad707879762c9be6bf78cac094647fc893f92f8856911d28038611e036f75fddca80f3eac0b2c2f7b617ec4c17ad95ae4c6ddaa34cff0620fcf703507f64de8315fadaa9addab3e047e9699a5ab2f263bbe01e3cd7f7de4b920166fcc8a93dacdf560e20bbafc258d04899136587a5027940fa3aa15fe0451e753f7e6acaf13b9d9362f15a3da4303e964a4a5e5d31e1364c89c1566c1f5ac9b6625daaba27f7a68ba46fe44c0a5ae7d74340dfb7c4ad7cc5dc58d78997ab6259041cbcd01ebba862c9bd07d275f6cf62ab815f0afe91b5ff9c6dbc997b0f6540e62cdc649adfde2a51a9a2752726ddd1bc05e02bc5723e3b953eac82ebaf0ccaa782e4ab5da4b2de1e06f9a20fd5d4e9d9459f5ac50049139d5a0818fa2c615a147e85a25a66e1463ae43d2ce0c8afa43f910cc5879987f0dbd6b025e9702a3ed5f8f4b9db180076ab702d74d44df84f9a0c65d4378ac00363d78cb2c157bfa444a7b58fc59e142ea77845ccefc07ab1f3ebe64f3c7cb394e0b8a3f6ea52d5980d1dbbf7fcd557c354e91193b8c18c23a1be17cc43c44aeb69344fc2faa5923c9dd43757c88809f3d7b6cb79b2ff3064efed4d325e70c64ebd88f6462ad9b3cd44eb91c95523db549bca22ffeef4c10e8c5b9866998c299797652a354f70969dee86e8bf30570e4e7e36b93ac70f2412331161cad1ddebfa723e0676981fb1f137a9ae2be6cd0801d0a37a65849df378451e967890988e128beb39df573f5739ca007655a02916d86e9f7f50a44c25a761b9ad10f8da343f409047059f42c1b61dc495ef1bfb96e5c0cd66aa013cf447c54e291df879bf35332fe9edd889e3f057d80d087de5fa387cda04279980d08a64d80b3558589743b6fd0a62f4f2468c912ae3452c07fda77ea16b66eea16ac1e524cb51a648433267a0e818b4b5b890742023f65059be2494170e03a2428efcd7f78629ba83682730aeaeaac545009761b8968bdf3ec6d46e7838b99ffa214ce1aa7236ccce63d58f3d2a03440d6a008cf7258aa2361f8c89f1a3cf658e07e0e84ce41aa166a39810d4a3d99590c58670decb88c27769906a568a10d17ff6f431166073d96292e55aa82d1210e7f7f79402efb43438fa57d092beaed527a203bb290b75e65629b3462a39fb5f098d0cd43e1e47efd70485e8e3056e2b7c137dbcfeef5b625a372c236c4f51590e079cc9aafa87c1ab57dd3c2cd2f9c2ad72", @ANYRES64, @ANYRESDEC=r0, @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) gettid() r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, 0xffffffffffffffff) r7 = dup3(r6, r3, 0x80000) ioctl$NBD_DO_IT(r7, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000080400000200000008000100000000000c00020007000000000000000c0002004400000000000000"], 0x34}}, 0x60004804) 3m58.455857668s ago: executing program 4 (id=45): sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xeb66a2cc6f6d1236}, 0x2400c8c1) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) (async) setreuid(0xffffffffffffffff, 0xee00) setrlimit(0x40000000000008, &(0x7f0000000000)) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x555, 0x2, 0xb7, 0x9, 0x36b, 0x9, 0xe, 0x7ff, 0x1a, 0x4, 0x7, 0xa, 0xa, 0x44ac0092}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}}, 0x800) (async, rerun: 32) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (rerun: 32) 3m58.292129598s ago: executing program 4 (id=46): r0 = fsmount(0xffffffffffffffff, 0x1, 0x72) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1825000000000000e9ff00004b64ffec8500000075000000040000000700000095612a97d17b073bd9606e6ca082a5cc76c66e595f31f77f5666368bbd8b936f15dcb1ae3a87634673fc2c54811c3bcbb044cccb79391e6309d18bcff9f219a0f71d6457bd305577a325e4f5bcd01edfff748fc12fea0abf4fa2e6a0e6487ce8b9d83170cfe8ae2570832f461ee2cb461b5ca5dda1369f28048849ebc7c8c084f52cffe701407d77dec0116ecfcf9064d163adc6cefc9c1797e3b9b57def0fdf7e9de7583e036cc35d64b35d3a8dcc73516decb5c75ccb3512b0387012729a21ad3c71213c9dec78f4fe39c18f5dd6d6966148220e3c24ec35f47df059fb53945e0b57352b9e8ef431ac9c64beea4633cd8663fb1a29766199cdbb53519cf0489c6e22275f2648f8a8e357daed4a9ecd4a8ba2bd9605423ce9549c6f0e6e10d0e89968210855dd2ffb0adf06312439"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/resume_offset', 0x149a82, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m42.902199336s ago: executing program 32 (id=46): r0 = fsmount(0xffffffffffffffff, 0x1, 0x72) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1825000000000000e9ff00004b64ffec8500000075000000040000000700000095612a97d17b073bd9606e6ca082a5cc76c66e595f31f77f5666368bbd8b936f15dcb1ae3a87634673fc2c54811c3bcbb044cccb79391e6309d18bcff9f219a0f71d6457bd305577a325e4f5bcd01edfff748fc12fea0abf4fa2e6a0e6487ce8b9d83170cfe8ae2570832f461ee2cb461b5ca5dda1369f28048849ebc7c8c084f52cffe701407d77dec0116ecfcf9064d163adc6cefc9c1797e3b9b57def0fdf7e9de7583e036cc35d64b35d3a8dcc73516decb5c75ccb3512b0387012729a21ad3c71213c9dec78f4fe39c18f5dd6d6966148220e3c24ec35f47df059fb53945e0b57352b9e8ef431ac9c64beea4633cd8663fb1a29766199cdbb53519cf0489c6e22275f2648f8a8e357daed4a9ecd4a8ba2bd9605423ce9549c6f0e6e10d0e89968210855dd2ffb0adf06312439"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/resume_offset', 0x149a82, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m14.934056752s ago: executing program 0 (id=480): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x311202, 0x20) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x53) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0xfffffffb, "6ed95483f9c677812a6d256226ac0c6fd47a504d03a289e39fc3a3a951f55318", 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000100)=0x1) r3 = syz_io_uring_setup(0x1388, &(0x7f0000000140)={0x0, 0xc821, 0x2, 0x2, 0x1bc, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200)) tee(r0, r3, 0x3ff, 0x4) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000240)=""/128, &(0x7f00000002c0)=0x80) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000300), {[{{@arp={@multicast1, @local, 0xffffff00, 0x0, 0xf, 0x10, {@mac=@remote, {[0xff, 0xc7957d55036300c, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff]}}, 0x6d74, 0x6, 0x17e8, 0x1, 0x7fff, 0x6, 'wg1\x00', 'team_slave_1\x00', {0xff}, {}, 0x0, 0x8e}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @remote, 0x8}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2c}, @broadcast, 0xffffff00, 0xff000000, 0x6, 0x0, {@mac=@multicast, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x7, 0x5, 0x2, 0xaa15, 0x2, 0xd, 'geneve1\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x118}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010102, 0x4}}}, {{@arp={@remote, @multicast1, 0xffffff00, 0xff000000, 0x4, 0x10, {@mac=@broadcast, {[0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x81, 0x8, 0x5, 0x1, 0x0, 0x5, 'dvmrp0\x00', 'team_slave_0\x00', {}, {0xff}, 0x0, 0x30}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x7f}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000780), 0x4) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc091}, 0x44000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000940)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000009c0)={r5, 0x1, r1, 0x8, 0x80000}) r7 = openat(r0, &(0x7f0000000a00)='./file0\x00', 0x101402, 0x102) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa8, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xf, 0xc}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "216428a94fb5f2355e3eb864b6"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a05cefe788"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "368fea2960b8d898c3f2524f1b"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000040}, 0x20041040) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000c00)=""/85) socket$inet6(0xa, 0x800, 0x9) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x6) r9 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r9, {0x4}}, './file0\x00'}) prlimit64(r6, 0xd, 0x0, &(0x7f0000000cc0)) unlinkat(r10, &(0x7f0000000d00)='./file0\x00', 0x200) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000d40), 0x4) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000d80), 0x2000, 0x0) ioctl$USBDEVFS_REAPURB(r11, 0x4008550c, &(0x7f0000000dc0)) r12 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000e00), 0x440001, 0x0) bind$l2tp6(r12, &(0x7f0000000e40)={0xa, 0x0, 0x81, @mcast1, 0x8798, 0x4}, 0x20) 1m13.291046205s ago: executing program 0 (id=484): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8=r1], &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_fd={0x18, 0x9, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000640)='contention_end\x00', r5, 0x0, 0x2}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r6, r4, &(0x7f0000002700)=0x1, 0x8) syz_io_uring_setup(0x849, &(0x7f0000000340)={0x0, 0x5080, 0x800, 0x0, 0x2d3, 0x0, r6}, 0x0, &(0x7f0000000080)=0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r8 = dup(0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r7, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x4, r8, 0x0, 0x0, 0x0, 0x80800, 0x1}) 52.2114513s ago: executing program 0 (id=484): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8=r1], &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_fd={0x18, 0x9, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000640)='contention_end\x00', r5, 0x0, 0x2}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r6, r4, &(0x7f0000002700)=0x1, 0x8) syz_io_uring_setup(0x849, &(0x7f0000000340)={0x0, 0x5080, 0x800, 0x0, 0x2d3, 0x0, r6}, 0x0, &(0x7f0000000080)=0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r8 = dup(0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r7, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x4, r8, 0x0, 0x0, 0x0, 0x80800, 0x1}) 30.640104131s ago: executing program 0 (id=484): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8=r1], &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_fd={0x18, 0x9, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000640)='contention_end\x00', r5, 0x0, 0x2}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r6, r4, &(0x7f0000002700)=0x1, 0x8) syz_io_uring_setup(0x849, &(0x7f0000000340)={0x0, 0x5080, 0x800, 0x0, 0x2d3, 0x0, r6}, 0x0, &(0x7f0000000080)=0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r8 = dup(0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r7, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x4, r8, 0x0, 0x0, 0x0, 0x80800, 0x1}) 16.067868834s ago: executing program 0 (id=484): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8=r1], &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_fd={0x18, 0x9, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000640)='contention_end\x00', r5, 0x0, 0x2}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r6, r4, &(0x7f0000002700)=0x1, 0x8) syz_io_uring_setup(0x849, &(0x7f0000000340)={0x0, 0x5080, 0x800, 0x0, 0x2d3, 0x0, r6}, 0x0, &(0x7f0000000080)=0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r8 = dup(0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r7, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x4, r8, 0x0, 0x0, 0x0, 0x80800, 0x1}) 13.152941309s ago: executing program 3 (id=646): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="b000000000000000a1000000000000000600000000000000020000000000000003000000000000000700001000000000100000000a0000000000000800000000060000000000000005000000000000000200000000000000050000020000000080000000000000006e00000030000000030000000080000000000100", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="d000000000040000000000000600000000000000000000800000000001000000080000000000000000000000b214ca4da564b659cc66"], 0x0, 0x0, 0x0}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0x206, 0x2b4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000080)={0x10, 0x0, "338e3468c0ad2a4f4813347ed3e1c0bf"}) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc) close(r6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) 11.169899255s ago: executing program 1 (id=652): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9", 0xe, 0x0, 0x0, 0x0) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b04", 0x9}}, 0xee) close(r3) mknod(0x0, 0x1ffa, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0x8}, {0x5, 0xffff}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r6, 0x6) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452509005ad94a461cdbfee9bdb942352359a351d1ec0cffb4792cd8000080", 0x4c, 0x0, 0x0, 0x0) r9 = getpid() syz_open_procfs(r9, &(0x7f00000001c0)='net/fib_triestat\x00') 10.133972358s ago: executing program 3 (id=654): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x0, 0xc4) sendmsg$netlink(r1, &(0x7f0000001440)={&(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdbfd, 0x200000}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000340)={0x64, 0x30, 0x1, 0x70bd25, 0x25dfdbfb, "", [@generic="54d662dce300443c86b9edefcb1ef5a58c6af75b9dc161266950cb8197562c271c6c8b2e74697e423c5b6f099495cc0f88fb728610606ec38671c1685fe262eb6eb6742dc01eac3f6f4ea1d987887c25de6b"]}, 0x64}, {&(0x7f00000003c0)={0x10, 0x10, 0x300, 0x70bd26, 0x25dfdbff}, 0x10}, {&(0x7f0000000400)={0xe4, 0x23, 0x400, 0x70bd2c, 0x25dfdbff, "", [@generic="e9e16924128fdb642dbdc669b9fc45ef642699448cbb09279da1e769c353e9edfbca5ebdadabe0aff148f5fbfb848c2ab36f6127056b59644ac2046ece3dc45724e36828cbd1f9c0dc3dfccf579ee0617fe91916a22c8a3dc4b3385434b041f03d1afbaa432dc7fcbd9e98145e689a6802fa0ea2d04fa91f4c61df7a8e135f4b5a3764c9f4fba4f4dd744b482231099755", @generic="ed527e1b7cde5b27293d24ab4fa2e1f5628a81e1c288e8e67cf30a07c5b9da9fd77d1351cda20e06ed1072949c101b7703c1d0ed8f13af075322b3c512b6558390"]}, 0xe4}, {&(0x7f0000001540)={0x1384, 0x3c, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@generic="8353b0d294463c5e807b12736484163a172249fa740050ad7e22df0e9d65ee603ccae47de996e1844887532600cc391eb19c7ed49104a41ec46e09ba7020374a1a503b949b80b5830952fea9e732621af33a8f0bada421087f3cbcd0116637b7e464de4c35a934e7ecbaea43bbadbcc5089d289c3f16a82e664036ed", @nested={0xfa, 0x32, 0x0, 0x1, [@nested={0x4, 0x11d}, @generic="652be33673c5ebb5d75bae55341eaf72de038bb5e12ec08686794b013c1870a9447682a8f6ee28ae45ddcefbc99d8300e9a17650a7bf81c36603dfe706a91bdb4b0d6dfebf5942e7d5717f1060b3897abedc5b31a4ade08dab21af78b6aaf91147a4a7d868347ac377fb0f18d2fdb4e751751255431a2244b74f0547c244c3ed44bb10b4f732ab14f5a9d29211", @typed={0x8, 0x109, 0x0, 0x0, @pid}, @generic="649cfb4b8385a9316f5a05eec97d348859ea7238348d9c16c07f8b128abce8539bc7bdfe6bdd6ce055be99681e", @generic="f6131b1221a4b5efa67ad651e083874868c6eca53e0f060369921b620a95aa34a0496584", @typed={0x8, 0x600, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0xe0}]}, @generic="ad6df7afd6dca73019eb60d9783ff66580bd873a8bae105ae9c6601281b756533a27adede88cd3b88d420dd549055b587d573228a353d5b678e37113f1650929158d2600cf01a558251219dd047b5d7e95aada5ef9d136242a097029a51e405715bbe7ca17a208a440b105c44a95d2947318cdabd9d713daf42bf80ccc3e1b2563e1bf12723b53e077a15874a215b94608790bfb904279b423fad51dfe7204dd3d23", @nested={0x1155, 0x6f, 0x0, 0x1, [@generic="b3e907f8e0ddbc8ed4e07877bc8ce38432dd00900b3b9673ee012978e150c1671a626a79d014aa222e01251c7ab6e27eba99a018f8627221a09a30432f7aae886b813de2d5d4720e30c600abcd2a0ed8ea7c4e9b51a88ff46cc90b492c401e697040d50a37c57f0a0e7050d9e6cde2f4897a6b7f2a4c47b6f632d0ebc91d6f00e3b9660be460ad78888fe9f0630967b4cd3780e2e80ad2145c3df12f734f09d5b36d8c0fcef6bd2a539e02e015a6a2fe5e6736202a06b952fa8a2de857304f3a1ba32228e58970e5ef7ab1311624fe1f4c525074ff4f86b8a18516db70c377382c6d0888977ba7b5175772b07147a0caa0987e8b603faa65bd6c72001ce04236f222f933bfc005848935a37018000584176de5d97cd104eba71696c1241635235670b4666e0730417a982112150eb45d6266e6f022018405271ccaa3510310ccf0f2cd2db50f22f1adb225ec2b8216754669ed1a4eb62a31a899e426a0f12022f4fc9df351414e0acabeaa8fd175a9e455167fe5103a2f1126707ae5831b6d2b590dd74d3dc8e390e88f7a19373795b7adbbe0965dea1237bb634bacc7840e7f241c52803df48ae13562ad849117b8ac8321653be6aa9ded433ffedb59549c077e1cee70acd916133cc0eb3f6a0f86a37443500f10725d29723187867a1b80569da485791853243d3084f729ccd6cca04dba9309579920ffda2a714fb5eca41f5f4a73dd853276cf8fc7dc9ba53b209a4bad09c34b61c8aac43b3b68baaed29af8303a90b253e5dfdfd30fa28e63315b87372fc6d8a95a10b81bf095b42bc8fb66db71e181657b382822f2e7a2c408ed0914fd96018e8463ec4a38142e2910c95e4d62cef80b44fe112110a0b283755300f48ca82ee8b43d0cf4368be092dcc447c08f4ff9bb5c5d134c8df59c669928c5fa26d0afb0ea842b18d2a994e5c00039ea9db66ad0f843febb0e18d7d65df8fb73b8a429cde9f7aa41abdac5b08029ec582b9d0165b5ac5e9418e4a93c492681ea9c19bdf48f0c460dabb45dda0f6a5cda4f3470beeae5b95c21ea90e1d04e8d1e876d83ea67807a22b46b79d6ac800ed9ca620015c3749ddd0b87f557ea0386966b9de33e84705abcb034cbf5753c3d6ed6ef4dbb47b824756c518db9cd1fec48a439df390b8765f5af8065069b5ec990c0c7417f5f72682acb62dc55f56894e567d2202cca38a49b220ec7e4fafa0f0247bc5707130d9890bb501433ae28364427dea0fdf6ec15a8e335b7e8a7cbc3b45afbb05e292fd52d064b9995f03e2a2eb1b2517ec1847addefdff8ac328a1a9227dcdfd2a297365005fe2caa5a066a2705ec6c9501a1dde3e1ae09f7f851f599660ae577d7b4b654d17d4f6f95d63f6b3e3cd73077dc1cd87a9cff1767a2335938d9e1a184789cc126e2ecf391bd253d71ac1e83f6a6480408e86f9f61f56ae09ec5620ecb9ce228a7458232822fa17415b00d9e0307b39bb964dc925f691f75071877f952c03145fc1a445298e9808e7ee761aae4b9e9abfce66c0d0f6bc371c1bc8c03763c0c5d1f7c5632a6e9185d991861627f3a9cda7a804e817455b307c2ec0497fb59008136c849e87f46a819c6931e1fb1d749d3f876fee6cda65870d4da3286dcd5bf244b7299e9432f03f37b33a40b6fe24ac5c2bb776190561a9c103217ccb6eaa76cc491a3009a3c9e1829296b64358ee26e6433273d73b954ccf5fdf7b09313c2ed8394327e4bf845824294f39ab4e4a8ecdfb10f2b33dd97cfbb38f8348e8a29aace1602993f2d9c5a29e88acc25af906e6abac7acf3caa7c3f3dc7d17c6f461571ce0becc985c682384c8924b0675de8e026cf6035b6f88cd111615c24a619bcc8062a025b8e154bc8ec50c070698cdddfa5af453bcf4c4cfc3eea54c909d150b968cc83d5b9d894adf45a7f384f05ec0c8985203b2b5c2e2bf992d25d61d17a7616fd83984faeb1fa5a62a88075516b0b602bdbe24bdb47e08144e65d7d64db525852fcc05baeffcaab4133d0d42cb6ea4b17834470dbfc3bbbdb2047dd80c16289f106cca253b826e315fe2045b85c97b8c769efba93fe6d580307e71cd1f9dbf7867d665aafd7caa95faee9da8bba5233b7cd9490eaca07df2f31dc98911af387946006a5e0b48810cb6bab908681989c6c335235abfc43609ba2c645bff956c976522b35df1acb05f717eb8a3d7430625d7b71e8df6cf2d6a3f6affbccaaf0c52dc8bd99adbc60ae9468d9f663a1568807908c7eb3a8d967066907fa259f4c0e74d8510e231357ce2729bf3d9a21ef4052c2932c67e281041537290671906064acad532542ad893cc37312c8ab9d10c3d0237a3a470f3381c9f7c49399b13cafa5456a8a44b326569be331fc1824a9c91933f38c92cb1b936b88a7a199feaeafbe31e1d606a58db1c1f323e19b28797762084c17e2dfe6f73c85a3b05ddbc92c575f6e4a3c30579f4a0e256baa11713be5f357dbd1bd256dc1cd7c45dcc0617bc24c0084d0228d322fd62ff134fd46aafdbd75684fa1b7b99d86ca460752dab2dc75d71c272e9eda16defba46ca63c894d5d9db082ae7aaa71004917a915bd838a422af641038642104f44ea7a8aa601b7d0f69716a96fe021ed518c810082c6b1ab93563466475203d8c3f0f11c4af88944150b8a62412f9f9388f5530befeb2d1c4869bea03f0a28d5ae86ef51b73fc4d2644bb213ceea98f8292c8563a33ad63ba18f760feb84424a6151717956dbf4e114b6c740f210ab64ed135cc18d764cfefddc1140bf7602a3c7bd9d967833dfe96d4e04329f20941f64f56c014f76fafa47fad9ed2a49afbd0b052b593bf508399b39821cb19c85978b8a470c69d438b65ef6dbac5866a1a29198fcc71b790f16ccdc810bde586267a3a0b2a77737b1ba6fc9207694cda7bddc8292af0b921ccc307b1a8476a1d20dfbdd9e48adb306a3a83d884d57da595adac4d20b5965512ee315c048d2a573ecd7e6057e023a61ce86e74baeba3b4bcd8dd80e19acfefa13d13f5277c6d2f4ca1e73fa47e5c14aa479f426556848378b1dc669836e4d66af0527c6a186d300d8c16b31e016d4f8827c120812b2535362fe8ccdebfbaadb52aa65385f66f1fd5a3486f0cd77cba455ff47ca2f0f193a6a9287354c01d038e01b55bea244d4bd3baa394dfe0b24e1331eafeb8d6f62a3a6e800927cc51f9a75348f0a0d6ef441745094b65808e14a62c3effcb8635d8fb79393bee0c583182c32e1c1e73fc3ef49443b97ab76c9bae0ecd3821ecda05b86593ed93c1ee93ffdc25299176dc1435b7e2a5e6bcb52e17b066cab7213c0a00769a5ef1f8483a65e8f89fabdbb2997c590b79533872bb151b3b3484d8af27ba3de1ce34c190ff7d736c689035857c21613953ad8cc8964d13ff86df151edb1e07e8b2a26d1331ed8650c9290ffd94880a2c6ec2716f89f9195462b4ce3972245c34be5d7e1deb5ff1982bb7802e440a4ff7f9d40a2bd466eb8eecb7fa17acab15b25a34bb5f10fc95179aa1b5e9eacb35fe58325373efc7149da05edbc7daa5bc2999af52dc007558ec0b3aa78085accd37d6435b79b4b3bf4aa9ef591b13ea2c5d20e0d23fdc25f199b20eec91ec27cdaf0653c57128205f85432716d4267b6f6d1d21fef46b3183ef116213f51cfb08bb54018a309e377f8ac4fc3510d8e4e5099839a50d39c8cb498896d0ea9682b91a0b258f3bd49f5555b2653145ccc296e9d7eb0bc86327e3e34cf2695ed6a2f5490b46a73caba67a0574d2dd10005aea8b634367ae945a55c4a8ce49333ebbdbe1cd3d7e9d7e6c715fd59ea6b4934234574d2358c681772b7659efde26773fa3bd8b9f812539d3cd6652175a35ea1de8cfd994a4facc127ae1b669252a634e935457d890d00a589bd77df02538619ca89c978f162adddf199007b8cc0bd566bb6f479b1da1642836786e3660ddb6b595991596fe082fdf5913d0a05e78f1b7339c69f85d8d853b196e3ba2ff7f37954f4003c671c8ff29d6ba6f677561a7e11f034dfdd34c089c1b82a8e7583e308b7b11e3215383d7f1806f2a9bec7a271eee306f18c7b9b46506ca140fcba9e50fbcf408177ec0bd97ce71742661703961064f638e57a67772f51b0438cc6e173c36e2dccc343b3c88cba497ebaef245b73c8f7120f996c645c1207bca0a5433b4563ad3c585b9036664100ab0513f31ed4daeab859514db9cb25ffb319f06e0b42171f14c2f80a3ad4036f7889cd6564c563b7d665c3b48e01200c0cb8701486b3745f7c5ebc2bd90a965018deebac06bc8165e08fe9f23f7337b45d5f13e30319b7accc6b9090056c1622fee64a5e806ad8f6e20c1d36f1a6d46cacab70b2306698ed025576e891a53b40ff08cea4b6d94a872573a608f13c676194a2f4f06640bb9b39fd9d3c1608827bd5067deeafdc252553e9b0836973c295f83b60065547b0f114158a3dfa5feb8d801a1b7d0b2bfc248cd88a6e11d1c11988afa88eba9cf23706183c2d8fb62067d182ee96a20f88ae466fdd272bc128fa1cdfb87d72bc1d5c9162e325e918f49b64cb4a0d6eccf61606200595958bb17753bf61d02c7d62499b64ef93cbf7ffe51648f76a8d6fe2db79989db261eb3b408d4999c3040d7ba7fe415f1959ea4bbce09fec6bc244c04827562692e2eef7e03a74281fcf5c3163ab7cf80174f6e8c6b24fb697dd3ef26194debf3dccdbd14798a234fc2d0d58623121b8ee5e9fb23aff0f41b5ab65ac16660f562c625f2d1a43529ed86f3092c3889811840a9a4ce2ee55504b6c1d35254d1413efcf8d8f65e1d2d1e938097d8e85347cae790aa0cc9bdfca7b798f0e4076ecfdddff8143a5bd780d84d1ff3c389b99587d0b7d88b790deba26a0bad1c2044ae8b5ef47d0aeed6565f74e531dbac37e9d5c3f32c3d2b8e4723a5c55b30ed90d0e298655ba45982f69ab092e1d778de22bef127c92f3ed7ab307f08173ab3f15dc56c31db84371ed3a7b3deb9daf9ecd4c563f2c24a9fb7c7de546dd048da787bdb3756be2085d85d327b125f1fc9082e65d0933ff92f54e7736f49a36e9bd0cbab1ccaaf69be0b2adc1d9f45e07349ce8fa01d03b49c15617a9b180c53ed804d636ef8e9bcef37f23d8691fc51865223b2f2708af45e92efe9594f0a68353629a4107424e9a420238636513ca0180eda4295bd5a08e5c3c31524400f05f8aa26b6e555d775d681c91fae2126c00a5edc59f833ac242be7c1cc45e2c8661ac31a259b972ef1d6a95df10775c460bcfa1870ece71b3a5a56b5415c3738871a473f206cff1c8bc1e18eac7721d56c724634af88971e34a5fa3ac64d6f552aa5018503dc0d3962b9395f97d94f2c889c36b436c0ce38599d66073dc7ab699d40f7be4782768264179b3e9e0a1642995f08abda6dc6a0756d3979341f4a73c082ca6287bd8babb4352672ea3b466e3d25eac9086a9cc900ce4d81d3b21bccfd7afd24f5ad53d10c8935b292ba72d28b380272e30113b3b8c5edfeae62d3957fc7e9bc51e1e1ef8d9ca014ebdf1d65442004b741f47e018f0d9f89a15a257755ee0401b71052d1d392081386e6fac7321813380c9fe1798766cb9c23d508e38d21ffc0a37eeb04515955d548bf4f0e00f09bdb5ace3f655cd72cad13b3dac81832fe381468c4de7a58887548c2f30f20da611226b1170be649bd8946456806dcdb422414a89cd1790c26d387e64032dee33b8955bbb499b370a5dbc9a2866b4ccc4ac2132a3ed9262ff4c57c23f88715d42acc823aaeb3adf2", @generic="646547302a2fea433fc96af9f863d429c70022ec9ea48953af87bbe98be156f2f35380212e83af36394621001fa2f434b26cf6c6e94ec287e76f9d71c3511407ff8bbbad04b3dea939c0343891231f79c1c1f35f87f54f8ce521db1fe283148435838b0114ecafd30ba3e7bf9a387ca7419f06eb9fbc93a2d414076ee9f382ae9ef34eb5b36677a604899d68be580823b5d25a69e044b2b31308df62e4493f2f98c9b843371a40ebcef329097dfbb2e464f07be1260c40ced1c2cdc33d1b9d9989d1f907cb0017f77c888de26712dc38686c29103bb79b1d4755c0fd61cef21969aea74c", @generic="24ede9a66f5ccd97e23f66e72846e5baaefa4678337ce43622b35c7fa15d144b39825739748f810b370639d2b9775fde72da5efd0ff4322a21981c2ac8ed24a86561e9e97422eb7830411fdb1c58e3b97004719fbe6727e0bbe01c0937bea89644", @nested={0x4, 0x140}, @nested={0x4, 0xd}, @nested={0x4}]}]}, 0x1384}, {&(0x7f0000000540)={0x114, 0x36, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@generic="717f86b8254a79bab8426356bd076af74a5121529c96949502967b03f8351e4cfd", @nested={0xa2, 0x70, 0x0, 0x1, [@nested={0x4, 0x17}, @generic="5fcc50a184945104121b030db7d9f50ff3ad0436b2404bfa4a0ffc5a19094ca61a523616b26978af97e77d582f6452467d9b0ae04abd077f19267ff92373d8c0d0bbf12df816c37d5a026f3bfc508e3d823218c8509f0c15adfb9c73860facd80a35c7b91062cafb0e04767a6319fa9c591afeb51bb6ad6ca8671bf6e3afdd98cfb32ca303b46732de618a2bd0f3b116c613cce75384", @nested={0x4, 0xf3}]}, @generic="e722201ab23d2d94d37962f19b4761a34ac5ef359b142e6092d5c3580251bf9bb9d486cfab4b99b09317e4e2b8a385c8dd1f833997cf843aeef0d3877637c9"]}, 0x114}, {&(0x7f00000007c0)={0x3d8, 0x26, 0x400, 0x70bd26, 0x25dfdbfd, "", [@generic="c7e52679ca9865281180534fff4078e2", @typed={0x4, 0xa0}, @nested={0x17d, 0xe5, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x27}, @generic="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", @typed={0x4, 0x110}, @nested={0x4, 0x2d}, @generic="d141ac93d11ea9ccc1917cb6132c4dbfb0c20782eafc70eeda4a9b6ea1ff1a6595ffb9933e050307fc9efc01b8fc3287453dc9eaf8cd06e1e1651add8f0bff2ea9143c65af58be106fa3faa3041a8721ae237b041e1f901a40ca973878b486bf273199b3d7629a02"]}, @generic, @nested={0x229, 0x119, 0x0, 0x1, [@generic="0e83521c5a36e3fa194b5cf2ce255b263b3c41772794f918329e95aa1200f5e320cf7b8601c2421486ed730216cf0a91d451bf8514e771c5103f609e8c3cf12cbfd0605bf4726b53566a9b6dc05e55fed27aa255ac474653ba566229c21c4e09e0afd4a9a0a20bb6913164c9ff03518aabacbefb9774342687c4352b79f30708e966c94899821e967ffdf4b84dce56030f869c78f67a12b8", @nested={0x4, 0xb5}, @generic="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", @generic="5b449593bded71f6f0ed1dea3a08ca43429d8b106990e73d884ae0655a2a618457855f521b21cdaeea6eb879b477c91deec1a81fcf367305b1a17998cb7153f7a892c1c4ccb41029a1bde27f4241286203e40dde21aee521bbd96e75adefeaaf21e0073008b0050f1af309d908d23d374183e6dcd55264cf1c007936ac9da4a8f545c3bf", @nested={0x4, 0x4d}, @nested={0x4, 0x9e}]}, @typed={0x8, 0xae, 0x0, 0x0, @pid=r3}]}, 0x3d8}, {&(0x7f0000000c40)={0x264, 0x31, 0x8, 0x70bd27, 0x25dfdbff, "", [@typed={0x4, 0x122}, @nested={0x8, 0xd9, 0x0, 0x1, [@nested={0x4, 0x4e}]}, @generic="eaa3a296022368fc5704b2244a5e62d9fadac23c3a95d239346a72e3de67ba30a67c312b0bc2086d9f7176f6c590704f63593f594fce7563dd4652ee896ba1abccbf4104d3553cdc258033366ce124da13055c5458bf89c9b7f3c5d2d82980aeefe5efa60c1b281f49070935f021bf4240895f4a926158e65d53de64fb77785cfc4d81921d2039c66ea94064823e283d8c1ce53027bd4864d6fc42268b3a9b628c846aac30243ac887a0058df22de4006a0be0d475bfe1cdf3c3aa207d6494c9c3119ef45911549775b68db92a7ced7481f3c0bf04aa13ed0dcd598c8aee2a59cbfdc8011180b40a8dc0fe6b8d2881", @typed={0x8, 0xa4, 0x0, 0x0, @pid=r3}, @typed={0x4, 0x11a}, @generic="b080b8b1088ab7307228d2394812fbdae2f345eb9ae15328744cebb1a4f2722a630d015e26d78aa0ebada363351944a91dfed2ce7260fc939c094f3779ba5a3d846d255f6f41ba9bf50c7e24b58aaa4d93f31316fdec1a8e32779b051600fc12a42fc1c2d4fdee9f2e23a65f7bbb7279199b44ff82eb8606b65f9b1b4d778fff26d60ae6677c9b11e50d4abdb255d8835269db21d5eaa0afe247f9a7fcf9e01d445a3bf3b0283aa03f2787e831f86f1822f0bf179a0e686016732fa1743b9472108aeb41c1e2db6f8459780e265ac3", @generic="35373afd7c20c3e7afe0b0ff134909ec88571c76bf80191dae8a38ccc5c592b1f24188765f4b4ef35ef67742d20db9bb906007dc7aff926da740cb9eaaa16acaad67368c02de6037f1a8adc07aaad041daa18eed274501250458033455321432cffd4323511c8689ce7568c0ef2d9ceb02b35c56770160e6296126635d"]}, 0x264}, {&(0x7f0000000ec0)={0x42c, 0x40, 0x800, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x73, 0x5c, 0x0, 0x1, [@generic="6595f4b416aedf15b1d26869b9625f31d9f540cb3dc71a36d004fa2b47c38cfdcf4752ee6e97c65b35d7aa2965eb8dde6681bb707955ebded0c451756313f93044d63048472a7182ce63b45218fdf76247c512eaa8fd718915042eab2508308c1cd30798a14cb276a9a9493a7d9b10"]}, @typed={0x8, 0x12b, 0x0, 0x0, @ipv4=@remote}, @generic="0d0b4b938aa3d8a69a0870d40e7c39096ccc57f2c03b53710213cce5f87d9207b8bde995b54c916a616f74c05544595c6aeb251c0178be42abe1c28fab1cae26b18e4d85e244866111ce360400d9c145463899423e15dd87db5c6d16bd8cf87086707372d519320e7e8c389a1713f7b8959279b3f3f98a4760cfba24c6a35acbd95dc18348a8e7e13b3f0f18a0b9145a123957e92ff38932b0a536dc195ff2cee3457744f72257ba3e29599b897d28f2dbc576a3f84214ee28eac12651051b10dd1cc0877a", @nested={0x1c, 0x44, 0x0, 0x1, [@nested={0x4, 0x63}, @nested={0x4, 0xf2}, @nested={0x4, 0xb0}, @typed={0x5, 0x27, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x120}]}, @typed={0x8, 0x111, 0x0, 0x0, @pid=r3}, @generic="9c6dcc2e54ad64fced548ec8d3ec176030cc0fef79c5b3e896a7aebdd2641c431acbd61c15c2c82f3339de056b9cc74360188552a80a19120410bf7a5f250f39a42f1184112296436cbd75f3388b8bdd2eb13e107fba9dd82bf46f261af158ef873a26746ea35a883b714811eee95bf0deb6c5b89edafc130b3d", @generic="e0aec0aa1f21251eb3599332906053b40da69ea7551f2c41cfb7b461ceeae83246a774535db09ebdb2d01157a9938d21bd72f643f8803c33f14f43bdd0672e531b933ea3184ebd04d3601734355ef458729ef452555e75aa1857d89e9f7288c4188c5d11525a0d733bea569d47a2419778b94c0a23f31e1a4e9442bb1c9f1a8734dc1eee0fc81fafe9721d0245bea16268446a3eb76ab292a7135dbe54f0bf1ff8d218c166226ffd221443bfb791aa6b65650d14a092b80240f659831c30aad38ff4a3292b4ea42182d81f3bb46991db9197ef4dd88225aa1051b5f2863f4348c6c3678a", @typed={0x8, 0xc1, 0x0, 0x0, @fd}, @nested={0x150, 0x74, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0xb}, @generic="8cc9171f2b01e7c3287f7cb7da649eb87a6acfc85987807babf99a6edda4116e77d696b5b2756cebe240bb9f2bd9bb7c430af0fcd22b7a67ab05c2312d4afe633baf7a7627034239d0b69616aa109d9f03b3e055c6924e4e3bbb85a0254083f835613c5cb857805e58ff339e08a7f3a42d98f644537b069716f8dfbad9ab31c663bd", @generic=']', @nested={0x4, 0xe5}, @generic="00ffc61adde443c93df72e34f568327c7f809499ea6284aa306f696be93102e2b4c7731d3fc60b809de525e5fe418dbb961804e62e485ec543fa3d7e13fe9f1a89df9e9f7414d6b2e05055d2b3b3fca91c189dba770febbf5161fae0827429d088018758fb02c4b641145912f0db09899d510b72c0038fa8fef81eeb683f01bd4fabb7df1575668ffc72773dc9ade990eab9b17707b6d26d0811372c4ce0bfe7849f0d654ba1a8f95a7927ecc6b99545e2d26d0f5a", @nested={0x4, 0x63}]}]}, 0x42c}], 0x8, &(0x7f0000002900)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r2, r4, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r2, r5, 0xffffffffffffffff]}}], 0xc8, 0x51}, 0x8804) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x6) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$media(0x0, 0x25cc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) read$sequencer(r6, &(0x7f0000000780)=""/35, 0x23) 9.808119409s ago: executing program 3 (id=655): r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x8402, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x300) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$igmp6(0xa, 0x3, 0x2) io_uring_setup(0x1d44, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x0, 0x3bd}) socket$rxrpc(0x21, 0x2, 0xa) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r7, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) tee(r6, r9, 0xfffffffffffffc01, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 9.025683406s ago: executing program 1 (id=657): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYBLOB='\x00'/10, @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f0000000180)='./cgroup/../file0\x00', 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f00000000c0)={0x13, 0x3, 0x1}) write$FUSE_INIT(r3, &(0x7f0000000580)={0x50, 0x0, r4, {0x7, 0x28, 0xffff, 0x200800, 0xff, 0x0, 0x1e0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000006680)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x1, 0x9c52, 0x0, 0x7ff, 0x0, {0x2, 0x80000a418, 0x3, 0x6, 0x800000000003, 0x100000000000008, 0x80000000, 0x4, 0x6, 0x8000, 0x80000000, r5, r6, 0x0, 0x4c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r7, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) 8.992687755s ago: executing program 5 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) lseek(0xffffffffffffffff, 0x10001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0xa, 0x3, 0x3a) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0xfffffffd, @mcast2}, 0x1, {[0x0, 0x100, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0xffffffff]}}, 0x5c) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}}, 0x0) 7.298822388s ago: executing program 1 (id=660): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='xen_cpu_load_idt\x00', r0}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0x0, 0x0}, 0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000440)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x1000}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESHEX, @ANYBLOB="438f"], 0x48) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = io_uring_setup(0x45a6, &(0x7f0000000500)={0x0, 0x0, 0x1, 0xffffffff, 0x228}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r7 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000000)={r7, 0x0, r7}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) fstatfs(r6, &(0x7f0000000140)=""/166) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x20) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x176e02, 0x0) dup(r8) 7.294057914s ago: executing program 5 (id=661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x20002) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48054}, 0x810) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x9, 0x4) r3 = open(&(0x7f0000000980)='./bus\x00', 0x30000, 0x1b0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './bus\x00'}) sendto$inet_nvme_icreq_pdu(r4, &(0x7f0000000240)={{0x0, 0x2, 0x80, 0xc5}, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYBLOB="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"], 0x9) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='bdev\x00', 0x1a0c000, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000706010800000000000000000000000005000100060000"], 0x1c}}, 0x0) 5.835244308s ago: executing program 3 (id=663): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) syz_open_dev$sg(0x0, 0x7fffffff, 0x200500) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x48, 0x8, 0xfe, 0x8}, {0x6, 0x0, 0x0, 0x8eb6}]}) write$ppp(r0, &(0x7f0000000a00)="63bacc43", 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12010066d5067f102505a8a44000010203010902"], &(0x7f0000000540)={0x0, 0x0, 0x19, &(0x7f0000000080)=ANY=[@ANYBLOB="050f19006b14"]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000080000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000010180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 5.510124001s ago: executing program 2 (id=664): r0 = fsmount(0xffffffffffffffff, 0x1, 0x72) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) io_uring_setup(0x4c22, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/resume_offset', 0x149a82, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r4, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 4.599477399s ago: executing program 2 (id=665): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xd9, 0x101000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x80879) 4.443688752s ago: executing program 2 (id=666): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="000000344613b71e4e0857a872ca8feaed00", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fddbdf25010000000000000009410000004c00180000944175647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$usbfs(0x0, 0x74, 0x101301) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000001c0)={0x0, 'veth1_vlan\x00', {}, 0x200}) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10) renameat2(r5, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, &(0x7f0000000100)=0x1) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) 4.374648873s ago: executing program 5 (id=667): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x0, 0xc00000000000000}, 0x10) 3.557773259s ago: executing program 1 (id=668): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf36}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) sendto$inet(r0, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1a0, &(0x7f0000000340)={[{0x9b, 0x4e00, "9824fa6c5ef8380cc7d19d495f72bfd7faac72cab0c3d3e139e6d38bb4d4bfd519afd34efad2043d5e08c1b092b47e9d6549a821dec5a008a9610176045a3537cd7230ce7b837e0569d8f3e88f3886ee18a190faa155e66d3944b27b74e352ba3de06d63d9c6728e7dd51e78233e8d13b437f6f14df0bf6f50fa64b6f40e2858c6c906c10a9718aba28e1136d90eb7339ce30c2d55993967fa2897"}, {0x5a, 0x4e00, "ee86260c1df58f568f13db26f361a2a93427ca817d7086f5de501d1b119fa1314b6423e257cf3c9d79f65aaed2f57daf239921d86540e6b4efd8bdabf29686aed28c73cef4fd1b0e9e9803ce97146af365a370685fc3c0fc33f8"}, {0x9a, 0x4e00, "953d3d11a78054dd9be18a28542d9db9b07cc26d73a0c02ea3aa91f0bb1dc204dcf1b945ec14a5e43194d758c5db3d2f7cc95d5897288c96ddea189943c3399bacecdde4e0d3a77080ebe1c7d36310fbad9455884227f93787294d5599b8eb516be835f6f8e404ecc05564b3033906b18c97cab1b023f0f6039df3a9433864597746a7a18905e286074b9c663fc2d70bfd3eb7a241fc0dd39566"}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') 3.515540447s ago: executing program 5 (id=669): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x11, &(0x7f0000002f40), 0x14) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}, @exit], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 3.422756614s ago: executing program 2 (id=670): fsopen(&(0x7f0000000200)='omfs\x00', 0x0) 2.953502818s ago: executing program 2 (id=671): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = syz_io_uring_setup(0x1eeb, &(0x7f0000001f00)={0x0, 0xcd1d, 0x10100, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={0x0}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) (async) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000001d80)=0x87) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001d00)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000040)="7731ed550f21610557515107361cec35fe881e73d86f17274495feeaac211cfc10f80a1f64d01bd3d18c5ece", 0x2c}, {&(0x7f0000000480)="ef34a6a5f5f769e59757ebd4ae1e9caaf87af9eff8f1cbaf4332c84c9c74a7f3776c8fb6054de1e5b5d6a3a8f5fba0b408c2f214e94fb7357f635842dfafd2d3f994a59eb039ce02cd7ea9fba70f38009e0985c713ae0fe793ef11a86bbb04a3fe05be52508592bc4fd5514d0484707cd4e044874061794e2c4ddcc499d258a26b969723465c5e8897a790d55dcff908a77b0ef13a80c120130137e954d2d126db619ddfa009", 0xa6}, {&(0x7f0000000540)="17de33f795de1d248e7458e7f91797e1a3e3c5fc80a815832c01d1d62af8892510a989e462f56fea625bca5f489bdc62b8914b7055dfed288c493ce65429b22017d4d2fd9dfec530c8bea1fca2fa9e2e445233d28d9135411230f95a7d009dc7f6ad26c6bd4ac159", 0x68}, {&(0x7f00000005c0)="df88b35f46eed64dd72edebb1b0dc35b0a46138f35ddd0e4a239f8c4d02fa35fac4d7b3c424b307b1efda5f9d8eb36dad4d8571b77e3fb3297817c7f45ee4b7566ad87ff1aadfc9910632da4a9dc5880174cd1023951f4fdca13936a5697d0d762ea", 0x62}], 0x4, &(0x7f0000001e80)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x40}}, {{&(0x7f0000000680)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000000700)="6e349cee498b0d95f7066935e8e713181ce53f71b8e8db09413c438306f7ac4842d6dab04826c7df8072c2ce1424a41a74d975985ba1a0d137eadfc8f9021bf2a623b8e0ec3ac344eb1df85da2df02c63bf674807b81ee71f9996b6d1baa271d0329040f9f53bb22b131ddaf42572581710158333ede6a594f40ec670f759d9090e75af101cb8e5dcfb2b8d0b7594a03a05b87dcc031731b8727c2044db096963b75f35d7561dee8100d847985e5e09b30cc5fbd1596c9acf71a9acf1b92fa5570c5fe7240845da9213fe99c2775c437ec8f7e47b62df7615f1824770f3aa728", 0xe0}, {&(0x7f0000000800)="45458edf5257e206ffe969e25cd7863fde29a70d05385deae2a5f10551166743e7daff3a8f72c07a72164051e5115925fe544e9160aaa6ca4819dea68d552f17be8a7497fd129db52c688578e05c309a3185291a9d0fade4c70a41a876d05451fe43bcaf2496dadf170d80b22c6a8128c1e2e8f7ede3e8a57fb76a9629f3b8ce89f7baedc5c8f4fb505b03e55cd0b09dedc4d85e23ef15380d09f12ca981813cdd7c3c884942eea7cb", 0xa9}, {&(0x7f00000008c0)="d2d6e4cf8be32f39058c93fb963c5cac8fd66a42bee973ad47d3d7737405f6897eb7bc0a0a324744e56d21f650f8e2785c84f86b199b2f21670e241da11ee2463a80e995dac5b227d9b385bf0dd98178da144837e64fa5451f7145a2d71fe20738639f0979eacd5d73044ff12b42301a33736af8a26cc41a19ba29fccfcb3210f87ca3a2689d7351919ededa65828d46cf49940858fd6710a1946a2f7e28b2e6e0fc56a27d97688b15da3f612fd31d0026c10f8d971516438acc41303f3440f2db", 0xc1}, {&(0x7f00000009c0)="c7afbb48f94790b67022fb6120600770724cf07eeff34c1d8d66cb82b30f332a8772d2c32f020c780148074c2833aa60e6138bb8de95b1e44c31ae0ca083f61a977e1d0ec03422b7a1ce044367f68ec4bbc5a774252285f19e763e22e7864aebbe3fd7e4a7e13f448f1e2c138ca7bbcca95eed6af6174bd038a81d63e95edc2caaf8068971a8fb8b2c17bb72d721dbda97a65310f68b6b567766238419369c24f818c3c0cd46334af088b57942ae56fc7fdac9b56d", 0xb5}, {&(0x7f0000000a80)="771022cb4affd3270e383671123455f91861c68880bd7a15e3ecfb1c73d1877b01da46c4325ec8dcbf85f4c86fbab8e13eb9cfda51e7a59be70c76bae3f8e13e4a98b579d8ac00edb63f231c7be8b624d631399109437f3390c6e94bbbb9c202ccb073e1737a8606c4c1de502895be94376c0c58d7e326f1b4fb09d0d6ccb738e087c0e8a959cddce60f2e29c78b7a79ee8ed924ddf5d5f45d542d42a49b1439c5218030aee91f50a7a4bc95570dc804a8080d68159f54d4e2782d9cad9cdd8f9f930489e43c45a9", 0xc8}, {&(0x7f0000000b80)="115a0c4f58da2ad5c6e46b9abaa9e78150cb6050c6747dd88e49bbf166bec6e0599c8a860292d313b35b84795a0e6bc60a94a4baa74fe6113331ffb9612fc71faf238f77dac159887f4f436aecc33e5a9e803752f717faa80008695255db9513d4cff9909554825321d97b96af2c64cb133ab55d8f0121c0083df0f11f86b469e9bf32ea0c817bb2e8ed42a4a35a7b593dd6a5e586ef0841320dace6e7d003187be9999327855af6432a0783de032cd180e593c53dbce952ed542e85", 0xbc}, {&(0x7f0000000c40)="861eab152ee60cfd87e6a9b8e665f2fc52b9f508bcb9ad2f81b56028ab", 0x1d}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="a40014ab465888fd07f729dd900d44c271086f4be173e709af480bda753dbf38a997404be67d531b87564980d27d7e050c017f5306ad101c6f16dda490962c77092d062cfa891912610b5f7fb5c16f115190f255750b496d2072c1be7cb2184fd8ed520e6e05819c0dfbb66761322247426b50e967bdd3a6980394b50384cc67", 0x80}, {&(0x7f0000000640)="4e3f346b23206e425f60a4a84ec35f927ed4f32e4025", 0x16}], 0xa, &(0x7f0000001f80)=ANY=[], 0x50, 0x20040844}}], 0x2, 0x4) (async) sendmmsg$unix(r2, &(0x7f0000001d00)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000040)="7731ed550f21610557515107361cec35fe881e73d86f17274495feeaac211cfc10f80a1f64d01bd3d18c5ece", 0x2c}, {&(0x7f0000000480)="ef34a6a5f5f769e59757ebd4ae1e9caaf87af9eff8f1cbaf4332c84c9c74a7f3776c8fb6054de1e5b5d6a3a8f5fba0b408c2f214e94fb7357f635842dfafd2d3f994a59eb039ce02cd7ea9fba70f38009e0985c713ae0fe793ef11a86bbb04a3fe05be52508592bc4fd5514d0484707cd4e044874061794e2c4ddcc499d258a26b969723465c5e8897a790d55dcff908a77b0ef13a80c120130137e954d2d126db619ddfa009", 0xa6}, {&(0x7f0000000540)="17de33f795de1d248e7458e7f91797e1a3e3c5fc80a815832c01d1d62af8892510a989e462f56fea625bca5f489bdc62b8914b7055dfed288c493ce65429b22017d4d2fd9dfec530c8bea1fca2fa9e2e445233d28d9135411230f95a7d009dc7f6ad26c6bd4ac159", 0x68}, {&(0x7f00000005c0)="df88b35f46eed64dd72edebb1b0dc35b0a46138f35ddd0e4a239f8c4d02fa35fac4d7b3c424b307b1efda5f9d8eb36dad4d8571b77e3fb3297817c7f45ee4b7566ad87ff1aadfc9910632da4a9dc5880174cd1023951f4fdca13936a5697d0d762ea", 0x62}], 0x4, &(0x7f0000001e80)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x40}}, {{&(0x7f0000000680)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000000700)="6e349cee498b0d95f7066935e8e713181ce53f71b8e8db09413c438306f7ac4842d6dab04826c7df8072c2ce1424a41a74d975985ba1a0d137eadfc8f9021bf2a623b8e0ec3ac344eb1df85da2df02c63bf674807b81ee71f9996b6d1baa271d0329040f9f53bb22b131ddaf42572581710158333ede6a594f40ec670f759d9090e75af101cb8e5dcfb2b8d0b7594a03a05b87dcc031731b8727c2044db096963b75f35d7561dee8100d847985e5e09b30cc5fbd1596c9acf71a9acf1b92fa5570c5fe7240845da9213fe99c2775c437ec8f7e47b62df7615f1824770f3aa728", 0xe0}, {&(0x7f0000000800)="45458edf5257e206ffe969e25cd7863fde29a70d05385deae2a5f10551166743e7daff3a8f72c07a72164051e5115925fe544e9160aaa6ca4819dea68d552f17be8a7497fd129db52c688578e05c309a3185291a9d0fade4c70a41a876d05451fe43bcaf2496dadf170d80b22c6a8128c1e2e8f7ede3e8a57fb76a9629f3b8ce89f7baedc5c8f4fb505b03e55cd0b09dedc4d85e23ef15380d09f12ca981813cdd7c3c884942eea7cb", 0xa9}, {&(0x7f00000008c0)="d2d6e4cf8be32f39058c93fb963c5cac8fd66a42bee973ad47d3d7737405f6897eb7bc0a0a324744e56d21f650f8e2785c84f86b199b2f21670e241da11ee2463a80e995dac5b227d9b385bf0dd98178da144837e64fa5451f7145a2d71fe20738639f0979eacd5d73044ff12b42301a33736af8a26cc41a19ba29fccfcb3210f87ca3a2689d7351919ededa65828d46cf49940858fd6710a1946a2f7e28b2e6e0fc56a27d97688b15da3f612fd31d0026c10f8d971516438acc41303f3440f2db", 0xc1}, {&(0x7f00000009c0)="c7afbb48f94790b67022fb6120600770724cf07eeff34c1d8d66cb82b30f332a8772d2c32f020c780148074c2833aa60e6138bb8de95b1e44c31ae0ca083f61a977e1d0ec03422b7a1ce044367f68ec4bbc5a774252285f19e763e22e7864aebbe3fd7e4a7e13f448f1e2c138ca7bbcca95eed6af6174bd038a81d63e95edc2caaf8068971a8fb8b2c17bb72d721dbda97a65310f68b6b567766238419369c24f818c3c0cd46334af088b57942ae56fc7fdac9b56d", 0xb5}, {&(0x7f0000000a80)="771022cb4affd3270e383671123455f91861c68880bd7a15e3ecfb1c73d1877b01da46c4325ec8dcbf85f4c86fbab8e13eb9cfda51e7a59be70c76bae3f8e13e4a98b579d8ac00edb63f231c7be8b624d631399109437f3390c6e94bbbb9c202ccb073e1737a8606c4c1de502895be94376c0c58d7e326f1b4fb09d0d6ccb738e087c0e8a959cddce60f2e29c78b7a79ee8ed924ddf5d5f45d542d42a49b1439c5218030aee91f50a7a4bc95570dc804a8080d68159f54d4e2782d9cad9cdd8f9f930489e43c45a9", 0xc8}, {&(0x7f0000000b80)="115a0c4f58da2ad5c6e46b9abaa9e78150cb6050c6747dd88e49bbf166bec6e0599c8a860292d313b35b84795a0e6bc60a94a4baa74fe6113331ffb9612fc71faf238f77dac159887f4f436aecc33e5a9e803752f717faa80008695255db9513d4cff9909554825321d97b96af2c64cb133ab55d8f0121c0083df0f11f86b469e9bf32ea0c817bb2e8ed42a4a35a7b593dd6a5e586ef0841320dace6e7d003187be9999327855af6432a0783de032cd180e593c53dbce952ed542e85", 0xbc}, {&(0x7f0000000c40)="861eab152ee60cfd87e6a9b8e665f2fc52b9f508bcb9ad2f81b56028ab", 0x1d}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="a40014ab465888fd07f729dd900d44c271086f4be173e709af480bda753dbf38a997404be67d531b87564980d27d7e050c017f5306ad101c6f16dda490962c77092d062cfa891912610b5f7fb5c16f115190f255750b496d2072c1be7cb2184fd8ed520e6e05819c0dfbb66761322247426b50e967bdd3a6980394b50384cc67", 0x80}, {&(0x7f0000000640)="4e3f346b23206e425f60a4a84ec35f927ed4f32e4025", 0x16}], 0xa, &(0x7f0000001f80)=ANY=[], 0x50, 0x20040844}}], 0x2, 0x4) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) 2.24997679s ago: executing program 5 (id=672): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000040000000009030000000000"], 0x0, 0x26}, 0x28) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newtaction={0xb0, 0x30, 0x1, 0x0, 0x0, {}, [{0x9c, 0x1, [@m_gact={0x0, 0x11, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x0, 0x2, {0x8, 0x1, 0x7, 0x7, 0x8}}, @TCA_GACT_PARMS={0x0, 0x2, {0x200, 0x0, 0x8, 0xd343}}, @TCA_GACT_PARMS={0x0, 0x2, {0x4, 0x110, 0x3, 0xffff, 0x6}}, @TCA_GACT_PARMS={0x0, 0x2, {0x3, 0x9, 0xece31b7f3b23c5f0, 0xc9d, 0x6}}, @TCA_GACT_PARMS={0x0, 0x2, {0x13, 0x5, 0xffffffffffffffff, 0x4, 0x1000}}, @TCA_GACT_PROB={0x0, 0x3, {0x2, 0xfb}}, @TCA_GACT_PROB={0x0, 0x3, {0x1, 0x25b5, 0x3}}]}, {0x0, 0x6, "48145d4ac1db400c348e2615b46732fdc45107ba06ee78f5a1d5a9dc9db745fcec708eedec5f100d372c7058557bfd0776d2834f254503f9853c5f40ebd819f674464b2b1b6ede793bb4f185a4ea134f4a9adefb46a1a8d82c8ebb2cb77db8ca8b8785d7d18fb29658ea004cb32135ed51786be6be6436c67e7275d18a035b7107f9e5a5411423da3ea93b41056f4619f07f7ebb713851d3b42ffed01f6da6fea871dca84647d4d01a4d5ab4cd72370d75a4e317fba6eb59fd4b71f4cf3e5ceaa45fd1e616902e4804cc2d69c3d51c3dcd21e55fc3cefc935a99ef0d84"}, {}, {0x0, 0x8, {0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0xfffffffffffffd4a, 0x6, "6af581c68d5ebf2eeb"}, {0xc}, {0xc}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r5, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000140)={0x4, 0x0, 0x4}, &(0x7f0000000700)=[{}, {}, {}, {}]) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_io_uring_setup(0x4039, &(0x7f0000000580)={0x0, 0xda0, 0x13500, 0x3, 0x3}, &(0x7f0000000000), &(0x7f0000000300)) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) 2.240147887s ago: executing program 3 (id=673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_info_rsp={{0xb, 0x40, 0x4}, {0x80, 0x7ff}}]}}, 0x11) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000880)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xe3d08660d7cd4e04}) io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x408000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x28040010}, 0x820) 2.070864953s ago: executing program 1 (id=674): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x10000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000000c0)) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000080)=0x150) 1.483074448s ago: executing program 1 (id=675): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000867700000000000000000000180100002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000002000000b7f6ffff0300125cf1f3bd87a5e7000018010000786c6c2500000000002020207b1af8ff00000000add200000000000007010000f8ffffffb702000008000000b703000000000f00850000007b000000950000"], 0x0, 0xd, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x7, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000400)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x850}, 0x0) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x68, 0x0, &(0x7f00000005c0)=[@clear_death={0x400c630f, 0x1}, @decrefs={0x40046307, 0x3}, @free_buffer, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0xb, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) 1.278943902s ago: executing program 3 (id=676): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000000c0)={0x1, 0x1, [0xf74, 0x8bf, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f00002af000/0x2000)=nil, 0x2000, 0x15) r4 = dup(r2) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = syz_io_uring_setup(0xbea, &(0x7f0000000180)={0x0, 0x4d24, 0x8, 0x1, 0xf5, 0x0, r4}, 0x0, &(0x7f0000000300)) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f00000110c0)={0xaf5, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_setup(0x66a3, &(0x7f00000008c0)={0x0, 0x100f691, 0x200, 0x0, 0x2b5, 0x0, r6}, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) syz_io_uring_submit(0x0, r8, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x8, 0x0, r4, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r7}}) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 1.146158378s ago: executing program 2 (id=677): socket$netlink(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000003c0)={0x1f, 0xffffffffffffffff, 0x5}, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4050000000000007110b200000000000600000000000000950000000000000099b2c958e17222c54e17b242e3c6bacb4cc117ca"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfc63c0466c6171e2) r4 = socket(0x25, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$llc_int(r4, 0x10c, 0x3, 0x0, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, 0x0, &(0x7f00000000c0)) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x8a}, 0xfe1a) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$I2C_SLAVE(r8, 0x703, 0x26b) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r9, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 20.441777ms ago: executing program 5 (id=678): socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000004ec46e766c24dd8403c916a10d1ffeb70000000000000000000000950000000000000062a370c135fd35d2feb792080ad0e77c6dd5ab62"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_extract_tcp_res(0x0, 0x4, 0x48) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r5, 0x0, 0x0}, 0xffffffffffffffa6) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value, &(0x7f0000001100)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x5891) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000003060101000000007e625f4609ca6fd90500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) socket$packet(0x11, 0x2, 0x300) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f00000000c0)) 0s ago: executing program 0 (id=484): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8=r1], &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_fd={0x18, 0x9, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000640)='contention_end\x00', r5, 0x0, 0x2}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r6, r4, &(0x7f0000002700)=0x1, 0x8) syz_io_uring_setup(0x849, &(0x7f0000000340)={0x0, 0x5080, 0x800, 0x0, 0x2d3, 0x0, r6}, 0x0, &(0x7f0000000080)=0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r8 = dup(0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r7, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x4, r8, 0x0, 0x0, 0x0, 0x80800, 0x1}) kernel console output (not intermixed with test programs): uditd_printk_skb: 10 callbacks suppressed [ 179.544288][ T30] audit: type=1400 audit(1753903383.085:387): avc: denied { read write } for pid=7190 comm="syz.0.267" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 179.653362][ T7230] sctp: [Deprecated]: syz.5.274 (pid 7230) Use of int in max_burst socket option deprecated. [ 179.653362][ T7230] Use struct sctp_assoc_value instead [ 179.690354][ T5877] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 179.701159][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 180.159009][ T5951] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 180.172079][ T30] audit: type=1400 audit(1753903383.085:388): avc: denied { ioctl open } for pid=7190 comm="syz.0.267" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 180.197547][ T5951] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 180.339393][ T30] audit: type=1326 audit(1753903383.155:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.0.267" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8da38e9a9 code=0x0 [ 180.442330][ T30] audit: type=1400 audit(1753903383.185:390): avc: denied { read write } for pid=7223 comm="syz.2.272" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 180.480158][ T30] audit: type=1804 audit(1753903383.375:391): pid=7237 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.273" name="/newroot/47/file0" dev="tmpfs" ino=267 res=1 errno=0 [ 181.056652][ T7251] ipvlan2: entered promiscuous mode [ 181.408530][ T30] audit: type=1400 audit(1753903384.585:392): avc: denied { create } for pid=7243 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 181.437942][ T30] audit: type=1400 audit(1753903384.595:393): avc: denied { ioctl } for pid=7243 comm="syz.3.277" path="socket:[12936]" dev="sockfs" ino=12936 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 181.485118][ T30] audit: type=1400 audit(1753903384.645:394): avc: denied { bind } for pid=7243 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 181.579136][ T30] audit: type=1400 audit(1753903384.645:395): avc: denied { write } for pid=7243 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 181.636884][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 181.655293][ T5877] usb 1-1: USB disconnect, device number 4 [ 181.743266][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.275'. [ 181.755013][ T30] audit: type=1400 audit(1753903385.175:396): avc: denied { shutdown } for pid=7244 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.796063][ T5877] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 181.809697][ T7263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.278'. [ 181.818573][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 182.111867][ T7268] ubi31: attaching mtd0 [ 182.140403][ T5877] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 182.141929][ T7268] ubi31: scanning is finished [ 182.164975][ T7268] ubi31: empty MTD device detected [ 182.285890][ T5877] quatech2 1-1:0.51: device disconnected [ 182.610320][ T5877] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 182.842994][ T7268] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 182.859674][ T7268] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 182.866986][ T7268] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 182.892217][ T7268] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 182.926489][ T7268] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 183.099605][ T5877] usb 1-1: unable to get BOS descriptor or descriptor too short [ 183.100012][ T7268] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 183.302782][ T5877] usb 1-1: not running at top speed; connect to a high speed hub [ 183.332113][ T7268] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 324858191 [ 183.372688][ T5877] usb 1-1: config 6 has an invalid interface number: 7 but max is 0 [ 183.390979][ T5877] usb 1-1: config 6 has no interface number 0 [ 183.397082][ T5877] usb 1-1: config 6 interface 7 altsetting 5 endpoint 0xB has invalid maxpacket 43400, setting to 64 [ 183.497685][ T7268] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 183.710083][ T5818] Bluetooth: hci5: command 0x0405 tx timeout [ 183.750940][ T7278] ubi31: background thread "ubi_bgt31d" started, PID 7278 [ 184.046400][ T5884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 184.079596][ T5877] usb 1-1: config 6 interface 7 has no altsetting 0 [ 184.099539][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 184.123122][ T5877] usb 1-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=c9.92 [ 184.132321][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.153277][ T5877] usb 1-1: Product: syz [ 184.163370][ T5877] usb 1-1: Manufacturer: syz [ 184.167976][ T5877] usb 1-1: SerialNumber: syz [ 184.265814][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 184.285479][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 184.309442][ T24] usb 4-1: config 179 has no interface number 0 [ 184.361697][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 184.395932][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 184.431427][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 184.440404][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 184.455047][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 184.476109][ T5877] usb 1-1: Error in usbnet_get_endpoints (-22) [ 184.494776][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 184.525348][ T5877] usb 1-1: USB disconnect, device number 5 [ 184.544107][ T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 184.557808][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 184.567090][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.581236][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.288'. [ 184.638860][ T7295] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 184.874349][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input6 [ 185.080432][ T7290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.089024][ T7290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.302207][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 185.302221][ T30] audit: type=1400 audit(1753903388.865:400): avc: denied { read } for pid=7286 comm="syz.3.285" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 185.427612][ T7325] FAULT_INJECTION: forcing a failure. [ 185.427612][ T7325] name failslab, interval 1, probability 0, space 0, times 0 [ 185.435913][ T30] audit: type=1400 audit(1753903388.865:401): avc: denied { open } for pid=7286 comm="syz.3.285" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 185.499521][ T30] audit: type=1400 audit(1753903388.895:402): avc: denied { ioctl } for pid=7286 comm="syz.3.285" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 185.528721][ T118] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 185.537556][ T7325] CPU: 1 UID: 0 PID: 7325 Comm: syz.1.293 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 185.537574][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.537581][ T7325] Call Trace: [ 185.537584][ T7325] [ 185.537589][ T7325] dump_stack_lvl+0x16c/0x1f0 [ 185.537606][ T7325] should_fail_ex+0x512/0x640 [ 185.537622][ T7325] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 185.537634][ T7325] should_failslab+0xc2/0x120 [ 185.537646][ T7325] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 185.537657][ T7325] ? security_file_alloc+0x34/0x2b0 [ 185.537673][ T7325] security_file_alloc+0x34/0x2b0 [ 185.537685][ T7325] init_file+0x93/0x4c0 [ 185.537698][ T7325] alloc_empty_file+0x73/0x1e0 [ 185.537713][ T7325] alloc_file_pseudo+0x13a/0x230 [ 185.537727][ T7325] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 185.537742][ T7325] ? _raw_spin_unlock+0x28/0x50 [ 185.537752][ T7325] ? alloc_fd+0x471/0x7d0 [ 185.537764][ T7325] __anon_inode_getfile+0xe8/0x280 [ 185.537779][ T7325] anon_inode_getfd+0x52/0xb0 [ 185.537792][ T7325] __x64_sys_fsopen+0x18b/0x240 [ 185.537807][ T7325] do_syscall_64+0xcd/0x4c0 [ 185.537820][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.537831][ T7325] RIP: 0033:0x7f625ad8e9a9 [ 185.537840][ T7325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.537851][ T7325] RSP: 002b:00007f625bc0e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 185.537862][ T7325] RAX: ffffffffffffffda RBX: 00007f625afb5fa0 RCX: 00007f625ad8e9a9 [ 185.537868][ T7325] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 185.537875][ T7325] RBP: 00007f625bc0e090 R08: 0000000000000000 R09: 0000000000000000 [ 185.537881][ T7325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.537887][ T7325] R13: 0000000000000001 R14: 00007f625afb5fa0 R15: 00007fff0e136878 [ 185.537900][ T7325] [ 185.902136][ T5818] Bluetooth: hci5: command 0x0405 tx timeout [ 186.109802][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 186.268085][ T7333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.294'. [ 186.306498][ T7333] can0: slcan on ptm0. [ 186.330696][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 186.459168][ T5884] usb 4-1: USB disconnect, device number 8 [ 186.459180][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 186.459214][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 186.707437][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.728488][ T24] usb 1-1: config 0 has no interface number 0 [ 186.758471][ T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 186.808925][ T7331] can0 (unregistered): slcan off ptm0. [ 186.909549][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.922727][ T24] usb 1-1: Product: syz [ 186.926906][ T24] usb 1-1: Manufacturer: syz [ 187.037346][ T24] usb 1-1: SerialNumber: syz [ 187.059558][ T24] usb 1-1: config 0 descriptor?? [ 187.080778][ T24] usb 1-1: selecting invalid altsetting 2 [ 187.580339][ T24] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 187.630943][ T24] usb 1-1: USB disconnect, device number 6 [ 187.981896][ T7348] openvswitch: netlink: VXLAN extension message has 22 unknown bytes. [ 188.780956][ T7367] syz.2.301 uses obsolete (PF_INET,SOCK_PACKET) [ 189.825526][ T5951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.839328][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 189.900556][ T30] audit: type=1400 audit(1753903393.235:403): avc: denied { create } for pid=7363 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 190.129568][ T30] audit: type=1400 audit(1753903393.375:404): avc: denied { connect } for pid=7363 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 190.214912][ T30] audit: type=1400 audit(1753903393.385:405): avc: denied { read } for pid=7363 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 190.784832][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 190.792732][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 190.802293][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 191.745234][ T43] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 191.775770][ T30] audit: type=1400 audit(1753903394.775:406): avc: denied { accept } for pid=7392 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.234265][ T30] audit: type=1400 audit(1753903394.775:407): avc: denied { append } for pid=7392 comm="syz.1.307" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 192.334503][ T7393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.359808][ T5877] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 192.379736][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 192.393528][ T43] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 192.410929][ T43] usb 1-1: config 179 has no interface number 0 [ 192.427378][ T43] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 192.441977][ T43] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 192.469569][ T43] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 192.498698][ T43] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 192.542968][ T43] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 192.562899][ T5877] usb 6-1: Using ep0 maxpacket: 32 [ 192.568160][ T43] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 192.568183][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.589241][ T7397] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 192.624834][ T43] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 192.643173][ T5877] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 192.657678][ T5877] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.673588][ T30] audit: type=1400 audit(1753903396.215:408): avc: denied { read write } for pid=7410 comm="syz.3.309" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.684808][ T5877] usb 6-1: config 0 has no interface number 0 [ 192.742908][ T7412] capability: warning: `syz.3.309' uses deprecated v2 capabilities in a way that may be insecure [ 192.754240][ T5877] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.762491][ T30] audit: type=1400 audit(1753903396.215:409): avc: denied { open } for pid=7410 comm="syz.3.309" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.108757][ T5877] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 193.123005][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.167381][ T43] usb 1-1: USB disconnect, device number 7 [ 193.215737][ T30] audit: type=1400 audit(1753903396.425:410): avc: denied { ioctl } for pid=7414 comm="syz.2.310" path="socket:[14114]" dev="sockfs" ino=14114 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 193.240956][ T5877] usb 6-1: Product: syz [ 193.257616][ T5877] usb 6-1: Manufacturer: syz [ 193.276652][ T5877] usb 6-1: SerialNumber: syz [ 193.303846][ T5877] usb 6-1: config 0 descriptor?? [ 193.335275][ T5877] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 193.381583][ T30] audit: type=1400 audit(1753903396.665:411): avc: denied { read } for pid=7396 comm="syz.0.306" dev="sockfs" ino=13111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 193.406048][ T5877] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 193.780822][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.787135][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.132834][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.171655][ T5877] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 194.184255][ T5877] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 194.219129][ T5877] usb 6-1: USB disconnect, device number 3 [ 197.626919][ T30] audit: type=1400 audit(1753903401.185:412): avc: denied { create } for pid=7478 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.903675][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.321'. [ 199.842309][ T994] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.098004][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 200.922669][ T7502] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 200.970413][ T30] audit: type=1400 audit(1753903404.535:413): avc: denied { bind } for pid=7500 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.170489][ T30] audit: type=1400 audit(1753903404.535:414): avc: denied { write } for pid=7500 comm="syz.1.327" path="socket:[14271]" dev="sockfs" ino=14271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.837245][ T30] audit: type=1400 audit(1753903404.915:415): avc: denied { ioctl } for pid=7511 comm="syz.5.330" path="socket:[14412]" dev="sockfs" ino=14412 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 201.885211][ T7516] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 202.404353][ T118] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 202.524076][ T30] audit: type=1400 audit(1753903406.065:416): avc: denied { map } for pid=7526 comm="syz.5.333" path="socket:[14291]" dev="sockfs" ino=14291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 202.701840][ T118] usb 4-1: config 1 interface 0 has no altsetting 0 [ 202.806783][ T7536] openvswitch: netlink: VXLAN extension message has 22 unknown bytes. [ 203.450018][ T118] usb 4-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.40 [ 203.556788][ T118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.578056][ T5877] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 203.585653][ T118] usb 4-1: Product: syz [ 203.603065][ T118] usb 4-1: Manufacturer: à°‡ [ 203.613153][ T118] usb 4-1: SerialNumber: syz [ 203.920993][ T5830] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 204.392616][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 206.069440][ T3529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.235308][ T118] usbhid 4-1:1.0: can't add hid device: -71 [ 206.352283][ T118] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 206.378768][ T118] usb 4-1: USB disconnect, device number 9 [ 206.599952][ T7574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.346'. [ 207.792712][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.344'. [ 209.085406][ T30] audit: type=1400 audit(1753903412.635:417): avc: denied { bind } for pid=7598 comm="syz.3.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.572659][ T30] audit: type=1400 audit(1753903413.135:418): avc: denied { firmware_load } for pid=7603 comm="syz.1.353" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 209.769831][ T1322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.141102][ T7605] syz.1.353 (7605) used greatest stack depth: 19784 bytes left [ 210.838076][ T7616] FAULT_INJECTION: forcing a failure. [ 210.838076][ T7616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.877947][ T7616] CPU: 0 UID: 0 PID: 7616 Comm: syz.1.357 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 210.877972][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.877982][ T7616] Call Trace: [ 210.877988][ T7616] [ 210.877994][ T7616] dump_stack_lvl+0x16c/0x1f0 [ 210.878017][ T7616] should_fail_ex+0x512/0x640 [ 210.878042][ T7616] _copy_to_user+0x32/0xd0 [ 210.878070][ T7616] simple_read_from_buffer+0xcb/0x170 [ 210.878096][ T7616] proc_fail_nth_read+0x197/0x240 [ 210.878115][ T7616] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.878134][ T7616] ? rw_verify_area+0xcf/0x680 [ 210.878163][ T7616] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.878180][ T7616] vfs_read+0x1e4/0xc60 [ 210.878208][ T7616] ? __pfx___mutex_lock+0x10/0x10 [ 210.878229][ T7616] ? __pfx_vfs_read+0x10/0x10 [ 210.878260][ T7616] ? __fget_files+0x20e/0x3c0 [ 210.878285][ T7616] ksys_read+0x12a/0x250 [ 210.878300][ T7616] ? __pfx_ksys_read+0x10/0x10 [ 210.878323][ T7616] do_syscall_64+0xcd/0x4c0 [ 210.878346][ T7616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.878363][ T7616] RIP: 0033:0x7f625ad8d3bc [ 210.878377][ T7616] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 210.878394][ T7616] RSP: 002b:00007f625bc0e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.878411][ T7616] RAX: ffffffffffffffda RBX: 00007f625afb5fa0 RCX: 00007f625ad8d3bc [ 210.878423][ T7616] RDX: 000000000000000f RSI: 00007f625bc0e0a0 RDI: 0000000000000004 [ 210.878432][ T7616] RBP: 00007f625bc0e090 R08: 0000000000000000 R09: 0000000000000000 [ 210.878442][ T7616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.878452][ T7616] R13: 0000000000000000 R14: 00007f625afb5fa0 R15: 00007fff0e136878 [ 210.878476][ T7616] [ 211.279532][ T30] audit: type=1400 audit(1753903414.825:419): avc: denied { write } for pid=7613 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 211.509482][ T5877] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 211.690298][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.838815][ T5877] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 211.871043][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.895009][ T5877] usb 2-1: Product: syz [ 211.911520][ T5877] usb 2-1: Manufacturer: syz [ 211.931105][ T5877] usb 2-1: SerialNumber: syz [ 211.956936][ T5877] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 212.052864][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 212.280195][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.363'. [ 212.369557][ T5877] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 212.521201][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 212.551950][ T5877] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 212.563149][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.596933][ T5877] usb 3-1: config 0 descriptor?? [ 212.802289][ T10] usb 2-1: USB disconnect, device number 6 [ 212.821989][ T5877] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 212.915741][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 212.964459][ T5877] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 212.989710][ T5877] usb 3-1: media controller created [ 213.033195][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.092277][ T30] audit: type=1400 audit(1753903416.655:420): avc: denied { listen } for pid=7636 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 213.132724][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 213.140750][ T5877] az6027: usb out operation failed. (-71) [ 213.153299][ T9] ath9k_htc: Failed to initialize the device [ 213.160083][ T5877] az6027: usb out operation failed. (-71) [ 213.178860][ T5877] stb0899_attach: Driver disabled by Kconfig [ 213.191431][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 213.207680][ T5877] az6027: no front-end attached [ 213.207680][ T5877] [ 213.231293][ T5877] az6027: usb out operation failed. (-71) [ 213.237025][ T5877] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 213.284263][ T5877] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 213.316083][ T5877] dvb-usb: schedule remote query interval to 400 msecs. [ 213.435234][ T30] audit: type=1400 audit(1753903416.985:421): avc: denied { ioctl } for pid=7645 comm="syz.5.366" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 213.445020][ T5877] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 214.322780][ T5877] usb 3-1: USB disconnect, device number 3 [ 214.455740][ T30] audit: type=1400 audit(1753903418.015:422): avc: denied { write } for pid=7655 comm="syz.1.368" path="socket:[15525]" dev="sockfs" ino=15525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.512267][ T7659] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 214.881481][ T5877] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 215.536743][ T7656] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.546078][ T6341] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.819825][ T30] audit: type=1400 audit(1753903419.375:423): avc: denied { connect } for pid=7681 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 216.112760][ T5877] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 217.016123][ T30] audit: type=1400 audit(1753903420.575:424): avc: denied { create } for pid=7699 comm="syz.5.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 217.142026][ T5876] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 217.176365][ T7697] sit1: entered allmulticast mode [ 217.742302][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.810896][ T5876] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 217.823021][ T5876] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 217.840651][ T5876] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 217.929626][ T5830] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 217.935902][ T5835] Bluetooth: hci2: command 0x1003 tx timeout [ 217.977566][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.003160][ T7695] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 218.037736][ T5876] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 218.989579][ T5876] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 219.110876][ T30] audit: type=1400 audit(1753903422.675:425): avc: denied { bind } for pid=7712 comm="syz.3.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 219.220869][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 219.379795][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 219.841096][ T43] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 219.935197][ T5877] usb 2-1: USB disconnect, device number 7 [ 220.104661][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.117949][ T43] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 220.322171][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.381788][ T43] usb 1-1: config 0 descriptor?? [ 220.840035][ T30] audit: type=1804 audit(1753903424.355:426): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.389" name="/newroot/87/file0" dev="tmpfs" ino=469 res=1 errno=0 [ 221.315354][ T6509] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 221.394350][ T30] audit: type=1400 audit(1753903424.955:427): avc: denied { listen } for pid=7726 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.409538][ T5876] usb 6-1: unable to get BOS descriptor or descriptor too short [ 221.453938][ T7743] netlink: 'syz.0.387': attribute type 4 has an invalid length. [ 221.461767][ T7743] netlink: 152 bytes leftover after parsing attributes in process `syz.0.387'. [ 221.461880][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 221.477491][ T7743] : renamed from bond0 (while UP) [ 221.718968][ T5876] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 221.729693][ T5876] usb 6-1: can't read configurations, error -71 [ 222.122277][ T30] audit: type=1400 audit(1753903425.425:428): avc: denied { read } for pid=7747 comm="syz.5.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.561254][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 222.567224][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 222.606419][ T43] usb 1-1: USB disconnect, device number 8 [ 223.508949][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.002958][ T30] audit: type=1804 audit(1753903427.345:429): pid=7766 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.393" name="/newroot/92/file0" dev="tmpfs" ino=489 res=1 errno=0 [ 224.375496][ T30] audit: type=1400 audit(1753903427.895:430): avc: denied { setattr } for pid=7767 comm="syz.3.396" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 225.672016][ T30] audit: type=1400 audit(1753903429.235:431): avc: denied { read write } for pid=7767 comm="syz.3.396" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 225.964213][ T30] audit: type=1400 audit(1753903429.235:432): avc: denied { open } for pid=7767 comm="syz.3.396" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 226.324688][ T7783] block nbd5: NBD_DISCONNECT [ 226.333005][ T7783] block nbd5: Disconnected due to user request. [ 226.342201][ T7783] block nbd5: shutting down sockets [ 226.764951][ T30] audit: type=1400 audit(1753903430.325:433): avc: denied { create } for pid=7794 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 227.120306][ T7802] syz.3.403: attempt to access beyond end of device [ 227.120306][ T7802] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 227.949592][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.059652][ T118] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 229.309163][ T7819] Failed to initialize the IGMP autojoin socket (err -2) [ 230.421094][ T7817] block device autoloading is deprecated and will be removed. [ 231.128114][ T5988] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.222277][ T118] usb 6-1: Using ep0 maxpacket: 8 [ 231.734758][ T118] usb 6-1: device descriptor read/all, error -71 [ 232.276530][ T7831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.414'. [ 232.467119][ T5835] Bluetooth: hci5: command 0x0405 tx timeout [ 232.622032][ T30] audit: type=1400 audit(1753903436.135:434): avc: denied { setopt } for pid=7832 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 233.475127][ T3529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 234.203482][ T7855] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 234.532277][ T7864] syz.1.418: attempt to access beyond end of device [ 234.532277][ T7864] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 235.102986][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.421'. [ 235.204705][ T7855] orangefs_mount: mount request failed with -4 [ 236.103171][ T7885] afs: Unknown parameter '18446744073709551615ÿÿÿÿ' [ 237.442712][ T1322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.798477][ T7894] serio: Serial port ptm0 [ 238.200553][ T7901] netlink: 6 bytes leftover after parsing attributes in process `syz.3.429'. [ 238.797763][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.430'. [ 239.322390][ T1322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 239.367174][ T5877] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 239.488974][ T7918] Failed to initialize the IGMP autojoin socket (err -2) [ 239.542516][ T5877] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 239.595025][ T5877] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 239.669142][ T5877] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 239.684618][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.704745][ T7907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 239.741153][ T5877] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.687702][ T7909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.966594][ T5884] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 243.006397][ T7952] FAULT_INJECTION: forcing a failure. [ 243.006397][ T7952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.038376][ T7952] CPU: 0 UID: 0 PID: 7952 Comm: syz.5.442 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 243.038401][ T7952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.038411][ T7952] Call Trace: [ 243.038417][ T7952] [ 243.038424][ T7952] dump_stack_lvl+0x16c/0x1f0 [ 243.038449][ T7952] should_fail_ex+0x512/0x640 [ 243.038476][ T7952] _copy_from_iter+0x29f/0x16f0 [ 243.038507][ T7952] ? __alloc_skb+0x200/0x380 [ 243.038527][ T7952] ? __pfx__copy_from_iter+0x10/0x10 [ 243.038556][ T7952] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 243.038588][ T7952] netlink_sendmsg+0x829/0xdd0 [ 243.038616][ T7952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.038650][ T7952] ____sys_sendmsg+0xa98/0xc70 [ 243.038675][ T7952] ? copy_msghdr_from_user+0x10a/0x160 [ 243.038697][ T7952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.038733][ T7952] ___sys_sendmsg+0x134/0x1d0 [ 243.038756][ T7952] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.038783][ T7952] ? __lock_acquire+0x622/0x1c90 [ 243.038831][ T7952] ? __mutex_unlock_slowpath+0x80/0x800 [ 243.038859][ T7952] __sys_sendmsg+0x16d/0x220 [ 243.038881][ T7952] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.038917][ T7952] do_syscall_64+0xcd/0x4c0 [ 243.038940][ T7952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.038956][ T7952] RIP: 0033:0x7f22ab78e9a9 [ 243.038970][ T7952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.038987][ T7952] RSP: 002b:00007f22ac56f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.039004][ T7952] RAX: ffffffffffffffda RBX: 00007f22ab9b5fa0 RCX: 00007f22ab78e9a9 [ 243.039015][ T7952] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 243.039026][ T7952] RBP: 00007f22ac56f090 R08: 0000000000000000 R09: 0000000000000000 [ 243.039036][ T7952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.039046][ T7952] R13: 0000000000000000 R14: 00007f22ab9b5fa0 R15: 00007ffc0fc87538 [ 243.039069][ T7952] [ 243.057504][ T30] audit: type=1400 audit(1753903446.545:435): avc: denied { ioctl } for pid=7949 comm="syz.5.441" path="socket:[15937]" dev="sockfs" ino=15937 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 243.062383][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.310995][ T30] audit: type=1400 audit(1753903446.545:436): avc: denied { getopt } for pid=7949 comm="syz.5.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 243.338252][ T24] usb 2-1: USB disconnect, device number 8 [ 243.497860][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 243.564951][ T5884] usb 1-1: config 2 has an invalid interface number: 86 but max is 3 [ 243.578164][ T5884] usb 1-1: config 2 has an invalid interface number: 130 but max is 3 [ 243.606759][ T5884] usb 1-1: config 2 has 3 interfaces, different from the descriptor's value: 4 [ 243.656223][ T5884] usb 1-1: config 2 has no interface number 1 [ 243.679487][ T5884] usb 1-1: config 2 has no interface number 2 [ 243.706561][ T5884] usb 1-1: config 2 interface 86 altsetting 253 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 243.754441][ T5884] usb 1-1: config 2 interface 86 altsetting 253 endpoint 0xF has invalid maxpacket 17272, setting to 1024 [ 243.809934][ T5884] usb 1-1: config 2 interface 86 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 243.821268][ T5884] usb 1-1: config 2 interface 86 altsetting 253 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 243.833019][ T5884] usb 1-1: config 2 interface 86 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 243.844212][ T5884] usb 1-1: config 2 interface 86 altsetting 253 has a duplicate endpoint with address 0xF, skipping [ 243.860256][ T7968] binder: BINDER_SET_CONTEXT_MGR already set [ 243.866320][ T7968] binder: 7967:7968 ioctl 4018620d 200000000040 returned -16 [ 243.876641][ T30] audit: type=1400 audit(1753903447.415:437): avc: denied { map } for pid=7967 comm="syz.5.448" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 243.889492][ T118] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 243.900253][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.968200][ T5884] usb 1-1: config 2 interface 130 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 243.981825][ T5884] usb 1-1: config 2 interface 130 altsetting 6 endpoint 0x6 has an invalid bInterval 127, changing to 7 [ 243.993549][ T5884] usb 1-1: config 2 interface 130 altsetting 6 endpoint 0x8 has an invalid bInterval 177, changing to 11 [ 244.006422][ T5884] usb 1-1: config 2 interface 130 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 244.017548][ T5884] usb 1-1: config 2 interface 130 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 244.034926][ T5884] usb 1-1: config 2 interface 130 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 244.046803][ T5884] usb 1-1: config 2 interface 130 altsetting 6 has an endpoint descriptor with address 0x21, changing to 0x1 [ 244.062595][ T5884] usb 1-1: config 2 interface 130 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 244.075543][ T5884] usb 1-1: config 2 interface 130 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 244.169705][ T118] usb 3-1: Using ep0 maxpacket: 32 [ 244.270194][ T5884] usb 1-1: config 2 interface 130 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 244.272433][ T118] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 244.388056][ T5884] usb 1-1: config 2 interface 130 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 244.401163][ T5884] usb 1-1: config 2 interface 130 altsetting 6 endpoint 0x4 has an invalid bInterval 108, changing to 10 [ 244.419622][ T5884] usb 1-1: config 2 interface 130 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 244.430616][ T5884] usb 1-1: config 2 interface 130 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 244.548016][ T5884] usb 1-1: config 2 interface 130 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 244.970004][ T7867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.983681][ T5884] usb 1-1: config 2 interface 130 altsetting 6 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 245.013029][ T5884] usb 1-1: config 2 interface 130 altsetting 6 has a duplicate endpoint with address 0x8D, skipping [ 245.274714][ T5884] usb 1-1: config 2 interface 130 altsetting 6 has 15 endpoint descriptors, different from the interface descriptor's value: 13 [ 245.480170][ T5884] usb 1-1: config 2 interface 0 altsetting 126 has a duplicate endpoint with address 0x5, skipping [ 245.491044][ T5884] usb 1-1: config 2 interface 0 altsetting 126 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 245.505157][ T5884] usb 1-1: config 2 interface 0 altsetting 126 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 245.774493][ T5884] usb 1-1: config 2 interface 86 has no altsetting 0 [ 245.784538][ T5884] usb 1-1: config 2 interface 130 has no altsetting 0 [ 245.799958][ T5884] usb 1-1: config 2 interface 0 has no altsetting 0 [ 245.810342][ T5884] usb 1-1: string descriptor 0 read error: -71 [ 245.852459][ T5884] usb 1-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=43.07 [ 245.863799][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.890818][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.453'. [ 245.928101][ T5884] usb 1-1: can't set config #2, error -71 [ 245.928624][ T118] usb 3-1: can't read configurations, error -61 [ 245.943563][ T7992] netlink: 'syz.5.454': attribute type 7 has an invalid length. [ 245.943707][ T5884] usb 1-1: USB disconnect, device number 9 [ 246.093716][ T30] audit: type=1400 audit(1753903449.655:438): avc: denied { add_name } for pid=7991 comm="syz.5.454" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.114236][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.122435][ T7992] o2cb: This node has not been configured. [ 246.128289][ T7992] o2cb: Cluster check failed. Fix errors before retrying. [ 246.136281][ T7992] (syz.5.454,7992,0):user_dlm_register:674 ERROR: status = -22 [ 246.144987][ T30] audit: type=1400 audit(1753903449.685:439): avc: denied { create } for pid=7991 comm="syz.5.454" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 246.164981][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.172792][ T7992] (syz.5.454,7992,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 246.183113][ T30] audit: type=1400 audit(1753903449.685:440): avc: denied { associate } for pid=7991 comm="syz.5.454" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 246.269555][ T118] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 246.521488][ T118] usb 3-1: Using ep0 maxpacket: 32 [ 246.530668][ T118] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 246.555350][ T118] usb 3-1: can't read configurations, error -61 [ 246.883251][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 247.018084][ T118] usb usb3-port1: attempt power cycle [ 248.873664][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.929665][ T118] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 249.014213][ T8040] netlink: 32 bytes leftover after parsing attributes in process `syz.2.465'. [ 249.093141][ T118] usb 1-1: Using ep0 maxpacket: 32 [ 249.128880][ T118] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 249.219498][ T118] usb 1-1: config 0 has no interface number 0 [ 249.245086][ T118] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 249.254842][ T118] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.414662][ T118] usb 1-1: Product: syz [ 249.419078][ T118] usb 1-1: Manufacturer: syz [ 249.568119][ T8056] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 249.594936][ T8056] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 249.842525][ T30] audit: type=1400 audit(1753903453.405:441): avc: denied { connect } for pid=8049 comm="syz.1.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 249.965409][ T118] usb 1-1: SerialNumber: syz [ 250.165308][ T8050] syz.1.468: attempt to access beyond end of device [ 250.165308][ T8050] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 250.257055][ T8050] XFS (nbd1): SB validate failed with error -5. [ 250.260398][ T118] usb 1-1: config 0 descriptor?? [ 250.276572][ T118] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 250.558082][ T5830] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 250.737033][ T7867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.674999][ T30] audit: type=1326 audit(1753903455.235:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8033 comm="syz.0.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8da38e9a9 code=0x7fc00000 [ 251.803726][ T118] usb 1-1: qt2_attach - failed to power on unit: -71 [ 251.836782][ T118] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 251.884459][ T8097] cgroup: fork rejected by pids controller in /syz0 [ 251.903844][ T118] usb 1-1: USB disconnect, device number 10 [ 252.061653][ T8101] team0: Device gtp0 is of different type [ 252.119059][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'. [ 252.520830][ T30] audit: type=1804 audit(1753903456.085:443): pid=8217 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.479" name="/newroot/105/file0" dev="tmpfs" ino=562 res=1 errno=0 [ 253.461107][ T8159] syz.2.477: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 253.538521][ T8159] CPU: 0 UID: 0 PID: 8159 Comm: syz.2.477 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 253.538548][ T8159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.538559][ T8159] Call Trace: [ 253.538565][ T8159] [ 253.538572][ T8159] dump_stack_lvl+0x16c/0x1f0 [ 253.538598][ T8159] warn_alloc+0x248/0x3a0 [ 253.538618][ T8159] ? __pfx_warn_alloc+0x10/0x10 [ 253.538658][ T8159] ? xskq_create+0xfb/0x1d0 [ 253.538675][ T8159] ? __vmalloc_node_noprof+0xad/0xf0 [ 253.538706][ T8159] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 253.538740][ T8159] ? xskq_create+0xfb/0x1d0 [ 253.538764][ T8159] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 253.538799][ T8159] ? xskq_create+0xfb/0x1d0 [ 253.538816][ T8159] vmalloc_user_noprof+0x9e/0xe0 [ 253.538842][ T8159] ? xskq_create+0xfb/0x1d0 [ 253.538860][ T8159] xskq_create+0xfb/0x1d0 [ 253.538880][ T8159] xsk_setsockopt+0x684/0x840 [ 253.538910][ T8159] ? __pfx_xsk_setsockopt+0x10/0x10 [ 253.538938][ T8159] ? find_held_lock+0x2b/0x80 [ 253.538964][ T8159] ? selinux_socket_setsockopt+0x6a/0x80 [ 253.538994][ T8159] ? __pfx_xsk_setsockopt+0x10/0x10 [ 253.539025][ T8159] do_sock_setsockopt+0xf0/0x1d0 [ 253.539054][ T8159] __sys_setsockopt+0x1a0/0x230 [ 253.539080][ T8159] __x64_sys_setsockopt+0xbd/0x160 [ 253.539099][ T8159] ? do_syscall_64+0x91/0x4c0 [ 253.539121][ T8159] ? lockdep_hardirqs_on+0x7c/0x110 [ 253.539141][ T8159] do_syscall_64+0xcd/0x4c0 [ 253.539165][ T8159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.539183][ T8159] RIP: 0033:0x7f5fb098e9a9 [ 253.539198][ T8159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.539215][ T8159] RSP: 002b:00007f5fb185b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 253.539233][ T8159] RAX: ffffffffffffffda RBX: 00007f5fb0bb5fa0 RCX: 00007f5fb098e9a9 [ 253.539245][ T8159] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 253.539255][ T8159] RBP: 00007f5fb0a10d69 R08: 0000000000000004 R09: 0000000000000000 [ 253.539265][ T8159] R10: 00002000000016c0 R11: 0000000000000246 R12: 0000000000000000 [ 253.539276][ T8159] R13: 0000000000000000 R14: 00007f5fb0bb5fa0 R15: 00007ffdcf00ddc8 [ 253.539301][ T8159] [ 253.539308][ T8159] Mem-Info: [ 253.787279][ T30] audit: type=1326 audit(1753903457.345:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8220 comm="syz.1.483" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f625ad8e9a9 code=0x0 [ 253.815498][ T8159] active_anon:12608 inactive_anon:0 isolated_anon:0 [ 253.815498][ T8159] active_file:11644 inactive_file:40654 isolated_file:0 [ 253.815498][ T8159] unevictable:768 dirty:552 writeback:0 [ 253.815498][ T8159] slab_reclaimable:11527 slab_unreclaimable:101650 [ 253.815498][ T8159] mapped:34486 shmem:4220 pagetables:1394 [ 253.815498][ T8159] sec_pagetables:0 bounce:0 [ 253.815498][ T8159] kernel_misc_reclaimable:0 [ 253.815498][ T8159] free:1293518 free_pcp:14670 free_cma:0 [ 253.863357][ T30] audit: type=1400 audit(1753903457.425:445): avc: denied { read write } for pid=8220 comm="syz.1.483" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 253.891170][ T30] audit: type=1400 audit(1753903457.425:446): avc: denied { open } for pid=8220 comm="syz.1.483" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 253.918062][ T8159] Node 0 active_anon:50432kB inactive_anon:0kB active_file:46576kB inactive_file:162412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119144kB dirty:2208kB writeback:0kB shmem:15344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12360kB pagetables:5420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 253.955555][ T30] audit: type=1400 audit(1753903457.445:447): avc: denied { setattr } for pid=8220 comm="syz.1.483" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 253.982324][ T8159] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 254.023080][ T8159] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 254.039504][ T118] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 254.071858][ T8159] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 254.099497][ T8159] Node 0 DMA32 free:1258260kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49504kB inactive_anon:0kB active_file:46576kB inactive_file:161108kB unevictable:1536kB writepending:2208kB present:3129332kB managed:2540140kB mlocked:0kB bounce:0kB free_pcp:68328kB local_pcp:31248kB free_cma:0kB [ 254.179464][ T8159] lowmem_reserve[]: 0 0 1 1 1 [ 254.200416][ T8159] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1304kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 254.280843][ T118] usb 4-1: config 0 has an invalid interface number: 171 but max is 0 [ 254.281654][ T8159] lowmem_reserve[]: 0 0 0 0 0 [ 254.289222][ T118] usb 4-1: config 0 has no interface number 0 [ 254.302317][ T118] usb 4-1: config 0 interface 171 has no altsetting 0 [ 254.318653][ T118] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 254.329343][ T118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.337794][ T8159] Node 1 Normal free:3900432kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15908kB local_pcp:8932kB free_cma:0kB [ 254.342053][ T118] usb 4-1: Product: syz [ 254.416989][ T118] usb 4-1: Manufacturer: syz [ 254.419468][ T8159] lowmem_reserve[]: 0 0 0 0 0 [ 254.429645][ T118] usb 4-1: SerialNumber: syz [ 254.436655][ T8159] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 254.457094][ T118] usb 4-1: config 0 descriptor?? [ 254.479762][ T8159] Node 0 DMA32: 1198*4kB (M) 527*8kB (UME) 261*16kB (M) 74*32kB (UME) 169*64kB (UME) 62*128kB (UME) 110*256kB (UME) 80*512kB (UM) 65*1024kB (UME) 7*2048kB (UM) 270*4096kB (UM) = 1290240kB [ 254.528886][ T8159] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 254.549479][ T8159] Node 1 Normal: 188*4kB (UME) 50*8kB (UME) 35*16kB (UME) 123*32kB (UME) 38*64kB (UME) 9*128kB (UME) 6*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3900432kB [ 254.570134][ T994] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.589496][ T8159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 254.599050][ T8159] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 254.669967][ T8159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 254.680448][ T30] audit: type=1400 audit(1753903458.205:448): avc: denied { mount } for pid=8228 comm="syz.5.485" name="/" dev="ramfs" ino=16470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 254.739547][ T8159] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 254.748912][ T8159] 53952 total pagecache pages [ 254.819613][ T8159] 0 pages in swap cache [ 254.823816][ T8159] Free swap = 124996kB [ 254.827997][ T8159] Total swap = 124996kB [ 254.833378][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.842486][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.850297][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.858351][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.865809][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.909409][ T118] usb 4-1: USB disconnect, device number 11 [ 254.913418][ T8159] 2097051 pages RAM [ 254.916745][ T118] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 254.919377][ T8159] 0 pages HighMem/MovableOnly [ 254.933227][ T8159] 430038 pages reserved [ 254.937910][ T8159] 0 pages cma reserved [ 254.948260][ T8234] Failed to initialize the IGMP autojoin socket (err -2) [ 255.214735][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.221198][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.559391][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.592302][ T8234] chnl_net:caif_netlink_parms(): no params data found [ 256.909915][ T5835] Bluetooth: hci0: command tx timeout [ 257.315718][ T8269] netlink: 28 bytes leftover after parsing attributes in process `syz.5.491'. [ 257.578454][ T8234] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.603473][ T5835] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 257.627627][ T8234] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.721166][ T8234] bridge_slave_0: entered allmulticast mode [ 257.741436][ T8234] bridge_slave_0: entered promiscuous mode [ 257.762280][ T8234] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.796065][ T8234] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.824204][ T8234] bridge_slave_1: entered allmulticast mode [ 257.842900][ T8234] bridge_slave_1: entered promiscuous mode [ 257.930096][ T118] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 257.932543][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 258.093678][ T118] usb 6-1: Using ep0 maxpacket: 8 [ 258.108172][ T118] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 258.201328][ T118] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.276896][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 258.306597][ T118] pvrusb2: Hardware description: Terratec Grabster AV400 [ 258.330747][ T118] pvrusb2: ********** [ 258.335017][ T118] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 258.379367][ T118] pvrusb2: Important functionality might not be entirely working. [ 258.389819][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 258.412038][ T118] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 258.414532][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 258.456785][ T118] pvrusb2: ********** [ 258.468200][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 258.489907][ T2335] pvrusb2: Invalid write control endpoint [ 258.492202][ T118] usb 6-1: USB disconnect, device number 8 [ 258.506367][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.541747][ T8234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.558169][ T9] usb 2-1: Product: syz [ 258.569785][ T9] usb 2-1: Manufacturer: syz [ 258.613081][ T9] usb 2-1: SerialNumber: syz [ 258.633363][ T30] audit: type=1804 audit(1753903462.195:449): pid=8298 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.496" name="/newroot/115/file0" dev="fuse" ino=1 res=1 errno=0 [ 258.676398][ T8234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.690732][ T9] usb 2-1: config 0 descriptor?? [ 258.705401][ T2335] pvrusb2: Invalid write control endpoint [ 258.713049][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 258.732089][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 258.750423][ T9] usb 2-1: Detected FT232R [ 258.758284][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 258.776624][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 258.799180][ T2335] pvrusb2: Device being rendered inoperable [ 258.806708][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 258.843395][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 258.861015][ T2335] pvrusb2: Attached sub-driver cx25840 [ 258.868298][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 258.881514][ T8234] team0: Port device team_slave_0 added [ 258.895057][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 258.905398][ T8234] team0: Port device team_slave_1 added [ 258.923215][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 258.923657][ T30] audit: type=1400 audit(1753903462.485:450): avc: denied { ioctl } for pid=8270 comm="syz.1.492" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 258.942616][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 258.955664][ T5876] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 258.973730][ T5835] Bluetooth: hci0: command tx timeout [ 259.043024][ T8234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.055082][ T8234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.080998][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.087758][ T9] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 259.100447][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 259.116224][ T9] usb 2-1: USB disconnect, device number 9 [ 259.124529][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 259.134849][ T9] ftdi_sio 2-1:0.0: device disconnected [ 259.141379][ T8234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.161234][ T8234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.168374][ T8234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.235191][ T5876] usb 3-1: config 66 has an invalid interface number: 195 but max is 0 [ 259.254389][ T5876] usb 3-1: config 66 has no interface number 0 [ 259.264492][ T5876] usb 3-1: config 66 interface 195 has no altsetting 0 [ 259.269776][ T8234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.278379][ T30] audit: type=1400 audit(1753903462.835:451): avc: denied { mounton } for pid=8302 comm="syz.5.497" path="/65/file0" dev="tmpfs" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 259.309053][ T5876] usb 3-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=56.49 [ 259.318701][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.329185][ T8304] netlink: 104 bytes leftover after parsing attributes in process `syz.5.497'. [ 259.349379][ T30] audit: type=1400 audit(1753903462.895:452): avc: denied { nlmsg_read } for pid=8302 comm="syz.5.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.373656][ T5876] usb 3-1: Product: syz [ 259.377861][ T5876] usb 3-1: Manufacturer: syz [ 259.386074][ T5876] usb 3-1: SerialNumber: syz [ 259.466513][ T5876] usb 3-1: Found UVC 0.00 device syz (1bcf:0b40) [ 259.498065][ T5876] usb 3-1: Forcing UVC version to 1.0a [ 259.508927][ T5876] usb 3-1: No valid video chain found. [ 259.541040][ T8310] loop3: detected capacity change from 0 to 1 [ 259.578428][ T8310] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 [ 259.606677][ T8310] loop3: p1 start 791543808 is beyond EOD, truncated [ 259.633458][ T8310] loop3: p2 start 1633771873 is beyond EOD, truncated [ 259.652449][ T8310] loop3: p3 start 1633771873 is beyond EOD, truncated [ 259.663595][ T8234] hsr_slave_0: entered promiscuous mode [ 259.673618][ T8310] loop3: p4 start 1633771873 is beyond EOD, truncated [ 259.690993][ T8234] hsr_slave_1: entered promiscuous mode [ 259.700252][ T8310] loop3: p5 start 1633771873 is beyond EOD, truncated [ 259.704676][ T8234] debugfs: 'hsr0' already exists in 'hsr' [ 259.712838][ T8310] loop3: p6 start 1633771776 is beyond EOD, truncated [ 259.712868][ T8310] loop3: p7 start 1633771873 is beyond EOD, truncated [ 259.712885][ T8310] loop3: p8 start 1886744434 is beyond EOD, truncated [ 259.736705][ T8234] Cannot create hsr debugfs directory [ 259.754445][ T8310] loop3: p9 start 1633771873 is beyond EOD, truncated [ 259.777926][ T8310] loop3: p10 start 1633771873 is beyond EOD, truncated [ 260.064969][ T30] audit: type=1804 audit(1753903463.605:453): pid=8317 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.499" name="/newroot/109/file0" dev="tmpfs" ino=584 res=1 errno=0 [ 260.332303][ T7867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.661120][ T8328] netlink: 'syz.5.501': attribute type 10 has an invalid length. [ 260.669051][ T8328] netlink: 40 bytes leftover after parsing attributes in process `syz.5.501'. [ 260.757412][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.5.501'. [ 260.788186][ T8328] dummy0: entered promiscuous mode [ 260.833570][ T8328] bridge0: port 3(dummy0) entered blocking state [ 260.869643][ T8328] bridge0: port 3(dummy0) entered disabled state [ 260.876141][ T8328] dummy0: entered allmulticast mode [ 260.887272][ T8328] bridge0: port 3(dummy0) entered blocking state [ 260.893658][ T8328] bridge0: port 3(dummy0) entered forwarding state [ 261.049559][ T5835] Bluetooth: hci0: command tx timeout [ 261.096484][ T30] audit: type=1804 audit(1753903464.655:454): pid=8339 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.502" name="/newroot/110/file0" dev="tmpfs" ino=590 res=1 errno=0 [ 261.118794][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.910791][ T10] usb 3-1: USB disconnect, device number 7 [ 262.804695][ T3529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.918969][ T30] audit: type=1400 audit(1753903466.455:455): avc: denied { setopt } for pid=8342 comm="syz.5.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 262.977826][ T30] audit: type=1400 audit(1753903466.455:456): avc: denied { bind } for pid=8342 comm="syz.5.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 262.996861][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.051278][ T30] audit: type=1400 audit(1753903466.605:457): avc: denied { write } for pid=8342 comm="syz.5.504" path="socket:[16621]" dev="sockfs" ino=16621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 263.081759][ T8234] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.192828][ T5835] Bluetooth: hci0: command tx timeout [ 263.849216][ T8234] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.198220][ T8234] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.658372][ T8234] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.657410][ T5876] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 265.690765][ T6341] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.742480][ T8234] netdevsim netdevsim0 netdevsim0: renamed from eth5 [ 265.791257][ T8234] netdevsim netdevsim0 netdevsim1: renamed from eth6 [ 265.832126][ T5876] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 265.841187][ T5876] usb 6-1: config 0 has no interface number 0 [ 265.864894][ T5876] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 265.878924][ T8234] netdevsim netdevsim0 netdevsim2: renamed from eth7 [ 265.980875][ T5876] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.998566][ T5876] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 266.054430][ T8234] netdevsim netdevsim0 netdevsim3: renamed from eth8 [ 266.073506][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.096401][ T5876] usb 6-1: Product: syz [ 266.120197][ T5876] usb 6-1: Manufacturer: syz [ 266.126533][ T5876] usb 6-1: SerialNumber: syz [ 266.158381][ T5876] usb 6-1: config 0 descriptor?? [ 266.166625][ T8374] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 266.187089][ T5876] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 266.229060][ T5876] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 266.330023][ T5877] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 266.502921][ T5877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 266.539957][ T5877] usb 4-1: not running at top speed; connect to a high speed hub [ 266.572290][ T5877] usb 4-1: config 127 has an invalid interface number: 187 but max is 1 [ 266.584644][ T8234] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.594786][ T5877] usb 4-1: config 127 has an invalid interface number: 139 but max is 1 [ 266.605087][ T5877] usb 4-1: config 127 has no interface number 0 [ 266.616023][ T5877] usb 4-1: config 127 has no interface number 1 [ 266.626936][ T5877] usb 4-1: config 127 interface 187 has no altsetting 0 [ 266.639059][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.646182][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.655140][ T5877] usb 4-1: New USB device found, idVendor=05a9, idProduct=0519, bcdDevice=68.f4 [ 266.669898][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.678481][ T5877] usb 4-1: Product: syz [ 266.686092][ T5877] usb 4-1: Manufacturer: syz [ 266.692328][ T5877] usb 4-1: SerialNumber: syz [ 266.717124][ T24] usb 6-1: USB disconnect, device number 9 [ 266.717957][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.730037][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.825855][ T24] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 266.862046][ T8402] FAULT_INJECTION: forcing a failure. [ 266.862046][ T8402] name failslab, interval 1, probability 0, space 0, times 0 [ 266.876724][ T8402] CPU: 0 UID: 0 PID: 8402 Comm: syz.1.518 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 266.876747][ T8402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.876757][ T8402] Call Trace: [ 266.876762][ T8402] [ 266.876769][ T8402] dump_stack_lvl+0x16c/0x1f0 [ 266.876797][ T8402] should_fail_ex+0x512/0x640 [ 266.876820][ T8402] ? fs_reclaim_acquire+0xae/0x150 [ 266.876845][ T8402] ? tomoyo_encode2+0x100/0x3e0 [ 266.876863][ T8402] should_failslab+0xc2/0x120 [ 266.876883][ T8402] __kmalloc_noprof+0xd2/0x510 [ 266.876907][ T8402] tomoyo_encode2+0x100/0x3e0 [ 266.876929][ T8402] tomoyo_encode+0x29/0x50 [ 266.876947][ T8402] tomoyo_realpath_from_path+0x18f/0x6e0 [ 266.876969][ T8402] ? tomoyo_profile+0x47/0x60 [ 266.876994][ T8402] tomoyo_path_number_perm+0x245/0x580 [ 266.877020][ T8402] ? tomoyo_path_number_perm+0x237/0x580 [ 266.877049][ T8402] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 266.877077][ T8402] ? find_held_lock+0x2b/0x80 [ 266.877122][ T8402] ? find_held_lock+0x2b/0x80 [ 266.877143][ T8402] ? hook_file_ioctl_common+0x145/0x410 [ 266.877170][ T8402] ? __fget_files+0x20e/0x3c0 [ 266.877193][ T8402] security_file_ioctl+0x9b/0x240 [ 266.877213][ T8402] __x64_sys_ioctl+0xb7/0x210 [ 266.877251][ T8402] do_syscall_64+0xcd/0x4c0 [ 266.877275][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.877293][ T8402] RIP: 0033:0x7f625ad8e9a9 [ 266.877308][ T8402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.877324][ T8402] RSP: 002b:00007f625bc0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.877341][ T8402] RAX: ffffffffffffffda RBX: 00007f625afb5fa0 RCX: 00007f625ad8e9a9 [ 266.877353][ T8402] RDX: 0000200000000040 RSI: 00000000c028aa03 RDI: 0000000000000005 [ 266.877364][ T8402] RBP: 00007f625bc0e090 R08: 0000000000000000 R09: 0000000000000000 [ 266.877375][ T8402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.877385][ T8402] R13: 0000000000000000 R14: 00007f625afb5fa0 R15: 00007fff0e136878 [ 266.877409][ T8402] [ 266.879093][ T8402] ERROR: Out of memory at tomoyo_realpath_from_path. [ 267.105043][ T5877] usb 4-1: USB disconnect, device number 12 [ 267.112349][ T24] cyberjack 6-1:0.69: device disconnected [ 267.357583][ T8234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.629025][ T30] audit: type=1400 audit(1753903471.185:458): avc: denied { module_request } for pid=8234 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 267.651036][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.069204][ T3529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.218191][ T30] audit: type=1400 audit(1753903471.735:459): avc: denied { shutdown } for pid=8418 comm="syz.5.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.670762][ T8234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.142520][ T8234] veth0_vlan: entered promiscuous mode [ 269.149750][ T8439] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 269.156408][ T8439] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 269.164386][ T8439] vhci_hcd vhci_hcd.0: Device attached [ 269.177737][ T8234] veth1_vlan: entered promiscuous mode [ 269.239683][ T5877] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 269.440082][ T5877] usb 4-1: Invalid ep0 maxpacket: 32 [ 269.509907][ T5876] vhci_hcd: vhci_device speed not set [ 269.537863][ T8234] veth0_macvtap: entered promiscuous mode [ 269.629779][ T5876] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 269.931445][ T8234] veth1_macvtap: entered promiscuous mode [ 269.940480][ T5877] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 269.965027][ T8440] vhci_hcd: connection reset by peer [ 269.988664][ T1322] vhci_hcd: stop threads [ 270.002147][ T1322] vhci_hcd: release socket [ 270.020998][ T1322] vhci_hcd: disconnect device [ 270.054523][ T8234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.082785][ T8234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.130927][ T5877] usb 4-1: Invalid ep0 maxpacket: 32 [ 270.157152][ T5877] usb usb4-port1: attempt power cycle [ 270.178040][ T8234] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 270.206015][ T8234] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 270.224725][ T8234] wireguard: wg0: Could not create IPv4 socket [ 270.234888][ T8234] wireguard: wg1: Could not create IPv4 socket [ 270.245339][ T8234] wireguard: wg2: Could not create IPv4 socket [ 270.299629][ T5816] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 270.793791][ T5816] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 270.811500][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.819993][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.820011][ T994] bridge_slave_1: left allmulticast mode [ 270.861002][ T8449] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 270.955003][ T994] bridge_slave_1: left promiscuous mode [ 270.964467][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.996361][ T5816] usb 2-1: config 0 descriptor?? [ 271.002615][ T994] bridge_slave_0: left allmulticast mode [ 271.030641][ T994] bridge_slave_0: left promiscuous mode [ 271.043674][ T5877] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 271.056668][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.064604][ T30] audit: type=1400 audit(1753903474.625:460): avc: denied { getopt } for pid=8456 comm="syz.5.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 271.404531][ T5877] usb 4-1: Invalid ep0 maxpacket: 32 [ 271.544288][ T5877] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 271.672278][ T5877] usb 4-1: Invalid ep0 maxpacket: 32 [ 271.832090][ T5877] usb usb4-port1: unable to enumerate USB device [ 271.877393][ T30] audit: type=1400 audit(1753903475.435:461): avc: denied { write } for pid=8444 comm="syz.1.529" path="socket:[16877]" dev="sockfs" ino=16877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 272.265827][ T5816] usb 2-1: Cannot set autoneg [ 272.562269][ T5816] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 272.588740][ T5816] usb 2-1: USB disconnect, device number 10 [ 272.644328][ T8468] overlayfs: missing 'workdir' [ 272.680205][ T30] audit: type=1400 audit(1753903476.245:462): avc: denied { map } for pid=8464 comm="syz.5.535" path="socket:[16948]" dev="sockfs" ino=16948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 272.703649][ T994]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.767079][ T30] audit: type=1400 audit(1753903476.245:463): avc: denied { read } for pid=8464 comm="syz.5.535" path="socket:[16948]" dev="sockfs" ino=16948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 272.820164][ T994]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.882933][ T994]  (unregistering): Released all slaves [ 273.015500][ T994] tipc: Left network mode [ 273.417431][ T30] audit: type=1400 audit(1753903476.965:464): avc: denied { getopt } for pid=8500 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 273.660656][ T30] audit: type=1400 audit(1753903476.965:465): avc: denied { write } for pid=8500 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 274.121051][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 274.939930][ T30] audit: type=1400 audit(1753903478.435:466): avc: denied { read } for pid=8507 comm="syz.2.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 275.099801][ T5876] vhci_hcd: vhci_device speed not set [ 275.149692][ T5884] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 275.354507][ T5884] usb 3-1: too many configurations: 54, using maximum allowed: 8 [ 275.495176][ T5884] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 275.546767][ T5835] Bluetooth: hci3: Malformed LE Event: 0x02 [ 275.567980][ T8484] mkiss: ax0: crc mode is auto. [ 275.654861][ T5884] usb 3-1: can't read configurations, error -61 [ 275.707743][ T994] hsr_slave_0: left promiscuous mode [ 275.727014][ T994] hsr_slave_1: left promiscuous mode [ 275.745271][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.755917][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.767643][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.776696][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.799408][ T994] veth1_macvtap: left promiscuous mode [ 275.805063][ T994] veth0_macvtap: left promiscuous mode [ 275.811589][ T994] veth1_vlan: left promiscuous mode [ 275.816921][ T994] veth0_vlan: left promiscuous mode [ 275.822203][ T5884] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 276.029486][ T5884] usb 3-1: too many configurations: 54, using maximum allowed: 8 [ 276.299684][ T5884] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 276.308302][ T5884] usb 3-1: can't read configurations, error -61 [ 276.337613][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.370460][ T5884] usb usb3-port1: attempt power cycle [ 276.729625][ T5884] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 276.765751][ T5835] block nbd1: Receive control failed (result -32) [ 276.776568][ T8526] block nbd1: shutting down sockets [ 276.804123][ T5884] usb 3-1: too many configurations: 54, using maximum allowed: 8 [ 277.395286][ T5884] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 277.416749][ T5884] usb 3-1: can't read configurations, error -71 [ 277.425140][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.434010][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.442054][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.451537][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.553559][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.652850][ T8546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.554'. [ 278.672265][ T30] audit: type=1400 audit(1753903482.235:467): avc: denied { connect } for pid=8552 comm="syz.2.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 278.910453][ T8555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.557'. [ 279.073251][ T994] team0 (unregistering): Port device team_slave_1 removed [ 279.147079][ T994] team0 (unregistering): Port device team_slave_0 removed [ 279.212192][ T3529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 279.333229][ T5830] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 279.609584][ T5830] Bluetooth: hci0: command tx timeout [ 280.464889][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 281.175782][ T8538] Failed to initialize the IGMP autojoin socket (err -2) [ 281.480232][ T30] audit: type=1400 audit(1753903485.025:468): avc: denied { mounton } for pid=8590 comm="syz.3.568" path="/proc/436/cgroup" dev="proc" ino=18615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 281.721800][ T30] audit: type=1400 audit(1753903485.025:469): avc: denied { remount } for pid=8590 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 281.741373][ T5835] Bluetooth: hci0: command tx timeout [ 281.759995][ T5830] block nbd2: Receive control failed (result -32) [ 281.805021][ T8583] block nbd2: shutting down sockets [ 281.890228][ T30] audit: type=1400 audit(1753903485.035:470): avc: denied { bind } for pid=8590 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 282.474684][ T6509] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.583657][ T30] audit: type=1400 audit(1753903486.135:471): avc: denied { bind } for pid=8596 comm="syz.1.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 283.660063][ T5835] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 283.667933][ T5830] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 284.043121][ T5830] Bluetooth: hci0: command tx timeout [ 284.407699][ T30] audit: type=1400 audit(1753903487.965:472): avc: denied { append } for pid=8618 comm="syz.2.575" name="event3" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 284.450544][ T30] audit: type=1400 audit(1753903487.995:473): avc: denied { read } for pid=8618 comm="syz.2.575" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 284.473323][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.902671][ T5908] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 285.232737][ T5908] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 285.263064][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.711167][ T6509] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 285.761165][ T30] audit: type=1400 audit(1753903488.895:474): avc: denied { write } for pid=8625 comm="syz.3.577" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 285.767112][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.804728][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 285.820275][ T5908] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 285.830046][ T5908] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 285.838682][ T5908] usb 2-1: Manufacturer: syz [ 285.858841][ T5908] usb 2-1: config 0 descriptor?? [ 285.934038][ T8631] PKCS8: Unsupported PKCS#8 version [ 285.982674][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.580'. [ 286.099783][ T5835] Bluetooth: hci0: command tx timeout [ 286.387600][ T5908] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 286.547495][ T5908] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 286.607714][ T30] audit: type=1400 audit(1753903490.165:475): avc: denied { create } for pid=8642 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 286.658762][ T8644] hub 6-0:1.0: USB hub found [ 286.665220][ T8644] hub 6-0:1.0: 1 port detected [ 287.010931][ T8643] netlink: 'syz.2.582': attribute type 10 has an invalid length. [ 287.407086][ T8647] Failed to initialize the IGMP autojoin socket (err -2) [ 287.850284][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.303005][ T5908] usb 2-1: reset high-speed USB device number 11 using dummy_hcd [ 288.547648][ T8538] netdevsim netdevsim0 netdevsim0: renamed from eth5 [ 289.242293][ T8538] netdevsim netdevsim0 netdevsim1: renamed from eth6 [ 289.356767][ T118] usb 2-1: USB disconnect, device number 11 [ 289.523912][ T8538] netdevsim netdevsim0 netdevsim2: renamed from eth7 [ 289.919397][ T5835] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 290.170616][ T5908] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 290.175196][ T8538] netdevsim netdevsim0 netdevsim3: renamed from eth8 [ 290.379597][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.751240][ T5908] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 290.829883][ T5908] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 290.845482][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.879337][ T5908] usb 6-1: config 0 descriptor?? [ 290.974244][ T30] audit: type=1400 audit(1753903494.525:476): avc: denied { setopt } for pid=8674 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 291.088943][ T8681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.592'. [ 291.548157][ T5908] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 291.690332][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.330602][ T5908] kovaplus 0003:1E7D:2D50.0003: couldn't init struct kovaplus_device [ 292.393596][ T5908] kovaplus 0003:1E7D:2D50.0003: couldn't install mouse [ 292.426854][ T5908] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -71 [ 292.481806][ T5908] usb 6-1: USB disconnect, device number 10 [ 293.748773][ T7867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 294.256410][ T8721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.265985][ T8716] FAULT_INJECTION: forcing a failure. [ 294.265985][ T8716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.410759][ T8716] CPU: 0 UID: 0 PID: 8716 Comm: syz.1.596 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 294.410782][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.410792][ T8716] Call Trace: [ 294.410798][ T8716] [ 294.410805][ T8716] dump_stack_lvl+0x16c/0x1f0 [ 294.410831][ T8716] should_fail_ex+0x512/0x640 [ 294.410860][ T8716] _copy_from_user+0x2e/0xd0 [ 294.410888][ T8716] kstrtouint_from_user+0xd6/0x1d0 [ 294.410915][ T8716] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 294.410935][ T8716] ? __lock_acquire+0xb8a/0x1c90 [ 294.410974][ T8716] proc_fail_nth_write+0x83/0x220 [ 294.410994][ T8716] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 294.411020][ T8716] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 294.411037][ T8716] vfs_write+0x29d/0x1150 [ 294.411058][ T8716] ? __pfx___mutex_lock+0x10/0x10 [ 294.411079][ T8716] ? __pfx_vfs_write+0x10/0x10 [ 294.411103][ T8716] ? __fget_files+0x20e/0x3c0 [ 294.411128][ T8716] ksys_write+0x12a/0x250 [ 294.411145][ T8716] ? __pfx_ksys_write+0x10/0x10 [ 294.411167][ T8716] do_syscall_64+0xcd/0x4c0 [ 294.411190][ T8716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.411208][ T8716] RIP: 0033:0x7f625ad8d45f [ 294.411223][ T8716] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 294.411240][ T8716] RSP: 002b:00007f625bbed030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 294.411257][ T8716] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f625ad8d45f [ 294.411269][ T8716] RDX: 0000000000000001 RSI: 00007f625bbed0a0 RDI: 0000000000000009 [ 294.411279][ T8716] RBP: 00007f625bbed090 R08: 0000000000000000 R09: 0000000000000000 [ 294.411290][ T8716] R10: 0000200000000680 R11: 0000000000000293 R12: 0000000000000001 [ 294.411301][ T8716] R13: 0000000000000000 R14: 00007f625afb6080 R15: 00007fff0e136878 [ 294.411325][ T8716] [ 294.468874][ T8721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.638402][ T8538] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 294.679616][ T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 295.085640][ T8538] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 295.225244][ T8538] wireguard: wg0: Could not create IPv4 socket [ 295.250908][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.262433][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.275204][ T8538] wireguard: wg1: Could not create IPv4 socket [ 295.297523][ T43] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 295.297729][ T8538] wireguard: wg2: Could not create IPv4 socket [ 295.408192][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.430164][ T43] usb 4-1: config 0 descriptor?? [ 296.061542][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 296.071475][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 296.078896][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 296.086669][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 296.094058][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 296.101491][ T43] usbhid 4-1:0.0: can't add hid device: -32 [ 296.108245][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 296.229074][ T43] usb 4-1: USB disconnect, device number 17 [ 296.568249][ T8734] syz.1.601: attempt to access beyond end of device [ 296.568249][ T8734] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 296.810489][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.178446][ T8748] FAULT_INJECTION: forcing a failure. [ 297.178446][ T8748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.235164][ T8748] CPU: 1 UID: 0 PID: 8748 Comm: syz.3.604 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 297.235189][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.235200][ T8748] Call Trace: [ 297.235207][ T8748] [ 297.235213][ T8748] dump_stack_lvl+0x16c/0x1f0 [ 297.235239][ T8748] should_fail_ex+0x512/0x640 [ 297.235267][ T8748] _copy_to_user+0x32/0xd0 [ 297.235298][ T8748] simple_read_from_buffer+0xcb/0x170 [ 297.235327][ T8748] proc_fail_nth_read+0x197/0x240 [ 297.235348][ T8748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.235368][ T8748] ? rw_verify_area+0xcf/0x680 [ 297.235393][ T8748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.235411][ T8748] vfs_read+0x1e4/0xc60 [ 297.235441][ T8748] ? __pfx___mutex_lock+0x10/0x10 [ 297.235463][ T8748] ? __pfx_vfs_read+0x10/0x10 [ 297.235497][ T8748] ? __fget_files+0x20e/0x3c0 [ 297.235522][ T8748] ksys_read+0x12a/0x250 [ 297.235537][ T8748] ? __pfx_ksys_read+0x10/0x10 [ 297.235554][ T8748] ? fput+0x70/0xf0 [ 297.235578][ T8748] do_syscall_64+0xcd/0x4c0 [ 297.235601][ T8748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.235619][ T8748] RIP: 0033:0x7f831358d3bc [ 297.235633][ T8748] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 297.235650][ T8748] RSP: 002b:00007f83143c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 297.235667][ T8748] RAX: ffffffffffffffda RBX: 00007f83137b5fa0 RCX: 00007f831358d3bc [ 297.235679][ T8748] RDX: 000000000000000f RSI: 00007f83143c20a0 RDI: 0000000000000003 [ 297.235689][ T8748] RBP: 00007f83143c2090 R08: 0000000000000000 R09: 0000000000000000 [ 297.235699][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.235710][ T8748] R13: 0000000000000000 R14: 00007f83137b5fa0 R15: 00007ffd56e5ffc8 [ 297.235734][ T8748] [ 297.423612][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.557352][ T5835] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 299.039031][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'. [ 299.414996][ T6341] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.002368][ T8779] FAULT_INJECTION: forcing a failure. [ 300.002368][ T8779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.017037][ T8779] CPU: 0 UID: 0 PID: 8779 Comm: syz.5.609 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 300.017062][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.017072][ T8779] Call Trace: [ 300.017078][ T8779] [ 300.017085][ T8779] dump_stack_lvl+0x16c/0x1f0 [ 300.017110][ T8779] should_fail_ex+0x512/0x640 [ 300.017138][ T8779] _copy_from_user+0x2e/0xd0 [ 300.017166][ T8779] copy_msghdr_from_user+0x98/0x160 [ 300.017187][ T8779] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 300.017219][ T8779] ___sys_sendmsg+0xfe/0x1d0 [ 300.017241][ T8779] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.017260][ T8779] ? __lock_acquire+0x622/0x1c90 [ 300.017309][ T8779] ? __mutex_unlock_slowpath+0x80/0x800 [ 300.017337][ T8779] __sys_sendmsg+0x16d/0x220 [ 300.017358][ T8779] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.017394][ T8779] do_syscall_64+0xcd/0x4c0 [ 300.017417][ T8779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.017435][ T8779] RIP: 0033:0x7f22ab78e9a9 [ 300.017448][ T8779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.017465][ T8779] RSP: 002b:00007f22ac56f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.017482][ T8779] RAX: ffffffffffffffda RBX: 00007f22ab9b5fa0 RCX: 00007f22ab78e9a9 [ 300.017494][ T8779] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 300.017504][ T8779] RBP: 00007f22ac56f090 R08: 0000000000000000 R09: 0000000000000000 [ 300.017514][ T8779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.017524][ T8779] R13: 0000000000000000 R14: 00007f22ab9b5fa0 R15: 00007ffc0fc87538 [ 300.017548][ T8779] [ 300.452399][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.464774][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.477394][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.501240][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.508944][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.633906][ T8782] Failed to initialize the IGMP autojoin socket (err -2) [ 301.703539][ T8806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46731 sclass=netlink_route_socket pid=8806 comm=syz.1.615 [ 301.929740][ T6341] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.654559][ T5835] Bluetooth: hci0: command tx timeout [ 302.837834][ T8782] netdevsim netdevsim0 netdevsim0: renamed from eth5 [ 302.939535][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 302.972912][ T8782] netdevsim netdevsim0 netdevsim1: renamed from eth6 [ 303.211905][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 303.822505][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.839810][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 303.866308][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 303.877476][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 303.899152][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.900906][ T8782] netdevsim netdevsim0 netdevsim2: renamed from eth7 [ 303.914268][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 303.942062][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 303.956468][ T10] usb 2-1: Manufacturer: syz [ 303.973678][ T10] usb 2-1: config 0 descriptor?? [ 304.017032][ T30] audit: type=1400 audit(1753903507.575:477): avc: denied { bind } for pid=8833 comm="syz.5.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 304.056804][ T8782] netdevsim netdevsim0 netdevsim3: renamed from eth8 [ 304.289460][ T10] rc_core: IR keymap rc-hauppauge not found [ 304.306770][ T10] Registered IR keymap rc-empty [ 304.322599][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.361737][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.404983][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 304.442495][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 304.474863][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.509894][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.544152][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.589784][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.621755][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.663416][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.702068][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.724805][ T8823] FAULT_INJECTION: forcing a failure. [ 304.724805][ T8823] name failslab, interval 1, probability 0, space 0, times 0 [ 304.738445][ T5835] Bluetooth: hci0: command tx timeout [ 304.744701][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.752380][ T8823] CPU: 0 UID: 0 PID: 8823 Comm: syz.1.618 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 304.752403][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.752413][ T8823] Call Trace: [ 304.752419][ T8823] [ 304.752426][ T8823] dump_stack_lvl+0x16c/0x1f0 [ 304.752455][ T8823] should_fail_ex+0x512/0x640 [ 304.752478][ T8823] ? fs_reclaim_acquire+0xae/0x150 [ 304.752502][ T8823] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 304.752522][ T8823] should_failslab+0xc2/0x120 [ 304.752541][ T8823] __kmalloc_noprof+0xd2/0x510 [ 304.752563][ T8823] tomoyo_realpath_from_path+0xc2/0x6e0 [ 304.752585][ T8823] ? tomoyo_profile+0x47/0x60 [ 304.752608][ T8823] tomoyo_path_number_perm+0x245/0x580 [ 304.752634][ T8823] ? tomoyo_path_number_perm+0x237/0x580 [ 304.752662][ T8823] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 304.752690][ T8823] ? find_held_lock+0x2b/0x80 [ 304.752735][ T8823] ? find_held_lock+0x2b/0x80 [ 304.752755][ T8823] ? hook_file_ioctl_common+0x145/0x410 [ 304.752783][ T8823] ? __fget_files+0x20e/0x3c0 [ 304.752805][ T8823] security_file_ioctl+0x9b/0x240 [ 304.752827][ T8823] __x64_sys_ioctl+0xb7/0x210 [ 304.752852][ T8823] do_syscall_64+0xcd/0x4c0 [ 304.752875][ T8823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.752893][ T8823] RIP: 0033:0x7f625ad8e9a9 [ 304.752907][ T8823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.752924][ T8823] RSP: 002b:00007f625bc0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.752941][ T8823] RAX: ffffffffffffffda RBX: 00007f625afb5fa0 RCX: 00007f625ad8e9a9 [ 304.752952][ T8823] RDX: 0000200000000080 RSI: 0000000040284504 RDI: 0000000000000005 [ 304.752963][ T8823] RBP: 00007f625bc0e090 R08: 0000000000000000 R09: 0000000000000000 [ 304.752973][ T8823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.752983][ T8823] R13: 0000000000000000 R14: 00007f625afb5fa0 R15: 00007fff0e136878 [ 304.753007][ T8823] [ 304.753036][ T8823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 304.799982][ T8782] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 304.819568][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.059533][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.068143][ T8782] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 305.081091][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 305.095033][ T8782] wireguard: wg0: Could not create IPv4 socket [ 305.106871][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 305.110298][ T8782] wireguard: wg1: Could not create IPv4 socket [ 305.244453][ T994] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.802945][ T10] usb 2-1: USB disconnect, device number 12 [ 305.839828][ T30] audit: type=1400 audit(1753903508.995:478): avc: denied { bind } for pid=8856 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 306.122900][ T30] audit: type=1400 audit(1753903509.685:479): avc: denied { bind } for pid=8867 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 306.175785][ T8782] wireguard: wg2: Could not create IPv4 socket [ 306.509839][ T43] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 306.682491][ T43] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 306.699541][ T43] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 306.709050][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 306.727469][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.756384][ T43] usb 4-1: config 0 descriptor?? [ 306.820068][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 306.983394][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.995985][ T10] usb 2-1: config 0 has no interfaces? [ 307.003748][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 307.012869][ T10] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 307.021164][ T10] usb 2-1: Manufacturer: syz [ 307.029011][ T10] usb 2-1: config 0 descriptor?? [ 307.310920][ T8904] FAULT_INJECTION: forcing a failure. [ 307.310920][ T8904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.324068][ T8904] CPU: 0 UID: 0 PID: 8904 Comm: syz.5.626 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 307.324091][ T8904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.324101][ T8904] Call Trace: [ 307.324107][ T8904] [ 307.324114][ T8904] dump_stack_lvl+0x16c/0x1f0 [ 307.324138][ T8904] should_fail_ex+0x512/0x640 [ 307.324166][ T8904] _copy_to_user+0x32/0xd0 [ 307.324194][ T8904] simple_read_from_buffer+0xcb/0x170 [ 307.324224][ T8904] proc_fail_nth_read+0x197/0x240 [ 307.324244][ T8904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.324264][ T8904] ? rw_verify_area+0xcf/0x680 [ 307.324289][ T8904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.324307][ T8904] vfs_read+0x1e4/0xc60 [ 307.324337][ T8904] ? __pfx___mutex_lock+0x10/0x10 [ 307.324358][ T8904] ? __pfx_vfs_read+0x10/0x10 [ 307.324391][ T8904] ? __fget_files+0x20e/0x3c0 [ 307.324417][ T8904] ksys_read+0x12a/0x250 [ 307.324432][ T8904] ? __pfx_ksys_read+0x10/0x10 [ 307.324455][ T8904] do_syscall_64+0xcd/0x4c0 [ 307.324478][ T8904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.324495][ T8904] RIP: 0033:0x7f22ab78d3bc [ 307.324509][ T8904] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 307.324525][ T8904] RSP: 002b:00007f22ac52d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 307.324542][ T8904] RAX: ffffffffffffffda RBX: 00007f22ab9b6160 RCX: 00007f22ab78d3bc [ 307.324554][ T8904] RDX: 000000000000000f RSI: 00007f22ac52d0a0 RDI: 0000000000000006 [ 307.324564][ T8904] RBP: 00007f22ac52d090 R08: 0000000000000000 R09: 000000000000001c [ 307.324575][ T8904] R10: 0000000020000841 R11: 0000000000000246 R12: 0000000000000001 [ 307.324586][ T8904] R13: 0000000000000000 R14: 00007f22ab9b6160 R15: 00007ffc0fc87538 [ 307.324610][ T8904] [ 307.509833][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.530886][ T9] usb 2-1: USB disconnect, device number 13 [ 307.722302][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.899542][ T8914] FAULT_INJECTION: forcing a failure. [ 307.899542][ T8914] name failslab, interval 1, probability 0, space 0, times 0 [ 307.912518][ T8914] CPU: 1 UID: 0 PID: 8914 Comm: syz.1.628 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 307.912542][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.912552][ T8914] Call Trace: [ 307.912558][ T8914] [ 307.912565][ T8914] dump_stack_lvl+0x16c/0x1f0 [ 307.912591][ T8914] should_fail_ex+0x512/0x640 [ 307.912614][ T8914] ? __kvmalloc_node_noprof+0x124/0x620 [ 307.912643][ T8914] should_failslab+0xc2/0x120 [ 307.912663][ T8914] __kvmalloc_node_noprof+0x137/0x620 [ 307.912690][ T8914] ? __pfx___mutex_lock+0x10/0x10 [ 307.912710][ T8914] ? traverse.part.0.constprop.0+0x392/0x640 [ 307.912742][ T8914] ? __kernel_text_address+0xd/0x40 [ 307.912766][ T8914] ? traverse.part.0.constprop.0+0x392/0x640 [ 307.912791][ T8914] traverse.part.0.constprop.0+0x392/0x640 [ 307.912826][ T8914] seq_read_iter+0x932/0x12c0 [ 307.912854][ T8914] ? _kstrtoull+0x145/0x200 [ 307.912881][ T8914] seq_read+0x39e/0x4e0 [ 307.912907][ T8914] ? __pfx_seq_read+0x10/0x10 [ 307.912942][ T8914] ? import_ubuf+0x1b6/0x220 [ 307.912970][ T8914] ? avc_policy_seqno+0x9/0x20 [ 307.912996][ T8914] ? __pfx_seq_read+0x10/0x10 [ 307.913022][ T8914] proc_reg_read+0x23d/0x330 [ 307.913046][ T8914] ? __pfx_proc_reg_read+0x10/0x10 [ 307.913068][ T8914] vfs_readv+0x5c1/0x8b0 [ 307.913098][ T8914] ? __pfx_vfs_readv+0x10/0x10 [ 307.913123][ T8914] ? find_held_lock+0x2b/0x80 [ 307.913160][ T8914] ? __fget_files+0x20e/0x3c0 [ 307.913184][ T8914] ? do_preadv+0x1a6/0x270 [ 307.913208][ T8914] do_preadv+0x1a6/0x270 [ 307.913233][ T8914] ? __pfx_do_preadv+0x10/0x10 [ 307.913265][ T8914] do_syscall_64+0xcd/0x4c0 [ 307.913287][ T8914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.913305][ T8914] RIP: 0033:0x7f625ad8e9a9 [ 307.913319][ T8914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.913335][ T8914] RSP: 002b:00007f625bbcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 307.913352][ T8914] RAX: ffffffffffffffda RBX: 00007f625afb6160 RCX: 00007f625ad8e9a9 [ 307.913364][ T8914] RDX: 0000000000000001 RSI: 0000200000003580 RDI: 0000000000000008 [ 307.913375][ T8914] RBP: 00007f625bbcc090 R08: 0000000000000008 R09: 0000000000000000 [ 307.913385][ T8914] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 307.913396][ T8914] R13: 0000000000000000 R14: 00007f625afb6160 R15: 00007fff0e136878 [ 307.913420][ T8914] [ 308.026105][ T30] audit: type=1326 audit(1753903511.385:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb098e9a9 code=0x7fc00000 [ 308.188970][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.733540][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'. [ 308.964565][ T30] audit: type=1400 audit(1753903512.525:481): avc: denied { read } for pid=8924 comm="syz.1.632" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 308.987007][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.997282][ T8928] Failed to initialize the IGMP autojoin socket (err -2) [ 309.070880][ T30] audit: type=1400 audit(1753903512.525:482): avc: denied { open } for pid=8924 comm="syz.1.632" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 309.292258][ T43] usb 4-1: USB disconnect, device number 18 [ 309.437617][ T30] audit: type=1400 audit(1753903512.995:483): avc: denied { map } for pid=8924 comm="syz.1.632" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 309.482658][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 309.488778][ T8933] binder: 8924:8933 ioctl 4018620d 200000004a80 returned -16 [ 309.587428][ T30] audit: type=1400 audit(1753903513.145:484): avc: denied { connect } for pid=8934 comm="syz.3.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 310.922721][ T7867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 312.507217][ T30] audit: type=1400 audit(1753903516.065:485): avc: denied { create } for pid=8987 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 312.568116][ T30] audit: type=1400 audit(1753903516.105:486): avc: denied { write } for pid=8984 comm="syz.2.637" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.406269][ T30] audit: type=1400 audit(1753903516.125:487): avc: denied { listen } for pid=8987 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 313.507483][ T6509] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.621656][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.640'. [ 313.655774][ T30] audit: type=1400 audit(1753903516.125:488): avc: denied { connect } for pid=8987 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 313.777525][ T5884] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 313.812038][ T30] audit: type=1400 audit(1753903516.835:489): avc: denied { kexec_image_load } for pid=8984 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 313.946723][ T30] audit: type=1400 audit(1753903517.375:490): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 313.996090][ T5884] usb 6-1: device descriptor read/64, error -71 [ 314.107397][ T9009] debugfs: 'ttyS3' already exists in 'caif_serial' [ 314.153919][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.162440][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.170372][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.178733][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.188281][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.218693][ T9017] Failed to initialize the IGMP autojoin socket (err -2) [ 314.234736][ T9023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.645'. [ 314.239794][ T5884] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 314.260794][ T30] audit: type=1400 audit(1753903517.805:491): avc: denied { read write } for pid=9021 comm="syz.3.646" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 314.285120][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.325828][ T30] audit: type=1400 audit(1753903517.805:492): avc: denied { open } for pid=9021 comm="syz.3.646" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 314.429730][ T5884] usb 6-1: device descriptor read/64, error -71 [ 314.464099][ T9023] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9023 comm=syz.1.645 [ 314.608837][ T5884] usb usb6-port1: attempt power cycle [ 315.043125][ T5884] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 315.659197][ T5884] usb 6-1: device descriptor read/8, error -71 [ 315.729317][ T9051] FAULT_INJECTION: forcing a failure. [ 315.729317][ T9051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.849562][ T9051] CPU: 1 UID: 0 PID: 9051 Comm: syz.5.650 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 315.849587][ T9051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.849597][ T9051] Call Trace: [ 315.849603][ T9051] [ 315.849610][ T9051] dump_stack_lvl+0x16c/0x1f0 [ 315.849634][ T9051] should_fail_ex+0x512/0x640 [ 315.849662][ T9051] _copy_to_user+0x32/0xd0 [ 315.849691][ T9051] simple_read_from_buffer+0xcb/0x170 [ 315.849721][ T9051] proc_fail_nth_read+0x197/0x240 [ 315.849740][ T9051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.849760][ T9051] ? rw_verify_area+0xcf/0x680 [ 315.849784][ T9051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.849802][ T9051] vfs_read+0x1e4/0xc60 [ 315.849831][ T9051] ? __pfx___mutex_lock+0x10/0x10 [ 315.849852][ T9051] ? __pfx_vfs_read+0x10/0x10 [ 315.849884][ T9051] ? __fget_files+0x20e/0x3c0 [ 315.849915][ T9051] ksys_read+0x12a/0x250 [ 315.849934][ T9051] ? __pfx_ksys_read+0x10/0x10 [ 315.849949][ T9051] ? fput+0x70/0xf0 [ 315.849973][ T9051] do_syscall_64+0xcd/0x4c0 [ 315.849995][ T9051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.850013][ T9051] RIP: 0033:0x7f22ab78d3bc [ 315.850027][ T9051] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 315.850043][ T9051] RSP: 002b:00007f22ac56f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 315.850060][ T9051] RAX: ffffffffffffffda RBX: 00007f22ab9b5fa0 RCX: 00007f22ab78d3bc [ 315.850072][ T9051] RDX: 000000000000000f RSI: 00007f22ac56f0a0 RDI: 0000000000000004 [ 315.850081][ T9051] RBP: 00007f22ac56f090 R08: 0000000000000000 R09: 0000000000000000 [ 315.850091][ T9051] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 315.850101][ T9051] R13: 0000000000000000 R14: 00007f22ab9b5fa0 R15: 00007ffc0fc87538 [ 315.850125][ T9051] [ 316.043364][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.249798][ T5835] Bluetooth: hci0: command tx timeout [ 316.756964][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.763322][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.805325][ T994] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.138598][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'. [ 317.881448][ T43] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 318.112905][ T43] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 318.180942][ T43] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 318.222680][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.241900][ T43] usb 4-1: Product: syz [ 318.246136][ T43] usb 4-1: Manufacturer: syz [ 318.278542][ T43] usb 4-1: SerialNumber: syz [ 318.324919][ T43] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 318.335655][ T5835] Bluetooth: hci0: command tx timeout [ 318.856719][ T9094] fuse: Bad value for 'fd' [ 318.959706][ T9017] netdevsim netdevsim0 netdevsim0: renamed from eth5 [ 319.016186][ T9017] netdevsim netdevsim0 netdevsim1: renamed from eth6 [ 319.064467][ T9017] netdevsim netdevsim0 netdevsim2: renamed from eth7 [ 319.954295][ T6341] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 320.130706][ T9017] netdevsim netdevsim0 netdevsim3: renamed from eth8 [ 320.218674][ T30] audit: type=1400 audit(1753903523.775:493): avc: denied { setopt } for pid=9108 comm="syz.5.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 320.299939][ T5884] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 320.381537][ T43] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 320.407306][ T30] audit: type=1400 audit(1753903523.965:494): avc: denied { mounton } for pid=9108 comm="syz.5.661" path="/syzcgroup/unified/syz5" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 320.439965][ T5835] Bluetooth: hci0: command tx timeout [ 320.532493][ T5884] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 320.606492][ T5884] usb 2-1: can't read configurations, error -61 [ 320.685677][ T9125] 9pnet_fd: Insufficient options for proto=fd [ 320.696987][ T30] audit: type=1400 audit(1753903523.965:495): avc: denied { mount } for pid=9108 comm="syz.5.661" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 320.920617][ T5884] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 321.411466][ T5876] usb 4-1: USB disconnect, device number 19 [ 321.535611][ T30] audit: type=1400 audit(1753903525.095:496): avc: denied { ioctl } for pid=9135 comm="syz.3.663" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 321.611126][ T5884] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 321.618723][ T5884] usb 2-1: can't read configurations, error -61 [ 321.647053][ T5884] usb usb2-port1: attempt power cycle [ 322.415168][ T5877] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 322.423151][ T5884] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 322.450322][ T3529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.470682][ T5884] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 322.500710][ T5835] Bluetooth: hci0: command tx timeout [ 322.509104][ T5884] usb 2-1: can't read configurations, error -61 [ 322.545758][ T9017] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 322.609851][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 322.649525][ T5884] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 322.664840][ T5877] usb 4-1: descriptor type invalid, skip [ 322.675184][ T9017] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 322.704150][ T5877] usb 4-1: config 0 has no interfaces? [ 322.730818][ T5884] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 322.747770][ T5877] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 322.759277][ T9017] wireguard: wg0: Could not create IPv4 socket [ 322.766049][ T5884] usb 2-1: can't read configurations, error -61 [ 322.772484][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.790004][ T5884] usb usb2-port1: unable to enumerate USB device [ 322.807375][ T9017] wireguard: wg1: Could not create IPv4 socket [ 322.829657][ T5877] usb 4-1: Product: syz [ 322.838762][ T9017] wireguard: wg2: Could not create IPv4 socket [ 322.855154][ T5877] usb 4-1: Manufacturer: syz [ 322.879779][ T5877] usb 4-1: SerialNumber: syz [ 322.913628][ T5877] usb 4-1: config 0 descriptor?? [ 324.862451][ T5908] usb 4-1: USB disconnect, device number 20 [ 325.210856][ T5835] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 326.490897][ T9213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.537906][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 326.892252][ T6509] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.910192][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 326.933099][ T43] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 326.954254][ T43] usb 3-1: config 0 has no interface number 0 [ 326.983379][ T43] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.004375][ T43] usb 3-1: config 0 interface 85 has no altsetting 0 [ 327.030088][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 327.046246][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.066196][ T43] usb 3-1: Product: syz [ 327.071003][ T43] usb 3-1: Manufacturer: syz [ 327.084560][ T43] usb 3-1: SerialNumber: syz [ 327.110417][ T43] usb 3-1: config 0 descriptor?? [ 327.645353][ T9212] ------------[ cut here ]------------ [ 327.650912][ T9212] WARNING: CPU: 1 PID: 9212 at kernel/kcov.c:872 kcov_remote_start+0xf7/0x6d0 [ 327.659752][ T9212] Modules linked in: [ 327.663721][ T9212] CPU: 1 UID: 0 PID: 9212 Comm: syz.3.676 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 327.675270][ T9212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.685309][ T9212] RIP: 0010:kcov_remote_start+0xf7/0x6d0 [ 327.690929][ T9212] Code: 65 4c 8b 3d 23 28 14 12 4d 89 7c 24 28 8b 95 18 16 00 00 65 8b 05 29 28 14 12 a9 00 01 ff 00 75 53 81 e2 ff ff ff bf 74 4b 90 <0f> 0b 90 e8 f1 fc ce 09 44 8b 1d 5a 98 23 19 89 c0 48 03 1c c5 20 [ 327.710529][ T9212] RSP: 0018:ffffc90002ef7490 EFLAGS: 00010002 [ 327.716569][ T9212] RAX: 0000000080000200 RBX: ffffffff93d06968 RCX: 0000000000000001 [ 327.724516][ T9212] RDX: 0000000000000002 RSI: ffffffff8dde96b2 RDI: ffffffff8c15ed80 [ 327.732468][ T9212] RBP: ffff8880251b4880 R08: 56453f5e12f8b5c9 R09: 0000000000000038 [ 327.740424][ T9212] R10: ffffc90002ef7350 R11: 0000000000000001 R12: ffff8880b8528968 [ 327.748387][ T9212] R13: 0000000000000200 R14: 0000000000000000 R15: ffff8880251b4880 [ 327.756345][ T9212] FS: 00007f83143806c0(0000) GS:ffff888124822000(0000) knlGS:0000000000000000 [ 327.765261][ T9212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.771831][ T9212] CR2: 0000200000003ff6 CR3: 0000000051bc8000 CR4: 00000000003526f0 [ 327.779787][ T9212] Call Trace: [ 327.783048][ T9212] [ 327.785967][ T9212] ieee80211_rx_list+0x45f/0x2980 [ 327.790987][ T9212] ? __lock_acquire+0x622/0x1c90 [ 327.795922][ T9212] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 327.801368][ T9212] ? __lock_acquire+0xb8a/0x1c90 [ 327.806303][ T9212] ? lock_acquire+0x179/0x350 [ 327.810970][ T9212] ieee80211_rx_napi+0xdc/0x410 [ 327.815808][ T9212] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 327.821251][ T9212] ? lockdep_hardirqs_on+0x7c/0x110 [ 327.826435][ T9212] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 327.832231][ T9212] ieee80211_handle_queued_frames+0xd5/0x130 [ 327.838205][ T9212] ? ieee80211_stop_device+0x14/0x110 [ 327.843574][ T9212] ieee80211_stop_device+0x32/0x110 [ 327.848771][ T9212] ieee80211_do_stop+0x1ac3/0x2520 [ 327.853879][ T9212] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 327.859327][ T9212] ? do_raw_spin_lock+0x12c/0x2b0 [ 327.864348][ T9212] ? mark_held_locks+0x49/0x80 [ 327.869107][ T9212] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 327.874907][ T9212] ? __pfx_ieee80211_stop+0x10/0x10 [ 327.880094][ T9212] ieee80211_stop+0x165/0x300 [ 327.884763][ T9212] ? __pfx_ieee80211_stop+0x10/0x10 [ 327.889945][ T9212] __dev_close_many+0x298/0x770 [ 327.894793][ T9212] ? __pfx___dev_close_many+0x10/0x10 [ 327.900165][ T9212] dev_close_many+0x233/0x630 [ 327.904834][ T9212] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 327.910627][ T9212] ? __pfx_dev_close_many+0x10/0x10 [ 327.915823][ T9212] ? __mutex_lock+0x1c2/0x1070 [ 327.920574][ T9212] ? cfg80211_rfkill_set_block+0x29/0x50 [ 327.926203][ T9212] netif_close+0x17f/0x230 [ 327.930613][ T9212] ? __pfx_netif_close+0x10/0x10 [ 327.935547][ T9212] dev_close+0xaa/0x240 [ 327.939697][ T9212] cfg80211_shutdown_all_interfaces+0x9a/0x200 [ 327.945856][ T9212] cfg80211_rfkill_set_block+0x35/0x50 [ 327.951309][ T9212] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 327.957458][ T9212] rfkill_set_block+0x1fe/0x550 [ 327.962307][ T9212] rfkill_fop_write+0x2c0/0x580 [ 327.967152][ T9212] ? __pfx_rfkill_fop_write+0x10/0x10 [ 327.972514][ T9212] ? __pfx_bpf_lsm_kernfs_init_security+0x10/0x10 [ 327.978916][ T9212] ? security_file_permission+0x71/0x210 [ 327.984539][ T9212] ? rw_verify_area+0xcf/0x680 [ 327.989298][ T9212] ? __pfx_rfkill_fop_write+0x10/0x10 [ 327.994663][ T9212] vfs_write+0x29d/0x1150 [ 327.998983][ T9212] ? __pfx_vfs_write+0x10/0x10 [ 328.003727][ T9212] ? find_held_lock+0x2b/0x80 [ 328.008395][ T9212] ? __fget_files+0x204/0x3c0 [ 328.013059][ T9212] ? __fget_files+0x20e/0x3c0 [ 328.017727][ T9212] ksys_write+0x1f8/0x250 [ 328.022042][ T9212] ? __pfx_ksys_write+0x10/0x10 [ 328.026882][ T9212] do_syscall_64+0xcd/0x4c0 [ 328.031375][ T9212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.037252][ T9212] RIP: 0033:0x7f831358e9a9 [ 328.041652][ T9212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.061248][ T9212] RSP: 002b:00007f8314380038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 328.069647][ T9212] RAX: ffffffffffffffda RBX: 00007f83137b6160 RCX: 00007f831358e9a9 [ 328.077601][ T9212] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 328.085557][ T9212] RBP: 00007f8313610d69 R08: 0000000000000000 R09: 0000000000000000 [ 328.093513][ T9212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.101468][ T9212] R13: 0000000000000000 R14: 00007f83137b6160 R15: 00007ffd56e5ffc8 [ 328.109437][ T9212] [ 328.112441][ T9212] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 328.119703][ T9212] CPU: 1 UID: 0 PID: 9212 Comm: syz.3.676 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 328.131227][ T9212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 328.141264][ T9212] Call Trace: [ 328.144526][ T9212] [ 328.147441][ T9212] dump_stack_lvl+0x3d/0x1f0 [ 328.152019][ T9212] panic+0x71c/0x800 [ 328.155909][ T9212] ? __pfx_panic+0x10/0x10 [ 328.160318][ T9212] ? show_trace_log_lvl+0x29b/0x3e0 [ 328.165518][ T9212] ? kcov_remote_start+0xf7/0x6d0 [ 328.170529][ T9212] check_panic_on_warn+0xab/0xb0 [ 328.175462][ T9212] __warn+0xf6/0x3c0 [ 328.179339][ T9212] ? kcov_remote_start+0xf7/0x6d0 [ 328.184351][ T9212] report_bug+0x3c3/0x580 [ 328.188667][ T9212] ? kcov_remote_start+0xf7/0x6d0 [ 328.193682][ T9212] handle_bug+0x184/0x210 [ 328.198001][ T9212] exc_invalid_op+0x17/0x50 [ 328.202497][ T9212] asm_exc_invalid_op+0x1a/0x20 [ 328.207333][ T9212] RIP: 0010:kcov_remote_start+0xf7/0x6d0 [ 328.212953][ T9212] Code: 65 4c 8b 3d 23 28 14 12 4d 89 7c 24 28 8b 95 18 16 00 00 65 8b 05 29 28 14 12 a9 00 01 ff 00 75 53 81 e2 ff ff ff bf 74 4b 90 <0f> 0b 90 e8 f1 fc ce 09 44 8b 1d 5a 98 23 19 89 c0 48 03 1c c5 20 [ 328.232547][ T9212] RSP: 0018:ffffc90002ef7490 EFLAGS: 00010002 [ 328.238599][ T9212] RAX: 0000000080000200 RBX: ffffffff93d06968 RCX: 0000000000000001 [ 328.246555][ T9212] RDX: 0000000000000002 RSI: ffffffff8dde96b2 RDI: ffffffff8c15ed80 [ 328.254512][ T9212] RBP: ffff8880251b4880 R08: 56453f5e12f8b5c9 R09: 0000000000000038 [ 328.262480][ T9212] R10: ffffc90002ef7350 R11: 0000000000000001 R12: ffff8880b8528968 [ 328.270438][ T9212] R13: 0000000000000200 R14: 0000000000000000 R15: ffff8880251b4880 [ 328.278421][ T9212] ieee80211_rx_list+0x45f/0x2980 [ 328.283439][ T9212] ? __lock_acquire+0x622/0x1c90 [ 328.288384][ T9212] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 328.293839][ T9212] ? __lock_acquire+0xb8a/0x1c90 [ 328.298777][ T9212] ? lock_acquire+0x179/0x350 [ 328.303447][ T9212] ieee80211_rx_napi+0xdc/0x410 [ 328.308287][ T9212] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 328.313736][ T9212] ? lockdep_hardirqs_on+0x7c/0x110 [ 328.318922][ T9212] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 328.324719][ T9212] ieee80211_handle_queued_frames+0xd5/0x130 [ 328.330704][ T9212] ? ieee80211_stop_device+0x14/0x110 [ 328.336076][ T9212] ieee80211_stop_device+0x32/0x110 [ 328.341269][ T9212] ieee80211_do_stop+0x1ac3/0x2520 [ 328.346377][ T9212] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 328.351828][ T9212] ? do_raw_spin_lock+0x12c/0x2b0 [ 328.356846][ T9212] ? mark_held_locks+0x49/0x80 [ 328.361603][ T9212] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 328.367397][ T9212] ? __pfx_ieee80211_stop+0x10/0x10 [ 328.372582][ T9212] ieee80211_stop+0x165/0x300 [ 328.377245][ T9212] ? __pfx_ieee80211_stop+0x10/0x10 [ 328.382428][ T9212] __dev_close_many+0x298/0x770 [ 328.387273][ T9212] ? __pfx___dev_close_many+0x10/0x10 [ 328.392645][ T9212] dev_close_many+0x233/0x630 [ 328.397313][ T9212] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 328.403108][ T9212] ? __pfx_dev_close_many+0x10/0x10 [ 328.408296][ T9212] ? __mutex_lock+0x1c2/0x1070 [ 328.413051][ T9212] ? cfg80211_rfkill_set_block+0x29/0x50 [ 328.418693][ T9212] netif_close+0x17f/0x230 [ 328.423103][ T9212] ? __pfx_netif_close+0x10/0x10 [ 328.428039][ T9212] dev_close+0xaa/0x240 [ 328.432188][ T9212] cfg80211_shutdown_all_interfaces+0x9a/0x200 [ 328.438340][ T9212] cfg80211_rfkill_set_block+0x35/0x50 [ 328.443792][ T9212] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 328.449941][ T9212] rfkill_set_block+0x1fe/0x550 [ 328.454791][ T9212] rfkill_fop_write+0x2c0/0x580 [ 328.459636][ T9212] ? __pfx_rfkill_fop_write+0x10/0x10 [ 328.465001][ T9212] ? __pfx_bpf_lsm_kernfs_init_security+0x10/0x10 [ 328.471405][ T9212] ? security_file_permission+0x71/0x210 [ 328.477028][ T9212] ? rw_verify_area+0xcf/0x680 [ 328.481784][ T9212] ? __pfx_rfkill_fop_write+0x10/0x10 [ 328.487146][ T9212] vfs_write+0x29d/0x1150 [ 328.491466][ T9212] ? __pfx_vfs_write+0x10/0x10 [ 328.496210][ T9212] ? find_held_lock+0x2b/0x80 [ 328.500874][ T9212] ? __fget_files+0x204/0x3c0 [ 328.505538][ T9212] ? __fget_files+0x20e/0x3c0 [ 328.510205][ T9212] ksys_write+0x1f8/0x250 [ 328.514518][ T9212] ? __pfx_ksys_write+0x10/0x10 [ 328.519359][ T9212] do_syscall_64+0xcd/0x4c0 [ 328.523853][ T9212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.529730][ T9212] RIP: 0033:0x7f831358e9a9 [ 328.534133][ T9212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.553729][ T9212] RSP: 002b:00007f8314380038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 328.562133][ T9212] RAX: ffffffffffffffda RBX: 00007f83137b6160 RCX: 00007f831358e9a9 [ 328.570088][ T9212] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 328.578040][ T9212] RBP: 00007f8313610d69 R08: 0000000000000000 R09: 0000000000000000 [ 328.586007][ T9212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.593969][ T9212] R13: 0000000000000000 R14: 00007f83137b6160 R15: 00007ffd56e5ffc8 [ 328.601936][ T9212] [ 328.605110][ T9212] Kernel Offset: disabled [ 328.609413][ T9212] Rebooting in 86400 seconds..