last executing test programs: 4m56.498113808s ago: executing program 4 (id=2277): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x48, 0x9, 0x0, 0x3334}, {0x20, 0x1, 0x0, 0xfffff00c}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9ffc) 4m56.282893505s ago: executing program 4 (id=2280): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0xc048aeca, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x2}) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000b00000c00090008000000", @ANYRES32=0x0, @ANYBLOB="14000500000000000000"], 0x3c}, 0x1, 0x11}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x702, 0x13, 0x0, &(0x7f0000000440)="6091577f3d64241f94a71ec21ae00000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x4004, @fd_index, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) r7 = dup(r2) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 4m53.158376886s ago: executing program 4 (id=2285): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a40000003a002902000000000000a60002"], 0xa4}}, 0x0) 4m52.095245666s ago: executing program 3 (id=2287): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102376, 0x18fe8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x480c0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(r4) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x48, 0x9, 0x0, 0x3334}, {0x20, 0x1, 0x0, 0xbffff038}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9ffc) accept4(r0, &(0x7f0000000180)=@nl=@proc, 0x0, 0x80000) sendmmsg$inet(r5, &(0x7f0000001300), 0x0, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socket(0x10, 0xa1c440212d0ed55f, 0x0) 4m51.456010863s ago: executing program 2 (id=2289): socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102376, 0x18fe8) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(r3) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x48, 0x9, 0x0, 0x3334}, {0x20, 0x1, 0x0, 0xfffff010}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) 4m51.083358439s ago: executing program 3 (id=2290): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x48, 0x9, 0x0, 0x3334}, {0x20, 0x1, 0x0, 0xfffff00c}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9ffc) 4m51.032501245s ago: executing program 0 (id=2291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$EVIOCGMTSLOTS(r9, 0x8040450a, &(0x7f0000000200)=""/157) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r10, 0x0, 0x9, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0xffffffffffffffff, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r11, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r12}) close_range(r2, 0xffffffffffffffff, 0x0) r13 = gettid() r14 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r14, 0x10c, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44002}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000bbdffc)) 4m50.671373793s ago: executing program 3 (id=2292): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100030000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x40) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x43}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r5) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000004c0)={0x14, r6, 0x70d, 0x40}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) 4m49.375650247s ago: executing program 2 (id=2293): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x828) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x0, 0x2) sched_getaffinity(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r2 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x2) sendfile(r3, r1, 0x0, 0x1f) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {r4, r5+60000000}}, 0x0) open$dir(0x0, 0x200800, 0xa) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 4m49.306440865s ago: executing program 0 (id=2294): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x13, 0x0, &(0x7f0000000580)="072731a0de207a5d0a00000000daf6ec141d8a", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='fdinfo\x00') fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0/file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m49.194712689s ago: executing program 0 (id=2295): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000100001080000000000000000b6050000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 4m49.144263611s ago: executing program 0 (id=2296): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlockall(0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101040, 0x0) socket(0x400000000010, 0x3, 0x0) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28102) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000001940), r6) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fedbdf2510000000050010000900000008000100", @ANYRES32=0x0, @ANYBLOB="06001100622d"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x8040) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840), &(0x7f0000000880), 0x0, 0x0, 0x0, 0x0, r5}) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x3, &(0x7f0000000040)) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) ptrace$setsig(0x4203, r8, 0x1, &(0x7f00000000c0)={0x0, 0x6, 0x1}) 4m48.454968357s ago: executing program 1 (id=2298): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000000240)={0x2, 0x2, 0x46}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf256f00000008000300", @ANYRES32=r5], 0x84}, 0x1, 0x0, 0x0, 0x40080}, 0xc0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="82843c4f9ebf51c66b3aa307feffffff02200000ebeea2d48964d2184cc17e4a5db8f916680819e6561ad19b3c22990f22eb99269e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000800), &(0x7f0000000840)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_SET_CONFIG(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x20040040}, 0x4c005) recvmmsg(r11, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)=""/169, 0xa9}], 0x2}, 0x2}], 0x1, 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="000000000400"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m48.447061328s ago: executing program 4 (id=2299): r0 = syz_io_uring_setup(0x231, 0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x22, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x72) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x1, 0xb9}, &(0x7f0000000340), &(0x7f0000002300)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x17, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='test_pages_isolated\x00', r2}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000180)={0x0, 0x9, 0x92, 0x8, 0x9f, 0xffffffff, &(0x7f0000019080)="193ef711cfee07aac687ccbd4c017a4c38d058f8668af43162ff8921b939d6ce666225493526cfbe8b7881dbe8867bb72a4d43a2f7cb6e8464366693b33524ac808040d7e385e70e7c61e9e64fc23c6b69e8e9071410e5183d3e3bc0d5119a38421370311fd1e576bbdeb285464d3140aa4b0c528fb6b9bc869a6e2d0671f713d678f120b6c3bfb144ccc956e19d681612ce67cad126db9d927c53814a2f41"}) 4m48.308569685s ago: executing program 1 (id=2300): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r1) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102376, 0x18fe8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(r4) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x6, &(0x7f0000000240)=[{0x2, 0x23, 0x10, 0x3}, {0x9fad, 0x6, 0x8, 0x6}, {0x400, 0xb, 0x3}, {0x1047, 0x2, 0xfa, 0x1}, {0x1000, 0x4, 0x5, 0x45d400}, {0x200, 0x9c, 0xe, 0xfffffffe}]}, 0x10) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0x9ffc) accept4(r0, &(0x7f0000000180)=@nl=@proc, 0x0, 0x80000) sendmmsg$inet(r5, &(0x7f0000001300), 0x0, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socket(0x10, 0xa1c440212d0ed55f, 0x0) 4m48.090129849s ago: executing program 0 (id=2301): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x22050a0, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f00000000c0)={0xa8, 0x0, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x10201, 0x1, 0x2000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x8002) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f00000001c0)={0x5, 0x0, 0x0, 'queue1\x00', 0xbc}) recvmsg$can_raw(r1, &(0x7f0000000680)={&(0x7f0000000280)=@can, 0x80, &(0x7f0000000600)=[{&(0x7f0000000300)=""/87, 0x57}, {&(0x7f0000000380)=""/206, 0xce}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/24, 0x18}, {&(0x7f00000005c0)=""/29, 0x1d}], 0x5}, 0x21) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x50, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14}}, 0x78}}, 0xc04e114c2f60893c) r4 = open$dir(&(0x7f0000000800)='./file0\x00', 0x101, 0x6) getdents(r4, &(0x7f0000000840)=""/186, 0xba) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r5 = getpid() ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000900)={0x5, 0x0, [{}, {}, {}, {}, {}]}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000a00)={0x14}) mount$bind(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x2000000, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000e00)={0x0, @reserved}) lremovexattr(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)=@random={'osx.', '\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) statx(r4, &(0x7f0000000f80)='./file0\x00', 0x0, 0x4, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r7, r8) r9 = syz_open_procfs(r5, &(0x7f00000010c0)='cgroup\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0x7d, 0x0, 0x2d, 0x4}, @func={0x7, 0x0, 0x0, 0xc, 0x2}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x52, 0x8}, @restrict={0xf}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000001180)=""/170, 0x54, 0xaa, 0x0, 0x1, 0x0, @void, @value}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{r9}, &(0x7f0000001280), &(0x7f00000012c0)=r9}, 0x20) syz_usb_connect$cdc_ncm(0x1, 0x1a2, &(0x7f0000001340)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x190, 0x2, 0x1, 0xda, 0x140, 0xf7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "7f3e234c"}, {0x5, 0x24, 0x0, 0x6f5}, {0xd, 0x24, 0xf, 0x1, 0x10, 0xfffc, 0x67f, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0xc0, 0x5, 0x80, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @mdlm_detail={0xfb, 0x24, 0x13, 0xfc, "23eb4336032a87023f1753838a592c27c788a05a3c4f6cef091a5fe464e83675ddc114f0d1c4c5d5c85cef80b7df996f68e2205d6cd9e418810d8df4984264e01297465ead30d4975395049cb836541af578e926d504b258473cf72fa9a706a0a3678d9b9347d93a0d63db8193e9396ae63363d83b794f03b9c4e80e9eba248ed100813a4ab00927c3148303fc7370584928c660f828f451dba8e649ed6d0c51b7e3d2748edec9272655e8a77e105d62d99a0318770b53d5815677699de33bb35f5d36aaa0ade1590d005bf186ba738192d46999ead4a387d398d5d0ed0a8f831501896eeb5496ace3d7f3a95029cf7f49008c589867b2"}, @country_functional={0xc, 0x24, 0x7, 0x6e, 0x0, [0x100, 0xfffc, 0x5]}, @country_functional={0x8, 0x24, 0x7, 0x4, 0x2, [0x9]}, @mdlm={0x15, 0x24, 0x12, 0x400}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x7f, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x9, 0x7}}}}}}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x200, 0x3, 0x1, 0x6, 0x20, 0x7}, 0x3f, &(0x7f0000001540)={0x5, 0xf, 0x3f, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x5e, 0x8, 0x9, 0xd0}, @ssp_cap={0x24, 0x10, 0xa, 0xa, 0x6, 0x4, 0xff0f, 0x4, [0xff00, 0xc030, 0x30, 0xc000, 0xff00, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x3, 0x9, 0xc, 0x7}]}, 0x2, [{0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x427}}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000001640), 0x2040, 0x0) syz_io_uring_setup(0x5e47, &(0x7f0000001680)={0x0, 0x9653, 0x8, 0x1, 0x1af, 0x0, r9}, &(0x7f0000001700)=0x0, &(0x7f0000001740)) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r6, 0x10000000) syz_io_uring_submit(r10, r11, &(0x7f00000017c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r6, &(0x7f0000001780)={0x2004}, r2}) 4m47.731517185s ago: executing program 1 (id=2302): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) ppoll(&(0x7f00000001c0)=[{r1, 0x1684}], 0x200000000000014d, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$setown(r2, 0x8, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000000)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r5], 0x20}}, 0x0) 4m47.670582241s ago: executing program 1 (id=2303): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x281, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x1, @empty}}, 0x0, 0x0, 0x3fb, 0x0, 0x32, 0xfffffffd}, 0x9c) (async) sendmmsg$inet6(r1, 0x0, 0x0, 0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) mmap(&(0x7f000057d000/0x1000)=nil, 0x1000, 0xc, 0x110, r0, 0x1facf000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) fcntl$getown(r2, 0x9) madvise(&(0x7f00001e5000/0x1000)=nil, 0x1000, 0xc) (async) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0100000000000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x60, r7, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) 4m47.507195608s ago: executing program 1 (id=2304): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x48, 0x9, 0x0, 0x3334}, {0x20, 0x1, 0x0, 0xfffff010}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x9ffc) 4m47.40164313s ago: executing program 2 (id=2305): ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000100)={{}, "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"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e24, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000001200)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x7, 0x0, 0x95, 0x8002, 0x3, 0x3e, 0x101, 0x298, 0x40, 0x24d, 0xfffffff6, 0x200, 0x38, 0x1, 0xfffd, 0x7f, 0x8}, [{0x3, 0x4, 0xffffffffffffffc0, 0x13, 0x5, 0x7, 0x3, 0x7fffffff}]}, 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x8) write(r3, &(0x7f00000000c0), 0x0) r4 = fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000004007258ff66d420484abdbe9600ffffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000079820600c00100009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) r6 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000000)=0xfffffffd) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0xc040) 4m47.369043176s ago: executing program 1 (id=2306): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e01020301"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x88501, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000002500), 0x50d201, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000200)={0x40000000, 0x8, "d0f1d2f59473eac9efa34d55c612f98d106cd8c9cf916faa64dad7797cb8ccc6", 0x7, 0x2, 0x8000, 0x10000, 0xb51f, 0x8, 0x8, 0x52000, [0xde6, 0xfffffffe, 0x1, 0x1]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) getgroups(0x2, &(0x7f00000001c0)=[r2, r2]) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x1a, 0x160, 0x73, 0x2c0, 0x258, 0x258, 0x2c0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0x0, 0xff, 0xff000000], [0x0, 0x0, 0xffffffff, 0x2979685f7f728f98], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffff00], 0x0, 0x0, {0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x5, 0x81, 'pptp\x00', {0x3}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x8, 0x200, 0xfffffffb, 'snmp_trap\x00', 'syz1\x00', {0xffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x80080) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x31201000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r6, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) syz_usb_control_io(r0, 0x0, 0x0) 4m47.35538609s ago: executing program 3 (id=2307): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r2, 0x50dc85624ea6cf59, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000440)) pselect6(0x40, &(0x7f0000000000)={0x4, 0x3, 0x401, 0x80000001, 0x7f, 0xfffffffffffffd1e, 0xb, 0x10001}, &(0x7f00000002c0)={0x81, 0x0, 0x663e, 0x7fffffff, 0xfffffffffffffff8, 0xd2d, 0x4, 0xffffffffffffffff}, &(0x7f0000000300)={0x7ff, 0x6, 0x7, 0x2, 0x9836, 0x7f, 0x100000001, 0x6b6}, &(0x7f00000003c0)={0x0, 0x989680}, &(0x7f0000000600)={&(0x7f0000000540)={[0x8000000000000001]}, 0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x2020, 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="0d000000010001", 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(r5) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000480), 0x8, 0x0) r10 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r10, 0x21, &(0x7f0000000440)=r9, 0x1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="14002c80"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100001002cbd70000000000000010000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d3000000000000014001680100001800c0005000500000001000000"], 0x48}}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r11, 0x4, 0x2) getdents64(r11, 0xffffffffffffffff, 0x43) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)={0x3c, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]]}, 0x3c}}, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r11, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r13, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x63}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000810) 4m47.298942831s ago: executing program 4 (id=2308): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r2, 0x4, 0x0, 0x0, @void, @value}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x0, 0x2, {0x0}, 0x10000003}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r8}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x6b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x8, 0x2, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xf2, 0x3, 0x4}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x2, 0x1, 0x7, 0x8, 0x7f}, 0x24, &(0x7f00000000c0)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "535ceda1eb8a79ee842f22691e6f4c39"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x2, 0x80, 0xf8, 0x61}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x3b, &(0x7f0000000140)=@string={0x3b, 0x3, "d40da87bcbc1c0d25779ce6354724102b4a9b5471fccf20e9c34420b62e25f463660cd969005bbfa3354e25cee0bce77e19a4c4b042e1080db"}}]}) 4m46.683226419s ago: executing program 3 (id=2309): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x76}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m46.329137726s ago: executing program 2 (id=2310): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, &(0x7f0000000480)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$packet(0x11, 0x3, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x4, 0x0, &(0x7f0000000100)="e0b9547e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x68}}, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) 4m46.24432321s ago: executing program 3 (id=2311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) gettid() sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @loopback}, &(0x7f00000004c0)=0x10, 0x800) connect$inet(r3, &(0x7f0000000500)={0x2, 0x4e24, @remote}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000040850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000340)=0x1c, 0x377517a255ea48d7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x101, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x52}]}, &(0x7f0000000100)=0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x7, '\x00\x00\x00\x00\x00\x00\x00'}, &(0x7f000009de80)=0xf) 4m45.293177805s ago: executing program 2 (id=2312): lsm_get_self_attr(0x64, &(0x7f0000000500)={0x0, 0x0, 0x8c, 0x6c, ""/108}, &(0x7f0000000280)=0x8c, 0x1) (async) lsm_get_self_attr(0x64, &(0x7f0000000500)={0x0, 0x0, 0x8c, 0x6c, ""/108}, &(0x7f0000000280)=0x8c, 0x1) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x410}, 0x8) syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88a84700810046000800450000280000000000069078ac1414000a01010100000000cffd85aaab660f2bd5831252db57d1aa230849d052087a5863a44851228e34738c276831c25eb3fc27c1a4c820eb534a00191b53d16085", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5058000090780000"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000000)={0x5, 0xfffffffffffffffe}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0xffffffffffffffff, 0x7af62a0b0ea3d706, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0xffffffffffffffff, 0x7af62a0b0ea3d706, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000640101020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/463], 0x310) (async) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000640101020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/463], 0x310) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000100)=""/79, 0x4f}, {&(0x7f0000000080)=""/57, 0x39}], 0x2, 0x5, 0x6) (async) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000100)=""/79, 0x4f}, {&(0x7f0000000080)=""/57, 0x39}], 0x2, 0x5, 0x6) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) r5 = socket$kcm(0x2d, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) pipe2$watch_queue(&(0x7f0000001180), 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) (async) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380), 0x80) 4m44.80676718s ago: executing program 2 (id=2313): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019300)=""/102392, 0xfffffe49) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(r4) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x48, 0x9, 0x0, 0x3334}, {0x20, 0x1, 0x0, 0xbffff038}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0x9ffc) accept4(r0, &(0x7f0000000180)=@nl=@proc, 0x0, 0x80000) sendmmsg$inet(r5, &(0x7f0000001300), 0x0, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socket(0x10, 0xa1c440212d0ed55f, 0x0) 4m44.467055096s ago: executing program 0 (id=2314): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x110}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}, {0x95, 0x0, 0x0, 0xffffff1f}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m44.463410913s ago: executing program 4 (id=2315): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x1d, 0x0, 0x8000001, 0x101, 0x0, @void, @value}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="684c2568f1edd89610b119b4c799ae468d38c9b00a63495e5dac8c3c839422717e052dc99031a5"], 0x7c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) r5 = epoll_create(0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)='n7', 0x2}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x40) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) 4m21.227505121s ago: executing program 32 (id=2306): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e01020301"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x88501, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000002500), 0x50d201, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000200)={0x40000000, 0x8, "d0f1d2f59473eac9efa34d55c612f98d106cd8c9cf916faa64dad7797cb8ccc6", 0x7, 0x2, 0x8000, 0x10000, 0xb51f, 0x8, 0x8, 0x52000, [0xde6, 0xfffffffe, 0x1, 0x1]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) getgroups(0x2, &(0x7f00000001c0)=[r2, r2]) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x1a, 0x160, 0x73, 0x2c0, 0x258, 0x258, 0x2c0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0x0, 0xff, 0xff000000], [0x0, 0x0, 0xffffffff, 0x2979685f7f728f98], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffff00], 0x0, 0x0, {0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x5, 0x81, 'pptp\x00', {0x3}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x8, 0x200, 0xfffffffb, 'snmp_trap\x00', 'syz1\x00', {0xffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x80080) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x31201000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r6, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) syz_usb_control_io(r0, 0x0, 0x0) 4m21.218047359s ago: executing program 33 (id=2311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) gettid() sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @loopback}, &(0x7f00000004c0)=0x10, 0x800) connect$inet(r3, &(0x7f0000000500)={0x2, 0x4e24, @remote}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000040850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000340)=0x1c, 0x377517a255ea48d7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x101, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x52}]}, &(0x7f0000000100)=0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x7, '\x00\x00\x00\x00\x00\x00\x00'}, &(0x7f000009de80)=0xf) 4m16.647495633s ago: executing program 34 (id=2314): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x110}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}, {0x95, 0x0, 0x0, 0xffffff1f}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m5.295888361s ago: executing program 35 (id=2313): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019300)=""/102392, 0xfffffe49) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(r4) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x48, 0x9, 0x0, 0x3334}, {0x20, 0x1, 0x0, 0xbffff038}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0x9ffc) accept4(r0, &(0x7f0000000180)=@nl=@proc, 0x0, 0x80000) sendmmsg$inet(r5, &(0x7f0000001300), 0x0, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socket(0x10, 0xa1c440212d0ed55f, 0x0) 4m5.126530041s ago: executing program 36 (id=2315): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x1d, 0x0, 0x8000001, 0x101, 0x0, @void, @value}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="684c2568f1edd89610b119b4c799ae468d38c9b00a63495e5dac8c3c839422717e052dc99031a5"], 0x7c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) r5 = epoll_create(0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)='n7', 0x2}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x40) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) 10.806779067s ago: executing program 8 (id=3070): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x33}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10.177074658s ago: executing program 8 (id=3071): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='tlb_flush\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$kcm(0xa, 0x2, 0x0) ioperm(0x0, 0x8, 0x8000000000004) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="8dffffffffff"}) getsockopt(r1, 0x2e, 0x6, &(0x7f0000000400)=""/237, &(0x7f0000000280)=0xed) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001640), 0x121040, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000001680)) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000240)=0x1) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_012={0x0, 0x2, 0x1}, @local=@item_012={0x2, 0x2, 0x2, "7cc1"}, @main=@item_012={0x2, 0x0, 0xb, "1f55"}]}}, 0x0}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'dvmrp1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r8}, 0x10) syz_io_uring_setup(0x39ef, &(0x7f0000000380)={0x0, 0xa969, 0x20000, 0xde, 0x329, 0x0, r6}, 0x0, 0x0) 9.834952028s ago: executing program 6 (id=3076): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8000, @empty, 0x3}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f2004d0600fe8000000000000000000000000000bbfe80000000000004001f0000000000aa00004e22680822f15253d4bea2"], 0x0) 9.674566458s ago: executing program 6 (id=3077): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000300)=0x4, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000005c0)=0x623a1d4c) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000002e40)=[{{&(0x7f0000000540)=@xdp, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)=""/156, 0x9c}], 0x2, &(0x7f0000000700)=""/182, 0xb6}, 0x2}, {{&(0x7f00000007c0)=@l2, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000840)=""/141, 0x8d}, {&(0x7f0000000900)=""/254, 0xfe}, {&(0x7f0000001cc0)=""/146, 0x92}, {&(0x7f0000000ac0)=""/201, 0xc9}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/70, 0x46}], 0x6}, 0x11a0}, {{0x0, 0x0, &(0x7f0000002dc0), 0x0, &(0x7f0000002e00)=""/45, 0x2d}, 0x9}], 0x3, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)="93d90400000300", 0xfffffffffffffe87}, {&(0x7f0000000480)="fef6856b269133e9bc6dfe294dcbf1942d7edb7c433bf25b544af6340b08ccbf9463fac26a72355dbda4da543a2a596b5990cbbd18dc9470455a86ffc7be137ba26823210a840de309de5a11e62e3dcbd58334b4a3aa92301e999d4c1db7dbfd82f7fa38cb2256a400653ae409495eda677423c2925b8c2d950f3df4d4e4acfe36dff69049b9040ad7287c78f34725494ff2887867f24db66b", 0x1}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff1d) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x881) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r9, 0x5453, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x1, &(0x7f0000000a00)=ANY=[@ANYRES64=r7], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='fsi_master_gpio_cmd_abs_addr\x00', r5, 0x0, 0x401}, 0x18) fchown(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r11, 0x0, 0x0) connect$pppl2tp(r10, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @multicast2}, 0x2, 0x4, 0x3}}, 0x26) 9.619231309s ago: executing program 7 (id=3078): r0 = epoll_create1(0x0) unshare(0x60400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) chdir(0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r2 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) io_submit(r3, 0x0, 0x0) 9.002160215s ago: executing program 5 (id=3080): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000540)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/103, 0x67}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000340)=""/96, 0x60}, {&(0x7f0000000280)=""/64, 0x40}, {&(0x7f00000003c0)=""/94, 0x5e}], 0x5, &(0x7f0000000500)=""/53, 0x35}, 0x4}], 0x1, 0x14021, &(0x7f00000005c0)={r1, r2+10000000}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e000100"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000000000214000700fc0200000000000000000000000000000400120008000100", @ANYRES32=r7], 0x6c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r9, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0xffffff96) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000600)={0xc}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x840) 8.646850355s ago: executing program 6 (id=3081): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x3a}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.879958326s ago: executing program 6 (id=3083): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x104) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) unshare(0x62020400) fallocate(0xffffffffffffffff, 0x0, 0xfe1ffd, 0x4) r1 = getpid() syz_pidfd_open(r1, 0x0) unshare(0x0) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000400)='ns/uts\x00') ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000240)={0xc8a, 0x0, 0x0, 0xc0c0c0c0}) setns(r2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0xcd34, 0x1, 0x0, 0x34}, &(0x7f0000000280), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000300)={0x4, 0xffffffffffffffff, 0x2a, {0xffff, 0x1}, 0xae}, 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000140600fe80000000000000000000000000fec042"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)=r6}, 0x20) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f00000000c0)={0x41, 0x800000, 0x8, 0xb, 0x4000000, 0x8100}) 7.846536619s ago: executing program 7 (id=3084): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rename(0x0, &(0x7f0000000780)='./file2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0018000020010000000000000000000000400000fe8000"/63], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061040000002c000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x12) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) 7.778807259s ago: executing program 5 (id=3085): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x25, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x4, 0xfffffffc}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x31) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0x17, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000001001fe171100000310fe88f8fa0fe576969f1c841fd51c0f276bd302dd1266dd6a53339c0ef26359adc55d1cb733eae11216e18958", @ANYRES16=r4, @ANYRESHEX=r3, @ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 5.933784858s ago: executing program 7 (id=3086): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r4, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/234, 0xea}], 0x1, 0xffff, 0x5dd073cf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000900)={&(0x7f00000003c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000000440)=""/50, 0x32}, {&(0x7f0000000480)=""/114, 0x72}, {&(0x7f0000000600)=""/86, 0x56}, {&(0x7f0000000680)=""/236, 0xec}, {&(0x7f0000000780)=""/108, 0x6c}], 0x6, &(0x7f0000000880)=""/108, 0x6c}, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r1}}, 0x48) r7 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000068000100f7ff7000000000000a00000000000000060007000900000008000500", @ANYRES32, @ANYBLOB="10000880"], 0x38}}, 0x0) 5.921859435s ago: executing program 8 (id=3087): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000022c34a4089044ee066fb01020301090222000100002008090494"], 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) readahead(r0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000022c34a4089044ee066fb01020301090222000100002008090494"], 0x0) (async) 5.131268938s ago: executing program 5 (id=3088): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8000, @empty, 0x3}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f2004d0600fe8000000000000000000000000000bbfe80000000000004e43c0000000000aa00004e22680822f15253d4bea2"], 0x0) 4.564625668s ago: executing program 9 (id=3089): ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.581173474s ago: executing program 9 (id=3090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x668, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000f40)=""/4083, 0x0, 0xfffffffffffffd72, 0x1, 0x1, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) close(0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98, 0x88000000}, {0x28, '\x00', 0x4}}}}, 0x328) syz_open_procfs$namespace(r2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x688300, 0x0) 3.544122708s ago: executing program 5 (id=3091): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rename(0x0, &(0x7f0000000780)='./file2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0018000020010000000000000000000000000000fe8000"/63], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x4000000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x12) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) 3.541396863s ago: executing program 7 (id=3092): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) pipe(&(0x7f00000042c0)) (async, rerun: 32) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x800) (rerun: 64) 2.491001846s ago: executing program 5 (id=3093): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x3f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.41034913s ago: executing program 9 (id=3094): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000180000472600000000000000180b0000000000000000000000000000950000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.270842093s ago: executing program 5 (id=3095): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100030000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x40) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x43}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r5) sendmsg$TIPC_NL_LINK_GET(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) 2.225898939s ago: executing program 9 (id=3096): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rename(0x0, &(0x7f0000000780)='./file2\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0018000020010000000000000000000000440000fe8000"/63], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061040000002c000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x12) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) 1.561039893s ago: executing program 8 (id=3097): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r0, r0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000200)={0xc, 0x0}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000280)={0x8, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000003c0)=0x5) read$FUSE(r4, &(0x7f0000004200)={0x2020}, 0x2020) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0x7, &(0x7f0000000100)={0x5, 0x5}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x4) 1.501496284s ago: executing program 7 (id=3098): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x24008884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRESHEX=r1], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f00000001c0)={0x3}) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b110e1860ff19d2768893f14711494715cf142d24c3ff0ddbbc4f98b63d42cbc3c25aa99d02920b2e6ed2c9bee53b818e5c912cdf287c02920ef60ab89cc348c96b4a100581dbb87427e62a530684b16be501816888cb1d1afc80817feedfa93a222571c7275c3efca3c04fe155414fdf0ad6afb86b733f94f9714c8613730e9d947f2b8b7dc9de9f703431eb4bb28106d1d176f5f6ffcdd643e7404eb39ea80791e8dae97fbd70abe807514dcb6454421a18c560f817ba088980df2b", @ANYRES64, @ANYRESDEC=r3], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r6, &(0x7f0000000280), 0x0}, 0x20) socket$netlink(0x10, 0x3, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) r8 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x75, 0x301601) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x34, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x4c044) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000034000900000000000740000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x14040044) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.356442258s ago: executing program 6 (id=3099): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000140)) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) 1.167208778s ago: executing program 9 (id=3100): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc81}, 0x1, 0x0, 0x0, 0x48004}, 0x8054) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) flock(r0, 0x2) open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x1, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r7, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r7, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r7, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.133683298s ago: executing program 8 (id=3101): ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000100)={{}, "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"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e24, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000001200)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x7, 0x0, 0x95, 0x8002, 0x3, 0x3e, 0x101, 0x298, 0x40, 0x24d, 0xfffffff6, 0x200, 0x38, 0x1, 0xfffd, 0x7f, 0x8}, [{0x3, 0x4, 0xffffffffffffffc0, 0x13, 0x5, 0x7, 0x3, 0x7fffffff}]}, 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x8) write(r3, &(0x7f00000000c0), 0x0) r4 = fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000004007258ff66d420484abdbe9600ffffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000079820600c00100009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xfffffffd) 806.561374ms ago: executing program 9 (id=3102): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r4, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/234, 0xea}], 0x1, 0xffff, 0x5dd073cf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000900)={&(0x7f00000003c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000000440)=""/50, 0x32}, {&(0x7f0000000480)=""/114, 0x72}, {&(0x7f0000000600)=""/86, 0x56}, {&(0x7f0000000680)=""/236, 0xec}, {&(0x7f0000000780)=""/108, 0x6c}], 0x6, &(0x7f0000000880)=""/108, 0x6c}, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r1}}, 0x48) r7 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000068000100f7ff7000000000000a00000000000000060007000900000008000500", @ANYRES32, @ANYBLOB="10000880"], 0x38}}, 0x0) 585.646347ms ago: executing program 8 (id=3103): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x81) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xffff0003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0xffc, 0x401, 0x1, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x101, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x6, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x5, 0x1006, 0x4, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r5, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @local}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) close(r1) 50.945104ms ago: executing program 6 (id=3104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r4, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf253500000008000300", @ANYRES32=r6, @ANYBLOB="140055"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) r7 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0xa3f, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0xf3, 0xa9, 0xe1, 0x8, 0xbb4, 0xa06, 0x631b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2d, 0x2, 0x7, 0x8, 0xe0, 0x3, [{{0x9, 0x4, 0x8f, 0x9, 0xf, 0x9c, 0xb, 0x45, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x8000, 0x8d}, [@output_terminal={0x9, 0x24, 0x3, 0x9b, 0x1ff, 0x2, 0x6, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x4, 0x5, 0x5}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0x2, 0x7, "196708"}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x7, 0xe, "df82e47fcf"}]}], [{{0x9, 0x5, 0xe, 0x8, 0x8, 0x2, 0x3, 0x40, [@generic={0x2d, 0x23, "9622a97300046104499ec8a62a8dddf3f05b7858265e9c32e36ed6201cf8a4112550d4b72ce02d0d95aa81"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xe7, 0x1, 0x1e}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x1, 0x8, 0xbb, [@generic={0x63, 0x22, "c1f32ad740568b497615489b6f47f7932d54c70b0d0fc6848bae55cc5d02b2bb931e3163c262cf5aa86a886c6841b11c14a7717f28875faec349a946d8919e4cf11f4ed8579d453f06711c1d7f655610b40c0fe71637021aab2222c4e761428470"}, @generic={0xa6, 0x30, "2a63e54bd26a77ec46a3dcb9ea042ecabb7f596c7b4bf36af1c06aa9e76e981072f351eb92146fba1c49e1a98a143ee4a86c0e6f5da617a671f34226d338968ef52f0453c8cb1cbf6bc5ebbd4d4f6d048efa509b8933c3592b566824dba562a4206327498f5eaa58132b3a6068b31b1d574728c81a27ea3191895b7e5a12e2ff6877129fbe50433b6fee4f1343c11a0b6cb472e40d49611f1970bfd645cdbd9187ab0464"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x6, 0x3, 0xd5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x271f}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x1, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x6}, @generic={0x8e, 0x6, "4628841df1fab40acddb845c109d523cb7df67b645110c13aab303a399c175e42a70d2ce8b36541dbc37fcc000e4d948ac8ba3118aa0df2aaadeb7d53208e842b84b0564f644be242c82a2ea7d4b334baf9b8e6540bbd2c66b772e2bd6ab04fba650c823405fc5d76b833553e94d7af7a128dd010619f3ffd6c491584b89cd64c6b3d8bc1739714a6d5a588e"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0xe, 0xfb, 0x68, [@generic={0x102, 0x6, "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"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0xe, 0x56, 0x4, [@generic={0x8b, 0x24, "dcb439bf158b0bf519c8f7cfecaafc84166726d3bdf0ee26a79ef9c0f9b6b2f69f1c9f2a984396864c471c5b921c87a4178749b37a968ebc8975f303fd37c25373cda066d4b8b233275a5ef772b53481ba4deb24ce91c41b05167335e71b5dbe8d5e2116ee0e503f291bbe0ac86dc6b0b643941d6f973afb8f4cf6f4e6aaa678919537da1f1ba583ad"}]}}, {{0x9, 0x5, 0x18, 0x1, 0x8, 0x2, 0xff, 0x1}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0xd, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6a, 0xfff}]}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0x5, 0x7, 0x4}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x9, 0xab, 0x20}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x7, 0x10, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xcff}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x3, 0xd, 0xca, [@generic={0xf9, 0x30, "f6e37acd8b4bf0f6ef1eb972e6b436e53ff4794774f7decddc878b52ece6145e11de45baabcf0b6b26e38dc5e6b569b9e9fedfdca602c2c70ee2f7bf028390a6121712f7f31d9fa65f308d163fa08ef66f0482585fbf211fc95bb04ac21b8bd600256312b630801116f810a28266c51b1ed6fd937bcc167df4f74b07fab1c42f192b867781526054b67bfbe1c1752424cd5205884b3ef32fd6580dda4e42e1a8f19fc3825f509b9934a88704bbd67dda9f118209d6bf111f53475483996e6efc0aae932417eb65cc4b55c25a1184c77f3caa51263aacf05702a7a439ffd037b511c0cee33281e3b6f007f5bc4e227087da047c890100e7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xb5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x7f, 0x3, 0xfd}}]}}, {{0x9, 0x4, 0x1f, 0x7, 0xd, 0x2b, 0x75, 0x9f, 0xef, [@hid_hid={0x9, 0x21, 0x0, 0x5d, 0x1, {0x22, 0xd6f}}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "f8"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x962, 0x9, 0x81}, {0x6, 0x24, 0x1a, 0x0, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x80, 0x8001, 0x9f, 0x0, 0x7, 0x7}, @country_functional={0x12, 0x24, 0x7, 0x3, 0x5, [0x5, 0x401, 0x7f, 0x8, 0xc, 0x5]}, @mdlm={0x15, 0x24, 0x12, 0xf}, @mdlm_detail={0x37, 0x24, 0x13, 0x1, "33fbc6e641a32fa5d2c7bda3277ba1b840a3011ca8b154ad07d9c345754c6a83ab7b36fbeef1a720be94b4a077bde23f83e47d"}]}], [{{0x9, 0x5, 0xe, 0x10, 0x400, 0x7c, 0x8, 0x9d}}, {{0x9, 0x5, 0xf, 0x2, 0x200, 0x1, 0xc0, 0xb1}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x2, 0x1, 0x7f, [@generic={0xc0, 0x1, "bb8624ad9e01c39a264857a1c3c29c8ae0fee54b1a415444bf9c057948e851c6e6a79871e8191a514f4e44b058595479d5779674c7530211e2a07d6a193c7f566ea5f32d59da9393923e70411f4360d34ca3d7c4152c1ceb6d58ee50dff6a7139ca49549a731831235420bd20e84277a6f2542508153da88b241e12264a4caf7940fa8b0c6e0ab6f795a2982ff968fafcb6309f7acba1e45afde82f2ac7d9e9833c5228093a251a238c4d2fe17439b8cdca06fa0568a206588fefbeeadee"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0xf8, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3}, @generic={0xd2, 0x23, "473c2bf460f5ee271d8b5a90e3d8482ee8ba8452e74b1df2d767cba69740f666af6c31d277cd468d8bd161a70fb5bf231ed9f889c4537082c6d48de27e58b9798998133efd445f7036cdc9766bea2adb14cd394fe34b06d89261ecb00506b81101d4cffd122624545fe2154cc94b138174dc12490dedc4d46320ba2138ecf351cd31e6aca13272f05f2699e095e14787feecf978b4ecd74a78061b7d13c5a46a68690ac3223ba98f2f70b65157fde20d237dc2059386117d235e3b12d4a4fb6c31e9f187ed29e39c6203d8a561629996"}]}}, {{0x9, 0x5, 0x5, 0x10, 0xf5c11fc96f8b6140, 0x2f, 0x8e, 0x3}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0x6, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x0, 0x7, 0x40, [@generic={0x67, 0xa, "5982fc91d91f73cb46fbd018d65b4ba4f5c90bc2c77189dd52f7523bc4f66a5e7c844e567794a1cf38c5b3280bfdaa9fad79e6a6f0452993865344c6a9cdcc521e98d6d8739825826effd6c04b9db783d90f65d6f37f59282d8a62328471689903098ab2d9"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x200}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x6, 0x0, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf3}, @generic={0xdb, 0x23, "dc09bc890622c5f41237282deb07d05d774adbc630b958edd2b3c5dc6e04390184033a69d09dac4881c2228c1c34e93b797e0b47e05e4e862b7898913aa91727a0e53e0463d254d05fbb955da0d4b3e7584c8c8ad4c50435bcd21ceb2604b79617f47da71b5ddd08df546d20c7c6ab5b90aad53b7de3ad4d93fcd8f4c8e2b430079db4c096302eb3db4596583a8386c1148eabc97b7ad271369d109873ea5e8f3d88e0caf8f93c46634c1cfe5f938fcf89f4cd77e3ec81fbe4f859ff4b175bc3033c720da4a013242cba8e081b42dd64c46eea37e4440cd38f"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0xef, 0x9, 0xa}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xb, 0x3, 0xc}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0xd0, 0x3c, 0x3, [@generic={0xf7, 0x21, "5d9ff0d9e4a7aa68fdcfce8732238e7b70379b0bb1bde89adf757d5ddab7ab843888345569b475cd7f0315283da06fbe218e98d9ef6e77cc6d984699f04ce97ef68c64a6f7a1b50a9fe8b26cec21523769c753f7bdce9b60308b4629614b3cf7be1d12627bd7c8d94e3847a15f3ad2ff46f1f6e7f0695cfcac11f3ca541cbf98c1f3299f5297fa7daac9da3fbcbfdb63b77bcf66b13a98dd41456a533b3029652eb59429835509987dbd3888d37c5d5c6df53f4d14e63d436a4f59804b0da7e6a1bdfce0f89cb89f33f0cfb2f77bf53e38943c72b9d6c6ec6ac5388f50eda040166b8954228f0e705777cf710c562982af796591e8"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x100}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x2, 0xe, 0x81}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x1, 0x7, 0x8}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x8, 0x9, 0x7, 0x8, 0x7a}, 0x56, &(0x7f0000000380)={0x5, 0xf, 0x56, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0xfd, 0xfe, 0x8, 0x6}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x6, 0xf000, 0x3, [0x30, 0xc0f0, 0xc0c0]}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x4, 0xf, 0x9, [0xff0030]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x1, 0x8, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2e9050736cb8195683e7129997986bda"}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x415}}, {0x3e, &(0x7f0000000480)=@string={0x3e, 0x3, "bb1fd435c3b12f745b10d6b0fb5023846f0bcd5aad6775c5502d5d80fe14e27af328e3a90674a650002e0255bfd4cc148a045a46caddaaccb985695b"}}, {0x9a, &(0x7f00000005c0)=@string={0x9a, 0x3, "1f90387f3ded154061bbce34a21922cce839ae3095e356c33b7a1ccdf0794cbe2499fb76b0549d5ea2df489227816bc42e9626e4070c1dadfa634926f002977f91eecf09af20e5bb9bd6696b79859eb214b72d06ec4f0b5a99f0e49271d3e8c63f4437e79972182f2ee0bca330ea9a70d49f63636a14fa5d5f2f8a72528b7059b6a13a0ed38918fa5e138de56faa5eef82cb432229f7048d"}}]}) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x20) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x541b, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x6, @bearer=@l2={'eth', 0x3a, 'bridge0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8080) 0s ago: executing program 7 (id=3105): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16], 0x30}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3aa6d512) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 857.230041][T10417] usb 6-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 857.243830][T10417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.438282][T14785] virtio-fs: tag not found [ 857.871912][T10417] usb 6-1: config 0 descriptor?? [ 858.055282][T14790] FAULT_INJECTION: forcing a failure. [ 858.055282][T14790] name failslab, interval 1, probability 0, space 0, times 0 [ 858.071780][T14790] CPU: 1 UID: 0 PID: 14790 Comm: syz.9.2500 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 858.071805][T14790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 858.071815][T14790] Call Trace: [ 858.071821][T14790] [ 858.071829][T14790] dump_stack_lvl+0x16c/0x1f0 [ 858.071857][T14790] should_fail_ex+0x512/0x640 [ 858.071886][T14790] should_failslab+0xc2/0x120 [ 858.071914][T14790] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 858.071937][T14790] ? skb_clone+0x190/0x3f0 [ 858.071965][T14790] skb_clone+0x190/0x3f0 [ 858.071988][T14790] netlink_deliver_tap+0xabd/0xd30 [ 858.072020][T14790] netlink_unicast+0x6b2/0x7f0 [ 858.072050][T14790] ? __pfx_netlink_unicast+0x10/0x10 [ 858.072076][T14790] ? netlink_ack+0x5a5/0xb80 [ 858.072089][T14790] ? netlink_ack+0x5b3/0xb80 [ 858.072107][T14790] netlink_ack+0x696/0xb80 [ 858.072131][T14790] netlink_rcv_skb+0x332/0x420 [ 858.072146][T14790] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 858.072172][T14790] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 858.072186][T14790] ? rcu_is_watching+0x12/0xc0 [ 858.072224][T14790] netlink_unicast+0x53d/0x7f0 [ 858.072252][T14790] ? __pfx_netlink_unicast+0x10/0x10 [ 858.072286][T14790] netlink_sendmsg+0x8d1/0xdd0 [ 858.072316][T14790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.072347][T14790] ? bpf_lsm_socket_sendmsg+0x4/0x10 [ 858.072375][T14790] ____sys_sendmsg+0xa95/0xc70 [ 858.072392][T14790] ? copy_msghdr_from_user+0x10a/0x160 [ 858.072415][T14790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 858.072444][T14790] ___sys_sendmsg+0x134/0x1d0 [ 858.072468][T14790] ? __pfx____sys_sendmsg+0x10/0x10 [ 858.072487][T14790] ? __lock_acquire+0x622/0x1c90 [ 858.072543][T14790] __sys_sendmsg+0x16d/0x220 [ 858.072571][T14790] ? __pfx___sys_sendmsg+0x10/0x10 [ 858.072613][T14790] do_syscall_64+0xcd/0x4c0 [ 858.072639][T14790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.072656][T14790] RIP: 0033:0x7f525c18e929 [ 858.072670][T14790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 858.072686][T14790] RSP: 002b:00007f525cfaa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 858.072703][T14790] RAX: ffffffffffffffda RBX: 00007f525c3b5fa0 RCX: 00007f525c18e929 [ 858.072715][T14790] RDX: 0000000020004804 RSI: 0000200000006040 RDI: 0000000000000004 [ 858.072725][T14790] RBP: 00007f525cfaa090 R08: 0000000000000000 R09: 0000000000000000 [ 858.072735][T14790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.072745][T14790] R13: 0000000000000000 R14: 00007f525c3b5fa0 R15: 00007fffa5bc7ff8 [ 858.072769][T14790] [ 858.329309][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.650493][T14797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 859.001002][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2503'. [ 859.590901][T14813] syz.8.2505: attempt to access beyond end of device [ 859.590901][T14813] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 859.604364][T14813] hpfs: hpfs_map_sector(): read error [ 859.962832][T14809] net_ratelimit: 52 callbacks suppressed [ 859.962849][T14809] netlink: zone id is out of range [ 859.974119][T14809] netlink: zone id is out of range [ 859.979469][T14809] netlink: zone id is out of range [ 859.984605][T14809] netlink: zone id is out of range [ 859.989710][T14809] netlink: zone id is out of range [ 859.994803][T14809] netlink: zone id is out of range [ 860.000028][T14809] netlink: zone id is out of range [ 860.005139][T14809] netlink: zone id is out of range [ 860.010249][T14809] netlink: zone id is out of range [ 860.015671][T14809] netlink: zone id is out of range [ 860.569328][T10417] usb 6-1: string descriptor 0 read error: -71 [ 860.588623][T10417] usbhid 6-1:0.0: can't add hid device: -71 [ 860.620343][T10417] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 860.661519][T10417] usb 6-1: USB disconnect, device number 5 [ 860.770179][T14828] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2510'. [ 860.926417][T14837] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 861.062383][T14838] xt_socket: unknown flags 0x50 [ 862.917179][T10417] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 863.257860][T14863] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2520'. [ 863.274601][T14864] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2520'. [ 863.346320][T10417] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 863.389583][T10417] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 863.437504][T10417] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 863.461135][T10417] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.502095][T14847] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 863.511345][T10417] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 864.833359][ T5869] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 864.975359][T14883] FAULT_INJECTION: forcing a failure. [ 864.975359][T14883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.989078][T14883] CPU: 1 UID: 0 PID: 14883 Comm: syz.8.2528 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 864.989104][T14883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 864.989114][T14883] Call Trace: [ 864.989120][T14883] [ 864.989127][T14883] dump_stack_lvl+0x16c/0x1f0 [ 864.989153][T14883] should_fail_ex+0x512/0x640 [ 864.989181][T14883] _copy_to_user+0x32/0xd0 [ 864.989207][T14883] simple_read_from_buffer+0xcb/0x170 [ 864.989233][T14883] proc_fail_nth_read+0x197/0x270 [ 864.989257][T14883] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 864.989279][T14883] ? rw_verify_area+0xcf/0x680 [ 864.989298][T14883] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 864.989320][T14883] vfs_read+0x1e4/0xc60 [ 864.989345][T14883] ? __pfx___mutex_lock+0x10/0x10 [ 864.989368][T14883] ? __pfx_vfs_read+0x10/0x10 [ 864.989396][T14883] ? __fget_files+0x20e/0x3c0 [ 864.989425][T14883] ksys_read+0x12a/0x250 [ 864.989447][T14883] ? __pfx_ksys_read+0x10/0x10 [ 864.989475][T14883] do_syscall_64+0xcd/0x4c0 [ 864.989500][T14883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.989517][T14883] RIP: 0033:0x7fe727f8d33c [ 864.989532][T14883] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 864.989548][T14883] RSP: 002b:00007fe728de9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 864.989563][T14883] RAX: ffffffffffffffda RBX: 00007fe7281b5fa0 RCX: 00007fe727f8d33c [ 864.989573][T14883] RDX: 000000000000000f RSI: 00007fe728de90a0 RDI: 0000000000000006 [ 864.989584][T14883] RBP: 00007fe728de9090 R08: 0000000000000000 R09: 0000000000000000 [ 864.989594][T14883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.989604][T14883] R13: 0000000000000000 R14: 00007fe7281b5fa0 R15: 00007ffdc560cfe8 [ 864.989628][T14883] [ 865.182242][T14885] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2529'. [ 865.191336][T14885] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2529'. [ 865.295058][ T5869] usb 7-1: unable to get BOS descriptor or descriptor too short [ 865.303354][ T5869] usb 7-1: not running at top speed; connect to a high speed hub [ 865.312409][ T5869] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 865.320839][ T5869] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 865.331105][ T5869] usb 7-1: config 4 has no interface number 0 [ 865.339643][ T5869] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 865.348843][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.356973][ T5869] usb 7-1: Product: syz [ 865.361284][ T5869] usb 7-1: Manufacturer: syz [ 865.438597][ T5869] usb 7-1: SerialNumber: syz [ 866.445083][ T5926] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 866.475840][ T5932] usb 10-1: USB disconnect, device number 4 [ 866.935976][ T5926] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 866.940613][ T5869] usb 7-1: Found UVC 0.02 device syz (04f2:b746) [ 866.962052][ T5869] usb 7-1: No valid video chain found. [ 867.023295][ T5926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 867.145698][ T5869] usb 7-1: USB disconnect, device number 5 [ 867.243533][ T5926] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 867.274498][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 867.299386][ T5926] usb 6-1: Product: syz [ 867.303837][ T5926] usb 6-1: Manufacturer: syz [ 867.308611][ T5926] usb 6-1: SerialNumber: syz [ 867.416517][ T5926] usb 6-1: config 0 descriptor?? [ 867.443903][ T5926] usb 6-1: selecting invalid altsetting 0 [ 867.915760][T14918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2530'. [ 869.794946][T14923] xt_CT: No such helper "snmp_trap" [ 869.943558][ T5868] usb 6-1: USB disconnect, device number 6 [ 870.492985][T14936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 871.568878][T14928] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2543'. [ 872.690534][T14957] virtio-fs: tag not found [ 873.608147][T14966] syz.5.2554: attempt to access beyond end of device [ 873.608147][T14966] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 873.621312][T14966] hpfs: hpfs_map_sector(): read error [ 873.653495][T14966] net_ratelimit: 55 callbacks suppressed [ 873.653527][T14966] netlink: zone id is out of range [ 873.665907][T14966] netlink: zone id is out of range [ 873.677073][T14966] netlink: zone id is out of range [ 873.698783][T14966] netlink: zone id is out of range [ 873.710485][T14966] netlink: zone id is out of range [ 873.715901][T14966] netlink: zone id is out of range [ 873.722365][ T5926] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 873.736185][T14966] netlink: zone id is out of range [ 873.741713][T14966] netlink: zone id is out of range [ 873.747181][T14966] netlink: zone id is out of range [ 873.752476][T14966] netlink: zone id is out of range [ 873.953248][T14967] xt_socket: unknown flags 0x50 [ 874.101822][ T5926] usb 10-1: unable to get BOS descriptor or descriptor too short [ 874.437570][ T5926] usb 10-1: not running at top speed; connect to a high speed hub [ 874.469757][ T5926] usb 10-1: config 4 has an invalid interface number: 147 but max is 0 [ 874.631687][T14975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 874.812913][ T5926] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 874.854548][ T5926] usb 10-1: config 4 has no interface number 0 [ 874.957982][T14978] xt_socket: unknown flags 0x50 [ 875.179385][ T5926] usb 10-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 875.199663][ T5926] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.263401][T14973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 876.281966][ T5926] usb 10-1: Product: syz [ 876.286265][ T5926] usb 10-1: Manufacturer: syz [ 876.329019][ T5926] usb 10-1: SerialNumber: syz [ 876.475906][ T5926] usb 10-1: can't set config #4, error -71 [ 876.569144][ T5932] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 876.987893][ T5926] usb 10-1: USB disconnect, device number 5 [ 877.314510][ T5932] usb 9-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 877.343911][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2559'. [ 877.353341][ T5932] usb 9-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 877.367345][ T5932] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 877.818468][T15001] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2563'. [ 877.873560][T15001] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2563'. [ 878.289152][ T5932] usb 9-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 878.302695][ T5932] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 878.312165][ T5932] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.314366][ T30] audit: type=1400 audit(2000000980.684:1130): avc: denied { shutdown } for pid=15006 comm="syz.7.2567" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 880.231434][ T5932] ath6kl: Failed to submit usb control message: -110 [ 880.245843][ T5932] ath6kl: unable to send the bmi data to the device: -110 [ 880.253069][ T5932] ath6kl: Unable to send get target info: -110 [ 880.270484][ T5932] ath6kl: Failed to init ath6kl core: -110 [ 880.277287][ T5932] ath6kl_usb 9-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 881.283623][T10417] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 882.374855][ T5869] usb 9-1: USB disconnect, device number 3 [ 882.492366][T10417] usb 10-1: device descriptor read/all, error -71 [ 883.108842][ T30] audit: type=1400 audit(2000000985.137:1131): avc: denied { mount } for pid=15031 comm="syz.8.2574" name="/" dev="hugetlbfs" ino=48835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 883.131935][ C1] vkms_vblank_simulate: vblank timer overrun [ 883.832958][ T30] audit: type=1400 audit(2000000985.146:1132): avc: denied { remount } for pid=15031 comm="syz.8.2574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 883.837925][T15048] virtio-fs: tag not found [ 883.859063][ T30] audit: type=1400 audit(2000000985.155:1133): avc: denied { setopt } for pid=15031 comm="syz.8.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 884.133781][ T30] audit: type=1400 audit(2000000985.165:1134): avc: denied { mounton } for pid=15031 comm="syz.8.2574" path="/50/file0" dev="hugetlbfs" ino=48835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 884.610470][T15057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 885.483853][ T30] audit: type=1400 audit(2000000986.287:1135): avc: denied { unmount } for pid=14108 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 885.614127][T15060] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2578'. [ 886.514437][T15067] binder: 15064:15067 ioctl c0306201 200000000240 returned -14 [ 886.969866][T15082] virtio-fs: tag not found [ 887.695936][T15088] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 888.435759][ T30] audit: type=1326 audit(2000000989.757:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15077 comm="syz.6.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea798e929 code=0x7fc00000 [ 888.496403][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2584'. [ 888.806251][T15097] virtio-fs: tag not found [ 890.113779][T15105] FAULT_INJECTION: forcing a failure. [ 890.113779][T15105] name failslab, interval 1, probability 0, space 0, times 0 [ 890.219673][T15104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 890.231957][T15105] CPU: 1 UID: 0 PID: 15105 Comm: syz.6.2593 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 890.231981][T15105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 890.231992][T15105] Call Trace: [ 890.231998][T15105] [ 890.232005][T15105] dump_stack_lvl+0x16c/0x1f0 [ 890.232032][T15105] should_fail_ex+0x512/0x640 [ 890.232056][T15105] ? fs_reclaim_acquire+0xae/0x150 [ 890.232076][T15105] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 890.232101][T15105] should_failslab+0xc2/0x120 [ 890.232126][T15105] __kmalloc_noprof+0xd2/0x510 [ 890.232155][T15105] tomoyo_realpath_from_path+0xc2/0x6e0 [ 890.232182][T15105] ? tomoyo_profile+0x47/0x60 [ 890.232200][T15105] tomoyo_path_number_perm+0x245/0x580 [ 890.232220][T15105] ? tomoyo_path_number_perm+0x237/0x580 [ 890.232244][T15105] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 890.232267][T15105] ? find_held_lock+0x2b/0x80 [ 890.232311][T15105] ? find_held_lock+0x2b/0x80 [ 890.232331][T15105] ? hook_file_ioctl_common+0x145/0x410 [ 890.232360][T15105] ? __fget_files+0x20e/0x3c0 [ 890.232389][T15105] security_file_ioctl+0x9b/0x240 [ 890.232415][T15105] __x64_sys_ioctl+0xb7/0x210 [ 890.232437][T15105] do_syscall_64+0xcd/0x4c0 [ 890.232463][T15105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.232480][T15105] RIP: 0033:0x7f8ea798e929 [ 890.232494][T15105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 890.232510][T15105] RSP: 002b:00007f8ea876b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 890.232527][T15105] RAX: ffffffffffffffda RBX: 00007f8ea7bb5fa0 RCX: 00007f8ea798e929 [ 890.232538][T15105] RDX: 0000200000000040 RSI: 00000000000089e9 RDI: 000000000000000a [ 890.232548][T15105] RBP: 00007f8ea876b090 R08: 0000000000000000 R09: 0000000000000000 [ 890.232558][T15105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.232568][T15105] R13: 0000000000000000 R14: 00007f8ea7bb5fa0 R15: 00007ffca7a64828 [ 890.232592][T15105] [ 890.232630][T15105] ERROR: Out of memory at tomoyo_realpath_from_path. [ 891.293635][T10417] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 891.318944][T15113] xt_CT: No such helper "snmp_trap" [ 891.464885][T10417] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.519075][T10417] usb 7-1: config 0 interface 0 has no altsetting 0 [ 891.553998][T10417] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 891.563360][T10417] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.579314][T10417] usb 7-1: config 0 descriptor?? [ 891.628005][ T30] audit: type=1400 audit(2000000993.144:1137): avc: denied { write } for pid=15123 comm="syz.8.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 891.689210][ T5932] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 891.870028][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.881822][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.893414][ T5932] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 891.904334][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.933880][ T5932] usb 6-1: config 0 descriptor?? [ 892.007504][T15133] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2600'. [ 892.019816][T15133] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2600'. [ 892.611077][T10417] acrux 0003:1A34:0802.001B: ignoring exceeding usage max [ 892.636249][T15131] bridge_slave_0: left allmulticast mode [ 892.645888][T10417] acrux 0003:1A34:0802.001B: hidraw0: USB HID v10.00 Device [HID 1a34:0802] on usb-dummy_hcd.6-1/input0 [ 892.670306][T15136] netlink: 'syz.9.2601': attribute type 10 has an invalid length. [ 892.690929][T10417] acrux 0003:1A34:0802.001B: no inputs found [ 892.699443][T10417] acrux 0003:1A34:0802.001B: Failed to enable force feedback support, error: -19 [ 892.739318][T15131] bridge_slave_0: left promiscuous mode [ 892.789282][T15131] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.890181][T15131] bridge_slave_1: left allmulticast mode [ 892.909699][T15131] bridge_slave_1: left promiscuous mode [ 892.923581][T15145] net_ratelimit: 52 callbacks suppressed [ 892.923598][T15145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 892.927966][T15131] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.982111][T15131] bond0: (slave bond_slave_0): Releasing backup interface [ 893.025254][T15131] bond0: (slave bond_slave_1): Releasing backup interface [ 893.048026][ T5932] sony 0003:054C:024B.001C: unexpected long global item [ 893.055825][ T5932] sony 0003:054C:024B.001C: parse failed [ 893.073018][ T5932] sony 0003:054C:024B.001C: probe with driver sony failed with error -22 [ 893.107902][T15131] team0: Port device team_slave_0 removed [ 893.156754][T15131] team0: Port device team_slave_1 removed [ 893.163675][T15131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 893.171233][T15131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.179862][T15131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 893.188103][T15131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.207558][T15131] bond1: (slave ip6gre1): Releasing backup interface [ 893.214527][T15131] ip6gre1: left promiscuous mode [ 893.246184][T15136] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 893.256954][T15143] vlan0: entered allmulticast mode [ 893.276086][T15143] veth0_vlan: entered allmulticast mode [ 893.300300][ T5864] usb 7-1: USB disconnect, device number 6 [ 893.386876][ T30] audit: type=1326 audit(2000000994.790:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15116 comm="syz.5.2596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x0 [ 894.944836][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 895.649544][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 896.059180][T10417] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 896.255613][T14165] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 896.346684][T10417] usb 7-1: Using ep0 maxpacket: 32 [ 896.360054][T10417] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.375965][T10417] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.386360][T10417] usb 7-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 896.397548][T10417] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.502028][T15167] SELinux: syz.7.2609 (15167) set checkreqprot to 1. This is no longer supported. [ 896.608115][ T30] audit: type=1400 audit(2000000997.708:1139): avc: denied { setcheckreqprot } for pid=15164 comm="syz.7.2609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 896.683803][T10417] usb 7-1: config 0 descriptor?? [ 896.859312][ T5864] usb 6-1: USB disconnect, device number 7 [ 896.944218][T14165] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 94, changing to 10 [ 896.962593][T14165] usb 10-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 896.972864][T14165] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.975477][T10417] usbhid 7-1:0.0: can't add hid device: -71 [ 896.988213][T14165] usb 10-1: config 0 descriptor?? [ 897.005042][T10417] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 897.032947][T10417] usb 7-1: USB disconnect, device number 7 [ 897.333553][T15160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.350329][T15160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.579105][T10417] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 897.684481][T14165] stadia 0003:18D1:9400.001D: item fetching failed at offset 1/3 [ 897.692526][T14165] stadia 0003:18D1:9400.001D: parse failed [ 897.698784][T14165] stadia 0003:18D1:9400.001D: probe with driver stadia failed with error -22 [ 897.727083][T10417] usb 9-1: device descriptor read/64, error -71 [ 897.757852][ T5864] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 897.791419][T15160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.800101][T15160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.875419][ T5932] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 897.930284][ T5864] usb 6-1: Using ep0 maxpacket: 32 [ 897.936845][ T5864] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 897.945157][ T5864] usb 6-1: config 0 has no interface number 0 [ 897.982349][T10417] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 898.003525][ T5864] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 898.012775][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.022038][ T5864] usb 6-1: Product: syz [ 898.026311][ T5864] usb 6-1: Manufacturer: syz [ 898.030915][ T5864] usb 6-1: SerialNumber: syz [ 898.038259][ T5932] usb 8-1: config 0 has an invalid interface number: 125 but max is 0 [ 898.052903][ T5932] usb 8-1: config 0 has no interface number 0 [ 898.057798][ T5864] usb 6-1: config 0 descriptor?? [ 898.066858][ T5932] usb 8-1: New USB device found, idVendor=0421, idProduct=007b, bcdDevice=ed.44 [ 898.077947][ T5864] smsc95xx v2.0.0 [ 898.082161][ T5932] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.091919][ T5932] usb 8-1: Product: syz [ 898.096358][ T5932] usb 8-1: Manufacturer: syz [ 898.101158][ T5932] usb 8-1: SerialNumber: syz [ 898.111767][ T5932] usb 8-1: config 0 descriptor?? [ 898.119959][ T5932] rndis_host 8-1:0.125: invalid descriptor buffer length [ 898.127134][T10417] usb 9-1: device descriptor read/64, error -71 [ 898.133947][ T5932] usb 8-1: bad CDC descriptors [ 898.139278][ T5932] cdc_acm 8-1:0.125: invalid descriptor buffer length [ 898.249925][T10417] usb usb9-port1: attempt power cycle [ 898.352905][T15185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 898.366554][T15185] bond0: (slave bond1): Enslaving as an active interface with an up link [ 898.383116][ T5926] usb 8-1: USB disconnect, device number 3 [ 898.421355][ T5932] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 898.585767][ T5932] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.596295][ T5932] usb 7-1: config 0 interface 0 has no altsetting 0 [ 898.605121][ T5932] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 898.617543][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.625810][T10417] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 898.637365][ T5932] usb 7-1: config 0 descriptor?? [ 898.656992][T10417] usb 9-1: device descriptor read/8, error -71 [ 898.925150][T10417] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 898.937454][ T5864] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 898.948287][ T5864] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 898.948630][T10417] usb 9-1: device descriptor read/8, error -71 [ 899.076609][ T5926] usb 10-1: USB disconnect, device number 8 [ 899.102325][T10417] usb usb9-port1: unable to enumerate USB device [ 899.177874][T15196] virtio-fs: tag not found [ 899.184733][ T5932] acrux 0003:1A34:0802.001E: ignoring exceeding usage max [ 899.235975][T15173] block nbd5: NBD_DISCONNECT [ 899.247616][ T5932] acrux 0003:1A34:0802.001E: hidraw0: USB HID v10.00 Device [HID 1a34:0802] on usb-dummy_hcd.6-1/input0 [ 899.475242][T14165] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 899.475555][T15173] block nbd5: Send disconnect failed -22 [ 899.495071][ T5932] acrux 0003:1A34:0802.001E: no inputs found [ 899.503093][ T5932] acrux 0003:1A34:0802.001E: Failed to enable force feedback support, error: -19 [ 899.615483][ T5932] usb 7-1: USB disconnect, device number 8 [ 899.652648][T14165] usb 8-1: Using ep0 maxpacket: 8 [ 899.665454][T14165] usb 8-1: config 2 has an invalid interface number: 31 but max is 0 [ 899.677295][T14165] usb 8-1: config 2 has no interface number 0 [ 899.685969][T14165] usb 8-1: config 2 interface 31 has no altsetting 0 [ 899.740702][T14165] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 899.759372][T15202] netlink: zone id is out of range [ 899.764690][T15202] netlink: zone id is out of range [ 899.785018][T15202] netlink: set zone limit has 4 unknown bytes [ 899.796788][T14165] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.810480][T14165] usb 8-1: Product: syz [ 899.815558][T14165] usb 8-1: Manufacturer: syz [ 899.821646][T14165] usb 8-1: SerialNumber: syz [ 899.937841][T15208] binder: 15207:15208 ioctl c0306201 200000000080 returned -22 [ 900.126290][T15211] virtio-fs: tag not found [ 900.480357][T15193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.489232][T15193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.877430][T15224] virtio-fs: tag not found [ 901.189814][T14165] ch9200 8-1:2.31: probe with driver ch9200 failed with error -22 [ 901.222188][ T5926] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 901.240541][T15218] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2626'. [ 901.272305][T15218] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2626'. [ 901.318018][T15218] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2626'. [ 901.341181][ T5864] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 901.341504][T15198] block nbd5: Disconnected due to user request. [ 901.367189][ T5864] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 901.397331][ T5864] usb 6-1: USB disconnect, device number 8 [ 901.414829][ T5926] usb 10-1: too many configurations: 230, using maximum allowed: 8 [ 901.430379][T15198] block nbd5: shutting down sockets [ 901.477892][ T5926] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 901.497978][ T5926] usb 10-1: can't read configurations, error -61 [ 901.572023][T15230] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2630'. [ 901.583991][T15230] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2630'. [ 901.660413][ T5926] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 902.162490][T15236] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 902.315085][ T5926] usb 10-1: too many configurations: 230, using maximum allowed: 8 [ 902.323819][T11246] usb 8-1: USB disconnect, device number 4 [ 902.442015][ T30] audit: type=1326 audit(2000001003.255:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.6.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea798e929 code=0x7fc00000 [ 902.491662][ T5926] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 902.509566][ T5926] usb 10-1: can't read configurations, error -61 [ 902.664852][ T5926] usb usb10-port1: attempt power cycle [ 903.193888][T15251] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 903.448373][ T5926] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 903.509784][ T5926] usb 10-1: too many configurations: 230, using maximum allowed: 8 [ 903.560332][ T5926] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 903.568428][ T30] audit: type=1400 audit(2000001004.322:1141): avc: denied { execute } for pid=15254 comm="syz.5.2636" path="/dev/audio1" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 903.605606][ T5926] usb 10-1: can't read configurations, error -61 [ 903.827164][T15267] binder: 15265:15267 ioctl c00c6211 0 returned -14 [ 903.852340][ T5926] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 903.877039][ T5926] usb 10-1: too many configurations: 230, using maximum allowed: 8 [ 903.896288][ T5926] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 903.906805][ T5926] usb 10-1: can't read configurations, error -61 [ 903.944521][ T5926] usb usb10-port1: unable to enumerate USB device [ 904.072724][T15276] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2641'. [ 904.141151][T14165] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 904.168360][T15277] xt_socket: unknown flags 0x50 [ 904.402988][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.427674][ T30] audit: type=1400 audit(2000001005.107:1142): avc: denied { map } for pid=15278 comm="syz.9.2644" path="socket:[49754]" dev="sockfs" ino=49754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 904.428247][ T5864] hid (null): unknown global tag 0xc [ 904.459828][ T5864] hid (null): report_id 0 is invalid [ 904.477040][ T30] audit: type=1400 audit(2000001005.117:1143): avc: denied { read accept } for pid=15278 comm="syz.9.2644" path="socket:[49754]" dev="sockfs" ino=49754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 904.486640][ T5864] hid-generic FF9C:0007:0002.001F: unknown main item tag 0x0 [ 904.504731][ T30] audit: type=1400 audit(2000001005.154:1144): avc: denied { ioctl } for pid=15278 comm="syz.9.2644" path="/dev/uhid" dev="devtmpfs" ino=1274 ioctlcmd=0x4b4d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 904.511649][ T5864] hid-generic FF9C:0007:0002.001F: unknown global tag 0xc [ 904.553809][T15212] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 904.562328][ T30] audit: type=1400 audit(2000001005.163:1145): avc: denied { write } for pid=15278 comm="syz.9.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 904.575318][ T5864] hid-generic FF9C:0007:0002.001F: item 0 4 1 12 parsing failed [ 904.596495][T14165] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 904.606624][T14165] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 904.622623][ T5864] hid-generic FF9C:0007:0002.001F: probe with driver hid-generic failed with error -22 [ 904.633296][T14165] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 904.677141][T14165] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 904.693866][T14165] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 904.703451][T14165] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.717573][T15212] usb 7-1: Using ep0 maxpacket: 8 [ 904.725273][T15212] usb 7-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1024 [ 904.747520][T15212] usb 7-1: config 1 interface 0 has no altsetting 0 [ 904.879940][T15283] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input18 [ 904.931652][T15212] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 904.940893][T15212] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.952441][T14165] usb 8-1: config 0 descriptor?? [ 904.966823][T15269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.976613][T15212] usb 7-1: Product: 솈柭࢙﷢磭獒甁ꓪ쬸ʮ묲ᮾ豉j㍟差弘컳 [ 904.976637][T15212] usb 7-1: Manufacturer: 㙇ꚶ毣憽㻂㾥䑵祁䖑샛间ⶣᢁ㮅ꍶ얳鰋ࡏ另旇䊬㋄厕봹涠幑虥칗ᘹ贃ȣ牀졍䱷谡탏ｙ⋠녡◹✡蠁⦷ꐊ띛寜ᶒꠧ怱ŵ䮟䉛詴♰턁롛롮 [ 905.222488][T14165] hdpvr 8-1:0.0: firmware version 0xf4 dated М~LjuU$[-M/h&Xgކ<| [ 905.342367][T15288] netlink: 'syz.5.2646': attribute type 16 has an invalid length. [ 905.350419][T15288] netlink: 'syz.5.2646': attribute type 17 has an invalid length. [ 905.489620][T14165] hdpvr 8-1:0.0: untested firmware, the driver might not work. [ 905.512112][T15212] usb 7-1: SerialNumber: 뜡龶瞵럲Ძ渘㐩嘡顋渽魗⥇ᳩ漷鋂䒎펩⁰ﮪ墻䭱㼲귟常癯 [ 905.555669][T15289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 905.649966][T15272] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 906.078015][T15212] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 7 proto 2 vid 0x0525 pid 0xA4A8 [ 906.116863][T15212] usb 7-1: USB disconnect, device number 9 [ 906.130332][T14165] hdpvr 8-1:0.0: Could not setup controls [ 906.142410][T15212] usblp0: removed [ 906.151668][T14165] hdpvr 8-1:0.0: registering videodev failed [ 906.226247][T14165] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -71 [ 906.265800][T14165] usb 8-1: USB disconnect, device number 5 [ 906.388929][T15298] vlan1: entered promiscuous mode [ 906.394717][T15298] vlan1: entered allmulticast mode [ 906.400095][T15298] veth0_vlan: entered allmulticast mode [ 908.089674][T15304] vlan1: entered promiscuous mode [ 908.630089][T15304] vlan1: entered allmulticast mode [ 908.911875][T15316] xt_socket: unknown flags 0x50 [ 909.297756][T15326] virtio-fs: tag not found [ 909.627124][T15331] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2659'. [ 910.200679][ T5926] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 910.529715][ T5926] usb 10-1: unable to get BOS descriptor or descriptor too short [ 910.558964][ T5926] usb 10-1: not running at top speed; connect to a high speed hub [ 910.571787][ T5926] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 910.585909][ T5926] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 910.604563][ T5926] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 910.623422][ T5926] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 910.633660][ T5926] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.642663][ T5926] usb 10-1: Product: syz [ 910.655211][ T5926] usb 10-1: Manufacturer: syz [ 910.660057][ T5926] usb 10-1: SerialNumber: syz [ 910.790156][T14165] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 910.800493][T15212] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 910.888393][T15337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.907042][T15337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.961871][ T5868] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 910.973329][ T5926] usb 10-1: USB disconnect, device number 13 [ 910.982170][T15212] usb 6-1: Using ep0 maxpacket: 32 [ 910.984622][T14165] usb 8-1: unable to get BOS descriptor or descriptor too short [ 910.985173][T14165] usb 8-1: not running at top speed; connect to a high speed hub [ 910.985324][T15212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 910.986280][T14165] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 910.986302][T14165] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 910.986320][T14165] usb 8-1: config 4 has no interface number 0 [ 910.988695][T14165] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 910.988719][T14165] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.988760][T14165] usb 8-1: Product: syz [ 910.988774][T14165] usb 8-1: Manufacturer: syz [ 910.988794][T14165] usb 8-1: SerialNumber: syz [ 910.990893][T15212] usb 6-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75 [ 910.990915][T15212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.990932][T15212] usb 6-1: Product: syz [ 910.990947][T15212] usb 6-1: Manufacturer: syz [ 910.990961][T15212] usb 6-1: SerialNumber: syz [ 910.997830][T15212] usb 6-1: config 0 descriptor?? [ 911.011817][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 911.121103][ T5868] usb 9-1: Using ep0 maxpacket: 16 [ 911.252063][ T5868] usb 9-1: config 8 has an invalid interface number: 39 but max is 0 [ 911.252092][ T5868] usb 9-1: config 8 has no interface number 0 [ 911.252185][ T5868] usb 9-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 911.252210][ T5868] usb 9-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 911.252231][ T5868] usb 9-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 911.252250][ T5868] usb 9-1: config 8 interface 39 has no altsetting 0 [ 911.252439][T14165] usb 8-1: Found UVC 0.02 device syz (04f2:b746) [ 911.252573][T14165] usb 8-1: No valid video chain found. [ 911.264884][ T5868] usb 9-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 911.331701][T15212] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 911.331728][T15212] peak_usb 6-1:0.0: unable to read PCAN-USB Pro FD firmware info (err -71) [ 911.332910][T14165] usb 8-1: USB disconnect, device number 6 [ 911.370689][ T5868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.370713][ T5868] usb 9-1: Product: syz [ 911.370726][ T5868] usb 9-1: Manufacturer: syz [ 911.370741][ T5868] usb 9-1: SerialNumber: syz [ 911.412306][T15212] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 911.415150][T15212] usb 6-1: USB disconnect, device number 9 [ 911.663204][T15352] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.338310][ T5868] ipheth 9-1:8.39: ipheth_get_macaddr: usb_control_msg: -110 [ 912.347637][ T5868] ipheth 9-1:8.39: probe with driver ipheth failed with error -110 [ 912.461429][T15364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.480699][T15364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.489632][T14165] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 912.638114][T15370] virtio-fs: tag not found [ 912.803320][ T5868] usb 9-1: USB disconnect, device number 8 [ 912.928494][T14165] usb 10-1: Using ep0 maxpacket: 16 [ 912.935004][T15376] netlink: 'syz.8.2672': attribute type 13 has an invalid length. [ 912.952273][T14165] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 912.975045][T15376] macvtap0: entered promiscuous mode [ 912.985807][T14165] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 913.043369][T15376] macvtap0: refused to change device tx_queue_len [ 913.050062][T14165] usb 10-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 913.097213][T15382] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 913.103747][T15382] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 913.124885][T15382] vhci_hcd vhci_hcd.0: Device attached [ 913.125472][T14165] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.153598][T15383] vhci_hcd: connection closed [ 913.155110][T10407] vhci_hcd: stop threads [ 913.174931][T10407] vhci_hcd: release socket [ 913.182669][T14165] usb 10-1: config 0 descriptor?? [ 913.193687][T10407] vhci_hcd: disconnect device [ 914.164116][T15399] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 914.178050][T15398] IPVS: stopping master sync thread 15399 ... [ 916.020686][T15212] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 916.893011][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2679'. [ 916.961483][T14165] usb 10-1: string descriptor 0 read error: -71 [ 916.996843][T15212] usb 6-1: Using ep0 maxpacket: 16 [ 917.011251][T15212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.072468][T15412] block device autoloading is deprecated and will be removed. [ 917.095085][ T5868] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 917.212993][T15212] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 917.231179][T15212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.505373][ T5868] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 917.549211][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.560745][T15212] usb 6-1: config 0 descriptor?? [ 917.580826][T15212] usb 6-1: can't set config #0, error -71 [ 917.634327][T15419] vlan1: entered promiscuous mode [ 917.640061][T15419] vlan1: entered allmulticast mode [ 917.645527][T15419] veth0_vlan: entered allmulticast mode [ 917.661270][T14165] usb 10-1: USB disconnect, device number 14 [ 917.714483][ T5868] usb 7-1: config 0 descriptor?? [ 917.742182][T15212] usb 6-1: USB disconnect, device number 10 [ 917.749139][ T5868] usb 7-1: can't set config #0, error -71 [ 917.789567][ T5868] usb 7-1: USB disconnect, device number 10 [ 917.907836][T15433] syz.6.2685: attempt to access beyond end of device [ 917.907836][T15433] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 917.921872][T15433] hpfs: hpfs_map_sector(): read error [ 918.035090][T15433] netlink: zone id is out of range [ 918.046227][T15433] netlink: zone id is out of range [ 918.052955][T15433] netlink: zone id is out of range [ 918.058345][T15433] netlink: zone id is out of range [ 918.063581][T15433] netlink: zone id is out of range [ 918.068833][T15433] netlink: zone id is out of range [ 918.074708][T15433] netlink: zone id is out of range [ 918.079959][T15433] netlink: zone id is out of range [ 918.085203][T15433] netlink: zone id is out of range [ 918.090377][T15433] netlink: zone id is out of range [ 918.158275][T15417] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 919.197701][T15416] Bluetooth: hci5: command 0x0406 tx timeout [ 919.310551][T15416] Bluetooth: hci0: command 0x0406 tx timeout [ 919.316614][T15416] Bluetooth: hci1: command 0x0406 tx timeout [ 919.324299][T15416] Bluetooth: hci6: command 0x0406 tx timeout [ 919.868770][T15417] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 920.288918][T15417] usb 9-1: device descriptor read/64, error -71 [ 920.379185][ T5932] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 920.411450][T15417] usb usb9-port1: attempt power cycle [ 920.579925][T15463] program syz.7.2692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 920.958052][T15417] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 920.989331][T15417] usb 9-1: device descriptor read/8, error -71 [ 921.057170][ T5932] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 921.089547][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.097933][ T5932] usb 6-1: Product: syz [ 921.102952][ T5932] usb 6-1: Manufacturer: syz [ 921.110498][ T5932] usb 6-1: SerialNumber: syz [ 921.122269][ T5932] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 921.148233][ T5926] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 921.348916][T15470] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2693'. [ 921.707583][T15417] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 921.764311][T15417] usb 9-1: device descriptor read/8, error -71 [ 921.851704][ T5932] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 921.886623][ T5932] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 921.971828][T15417] usb usb9-port1: unable to enumerate USB device [ 922.026680][T10392] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 922.615841][ T30] audit: type=1400 audit(2000001022.122:1146): avc: denied { ioctl } for pid=15484 comm="syz.6.2698" path="socket:[50102]" dev="sockfs" ino=50102 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 922.658316][T10407] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 922.809839][T10407] wlan1: authentication with 08:02:11:00:00:00 timed out [ 922.820300][ T5926] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 922.830061][ T5926] ath9k_htc: Failed to initialize the device [ 923.554169][ T5926] usb 6-1: ath9k_htc: USB layer deinitialized [ 924.219140][T14165] usb 6-1: USB disconnect, device number 11 [ 924.485631][ T30] audit: type=1400 audit(2000001023.825:1147): avc: denied { audit_read } for pid=15491 comm="syz.8.2700" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 924.606653][ T30] audit: type=1400 audit(2000001023.956:1148): avc: denied { read open } for pid=15495 comm="syz.5.2701" path="/" dev="configfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 925.196600][T15506] syz.5.2704: attempt to access beyond end of device [ 925.196600][T15506] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 925.941660][ T5926] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 926.020338][T15506] hpfs: hpfs_map_sector(): read error [ 926.047285][T15509] net_ratelimit: 52 callbacks suppressed [ 926.047315][T15509] netlink: zone id is out of range [ 926.075483][T15509] netlink: zone id is out of range [ 926.102751][T15504] virtio-fs: tag not found [ 926.180549][ T5926] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 926.196212][ T5926] usb 9-1: config 0 has no interface number 0 [ 926.210049][ T5926] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.238340][T15509] netlink: zone id is out of range [ 926.301856][T15509] netlink: zone id is out of range [ 926.530911][ T5926] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.623022][ T5926] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 926.632188][ T5926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.639053][T15509] netlink: zone id is out of range [ 926.649244][T15509] netlink: zone id is out of range [ 926.656203][ T5926] usb 9-1: config 0 descriptor?? [ 927.190193][T15509] netlink: zone id is out of range [ 927.195921][T15509] netlink: zone id is out of range [ 927.201363][T15509] netlink: zone id is out of range [ 927.206614][T15509] netlink: zone id is out of range [ 927.240045][ T5926] input: HID 04d9:a055 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:04D9:A055.0020/input/input19 [ 930.117410][ T5926] holtek_kbd 0003:04D9:A055.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.8-1/input1 [ 930.185467][ T5926] usb 9-1: USB disconnect, device number 13 [ 930.311719][T15544] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2715'. [ 930.623797][ T30] audit: type=1400 audit(2000001029.549:1149): avc: denied { getopt } for pid=15549 comm="syz.7.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 930.655475][T15417] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 930.880752][T15417] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 930.900842][T15417] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.935934][T15417] usb 10-1: Product: syz [ 930.965143][T15417] usb 10-1: Manufacturer: syz [ 930.977782][T15417] usb 10-1: SerialNumber: syz [ 931.002460][T15417] usb 10-1: config 0 descriptor?? [ 931.153671][T15563] xt_socket: unknown flags 0x50 [ 931.506328][T15565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.941557][T15417] airspy 10-1:0.0: Board ID: 00 [ 931.957404][T15417] airspy 10-1:0.0: Firmware version: [ 932.049398][T15572] net_ratelimit: 52 callbacks suppressed [ 932.049414][T15572] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 932.084609][ T30] audit: type=1400 audit(2000001030.981:1150): avc: denied { map } for pid=15573 comm="syz.5.2725" path="/proc/230/net/ip_tables_names" dev="proc" ino=4026534054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 932.133932][ T30] audit: type=1400 audit(2000001030.981:1151): avc: denied { execute } for pid=15573 comm="syz.5.2725" path="/proc/230/net/ip_tables_names" dev="proc" ino=4026534054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 932.142692][T10412] Bluetooth: (null): Too short H5 packet [ 932.168636][T15576] fuse: Bad value for 'fd' [ 932.216234][T10412] Bluetooth: (null): Invalid header checksum [ 932.217991][ T30] audit: type=1400 audit(2000001031.018:1152): avc: denied { ioctl } for pid=15570 comm="syz.8.2724" path="socket:[52263]" dev="sockfs" ino=52263 ioctlcmd=0x5425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 932.230076][T10412] Bluetooth: (null): Invalid header checksum [ 932.296580][T10412] Bluetooth: (null): Invalid header checksum [ 932.377701][T10411] Bluetooth: (null): Invalid header checksum [ 932.449642][ T5926] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 932.491994][T10411] Bluetooth: (null): Invalid header checksum [ 932.611161][T10412] Bluetooth: (null): Invalid header checksum [ 932.622145][ T5926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 1 [ 932.633678][T15417] airspy 10-1:0.0: usb_control_msg() failed -71 request 12 [ 932.634517][ T5926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.656086][ T5926] usb 9-1: New USB device found, idVendor=1532, idProduct=0116, bcdDevice= 0.00 [ 932.658557][T15417] airspy 10-1:0.0: Registered as swradio24 [ 932.665225][ T5926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.672180][T15417] airspy 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 932.683651][ T5926] usb 9-1: config 0 descriptor?? [ 932.702913][T15417] usb 10-1: USB disconnect, device number 15 [ 932.726827][T15212] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 932.727206][T10408] Bluetooth: (null): Invalid header checksum [ 932.845477][T14850] Bluetooth: (null): Invalid header checksum [ 932.899577][T15212] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 932.911782][T15584] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2727'. [ 932.927147][T15212] usb 7-1: config 0 interface 0 has no altsetting 0 [ 932.937860][T15212] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 932.957907][T15212] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 932.962541][T10411] Bluetooth: (null): Invalid header checksum [ 932.966117][T15212] usb 7-1: Product: syz [ 932.966135][T15212] usb 7-1: Manufacturer: syz [ 932.995172][T15212] usb 7-1: SerialNumber: syz [ 933.017256][T15212] usb 7-1: config 0 descriptor?? [ 933.029402][T15212] usb 7-1: selecting invalid altsetting 0 [ 933.062094][T15587] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2729'. [ 933.082856][T10408] Bluetooth: (null): Invalid header checksum [ 933.091005][T15587] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2729'. [ 933.198893][T14850] Bluetooth: (null): Invalid header checksum [ 933.310189][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2726'. [ 933.538496][T15602] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2733'. [ 933.575109][T15603] syz.5.2731: attempt to access beyond end of device [ 933.575109][T15603] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 933.591292][T15603] hpfs: hpfs_map_sector(): read error [ 933.644253][T14850] Bluetooth: (null): Invalid header checksum [ 933.660872][T15212] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 933.661778][T15606] netlink: zone id is out of range [ 933.674360][T15606] netlink: zone id is out of range [ 933.680238][T15606] netlink: zone id is out of range [ 933.683382][T14850] Bluetooth: (null): Invalid header checksum [ 933.685422][T15606] netlink: zone id is out of range [ 933.696896][T15606] netlink: zone id is out of range [ 933.708980][T15606] netlink: zone id is out of range [ 933.709062][T14850] Bluetooth: (null): Invalid header checksum [ 933.724597][T14850] Bluetooth: (null): Invalid header checksum [ 933.793751][T15417] usb 7-1: USB disconnect, device number 11 [ 933.818053][T15606] netlink: zone id is out of range [ 933.823442][T14850] Bluetooth: (null): Invalid header checksum [ 933.845280][T15606] netlink: zone id is out of range [ 933.857469][T15606] netlink: zone id is out of range [ 933.893944][T15212] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 933.906407][T15212] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.919580][T10412] Bluetooth: (null): Invalid header checksum [ 933.943243][T15212] usb 8-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 933.989566][T15212] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.024278][T10411] Bluetooth: (null): Invalid header checksum [ 934.107768][T15212] usb 8-1: config 0 descriptor?? [ 934.150005][T10392] Bluetooth: (null): Invalid header checksum [ 934.269578][T14850] Bluetooth: (null): Invalid header checksum [ 934.387729][T10412] Bluetooth: (null): Invalid header checksum [ 934.506586][T10412] Bluetooth: (null): Invalid header checksum [ 934.685862][T10411] Bluetooth: (null): Invalid header checksum [ 934.740529][T15595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.774638][T15595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.952702][ T13] Bluetooth: (null): Invalid header checksum [ 934.981184][ T30] audit: type=1400 audit(2000001033.693:1153): avc: denied { mount } for pid=15614 comm="syz.6.2737" name="/" dev="rpc_pipefs" ino=52323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 935.129089][T10411] Bluetooth: (null): Invalid header checksum [ 935.292625][T10411] Bluetooth: (null): Invalid header checksum [ 935.298731][T10411] Bluetooth: (null): Invalid header checksum [ 935.308044][T10411] Bluetooth: (null): Invalid header checksum [ 935.885554][T14850] Bluetooth: (null): Invalid header checksum [ 935.904969][T10392] Bluetooth: (null): Invalid header checksum [ 936.010961][ T5926] usbhid 9-1:0.0: can't add hid device: -71 [ 936.018477][T10392] Bluetooth: (null): Invalid header checksum [ 936.019887][ T5926] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 936.038694][T15212] usbhid 8-1:0.0: can't add hid device: -71 [ 936.067489][ T5926] usb 9-1: USB disconnect, device number 14 [ 936.067756][T10392] Bluetooth: (null): Invalid header checksum [ 936.090009][T15212] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 936.378836][T10392] Bluetooth: (null): Invalid header checksum [ 936.385449][T10392] Bluetooth: (null): Invalid header checksum [ 936.404736][T15212] usb 8-1: USB disconnect, device number 7 [ 937.236647][ T30] audit: type=1400 audit(2000001035.798:1154): avc: denied { create } for pid=15632 comm="syz.9.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 937.481788][T15635] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 937.488748][T15635] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 937.613088][T15635] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 937.620434][T15635] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 937.623132][ T30] audit: type=1400 audit(2000001035.873:1155): avc: denied { write } for pid=15632 comm="syz.9.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 937.708858][ T30] audit: type=1400 audit(2000001036.144:1156): avc: denied { unmount } for pid=14101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 937.721513][T15635] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 937.790063][T15635] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 937.877382][T15650] Invalid ELF header len 8 [ 937.891943][ T30] audit: type=1400 audit(2000001036.406:1157): avc: denied { module_load } for pid=15641 comm="syz.8.2744" path="/83/bus" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 938.030860][T15635] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 938.041368][T15635] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 938.438910][T15635] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 938.450450][T15635] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 938.754589][T15635] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 939.579522][T14112] Bluetooth: hci0: command 0x0406 tx timeout [ 939.868124][T14112] Bluetooth: hci5: command 0x0406 tx timeout [ 939.921609][T14112] Bluetooth: hci6: command 0x0406 tx timeout [ 940.019330][ T30] audit: type=1400 audit(2000001038.314:1158): avc: denied { mount } for pid=15677 comm="syz.9.2753" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 940.587838][T14112] Bluetooth: hci1: command 0x0406 tx timeout [ 940.638050][ T30] audit: type=1400 audit(2000001038.959:1159): avc: denied { unmount } for pid=14109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 940.702198][T14112] Bluetooth: hci2: command 0x0405 tx timeout [ 940.785615][ T30] audit: type=1400 audit(2000001039.128:1160): avc: denied { node_bind } for pid=15693 comm="syz.9.2754" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 940.820597][T15694] block nbd9: NBD_DISCONNECT [ 940.829922][T15694] block nbd9: Send disconnect failed -107 [ 940.846090][T15694] block nbd9: Disconnected due to user request. [ 940.860414][T15694] block nbd9: shutting down sockets [ 940.885883][T15697] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2757'. [ 940.897771][T15697] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2757'. [ 942.158891][T14112] Bluetooth: hci0: command 0x0406 tx timeout [ 942.164943][T14112] Bluetooth: hci5: command 0x0406 tx timeout [ 942.171001][T14112] Bluetooth: hci6: command 0x0406 tx timeout [ 943.133657][T14104] Bluetooth: hci1: command 0x0406 tx timeout [ 943.133744][T14112] Bluetooth: hci2: command 0x0405 tx timeout [ 944.173120][T15728] netlink: 'syz.9.2767': attribute type 12 has an invalid length. [ 944.181697][T15728] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2767'. [ 944.316299][T15733] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 944.333812][T15735] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2769'. [ 944.351578][T15735] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2769'. [ 944.458718][T14104] Bluetooth: hci6: unexpected event for opcode 0x1003 [ 944.721722][T15417] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 944.894124][T15417] usb 10-1: Using ep0 maxpacket: 8 [ 944.909112][T15417] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 944.936493][T15417] usb 10-1: config 179 has no interface number 0 [ 944.951701][T15417] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 945.031865][T15417] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 945.056105][T15417] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 945.239011][T15417] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 945.273901][T15417] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 945.310576][T14104] Bluetooth: hci2: command 0x0405 tx timeout [ 946.341877][T15417] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 946.353086][T15417] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.421793][T15733] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 947.152814][ T5926] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 947.722744][ T30] audit: type=1400 audit(2000001045.610:1161): avc: denied { accept } for pid=15763 comm="syz.6.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 947.923977][ T5868] usb 10-1: USB disconnect, device number 16 [ 947.930081][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 947.930127][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 947.939628][ T5926] usb 9-1: Invalid ep0 maxpacket: 16 [ 948.154472][ T5926] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 948.554051][ T5926] usb 9-1: Invalid ep0 maxpacket: 16 [ 948.584454][ T5926] usb usb9-port1: attempt power cycle [ 948.818868][T14104] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 948.828829][T14104] Bluetooth: hci6: Injecting HCI hardware error event [ 948.838135][T14112] Bluetooth: hci6: hardware error 0x00 [ 949.179768][ T5926] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 949.230507][ T5926] usb 9-1: Invalid ep0 maxpacket: 16 [ 949.296093][T15798] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=15798 comm=syz.5.2789 [ 949.371809][T15798] 9pnet_fd: Insufficient options for proto=fd [ 949.382823][ T5926] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 949.397659][T15798] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 949.437000][ T5926] usb 9-1: Invalid ep0 maxpacket: 16 [ 949.446736][ T5926] usb usb9-port1: unable to enumerate USB device [ 949.457682][T11246] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 949.863236][T11246] usb 8-1: Using ep0 maxpacket: 8 [ 951.029517][T11246] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.039889][T14112] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 951.061437][T11246] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 951.484184][T11246] usb 8-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 951.494201][T11246] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.634173][T11246] usb 8-1: Product: syz [ 951.638389][T11246] usb 8-1: Manufacturer: syz [ 951.648310][T15822] kernel read not supported for file /z (pid: 15822 comm: syz.9.2796) [ 951.676685][ T30] audit: type=1800 audit(2000001049.305:1162): pid=15822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2796" name=7ABF17 dev="mqueue" ino=51809 res=0 errno=0 [ 951.841650][T11246] usb 8-1: SerialNumber: syz [ 952.120408][T11246] usb 8-1: config 0 descriptor?? [ 952.140179][T11246] usb 8-1: can't set config #0, error -71 [ 952.178529][T11246] usb 8-1: USB disconnect, device number 8 [ 953.102972][ T5926] IPVS: starting estimator thread 0... [ 953.223622][T15844] IPVS: using max 45 ests per chain, 108000 per kthread [ 953.240797][T15846] net_ratelimit: 53 callbacks suppressed [ 953.240833][T15846] openvswitch: netlink: Message has 2 unknown bytes. [ 953.359825][T15846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 953.842923][ T30] audit: type=1326 audit(2000001051.344:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15825 comm="syz.6.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea798e929 code=0x7fc00000 [ 953.914105][ T30] audit: type=1326 audit(2000001051.344:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15825 comm="syz.6.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea798e929 code=0x7fc00000 [ 953.987338][ T30] audit: type=1326 audit(2000001051.344:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15825 comm="syz.6.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea798e929 code=0x7fc00000 [ 954.068032][ T30] audit: type=1326 audit(2000001051.344:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15825 comm="syz.6.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea798e929 code=0x7fc00000 [ 954.093039][ T30] audit: type=1326 audit(2000001051.344:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15825 comm="syz.6.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea798e929 code=0x7fc00000 [ 954.097768][T11246] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 954.126242][ T30] audit: type=1326 audit(2000001051.344:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15825 comm="syz.6.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea798e929 code=0x7fc00000 [ 954.153411][ T30] audit: type=1326 audit(2000001051.344:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15825 comm="syz.6.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea798e929 code=0x7fc00000 [ 954.179952][ T30] audit: type=1326 audit(2000001051.344:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15825 comm="syz.6.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea798e929 code=0x7fc00000 [ 954.203389][ C0] vkms_vblank_simulate: vblank timer overrun [ 954.212324][ T30] audit: type=1326 audit(2000001051.344:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15825 comm="syz.6.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea798e929 code=0x7fc00000 [ 954.235783][ C0] vkms_vblank_simulate: vblank timer overrun [ 954.243552][ T30] audit: type=1326 audit(2000001051.344:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15825 comm="syz.6.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea798e929 code=0x7fc00000 [ 954.297850][T11246] usb 10-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.309326][T11246] usb 10-1: config 0 interface 0 has no altsetting 0 [ 954.316132][T11246] usb 10-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 954.331395][T11246] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.356829][T11246] usb 10-1: config 0 descriptor?? [ 954.600138][ T5926] IPVS: starting estimator thread 0... [ 954.615202][T15862] sctp: [Deprecated]: syz.6.2808 (pid 15862) Use of int in maxseg socket option. [ 954.615202][T15862] Use struct sctp_assoc_value instead [ 954.690098][T15858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.792387][T15863] IPVS: using max 44 ests per chain, 105600 per kthread [ 954.826124][T15858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.556627][T11246] usbhid 10-1:0.0: can't add hid device: -71 [ 955.562763][T11246] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 955.592770][T11246] usb 10-1: USB disconnect, device number 17 [ 955.679359][T15873] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2810'. [ 956.255075][T15882] ieee802154 phy0 wpan0: encryption failed: -22 [ 956.340832][T15883] netlink: 'syz.8.2813': attribute type 10 has an invalid length. [ 956.369000][T15883] team0: Device hsr_slave_0 failed to register rx_handler [ 957.661185][T15902] syz.8.2818: attempt to access beyond end of device [ 957.661185][T15902] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 957.675539][T15902] hpfs: hpfs_map_sector(): read error [ 957.724514][T15903] netlink: zone id is out of range [ 957.730442][T15903] netlink: zone id is out of range [ 957.747035][T15903] netlink: zone id is out of range [ 957.753306][T15903] netlink: zone id is out of range [ 957.758525][T15903] netlink: zone id is out of range [ 957.763806][T15903] netlink: zone id is out of range [ 957.771836][T15903] netlink: zone id is out of range [ 957.830357][T15903] netlink: zone id is out of range [ 958.480782][ T5926] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 959.600479][T15417] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 959.620153][ T5926] usb 6-1: config 2 has no interfaces? [ 959.638075][T15929] Invalid ELF header magic: != ELF [ 959.643681][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 959.643694][ T30] audit: type=1400 audit(2000001056.760:1260): avc: denied { module_load } for pid=15921 comm="syz.7.2824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 959.681304][ T5926] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 959.699204][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.707334][ T5926] usb 6-1: Product: syz [ 959.711551][ T5926] usb 6-1: Manufacturer: syz [ 959.716148][ T5926] usb 6-1: SerialNumber: syz [ 959.768048][T15417] usb 7-1: Using ep0 maxpacket: 32 [ 959.805720][T15417] usb 7-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 959.824258][T15417] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.844758][T15417] usb 7-1: config 0 descriptor?? [ 959.846629][ T30] audit: type=1400 audit(2000001056.957:1261): avc: denied { create } for pid=15932 comm="syz.9.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 959.866430][T15417] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 959.882097][T15417] gspca_mr97310a: reg write [21] error -22 [ 959.888453][T15417] mr97310a 7-1:0.0: probe with driver mr97310a failed with error -22 [ 960.013013][T14112] Bluetooth: hci5: unexpected event for opcode 0x0c2d [ 960.156111][T15939] xt_socket: unknown flags 0x50 [ 960.230262][ T5926] usb 6-1: USB disconnect, device number 12 [ 960.231947][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2830'. [ 960.245531][T15936] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2830'. [ 960.258001][T15936] netlink: 'syz.7.2830': attribute type 19 has an invalid length. [ 960.359958][ T30] audit: type=1400 audit(2000001057.434:1262): avc: denied { relabelfrom } for pid=15941 comm="syz.9.2831" name="NETLINK" dev="sockfs" ino=52044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 960.360547][T15942] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 960.394931][ C1] vkms_vblank_simulate: vblank timer overrun [ 960.532053][T15945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.546728][T15945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.600510][ T30] audit: type=1400 audit(2000001057.658:1263): avc: denied { relabelto } for pid=15941 comm="syz.9.2831" name="NETLINK" dev="sockfs" ino=52044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 960.629506][ C1] vkms_vblank_simulate: vblank timer overrun [ 960.754677][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 960.762855][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 960.853156][T15955] fuse: Bad value for 'fd' [ 960.853162][T15417] usb 7-1: USB disconnect, device number 12 [ 961.053067][ T30] audit: type=1400 audit(2000001058.060:1264): avc: denied { ioctl } for pid=15941 comm="syz.9.2831" path="socket:[52971]" dev="sockfs" ino=52971 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 962.123362][ T30] audit: type=1326 audit(2000001059.080:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.5.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 962.619791][ T30] audit: type=1326 audit(2000001059.548:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.5.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 962.675056][T15979] xt_CT: No such helper "snmp_trap" [ 962.893588][ T30] audit: type=1326 audit(2000001059.800:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.5.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 962.972791][ T30] audit: type=1326 audit(2000001059.800:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.5.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 962.999072][ T30] audit: type=1326 audit(2000001059.800:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15980 comm="syz.5.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 963.230047][T16003] program syz.6.2847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 964.445918][T11246] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 965.688383][T11246] usb 8-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.703240][T11246] usb 8-1: config 0 interface 0 has no altsetting 0 [ 965.722832][T11246] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 965.737729][T11246] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.759311][T11246] usb 8-1: config 0 descriptor?? [ 965.866870][T16026] virtio-fs: tag not found [ 966.276818][T16033] net_ratelimit: 54 callbacks suppressed [ 966.276849][T16033] netlink: zone id is out of range [ 966.289306][T16033] netlink: zone id is out of range [ 966.431171][T16033] netlink: set zone limit has 4 unknown bytes [ 967.582453][T16042] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 967.627282][T16042] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 967.930075][T16050] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2863'. [ 968.142255][T15212] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 968.212219][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 968.212234][ T30] audit: type=1804 audit(2000001064.786:1333): pid=16052 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.2864" name="/newroot/118/file0" dev="tmpfs" ino=633 res=1 errno=0 [ 968.316797][T11246] usbhid 8-1:0.0: can't add hid device: -71 [ 968.326740][T11246] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 968.343475][T11246] usb 8-1: USB disconnect, device number 9 [ 968.363790][ T30] audit: type=1326 audit(2000001064.926:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16038 comm="syz.8.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe727f8e929 code=0x7fc00000 [ 968.408244][ T30] audit: type=1326 audit(2000001064.926:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16038 comm="syz.8.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe727f8e929 code=0x7fc00000 [ 968.426878][T16055] netlink: 'syz.7.2865': attribute type 3 has an invalid length. [ 968.440351][ T30] audit: type=1326 audit(2000001064.926:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16038 comm="syz.8.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe727f8e929 code=0x7fc00000 [ 968.441348][T15212] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 968.463808][ C1] vkms_vblank_simulate: vblank timer overrun [ 968.464809][ T30] audit: type=1326 audit(2000001064.926:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16038 comm="syz.8.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe727f8e929 code=0x7fc00000 [ 968.505013][ T30] audit: type=1326 audit(2000001064.926:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16038 comm="syz.8.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe727f8e929 code=0x7fc00000 [ 968.534647][ T30] audit: type=1326 audit(2000001064.954:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16038 comm="syz.8.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe727f8e929 code=0x7fc00000 [ 968.559308][ T30] audit: type=1326 audit(2000001064.954:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16038 comm="syz.8.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe727f8e929 code=0x7fc00000 [ 968.561353][T15212] usb 7-1: config 0 interface 0 has no altsetting 0 [ 968.592889][ T30] audit: type=1326 audit(2000001064.954:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16038 comm="syz.8.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe727f8e929 code=0x7fc00000 [ 968.599547][T15212] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 968.628191][T15212] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 968.636407][T15212] usb 7-1: Product: syz [ 968.640803][ T30] audit: type=1326 audit(2000001064.954:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16038 comm="syz.8.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe727f8e929 code=0x7fc00000 [ 968.641670][T15212] usb 7-1: Manufacturer: syz [ 968.739848][T15212] usb 7-1: SerialNumber: syz [ 968.782849][T15212] usb 7-1: config 0 descriptor?? [ 968.839470][T15212] usb 7-1: selecting invalid altsetting 0 [ 969.085291][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2861'. [ 969.444260][T15212] usb 7-1: USB disconnect, device number 13 [ 969.886710][T11246] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 970.830345][T11246] usb 9-1: device descriptor read/64, error -71 [ 971.117002][T11246] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 971.418644][T11246] usb 9-1: device descriptor read/64, error -71 [ 971.555644][T11246] usb usb9-port1: attempt power cycle [ 971.607603][T16094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.627204][T16094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.833202][T10417] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 971.873559][T16103] netlink: 'syz.5.2878': attribute type 3 has an invalid length. [ 971.928694][T16106] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2879'. [ 971.937793][T11246] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 971.983338][T11246] usb 9-1: device descriptor read/8, error -71 [ 972.004124][T10417] usb 10-1: Using ep0 maxpacket: 8 [ 972.017461][T10417] usb 10-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1024 [ 972.039443][T10417] usb 10-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 32 [ 972.049957][T10417] usb 10-1: config 1 interface 0 has no altsetting 0 [ 972.072526][T10417] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 972.101449][T10417] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.117470][T10417] usb 10-1: Manufacturer: 窎⢣眯㵍轎溂᫙ᆏ넄寤딙鈓Ө떏珴觵꫘췱䨄漱欛棏ퟭ畄Ỹත估窊⇱⚠陹࿌䜽쉨珹돲⿻᫲걜兒ভ汒垨좁㥚並⊴◔ㄟ䮣㣎䀠᎓霟閛崭噢べ䇋菋엳⑏ͦ䛰⬯☀㍊ᘨ瞶㓦䚕ᩞ畉맜듉⧹⪈㽅呀繬蔸檆䱔鎯㪮▾䪈 [ 972.155937][T10417] usb 10-1: SerialNumber: 䌝ꇨ偪❇ኆ嶡軹傢僑熿딻씟쬬㎈ᙠ䊳쉙嘓鶃鿯頋틪ྏ호婚ᓀ숋䕠梨捬⏯瀐쌜뇥鳢礔臅蜽ꂱ賟溾ᜏ惩롡૤田櫪㖭ᰃ樹㘀쟯喛 [ 972.210514][T16093] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 972.218868][T16093] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 972.250435][T11246] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 972.272139][T11246] usb 9-1: device descriptor read/8, error -71 [ 972.400162][T11246] usb usb9-port1: unable to enumerate USB device [ 972.504795][T16118] overlayfs: failed to resolve './file1': -2 [ 972.506996][T10417] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 7 proto 3 vid 0x0525 pid 0xA4A8 [ 973.180412][T10417] usb 10-1: USB disconnect, device number 18 [ 973.255323][T10417] usblp0: removed [ 974.538203][ T5899] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 974.592300][T16137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.632262][T16137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.737426][ T5899] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.879060][ T5899] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.951448][T10417] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 974.955086][ T5899] usb 10-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 975.040605][ T5899] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.073598][ T5899] usb 10-1: config 0 descriptor?? [ 975.147635][T10417] usb 8-1: Invalid ep0 maxpacket: 32 [ 975.199155][T16150] IPVS: Unknown mcast interface: pim6reg [ 975.634384][ T5899] sony 0003:054C:024B.0021: unexpected long global item [ 975.740805][ T5899] sony 0003:054C:024B.0021: parse failed [ 975.813537][ T5899] sony 0003:054C:024B.0021: probe with driver sony failed with error -22 [ 976.124343][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 976.124358][ T30] audit: type=1326 audit(2000001072.185:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.5.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 976.164925][T10417] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 976.254241][ T30] audit: type=1326 audit(2000001072.306:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16129 comm="syz.9.2885" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f525c18e929 code=0x0 [ 976.365897][T10417] usb 8-1: Invalid ep0 maxpacket: 32 [ 976.387711][T10417] usb usb8-port1: attempt power cycle [ 976.764792][ T30] audit: type=1326 audit(2000001072.774:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.5.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 976.788662][ T30] audit: type=1326 audit(2000001072.774:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.5.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 976.852027][ T30] audit: type=1326 audit(2000001072.774:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.5.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 976.889780][T10417] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 976.921635][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2898'. [ 976.937160][T16168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2898'. [ 976.958905][T10417] usb 8-1: Invalid ep0 maxpacket: 32 [ 976.964838][ T30] audit: type=1326 audit(2000001072.774:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.5.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 977.031924][ T30] audit: type=1326 audit(2000001072.774:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.5.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 977.056565][T16176] netlink: 'syz.6.2901': attribute type 3 has an invalid length. [ 977.069157][ T30] audit: type=1326 audit(2000001072.774:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.5.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 977.095034][ T30] audit: type=1326 audit(2000001072.774:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.5.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 977.119004][T10417] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 977.161721][T10417] usb 8-1: Invalid ep0 maxpacket: 32 [ 977.167489][T10417] usb usb8-port1: unable to enumerate USB device [ 977.194327][ T30] audit: type=1326 audit(2000001072.774:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16151 comm="syz.5.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 977.994239][T15417] usb 10-1: USB disconnect, device number 19 [ 978.391127][T16196] Bluetooth: MGMT ver 1.23 [ 978.742692][T11246] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 979.019362][T16196] slcan: can't register candev [ 979.024669][T16196] Falling back ldisc for ptm0. [ 979.106215][T11246] usb 9-1: Using ep0 maxpacket: 16 [ 979.125265][T11246] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 979.133991][T11246] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 979.195552][T11246] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 979.228138][T11246] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 979.246802][T11246] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.267838][T11246] usb 9-1: Product: Е [ 979.272212][T11246] usb 9-1: Manufacturer: ␨ [ 979.295154][T11246] usb 9-1: SerialNumber: Ћ [ 979.541171][T15212] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 979.797587][T15212] usb 6-1: Using ep0 maxpacket: 32 [ 979.812541][T15212] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.892162][T16209] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2905'. [ 979.902626][T15212] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 980.010113][T15212] usb 6-1: config 0 interface 0 has no altsetting 0 [ 980.043882][T16210] netlink: 'syz.8.2905': attribute type 16 has an invalid length. [ 980.064319][T15212] usb 6-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 980.086883][T16210] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2905'. [ 980.137152][T15212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.510804][T16209] bridge_slave_1: left promiscuous mode [ 980.516882][T16209] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.525383][T16214] xt_socket: unknown flags 0x50 [ 980.534927][T15212] usb 6-1: config 0 descriptor?? [ 980.609198][T16209] bridge_slave_0: left allmulticast mode [ 980.630942][T16209] bridge_slave_0: left promiscuous mode [ 980.641005][T16209] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.684253][T16221] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2912'. [ 980.796972][T16210] bridge_slave_0: entered allmulticast mode [ 980.980359][T16227] FAULT_INJECTION: forcing a failure. [ 980.980359][T16227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.997695][T16227] CPU: 0 UID: 0 PID: 16227 Comm: syz.7.2916 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 980.997722][T16227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 980.997731][T16227] Call Trace: [ 980.997735][T16227] [ 980.997740][T16227] dump_stack_lvl+0x16c/0x1f0 [ 980.997759][T16227] should_fail_ex+0x512/0x640 [ 980.997776][T16227] _copy_to_user+0x32/0xd0 [ 980.997798][T16227] simple_read_from_buffer+0xcb/0x170 [ 980.997823][T16227] proc_fail_nth_read+0x197/0x270 [ 980.997844][T16227] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.997866][T16227] ? rw_verify_area+0xcf/0x680 [ 980.997882][T16227] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.997895][T16227] vfs_read+0x1e4/0xc60 [ 980.997910][T16227] ? __pfx___mutex_lock+0x10/0x10 [ 980.997924][T16227] ? __pfx_vfs_read+0x10/0x10 [ 980.997950][T16227] ? __fget_files+0x20e/0x3c0 [ 980.997979][T16227] ksys_read+0x12a/0x250 [ 980.997999][T16227] ? __pfx_ksys_read+0x10/0x10 [ 980.998026][T16227] do_syscall_64+0xcd/0x4c0 [ 980.998051][T16227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.998067][T16227] RIP: 0033:0x7fa675b8d33c [ 980.998080][T16227] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 980.998096][T16227] RSP: 002b:00007fa676ab4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 980.998111][T16227] RAX: ffffffffffffffda RBX: 00007fa675db5fa0 RCX: 00007fa675b8d33c [ 980.998122][T16227] RDX: 000000000000000f RSI: 00007fa676ab40a0 RDI: 0000000000000005 [ 980.998131][T16227] RBP: 00007fa676ab4090 R08: 0000000000000000 R09: 0000000000000000 [ 980.998141][T16227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.998150][T16227] R13: 0000000000000000 R14: 00007fa675db5fa0 R15: 00007fff24db86e8 [ 980.998165][T16227] [ 981.074119][T15212] usbhid 6-1:0.0: can't add hid device: -71 [ 981.306771][T15212] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 981.309328][T11246] usb 9-1: 0:2 : does not exist [ 981.341538][T15212] usb 6-1: USB disconnect, device number 13 [ 981.501537][T11246] usb 9-1: USB disconnect, device number 23 [ 981.877310][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 982.117519][T15417] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 982.304813][T15417] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.339032][T15417] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.360036][T15417] usb 8-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 982.373882][T15417] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.421068][T15417] usb 8-1: config 0 descriptor?? [ 982.872179][T15417] sony 0003:054C:024B.0022: unexpected long global item [ 982.936732][T15417] sony 0003:054C:024B.0022: parse failed [ 982.944115][T15417] sony 0003:054C:024B.0022: probe with driver sony failed with error -22 [ 983.206151][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 983.206182][ T30] audit: type=1326 audit(2000001078.808:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.5.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 983.241695][ T30] audit: type=1326 audit(2000001078.817:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.5.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 983.308898][T16256] xt_socket: unknown flags 0x50 [ 983.625904][ T30] audit: type=1326 audit(2000001079.200:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.5.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 983.738721][ T30] audit: type=1326 audit(2000001079.303:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16230 comm="syz.7.2917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa675b8e929 code=0x0 [ 983.919504][ T30] audit: type=1326 audit(2000001079.472:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.5.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 983.945970][ T30] audit: type=1326 audit(2000001079.472:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.5.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 983.970762][ T30] audit: type=1326 audit(2000001079.472:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.5.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 984.001094][ T30] audit: type=1326 audit(2000001079.472:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.5.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 984.119154][ T30] audit: type=1326 audit(2000001079.472:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.5.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 984.128210][T14112] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 984.167492][ T30] audit: type=1326 audit(2000001079.472:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.5.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af38e929 code=0x7fc00000 [ 984.781861][T16278] ./cgroup: Can't lookup blockdev [ 984.788345][T16278] 9pnet_fd: Insufficient options for proto=fd [ 984.813465][T14112] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 984.903156][T16281] netlink: 'syz.5.2934': attribute type 1 has an invalid length. [ 984.925882][T16281] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2934'. [ 985.037599][T16287] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2935'. [ 985.113213][ T5926] usb 8-1: USB disconnect, device number 14 [ 986.036323][ T5926] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 986.272351][ T5926] usb 8-1: device descriptor read/64, error -71 [ 986.842774][ T5926] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 987.013885][ T5926] usb 8-1: device descriptor read/64, error -71 [ 987.206947][ T5926] usb usb8-port1: attempt power cycle [ 987.257139][T16312] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=16312 comm=syz.5.2943 [ 987.864647][T16312] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 987.901223][ T5926] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 987.923620][ T5926] usb 8-1: device descriptor read/8, error -71 [ 988.182026][T16323] syz.6.2947: attempt to access beyond end of device [ 988.182026][T16323] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 988.195279][T16323] hpfs: hpfs_map_sector(): read error [ 988.457089][ T5926] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 988.478938][T16322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 988.499980][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 988.507140][ T5926] usb 8-1: device descriptor read/8, error -32 [ 988.630516][ T5926] usb usb8-port1: unable to enumerate USB device [ 990.750988][T15212] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 991.128651][T16360] xt_CT: No such helper "snmp_trap" [ 991.249067][T15212] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.270881][T15212] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.285164][T15212] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 991.301338][T16366] virtio-fs: tag not found [ 991.307385][T15212] usb 10-1: New USB device strings: Mfr=104, Product=1, SerialNumber=0 [ 991.319424][T15212] usb 10-1: Product: syz [ 991.343594][T15417] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 991.351416][T15212] usb 10-1: Manufacturer: syz [ 991.373032][T15212] usb 10-1: config 0 descriptor?? [ 991.492106][T11246] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 991.525215][T15417] usb 9-1: Using ep0 maxpacket: 16 [ 991.692138][T15417] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 991.704037][T15417] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 991.716874][T15417] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 991.731797][T15417] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 991.743340][T15417] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 991.752658][T15417] usb 9-1: SerialNumber: syz [ 991.760616][T11246] usb 8-1: Using ep0 maxpacket: 32 [ 991.769240][T11246] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 991.781794][T16359] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 991.793078][T11246] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.823057][T11246] usb 8-1: config 0 descriptor?? [ 991.842090][T11246] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 992.000253][T16377] syz.6.2962: attempt to access beyond end of device [ 992.000253][T16377] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 992.010016][T15417] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 992.025690][T16377] hpfs: hpfs_map_sector(): read error [ 992.052899][T16378] netlink: zone id is out of range [ 992.060842][T16378] netlink: zone id is out of range [ 992.068828][T16378] netlink: zone id is out of range [ 992.074663][T16378] netlink: zone id is out of range [ 992.079863][T16378] netlink: zone id is out of range [ 992.085139][T16378] netlink: zone id is out of range [ 992.091408][T16378] netlink: zone id is out of range [ 992.096841][T16378] netlink: zone id is out of range [ 992.102046][T16378] netlink: zone id is out of range [ 992.107301][T16378] netlink: zone id is out of range [ 992.248802][T16364] loop1: detected capacity change from 0 to 7 [ 992.261138][T16364] Dev loop1: unable to read RDB block 7 [ 992.284307][T16364] loop1: AHDI p4 [ 992.288005][T16364] loop1: partition table partially beyond EOD, truncated [ 992.373277][T15417] usb 9-1: USB disconnect, device number 24 [ 992.464280][T15212] uclogic 0003:256C:006D.0023: interface is invalid, ignoring [ 992.549795][T11246] gspca_vc032x: reg_w err -71 [ 992.563774][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 992.578560][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 992.589167][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 992.595537][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 992.601584][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 992.645224][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.304582][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.310290][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.316138][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.364727][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.370217][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.375989][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.381344][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.387110][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.394276][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.399938][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.405281][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.411770][T11246] gspca_vc032x: I2c Bus Busy Wait 00 [ 993.420787][T11246] gspca_vc032x: Unknown sensor... [ 993.426176][T11246] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 993.570841][T16387] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2955'. [ 993.602002][T16387] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2955'. [ 993.694948][T11246] usb 8-1: USB disconnect, device number 19 [ 993.857078][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 993.857096][ T30] audit: type=1400 audit(2000001088.760:1532): avc: denied { getopt } for pid=16388 comm="syz.8.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 994.109296][T16387] 8021q: adding VLAN 0 to HW filter on device team1 [ 994.141056][T16402] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=16402 comm=syz.5.2968 [ 994.204951][T16402] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 994.224946][T15417] usb 10-1: USB disconnect, device number 20 [ 999.356672][T16441] xt_socket: unknown flags 0x50 [ 999.755552][T16444] net_ratelimit: 52 callbacks suppressed [ 999.755583][T16444] netlink: zone id is out of range [ 999.767783][T16444] netlink: zone id is out of range [ 999.893105][T16444] netlink: set zone limit has 4 unknown bytes [ 1000.181418][T16451] netlink: zone id is out of range [ 1000.208377][T16451] netlink: zone id is out of range [ 1000.461011][T16451] netlink: set zone limit has 4 unknown bytes [ 1001.702958][ T30] audit: type=1400 audit(2000001096.084:1533): avc: denied { create } for pid=16460 comm="syz.9.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1001.852384][T16466] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 1001.906537][ T30] audit: type=1400 audit(2000001096.300:1534): avc: denied { relabelto } for pid=16465 comm="syz.7.2988" name="133" dev="tmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1002.019800][ T30] audit: type=1400 audit(2000001096.337:1535): avc: denied { associate } for pid=16465 comm="syz.7.2988" name="133" dev="tmpfs" ino=714 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 1002.024383][T16466] netlink: 'syz.7.2988': attribute type 1 has an invalid length. [ 1002.061778][T16471] FAULT_INJECTION: forcing a failure. [ 1002.061778][T16471] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.074598][T16471] CPU: 0 UID: 0 PID: 16471 Comm: syz.5.2989 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1002.074620][T16471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1002.074628][T16471] Call Trace: [ 1002.074633][T16471] [ 1002.074638][T16471] dump_stack_lvl+0x16c/0x1f0 [ 1002.074660][T16471] should_fail_ex+0x512/0x640 [ 1002.074682][T16471] should_failslab+0xc2/0x120 [ 1002.074703][T16471] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1002.074722][T16471] ? __alloc_skb+0x2b2/0x380 [ 1002.074742][T16471] __alloc_skb+0x2b2/0x380 [ 1002.074758][T16471] ? __pfx___alloc_skb+0x10/0x10 [ 1002.074776][T16471] ? __lock_acquire+0x622/0x1c90 [ 1002.074801][T16471] __pskb_copy_fclone+0xef/0xb50 [ 1002.074826][T16471] tipc_clone_to_loopback+0xe6/0x4b0 [ 1002.074843][T16471] ? tipc_node_xmit+0x1ea/0xfc0 [ 1002.074862][T16471] tipc_node_xmit+0xd2b/0xfc0 [ 1002.074878][T16471] ? tipc_msg_build+0x331/0x1150 [ 1002.074893][T16471] ? __pfx_tipc_node_xmit+0x10/0x10 [ 1002.074921][T16471] ? __tipc_sendmsg+0xb3f/0x19a0 [ 1002.074934][T16471] __tipc_sendmsg+0xb3f/0x19a0 [ 1002.074953][T16471] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1002.074972][T16471] ? __pfx_woken_wake_function+0x10/0x10 [ 1002.074999][T16471] ? __local_bh_enable_ip+0xa4/0x120 [ 1002.075018][T16471] tipc_sendmsg+0x4f/0x70 [ 1002.075031][T16471] ____sys_sendmsg+0xa95/0xc70 [ 1002.075044][T16471] ? copy_msghdr_from_user+0x10a/0x160 [ 1002.075061][T16471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1002.075077][T16471] ? __pfx__kstrtoull+0x10/0x10 [ 1002.075096][T16471] ___sys_sendmsg+0x134/0x1d0 [ 1002.075118][T16471] ? __pfx____sys_sendmsg+0x10/0x10 [ 1002.075146][T16471] ? find_held_lock+0x2b/0x80 [ 1002.075176][T16471] __sys_sendmmsg+0x200/0x420 [ 1002.075197][T16471] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1002.075221][T16471] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1002.075250][T16471] ? fput+0x70/0xf0 [ 1002.075262][T16471] ? ksys_write+0x1ac/0x250 [ 1002.075279][T16471] ? __pfx_ksys_write+0x10/0x10 [ 1002.075300][T16471] __x64_sys_sendmmsg+0x9c/0x100 [ 1002.075316][T16471] ? lockdep_hardirqs_on+0x7c/0x110 [ 1002.075333][T16471] do_syscall_64+0xcd/0x4c0 [ 1002.075353][T16471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.075366][T16471] RIP: 0033:0x7f61af38e929 [ 1002.075378][T16471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.075390][T16471] RSP: 002b:00007f61ad1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1002.075403][T16471] RAX: ffffffffffffffda RBX: 00007f61af5b6080 RCX: 00007f61af38e929 [ 1002.075412][T16471] RDX: 0400000000000203 RSI: 0000200000004400 RDI: 0000000000000007 [ 1002.075420][T16471] RBP: 00007f61ad1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.075428][T16471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.075436][T16471] R13: 0000000000000000 R14: 00007f61af5b6080 R15: 00007ffd97854608 [ 1002.075456][T16471] [ 1002.132420][T16466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1003.138680][T16475] xt_CT: No such helper "snmp_trap" [ 1004.491084][T16480] bond2: (slave gretap1): making interface the new active one [ 1004.520958][ T30] audit: type=1400 audit(2000001098.741:1536): avc: denied { create } for pid=16482 comm="syz.6.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1004.739211][T16480] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1004.888966][ T30] audit: type=1400 audit(2000001099.087:1537): avc: denied { remove_name } for pid=14106 comm="syz-executor" name="binderfs" dev="tmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1005.080250][ T30] audit: type=1400 audit(2000001099.199:1538): avc: denied { rmdir } for pid=14106 comm="syz-executor" name="133" dev="tmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1005.307112][T16492] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1005.361615][ T5926] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1005.535240][ T5926] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1005.546733][ T5926] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1005.638613][ T5926] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1005.656789][ T5926] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1005.671346][ T5926] usb 9-1: Product: syz [ 1005.675574][ T5926] usb 9-1: Manufacturer: syz [ 1005.682593][ T5926] usb 9-1: SerialNumber: syz [ 1005.689338][ T5926] usb 9-1: config 0 descriptor?? [ 1006.145628][ T5926] usb 9-1: selecting invalid altsetting 0 [ 1006.344529][T16505] xt_socket: unknown flags 0x50 [ 1007.368157][T16512] syz.7.3000: attempt to access beyond end of device [ 1007.368157][T16512] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1007.380954][T16512] hpfs: hpfs_map_sector(): read error [ 1007.387834][T16512] netlink: zone id is out of range [ 1007.393123][T16512] netlink: zone id is out of range [ 1007.398417][T16512] netlink: zone id is out of range [ 1007.403579][T16512] netlink: zone id is out of range [ 1007.408678][T16512] netlink: zone id is out of range [ 1007.413790][T16512] netlink: zone id is out of range [ 1007.418937][T16512] netlink: zone id is out of range [ 1007.424060][T16512] netlink: zone id is out of range [ 1007.429145][T16512] netlink: zone id is out of range [ 1007.434310][T16512] netlink: zone id is out of range [ 1008.271640][T16527] xt_CT: No such helper "snmp_trap" [ 1008.282916][T16532] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3005'. [ 1008.318026][T16532] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3005'. [ 1008.451261][T15417] usb 9-1: USB disconnect, device number 25 [ 1008.566033][ T5926] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1008.740293][ T5926] usb 7-1: device descriptor read/64, error -71 [ 1009.239686][ T5926] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1009.610994][ T5926] usb 7-1: device descriptor read/64, error -71 [ 1009.751346][T16543] virtio-fs: tag not found [ 1009.806357][ T5926] usb usb7-port1: attempt power cycle [ 1009.828964][T16546] netlink: 'syz.7.3010': attribute type 3 has an invalid length. [ 1010.240758][ T5926] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1010.330612][ T5926] usb 7-1: device descriptor read/8, error -71 [ 1010.426157][T16562] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3015'. [ 1010.589423][ T5926] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1010.653590][ T5926] usb 7-1: device descriptor read/8, error -71 [ 1010.841463][ T5926] usb usb7-port1: unable to enumerate USB device [ 1011.412958][T16576] xt_CT: No such helper "snmp_trap" [ 1012.056847][T16597] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1013.142146][T16606] netlink: 'syz.7.3026': attribute type 3 has an invalid length. [ 1013.154353][T16610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1013.557438][T16619] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=16619 comm=syz.5.3031 [ 1013.743271][T16624] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=16624 comm=syz.5.3032 [ 1014.667597][T16631] xt_CT: No such helper "snmp_trap" [ 1014.920161][T16640] fuse: Unknown parameter 'fd0x000000000000000a' [ 1014.929201][T16640] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3035'. [ 1014.938337][ T30] audit: type=1400 audit(2000001109.401:1539): avc: denied { name_connect } for pid=16634 comm="syz.8.3035" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1015.463879][T16651] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1016.147283][T16661] netlink: 'syz.5.3044': attribute type 3 has an invalid length. [ 1016.229265][T16659] virtio-fs: tag not found [ 1016.332636][T16668] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3045'. [ 1016.428697][T16671] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3046'. [ 1016.477154][ T5868] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1016.527196][T16672] overlayfs: maximum fs stacking depth exceeded [ 1016.690863][ T5868] usb 8-1: Using ep0 maxpacket: 16 [ 1016.698038][ T5868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1016.700621][T16676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3048'. [ 1016.719998][ T5868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1017.129264][T14165] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1017.203173][ T5868] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1017.218656][T14112] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 1017.224886][ T5868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.300292][T14165] usb 6-1: device descriptor read/64, error -71 [ 1017.354333][ T5868] usb 8-1: config 0 descriptor?? [ 1017.371462][T16657] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1017.403348][ T5868] usb 8-1: Found UVC 0.00 device (10c4:ea90) [ 1017.427230][ T5868] usb 8-1: No valid video chain found. [ 1017.568047][T14165] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1017.619779][ T5868] usb 8-1: USB disconnect, device number 20 [ 1017.738558][T14165] usb 6-1: device descriptor read/64, error -71 [ 1017.935203][T14165] usb usb6-port1: attempt power cycle [ 1018.052208][T16700] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1018.652824][T16705] netlink: 'syz.6.3057': attribute type 3 has an invalid length. [ 1019.172078][T14165] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1019.190279][T16711] virtio-fs: tag not found [ 1019.205941][T14165] usb 6-1: device descriptor read/8, error -71 [ 1019.350444][T16716] virtio-fs: tag not found [ 1019.512942][T14165] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1019.631048][T14165] usb 6-1: device descriptor read/8, error -71 [ 1019.650120][T16719] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=16719 comm=syz.7.3060 [ 1019.692781][T16719] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 1019.759451][T14165] usb usb6-port1: unable to enumerate USB device [ 1020.047517][T16734] net_ratelimit: 52 callbacks suppressed [ 1020.047555][T16734] netlink: zone id is out of range [ 1020.062972][T16734] netlink: zone id is out of range [ 1020.327303][T16734] netlink: set zone limit has 4 unknown bytes [ 1020.898790][T16748] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1021.629983][T11246] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1021.853392][T11246] usb 9-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.875865][T11246] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1021.902616][T11246] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1021.913275][T11246] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.931533][T11246] usb 9-1: config 0 descriptor?? [ 1022.478817][T11246] acrux 0003:1A34:0802.0024: ignoring exceeding usage max [ 1022.520215][T11246] acrux 0003:1A34:0802.0024: hidraw0: USB HID v10.00 Device [HID 1a34:0802] on usb-dummy_hcd.8-1/input0 [ 1022.562945][ T30] audit: type=1400 audit(2000001116.613:1540): avc: denied { append } for pid=16776 comm="syz.5.3080" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1022.603921][T11246] acrux 0003:1A34:0802.0024: no inputs found [ 1022.611525][T11246] acrux 0003:1A34:0802.0024: Failed to enable force feedback support, error: -19 [ 1022.662124][ T30] audit: type=1400 audit(2000001116.613:1541): avc: denied { map } for pid=16776 comm="syz.5.3080" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1023.348241][ T30] audit: type=1400 audit(2000001116.613:1542): avc: denied { execute } for pid=16776 comm="syz.5.3080" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1023.372350][ T30] audit: type=1400 audit(2000001116.687:1543): avc: denied { read write } for pid=14101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1023.397038][ T30] audit: type=1400 audit(2000001116.687:1544): avc: denied { open } for pid=14101 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1023.421301][ T30] audit: type=1400 audit(2000001116.687:1545): avc: denied { ioctl } for pid=14101 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1023.469274][ T30] audit: type=1400 audit(2000001116.884:1546): avc: denied { prog_load } for pid=16752 comm="syz.8.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1023.520691][T11246] usb 9-1: USB disconnect, device number 26 [ 1023.578505][ T30] audit: type=1400 audit(2000001116.884:1547): avc: denied { bpf } for pid=16752 comm="syz.8.3071" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1023.763757][ T30] audit: type=1400 audit(2000001116.884:1548): avc: denied { perfmon } for pid=16752 comm="syz.8.3071" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1023.791121][ T30] audit: type=1400 audit(2000001116.893:1549): avc: denied { create } for pid=16752 comm="syz.8.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1024.446179][T16801] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3082'. [ 1025.991023][T16805] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1026.090783][T16801] veth1_macvtap: left promiscuous mode [ 1026.306615][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1026.312978][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1026.333877][ T5932] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1026.384189][T16812] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1026.536477][ T5932] usb 9-1: config 0 has an invalid interface number: 148 but max is 0 [ 1026.778208][ T5932] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.925991][ T5932] usb 9-1: config 0 has no interface number 0 [ 1026.952002][ T5932] usb 9-1: New USB device found, idVendor=0489, idProduct=e04e, bcdDevice=fb.66 [ 1027.811898][ T5932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.838250][ T5932] usb 9-1: Product: syz [ 1027.845639][ T5932] usb 9-1: Manufacturer: syz [ 1027.856444][ T5932] usb 9-1: SerialNumber: syz [ 1027.958938][T16825] xt_socket: unknown flags 0x50 [ 1027.990883][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1027.990924][ T30] audit: type=1400 audit(2000001121.654:1593): avc: denied { write } for pid=16821 comm="syz.9.3090" name="raw6" dev="proc" ino=4026534486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1028.000419][ T5932] usb 9-1: config 0 descriptor?? [ 1028.788080][T16808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.803662][T16808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.844805][ T5868] usb 9-1: USB disconnect, device number 27 [ 1028.882031][ T30] audit: type=1400 audit(2000001121.664:1594): avc: denied { setopt } for pid=16821 comm="syz.9.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1029.776034][ T30] audit: type=1400 audit(2000001123.366:1595): avc: denied { unlink } for pid=14108 comm="syz-executor" name="file0" dev="tmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1029.846715][ T30] audit: type=1400 audit(2000001123.432:1596): avc: denied { read write } for pid=16846 comm="syz.8.3097" name="vhost-vsock" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1029.925010][ T30] audit: type=1400 audit(2000001123.432:1597): avc: denied { open } for pid=16846 comm="syz.8.3097" path="/dev/vhost-vsock" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1029.953245][ T30] audit: type=1400 audit(2000001123.497:1598): avc: denied { ioctl } for pid=16846 comm="syz.8.3097" path="/dev/vhost-vsock" dev="devtmpfs" ino=1276 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1029.987143][ T5932] kernel read not supported for file /524/net/igmp (pid: 5932 comm: kworker/0:6) [ 1030.005977][ T30] audit: type=1400 audit(2000001123.497:1599): avc: denied { create } for pid=16846 comm="syz.8.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1030.027232][ T30] audit: type=1400 audit(2000001123.497:1600): avc: denied { ioctl } for pid=16846 comm="syz.8.3097" path="socket:[56475]" dev="sockfs" ino=56475 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1030.053877][ T30] audit: type=1400 audit(2000001123.497:1601): avc: denied { setopt } for pid=16846 comm="syz.8.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1030.147890][ T30] audit: type=1400 audit(2000001123.497:1602): avc: denied { write } for pid=16846 comm="syz.8.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1030.552125][T16862] virtio-fs: tag not found [ 1030.809986][T16868] CIFS: Unable to determine destination address [ 1031.554568][T16876] Oops: general protection fault, probably for non-canonical address 0xdffffc0000002c03: 0000 [#1] SMP KASAN NOPTI [ 1031.566652][T16876] KASAN: probably user-memory-access in range [0x0000000000016018-0x000000000001601f] [ 1031.576168][T16876] CPU: 0 UID: 0 PID: 16876 Comm: syz.6.3104 Not tainted 6.15.0-syzkaller-12293-g7fdaba912981 #0 PREEMPT(full) [ 1031.587853][T16876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1031.597889][T16876] RIP: 0010:__smc_diag_dump.constprop.0+0x3cd/0x24f0 [ 1031.604557][T16876] Code: 4c 8b b3 60 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 f8 27 8e f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c7 1e 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 1031.624323][T16876] RSP: 0018:ffffc9000443f1e8 EFLAGS: 00010206 [ 1031.630362][T16876] RAX: dffffc0000000000 RBX: ffff88802c110b80 RCX: ffffc9001d214000 [ 1031.638317][T16876] RDX: 0000000000002c03 RSI: ffffffff8b2dee58 RDI: 0000000000016018 [ 1031.646260][T16876] RBP: ffff888029270064 R08: 0000000000000005 R09: 0000000000000000 [ 1031.654223][T16876] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88806f41d5e8 [ 1031.662167][T16876] R13: ffff888033bbac80 R14: 0000000000016000 R15: ffff88802c1110e0 [ 1031.670116][T16876] FS: 00007f8ea87296c0(0000) GS:ffff88812475a000(0000) knlGS:0000000000000000 [ 1031.679033][T16876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1031.685602][T16876] CR2: 000020000000e000 CR3: 0000000043831000 CR4: 00000000003526f0 [ 1031.693554][T16876] DR0: 0000000000000000 DR1: 00000000000075d0 DR2: 0000000000003706 [ 1031.701507][T16876] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1031.709461][T16876] Call Trace: [ 1031.712728][T16876] [ 1031.715642][T16876] ? __pfx___smc_diag_dump.constprop.0+0x10/0x10 [ 1031.721963][T16876] ? stack_trace_save+0x8e/0xc0 [ 1031.726798][T16876] ? __pfx_stack_trace_save+0x10/0x10 [ 1031.732152][T16876] ? check_path.constprop.0+0x24/0x50 [ 1031.737510][T16876] ? save_trace+0x4e/0x380 [ 1031.741911][T16876] ? mark_held_locks+0x49/0x80 [ 1031.746664][T16876] ? irqentry_exit+0x3b/0x90 [ 1031.751240][T16876] ? lockdep_hardirqs_on+0x7c/0x110 [ 1031.756424][T16876] ? lock_acquire+0x62/0x350 [ 1031.760999][T16876] ? __asan_memset+0x23/0x50 [ 1031.765570][T16876] ? __build_skb_around+0x278/0x3b0 [ 1031.770750][T16876] smc_diag_dump_proto+0x26d/0x420 [ 1031.775853][T16876] smc_diag_dump+0x27/0x90 [ 1031.780255][T16876] netlink_dump+0x51b/0xce0 [ 1031.784751][T16876] ? __pfx_netlink_dump+0x10/0x10 [ 1031.789765][T16876] ? __netlink_dump_start+0x277/0x990 [ 1031.795126][T16876] ? __netlink_dump_start+0x285/0x990 [ 1031.800485][T16876] __netlink_dump_start+0x6d6/0x990 [ 1031.805668][T16876] smc_diag_handler_dump+0x1f9/0x240 [ 1031.810943][T16876] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 1031.816735][T16876] ? __pfx_smc_diag_dump+0x10/0x10 [ 1031.821834][T16876] ? sock_diag_lock_handler+0x10f/0x2e0 [ 1031.827365][T16876] sock_diag_rcv_msg+0x435/0x790 [ 1031.832285][T16876] netlink_rcv_skb+0x158/0x420 [ 1031.837030][T16876] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1031.842470][T16876] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1031.847731][T16876] ? rcu_is_watching+0x12/0xc0 [ 1031.852483][T16876] ? __pfx_sock_diag_rcv+0x10/0x10 [ 1031.857579][T16876] ? netlink_unicast+0x513/0x7f0 [ 1031.862504][T16876] netlink_unicast+0x53d/0x7f0 [ 1031.867255][T16876] ? __pfx_netlink_unicast+0x10/0x10 [ 1031.872524][T16876] ? __build_skb_around+0x278/0x3b0 [ 1031.877703][T16876] netlink_sendmsg+0x8d1/0xdd0 [ 1031.882453][T16876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1031.887727][T16876] ____sys_sendmsg+0xa95/0xc70 [ 1031.892476][T16876] ? copy_msghdr_from_user+0x10a/0x160 [ 1031.897931][T16876] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1031.903195][T16876] ? __pfx_futex_wake_mark+0x10/0x10 [ 1031.908460][T16876] ___sys_sendmsg+0x134/0x1d0 [ 1031.913121][T16876] ? __pfx____sys_sendmsg+0x10/0x10 [ 1031.918302][T16876] ? __lock_acquire+0x622/0x1c90 [ 1031.923239][T16876] __sys_sendmsg+0x16d/0x220 [ 1031.927811][T16876] ? __pfx___sys_sendmsg+0x10/0x10 [ 1031.932904][T16876] ? __x64_sys_futex+0x1e0/0x4c0 [ 1031.937833][T16876] do_syscall_64+0xcd/0x4c0 [ 1031.942320][T16876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.948196][T16876] RIP: 0033:0x7f8ea798e929 [ 1031.952592][T16876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1031.972179][T16876] RSP: 002b:00007f8ea8729038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1031.980571][T16876] RAX: ffffffffffffffda RBX: 00007f8ea7bb6160 RCX: 00007f8ea798e929 [ 1031.988524][T16876] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000007 [ 1031.996473][T16876] RBP: 00007f8ea7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1032.004428][T16876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1032.012378][T16876] R13: 0000000000000000 R14: 00007f8ea7bb6160 R15: 00007ffca7a64828 [ 1032.020333][T16876] [ 1032.023333][T16876] Modules linked in: [ 1032.027235][ C0] vkms_vblank_simulate: vblank timer overrun [ 1032.037315][T16876] ---[ end trace 0000000000000000 ]--- [ 1032.042879][T16876] RIP: 0010:__smc_diag_dump.constprop.0+0x3cd/0x24f0 [ 1032.049611][T16876] Code: 4c 8b b3 60 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 f8 27 8e f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c7 1e 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 1032.069389][T16876] RSP: 0018:ffffc9000443f1e8 EFLAGS: 00010206 [ 1032.075540][T16876] RAX: dffffc0000000000 RBX: ffff88802c110b80 RCX: ffffc9001d214000 [ 1032.083574][T16876] RDX: 0000000000002c03 RSI: ffffffff8b2dee58 RDI: 0000000000016018 [ 1032.091638][T16876] RBP: ffff888029270064 R08: 0000000000000005 R09: 0000000000000000 [ 1032.099670][T16876] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88806f41d5e8 [ 1032.108103][T16876] R13: ffff888033bbac80 R14: 0000000000016000 R15: ffff88802c1110e0 [ 1032.116124][T16876] FS: 00007f8ea87296c0(0000) GS:ffff88812475a000(0000) knlGS:0000000000000000 [ 1032.125088][T16876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1032.131742][T16876] CR2: 000020000000e000 CR3: 0000000043831000 CR4: 00000000003526f0 [ 1032.139769][T16876] DR0: 0000000000000000 DR1: 00000000000075d0 DR2: 0000000000003706 [ 1032.147762][T16876] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1032.155914][T16876] Kernel panic - not syncing: Fatal exception [ 1032.162205][T16876] Kernel Offset: disabled [ 1032.166509][T16876] Rebooting in 86400 seconds..