last executing test programs: 9m14.12379s ago: executing program 32 (id=203): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="3d25ab555b19c4cbd00170850800", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x2, {0x0, 0xf0, 0x1}, 0x2}, 0x18) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) write$proc_mixer(r5, &(0x7f0000000100)=ANY=[], 0xb0) r6 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}, 0x1, 0x40}) io_uring_enter(r6, 0x6b4d, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x0, 0x3, 0x7, 0x0, 0x0) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0) dup3(r9, r5, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x800448d2, 0x0) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000540)="50a92d1d468d0c595b33d4c22f5f1719c11d3ed9611c441b3af959789dc9000a2691073a7d70969108d2d00294bddc1eb075156ed72693e3691c82093837df05113fde9ba13dc46dc61005255583b3e950008ffa225b8a30a451c0ccad22f1492feee273a34543072d3bba8867238c532d326e0712d878f6dacd92e4634e59dd5dfb5905618f402054bb1519f053980c", 0x90}, {&(0x7f0000000600)="c631191b042cf902720fc76367a74ae232b31fa52ddfacd0498e6279f752be396de5dd664b502eb0dd5148edb754f837348c6db5f00a23bac0da75f86d1b022aef2e5a2fa206d6afb3c3874b469a2fede1dd1c251c9882f45a579c7acbf11f02527f1dc121fddf3de706127d96e5b42d225dcee7f20be0d119937cb00c6c60aff09c2a906af8d97107a8b751eeab138a2bcf9386763bcfece822525bb256c2471f5be29f454c96269fd7d42b06402c245898472d32451b7699f39963467d208773f80e15aaf3bc1c912f4db08557c02c9452180ab759fe29e40f22", 0xdb}, {&(0x7f0000000700)="c977cf8a5c5c1a63f8bc1a67aca772bcdccba77e95f0dc6508a10acda9ca7de23ccf0ee6a2666d7308d045af8ad671eb4be79bbb216eb901800f70d5d295bd341d40a2f520468d5751e73fda0d986b3bf5dd96e0eeadf01a4553ab2156a123ad036c545c0d89e0769e72ddab3786d00c4c0617827c7fe6bfd5d2a078507244f0d8f5901fbb2bae1ed1177df81960378ffb645bb0a843f3f0f15e820f8ac9d1447daab17cdc21", 0xa6}], 0x3, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@generic={0x83, 0x2}, @ra={0x94, 0x4}, @cipso={0x86, 0x75, 0x3, [{0x5, 0x6, "4634bd67"}, {0x5, 0x3, ')'}, {0x2, 0x11, "6871dec87f4bf0476771a396998eb0"}, {0x6, 0xe, "ad102c04a7ad03f53f20ee64"}, {0x7, 0xf, "57e8d14ba3ce117859f8e711da"}, {0x5, 0xe, "704caa102c7e792d25c96373"}, {0x0, 0x7, "51130ac14d"}, {0x2, 0x3, "91"}, {0x7, 0x10, "a9fdf06e58e488bead29b6f97a33"}, {0x5, 0x10, "2ede9c8bb8633144435091e71238"}]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0x23, 0x68, [@multicast1, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010101, @broadcast, @rand_addr=0x64010100, @rand_addr=0x64010102, @loopback, @private=0xa010102]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast2}}}], 0x1a0}, 0x4000801) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000300)=0x111, 0x4) 5m50.770897799s ago: executing program 33 (id=1224): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2}}}}}}}, 0x0) 5m49.855876033s ago: executing program 34 (id=1222): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xba0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30, 0x37, 0x31, 0x3a]}}}, 0x4e}]}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000440)={0x40, 0x6, 0x7, {0x7, 0x10, "0000001800"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5m26.418383957s ago: executing program 3 (id=1265): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) r4 = socket(0x2, 0x80805, 0x0) fcntl$dupfd(r3, 0x0, r4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=r6, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ptrace$getregset(0x13, r5, 0x200, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000000), 0x4) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f00000000c0)) ioctl$SIOCAX25ADDUID(r3, 0x89e1, 0x0) 5m24.12276158s ago: executing program 3 (id=1269): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0x58, 0x91, &(0x7f0000000180)="9bece05b378bb4e8f28bb038507f1518456b371a948215584dbb155ccce8f1d32a12098f76ae28154011a7279f831acc9ab9e040ead0eecdb19d1a3ede6f240efa7af5b96e10379b87b88c18480c9fb56c5574beee0446e4", &(0x7f00000003c0)=""/145, 0xfffffff8, 0x0, 0xe8, 0x59, &(0x7f0000000580)="251486e2d545080fe919206ca23b293650f139dc36dd98bc60b6ef43836a37a0ed3c393b94e314559fb874b3f4bd1e76d016c235dfef56a00986569e720afd2e93232f2c498fa346043386f735635f65cc3383ea72866563c69a44c030d4009ee3e2328ddd760f727d7e5459b53aea057767d90c7942ce0edefb1bae804021b43530d86e5f693a1fd43d82d7c0ebd70179da5e76b30107dbab79cd0197605c8454ad3212f032d11d5fb8735954a291fd16e92a254daf05e9ddf032df2912e40733ac7e5915c77171225a2a06dc834edfca1773258ae5744b9bc6e6de3bbfcce464d660cbb0d7f62b", &(0x7f0000000680)="d09d45b2a9a39b01385abfe54ccbccc9a5db771457082b2cb2f3aedda21ffd21f569392c1264784c679f0306abf2242a79ca15f08c030ca787ef559bb1b89872f3b2b64f0449eafb17d53c41e9626da6cc2335c591e3e4e617", 0x4, 0x0, 0x7}, 0x50) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x81000) renameat2(r6, 0x0, r6, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000200)=@nullb, 0x0, 0x0) recvfrom$l2tp6(r6, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x20) 5m22.720798396s ago: executing program 2 (id=1271): syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x2, 0x1fc}, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xfff7ffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x0, 0x5, {0x400e802, 0x4, 0x27, 0xfff}}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r0, &(0x7f0000000180)=""/15, 0xf, 0x80000358) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='rxrpc_retransmit\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2000, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}]}, 0x40}}, 0x0) unshare(0x2c020400) 5m22.33156612s ago: executing program 3 (id=1272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0xffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f0000000100)) 5m21.842018366s ago: executing program 5 (id=1273): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000966fd6c9be165d193e64a72b38b8a05107020000f8ffffffb703000008000000b704000003000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r9}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r9, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m21.095291386s ago: executing program 2 (id=1274): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ee, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00'}) (async) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='ext2\x00', 0x200480, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x3, 0x0) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 5m20.750970475s ago: executing program 2 (id=1275): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0xd, 0x0, 0x7fffffff}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100), 0x20) 5m20.079113698s ago: executing program 2 (id=1276): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x3b, 0x0, "6606ca7ce41b346ac33e74fc00d9165a44e86835fec0b518269fd4c21a897da3d787c09dcb8216a272aea67961649d1590065253e07bd0b461b349eb64746d76c42fb2623034078188f0009f9f10d5f0"}, 0xd8) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r2, 0x1}}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r9, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r11 = socket(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x2e50, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x4, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2e20, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x5b4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2}, {{0x2, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x36d}, {0x9, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x5}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x448, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x401}, {0x9, 0x5, 0x2, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x1}, {0x6, 0x1, 0x3, 0x4, 0x4, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0x3}, {0xffffffffffffffff, 0x1, 0x7}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x2}, {0x3, 0x5, 0x1, "5d58b08609"}}}, @TCF_EM_META={0xf4, 0x3, 0x0, 0x0, {{0x6, 0x4, 0xe}, [@TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="06f2d1c1e9bd9cd6", @TCF_META_TYPE_VAR="e2b2adc7cf379a", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="58a92526ae", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="2142bef03d8b8d", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="eb2a00ad", @TCF_META_TYPE_VAR="ebe97d5ba6", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="7c0d5b7c74d29be4", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="6c2dc3db048d", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc87, 0xfd, 0x1}, {0x219, 0x3, 0x1}}}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR='7', @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="eb23eb1652", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="4608fcb7dbf2f26a53", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="f9a6fd9515649fd4b280"]}, @TCA_EM_META_LVALUE={0x2b, 0x2, [@TCF_META_TYPE_VAR="d29696ec4289bfdb88", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="b18af376f1ba", @TCF_META_TYPE_VAR="de8161b685949de4818c", @TCF_META_TYPE_VAR="e8fad656171062c73aec", @TCF_META_TYPE_VAR]}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x6}, {0x3, 0xe, 0xa774, 0x1, 0x9, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x5, 0x2, 0xd0f}, {0x100, 0x4, 0x0, "34b58793"}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7f, 0x2, 0x9}, {0xd, 0x5, 0x2, "6816a89560"}}}, @TCF_EM_IPT={0x2b4, 0x3, 0x0, 0x0, {{0x275, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_DATA={0xec, 0x5, "defd990cce177785065d21d149955ac309f0adfc22dd15b532668154bebaa462d08031caa367d83932f13b9b25d7bdecc5cd5aaa7d9c7634149464b1acde0b6ab2e925b1889132b7e982b96a7f9dee6e0c6008d9363507279390d909359f3e07d86329f2d89183005efcac6a9c3a4981187a833282a023c7308bb1edf9f071b9faf5531926caabc759cf513c5e27f36dbb36abe6b098d840e49034980a79c4d88cea5d76147a1a05961242b655fd9b3ba5aa9e2746ba6ffcb99a63f42e66c3607091e6115cb24d4fdf5256dc18d20b4381c22daa86db66584eae7e6659f89629968fa343f155f2a2"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xad, 0x5, "ffbd3fa9828f0e4eb218421f5137458e5aa797cd9d34231a546ad84febd5a9dd8f782331321a8821e60bf2e47e2087d2f065e8ca53f085992d100687ce04a4ee31373ff61f629bd20c98af2a7a090f49866a8278c57930db05bda8f479dde720d60b80fda6a33ac096d3f59299ad25f92509000e620de0f53d500154dd4b9cd42244ee6c44d3580d7c843751b2f2e3bc91513cc2bbc82ab3c13abbe74ca86d40fec5a26b4c1d5a9a3a"}, @TCA_EM_IPT_MATCH_DATA={0xe5, 0x5, "cdf47c193c02c080fa5dd495140c18afa7820858b6c4ceb71ff39f6ef0d18985a257720dccdcd580f609e925457a1dd7080cb571c08a2a613837e91149a2c701686e453e26eb1a278cff8dc9c79ab5095b5a28f400a2292eb03910b0e17cfc4f3c1fe19e33c379672c8f02bbc1125ad3ebb2494ac9f8249d66fbeecd1e186c1712f3380d835ba7f908d55e8bb42199a55c44e67910b0edad26816180cf7e4fb78dcc2ed14cc536da21d969b980740f63d25276187e9aa38ee50e6c3ffdb3338249f1573c4ba10d7c73f2870e90b8706a12bff363aa8bff831509d2b5b301bc5606"}]}}]}, @TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x60e4, 0x2, 0x83}, {0x0, 0x7, 0x0, "1b7716bf62e66f"}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x4}, {0x8, 0x8, 0x1, "f35d8d1ef47d74ae"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xc, 0x7, 0x4}, {{0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x4c, 0x3, 0x0, 0x0, {{0xc, 0x0, 0x6}, "56de327c3f51c3a3076d87d3275d72a169cb58fc86f26d8e24247cad12e5f3084ed0b251a630f9b74a0cd853dbd3858c391c880bb8b99ebd7aea43b5b3bebde2"}}]}, @TCA_EMATCH_TREE_LIST={0x70, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x9}, {0x1c00, 0x4, 0x2, "0289028f"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0xd9}, {0x1, 0x3}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x3}, {0x7, 0xfffffffb, 0x4, 0xf8000000}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0xfff}, {0x3, 0x6, 0x3}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x3, 0x1}, {0x0, 0x0, 0x7f, 0xbe7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_CGROUP_POLICE={0x4b4, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2, 0x57dc3b45, 0xffff7fff, 0x7, 0x7, 0x6, 0x4, 0x0, 0x5, 0x9, 0x818, 0xc, 0x100, 0x3fca, 0x1, 0x2, 0x7, 0x6, 0xd64a, 0xf0, 0x15, 0xf, 0x1a6, 0x5, 0x1, 0x3f91, 0x7, 0x4, 0xc, 0x4, 0x8ee9, 0x7, 0x3243208d, 0x3, 0x1, 0x848, 0x9, 0x1, 0x5, 0x2, 0x6, 0x8000, 0x7, 0xee, 0xfffffffb, 0x9, 0x6, 0x1, 0x0, 0x1, 0x80000000, 0x7, 0x4, 0x1000, 0x53, 0x3, 0x4, 0x3, 0x2ca76000, 0x6, 0x9, 0x2, 0xbe8d, 0x68, 0x400, 0x8001, 0x0, 0x4, 0x4, 0x40, 0x7, 0x4, 0xfff, 0x9, 0x3, 0x0, 0x2, 0x9, 0x80000001, 0x2, 0xb31c, 0x1, 0x8, 0x1, 0x9, 0x8, 0x0, 0x8, 0x7, 0x1, 0x4, 0x4, 0xa1, 0x6, 0xfffffff7, 0xab9e, 0x8, 0x8001, 0x10001, 0x2, 0x1, 0x4, 0xffff, 0x2, 0x0, 0x4, 0xf, 0xc6f, 0x6, 0x8, 0x5, 0x7, 0x6, 0x6, 0x5, 0xe, 0x6, 0x89, 0x1000, 0xff, 0x7, 0x2, 0x0, 0x800, 0x3, 0x800, 0x2, 0xbd, 0x1, 0x325, 0x6, 0x3, 0x4, 0x5, 0x4, 0x74, 0x3, 0xfffffffd, 0xa000, 0x1, 0x2, 0x6, 0x7fffffff, 0x9, 0x7fffffff, 0xfffffffa, 0xfffff748, 0x3, 0xc8, 0x7, 0x6, 0x3, 0x1, 0xed, 0x1, 0x800, 0x0, 0x6, 0xa, 0x53a2e541, 0x4, 0x3, 0x8, 0x5, 0x10001, 0x401, 0xfffffe5d, 0x1, 0x7, 0xa, 0x3, 0xff, 0x7, 0x401, 0x3, 0x1, 0x19, 0xcf, 0x7, 0x5, 0x8001, 0x1, 0x7, 0x7fff, 0x8000, 0x2, 0x2, 0x9, 0x7c814b5f, 0xc, 0x8, 0x6, 0x200, 0x10, 0xb6, 0x8, 0x0, 0x8, 0x2, 0x0, 0xffffffff, 0x576400, 0x7, 0x800, 0x1, 0x9, 0xfffffffc, 0x5, 0xc, 0x4, 0x9, 0x5, 0x1, 0xffffff4b, 0x0, 0x5, 0x7f, 0x1, 0x2, 0x0, 0x4, 0xffffff23, 0x3, 0x3, 0xb3c, 0x8, 0x4, 0x0, 0x8, 0x1, 0xe814, 0x2, 0x80000001, 0x4, 0x200, 0x2, 0x8, 0x9, 0x5, 0xd, 0x9, 0x80000001, 0x2, 0x1, 0xc5, 0x95c, 0x8, 0x7, 0x7fff, 0x8, 0x5, 0x1, 0x1, 0x7a, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0x7fd, 0x2857, 0x9, {0xff, 0x1, 0x7, 0xa, 0x8}, {0xb, 0x2, 0x2, 0x2, 0xfff8, 0xe}, 0x9, 0xbca, 0xffff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x3, 0xa, 0x80, {0x6, 0x2, 0x1ff, 0x1, 0xf5f4, 0xd}, {0x0, 0x2, 0x9, 0x7, 0x200, 0xffffffff}, 0xe, 0x99e, 0x1ff}}]}, @TCA_CGROUP_ACT={0x2380, 0x1, [@m_gact={0xec, 0xf, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x4b9, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffff2, 0x4, 0xffffffffffffffff, 0x400, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x4, 0x1ae7, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9ab, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffff46, 0xacaf, 0x3, 0xfffffffc, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x22e5, 0x6}}]}, {0x5e, 0x6, "b2ab2ddbc0568741bcf1680437882f8cc633da78039c2d5125ed5acaa3ba669e3f4d9b52a9c58407ee764ef0f3a8ca02cc19363356f40ca6e6226eea309ffaab655699e4637709e8d883309a9bc877243f997ea3ca9080afcbdb"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_bpf={0xb4, 0x17, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xffffffff, 0x6, 0xd, 0x1}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x4, 0xb5, 0xfc, 0x61}, {0xfff6, 0x52, 0xca, 0xf}, {0x4, 0x81, 0xc, 0x8}, {0x1, 0x7, 0x3, 0x85}, {0x48a4, 0x4, 0x80, 0x8}, {0x5, 0x3, 0x4, 0x5}, {0x5, 0x8, 0x0, 0x8}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x2f, 0x6, "9059176f5343aa8df380affc816fa934a678c9902ccb76c0ec8098bbd9ee4dedd931148f3a51cb9be59368"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x1038, 0x20, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x96}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x170, 0x4, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7, 0x4, 0x4, 0x10001}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7f, 0x4, 0x6, 0x7, 0x3}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7fff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x84ef, 0xf, 0x3, 0x5, 0x7}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x26e, 0x0, 0x20000000, 0x1, 0x4}}]}, {0xcb, 0x6, "f1380630e87d88e4ff3c0782517b5154805e575729613f3d732ad94605a7383a80349282ea44bfd3639f339daa37153a214e73373e75fc3eab0938b803df72f7f9c20e45baa4508af888fb45a3c2a0341012bd141da4be0f1b325cb16d46f82924c1ce47a294c0fdcd18782f7015a7ade69659fb5774268e477ae09c08c6c83273e88a02ea9e164d5a60855ed15bd85ee997b5bb574226dd3f7ec432a396a6cdb62feef64c4dcb232d2ed8756edf0c1766c039df8af62eb99c6a688a319afa046ee97e59b45dca"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x88, 0x5, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_ACTION={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x8}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_LABELS_MASK={0x14, 0x8, "1fd494dddf8173b82222fcf9e2f74850"}]}, {0x29, 0x6, "7701c898c021bd9d86711aa0504cb86f31e49fc9b099d555cfdca2d98080e726d36c3855a7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0xfac, 0x15, 0x0, 0x0, {{0xa}, {0xf1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x98, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0xe00, 0x10, 0x5, 0xed68, 0x7000000}, 0x2, 0xb0, [{0x7f, 0x2, 0x40000000, 0x9, 0x4, 0x80000000}, {0x8001, 0x5, 0x4, 0x9, 0x7, 0x6}, {0xffff47d7, 0x4, 0x400000, 0x374, 0x7f, 0x80000001}, {0xa, 0x0, 0xffff4739, 0xfffffffc, 0x1ff, 0x200}]}, [{0x3, 0x9, 0x4, 0x4, 0x1, 0x6}, {0x1, 0x1000, 0xa9b, 0x4, 0x60, 0x6}, {0x5, 0x4, 0x1, 0x6, 0xb, 0x5111}, {0x9, 0x868, 0x6f1, 0x5, 0x4, 0x12}, {0x10000, 0x7, 0x1, 0xffffffff, 0x6, 0x3}, {0x0, 0x0, 0x5, 0x80000000, 0x7, 0x400}, {0xcfc5, 0x2, 0x5fa22be7, 0x717, 0x2347}, {0x7, 0x8, 0xfffffff6, 0x100000, 0x7, 0x2}, {0x0, 0x0, 0x3d, 0x2d6c, 0xb, 0x2}, {0x1, 0xfffffff7, 0x8000, 0x5, 0xffffffff, 0x7ff}, {0xf, 0x5, 0xd, 0x3, 0x6, 0x3ff}, {0x181, 0x5, 0x2, 0x100, 0x41, 0x1}, {0xf, 0xfffffff8, 0x17b8, 0xd1, 0xffffffff, 0x6}, {0x1, 0x9, 0x1c, 0x7, 0x8, 0x5}, {0x9, 0x4b7, 0x2, 0x2, 0x15c39254, 0x500000}, {0x6, 0x2, 0x7, 0x0, 0x5, 0x10}, {0x7, 0x57, 0x1, 0x6, 0x1ff}, {0x7, 0xfffffbff, 0x4, 0x198, 0x4}, {0x7, 0x7, 0x5, 0x2, 0x165, 0x10001}, {0x40, 0x96c, 0x7, 0x4, 0x5, 0x401}, {0x9, 0xf, 0xddf8, 0x463, 0xfffffff1}, {0x6, 0x40, 0xd67, 0x6, 0x80000000, 0x3}, {0xe, 0x35, 0x4, 0x4, 0x2, 0x9}, {0x202, 0x9, 0x8, 0x9, 0x9, 0xdb7}, {0xb, 0x0, 0x7, 0xef9e, 0x0, 0xffffffff}, {0x8, 0x1, 0xfffffffd, 0x5, 0x40, 0xffffffff}, {0x1000, 0x6, 0xf650, 0x7, 0x2, 0xf}, {0x6, 0xfffffff7, 0x5, 0x4, 0xb55b, 0x1}, {0x4, 0x81, 0x400, 0x426, 0x0, 0x3}, {0x9, 0xa, 0x9, 0x8, 0x7, 0x9}, {0x8, 0xffff, 0x14, 0x0, 0x2, 0x6f9d580a}, {0x163, 0x80000001, 0x20000000, 0x3, 0x58, 0x5}, {0xffff, 0x63, 0x8, 0x401, 0x1a9, 0x8000}, {0x10001, 0x2, 0x80, 0x3, 0x4, 0xca0000}, {0x0, 0xffffffff, 0x5, 0x1, 0x5c4db1e8, 0x9}, {0x5, 0x8, 0x2, 0x0, 0x9ee, 0x6}, {0xf9e, 0x7, 0x3, 0x2, 0x401, 0x3}, {0x0, 0x200, 0x7fffffff, 0x6, 0x9, 0x2}, {0xad9c, 0x3, 0x7, 0x9, 0x2c73, 0xb8}, {0x40, 0x3, 0x101, 0xfffffff9, 0x8}, {0xff, 0x0, 0xfffffffb, 0x1, 0x10000, 0x2}, {0x6, 0x9, 0x0, 0x5, 0x401, 0x7}, {0xffff, 0x401, 0x9, 0x6, 0x8, 0x4}, {0x9, 0x2, 0x401, 0x0, 0x9, 0xa3d}, {0x5, 0x7, 0x6, 0x6, 0x25, 0x3}, {0x0, 0x1, 0x1, 0xfffffffe, 0xf6fd, 0x3}, {0x9, 0x4, 0x0, 0x7a, 0x1, 0x20002}, {0x6, 0x3, 0x9, 0x4, 0x6520e884, 0x9}, {0x0, 0x80, 0x9, 0x7, 0x6, 0x2}, {0xb, 0x9, 0x9d90, 0xf2c, 0x8, 0x3}, {0x8, 0x7, 0xb, 0xffff, 0x3, 0x19}, {0x10, 0x5, 0x8, 0x5, 0x0, 0xcf6}, {0x6, 0x101, 0x3, 0x3, 0x4879, 0x4}, {0x4, 0x7f, 0x6, 0x80000001, 0x81, 0x562f}, {0x9, 0x200, 0x4, 0x5, 0x5, 0xf}, {0x7, 0xfffffffb, 0x9c, 0x6, 0x200, 0x3ff}, {0x94, 0x9, 0x1, 0x65f, 0x8}, {0x6, 0x8, 0xff, 0xffff, 0x8, 0x7}, {0x8, 0x8, 0x8, 0x81, 0x7, 0xfffffffd}, {0x1, 0xffffffff, 0x4c, 0x5, 0x7, 0x5c103a6a}, {0x1000, 0x7, 0x4, 0x9, 0x7ff, 0x1}, {0x9, 0x0, 0x3, 0xd, 0x1, 0x200}, {0x1, 0x5, 0x3000, 0x0, 0x0, 0xfffffff7}, {0x10, 0xc0, 0x1d, 0x0, 0xa8, 0x803}, {0x3, 0x7fff, 0x8, 0x9, 0x2, 0x9}, {0x1d8f, 0x5f, 0x6, 0xd90, 0x8, 0x4}, {0x4, 0x2, 0x3, 0xfffffff7, 0xd, 0xf}, {0xfffffffd, 0x200, 0xc611, 0x7, 0x400, 0x5}, {0xb, 0x3, 0x8, 0x8, 0x3, 0x7}, {0x2, 0x5, 0x4, 0x4, 0x401, 0x4}, {0x7, 0x8, 0x6, 0x8, 0x4, 0x6}, {0xb13b, 0x10001, 0x1, 0x9, 0x2, 0x8}, {0x47f, 0x1, 0xa9, 0x4, 0x1, 0x2b}, {0x4, 0x800, 0x5, 0x9c32, 0x3, 0x3f1c}, {0x6, 0x0, 0x5, 0x9, 0x2}, {0xb6ae, 0xe1, 0xffff, 0x9, 0x7, 0x1}, {0xeab7, 0x8, 0x8, 0x6, 0x800, 0x8000}, {0x7ff, 0x7f, 0x3, 0x1ff, 0x8, 0x1}, {0x2, 0x4, 0x8, 0xfffffeff, 0x0, 0x7}, {0x100, 0x9, 0xff, 0xd9da, 0x1, 0x1}, {0x8, 0x4, 0x2, 0x4, 0x4, 0x3}, {0x100, 0x0, 0x7fffffff, 0x8, 0xfffffff7, 0x7}, {0x3, 0x2a, 0x9, 0xfffffffa, 0x3}, {0x7e, 0x6, 0x1000, 0x8, 0x47f, 0x4}, {0x41, 0x3, 0x4, 0x6a3e, 0x7}, {0x3, 0x7ff, 0xe, 0x9, 0x9, 0x7}, {0x84, 0x3f, 0x2f, 0x7, 0x2, 0x5}, {0x1, 0x5, 0x10000, 0x4, 0x1, 0x1000}, {0x3, 0x1, 0x17, 0x80000000, 0x7, 0xd733}, {0xfffffffa, 0x9, 0x77a4, 0x7, 0x0, 0x4}, {0xc, 0x2, 0x81, 0x1, 0x2, 0x800}, {0x1c0000, 0x6, 0x1, 0x64d, 0xf, 0x4}, {0x7, 0x5, 0x7ff, 0x0, 0xec, 0x1}, {0x6, 0x100, 0x82, 0x9fea, 0x3, 0x9}, {0x26a, 0x2, 0x8, 0x169, 0x2da, 0xef69}, {0x51b, 0x1, 0x0, 0x4, 0x1, 0x8}, {0x7, 0xfffffff7, 0x3f57, 0x0, 0x8001, 0x8}, {0x1000, 0x10000, 0x400, 0x2, 0x1000, 0x9}, {0xc5, 0x6, 0x2e3b, 0x7, 0x7}, {0x4, 0x0, 0x7efd6764, 0x101, 0x4, 0x387}, {0x7fffffff, 0x9, 0xfffffde4, 0x7, 0x894, 0x9}, {0xb, 0xf, 0x0, 0x5, 0x2, 0x8}, {0x8, 0x4, 0xfff, 0x1773, 0x1, 0xc}, {0xfffff9af, 0x7, 0x2, 0x7, 0x10, 0x4}, {0x4, 0xefac, 0x3, 0x3, 0x399abd2f, 0xff7}, {0x64, 0x6, 0x6, 0x2, 0x7, 0x40}, {0xffff0001, 0x80000001, 0x10001, 0x6, 0x6, 0x10000}, {0x6, 0x7d4b, 0x6, 0x7fffffff, 0x1856, 0x3}, {0x3, 0x9, 0x22ca, 0x7, 0x3c, 0x5e4}, {0x4, 0x2, 0x5, 0x9, 0x9e, 0xfffffffa}, {0x3, 0x3ff, 0x5, 0x80, 0x2, 0x7}, {0x0, 0xc, 0x2, 0x400, 0x8, 0x1}, {0x900000, 0x6, 0x2, 0xfffffffa, 0x7, 0x7}, {0x0, 0x3, 0x2, 0x8, 0x1, 0x1}, {0xb7f, 0x10001, 0x7, 0x2, 0x9, 0x80000001}, {0x8, 0x0, 0x9, 0x200, 0x1, 0x9}, {0x2f, 0x7, 0x238e, 0x6, 0x0, 0x7}, {0x2, 0x4, 0x5, 0x5, 0x4db9, 0x6f}, {0xc92, 0x8, 0xc, 0x95, 0x7, 0x4}, {0xfff, 0x4, 0x7, 0xe62, 0x81, 0x6}, {0x80000001, 0x8, 0x7, 0x77, 0x8f0, 0x7}, {0x4, 0x10000, 0x3, 0x1, 0x10001, 0x7}, {0x1, 0x5, 0x2, 0x7f, 0xa0, 0xe60}, {0x2, 0x1, 0x9f, 0x3, 0x6, 0x8}, {0x0, 0x1, 0x8001, 0x2, 0x5, 0x90c0}, {0x7, 0x3ff, 0x6, 0xfffffffa, 0x9, 0x200}, {0x800, 0x0, 0x2, 0x401, 0xd, 0x9}, {0xc, 0x5, 0x6, 0x3, 0x904c, 0xe9100}], [{0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3}, {0x4}, {0x3}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {}, {0x2, 0x1}, {0x5}, {0x3, 0x312e570847176d9b}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x5}, {0x4}, {0x4}, {0x1, 0x1}, {}, {0x1}, {0x4}, {0x2}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x2}], 0x1}}]}, {0x65, 0x6, "2c0ae798bcaf245c66a8076b7b64618fefd68bbf8049e8ad53c84a22efc61893d2e88cf0183573380001e217e39596ddbefd1fba6770fddc1152144836509bcf4c4aa30a50f819857e70ce1488e4463af80a9732dc932393bba9fc9dc2a20959a6"}, {0xc, 0x7, {0xfad7a7e7ff5bea09, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x2e50}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0x9, 0xfff2}, {0x0, 0xfff1}}}, 0x24}}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x5e9c42d, 0x200002) 5m19.902731626s ago: executing program 5 (id=1277): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0xf82, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x1e8, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x19c, 0x8, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast2, 0x6}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba98df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 5m19.382203485s ago: executing program 3 (id=1278): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0xf82, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x640, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x5f4, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast2, 0x6}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x4a4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba98df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x430, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0xff}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x640}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4840) fallocate(0xffffffffffffffff, 0x0, 0x5, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f00000000c0)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r3) 5m18.937858622s ago: executing program 2 (id=1279): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084146, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1300000000000000) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f00000001c0)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001d00), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x80}}, 0x50) setresuid(0x0, 0x0, 0x0) getgroups(0x2, &(0x7f0000000300)=[r7, r7]) open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)=[{&(0x7f0000001d40)={0x228, 0x10, 0x100, 0x70bd25, 0x25dfdbfc, "", [@typed={0x14, 0xad, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x9f, 0xa7, 0x0, 0x0, @binary="52b03a10910dcb0b1b6ba7db8e5ba8d32bcded0c491329cedaa30668c1636efa4f51fec912eba95e8109447dc5cfb1939db704905df480bd5deef1f6e98dad0b0ca37b042fe160422d913683a5b20449ceec6a3c9d64f74e7a747811d2382133228bf0c22b55103c4634e2924927dc07d9714b075ad825f621c27e9bf00c2223989aac1da1547956ee83441ae56db1f4a1ac2ffecf6555b9a8bf1d"}, @nested={0xf4, 0x110, 0x0, 0x1, [@generic="f3b0d4310b86ba04ca6fd0d1dd238e3e482220f88708a79b89135fd4c28d46783ba9758777ed00d3fbfae971c945d1b336df78c3bf4f5d7a041e41c3a250618c63874954637113735db74019f12e5721a1559482cc18d073dd9cc3de3f002de3e35077abc422c78fde47aaadb4db0ed2e342e2e6f6ba48b0764f3db9447209270b6e1847cb58f78bd46872e5273c48c2f8ebb759a6924d0c61d416687a1ffa7fd432194a240e9325a03a4b855b00a8ec", @typed={0x3e, 0x5, 0x0, 0x0, @binary="e95b673cb5df60a63e8a3cb5dd8f062505db428ef14747d203fac35151233e6e10717474fd25908efe774618382c235ce9e80deed8df6a9d63c7"}]}, @nested={0x18, 0x3f, 0x0, 0x1, [@nested={0x4, 0x6a}, @typed={0x8, 0x14b, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x2a, 0x0, 0x0, @uid}]}, @generic="6b47fb4cca618b07de29b929339a36e7d483ebd58cd62ca94b", @typed={0xc, 0xce, 0x0, 0x0, @u64=0x200}, @generic="11282e5cbaa244ba7dded188ed75cf518c938640f07f4f27ad25e9638e44e8039021fc39121da82c20fb6ecca9a3381275"]}, 0x228}], 0x1, &(0x7f0000001ac0), 0x0, 0x20000090}, 0x4011) 5m18.78681525s ago: executing program 5 (id=1280): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0xf82, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x618, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x5cc, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast2, 0x6}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x47c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba98df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x408, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0xff}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x618}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4840) fallocate(0xffffffffffffffff, 0x0, 0x5, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f00000000c0)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r3) 5m18.152810645s ago: executing program 3 (id=1281): clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000000, 0x0, 0xc3c0000000000000, 0x2, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000003, 0x0, 0x7}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client0\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000, 0xfffffffc}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x18, r3, 0x73f, 0xf0bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x48}}, 0x4048010) close(0x3) setpriority(0x2, 0x0, 0xffffffffffffffcd) 5m17.303775092s ago: executing program 5 (id=1282): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x80000) shutdown(r0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000600)=@base={0x16, 0x0, 0x34, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x600}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4c) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 5m12.408194769s ago: executing program 3 (id=1283): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb3, 0x93, 0x81, 0x8, 0xb48, 0x1003, 0x7b54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xb7, 0xfd, 0x27}}]}}]}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, 0x0}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001000)=ANY=[@ANYBLOB="140100002d0001010000000000000000050100800c0011"], 0x114}], 0x1}, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r4, 0x1) 5m12.40759635s ago: executing program 5 (id=1284): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0xd, 0x0, 0x7fffffff}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100), 0x20) 5m11.175646381s ago: executing program 2 (id=1285): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0xd, 0x0, 0x7fffffff}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100), 0x20) 5m10.959328161s ago: executing program 5 (id=1286): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0xf82, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x628, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x5dc, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast2, 0x6}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x48c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba98df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x418, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0xff}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x628}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x5, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f00000000c0)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4m55.226500154s ago: executing program 35 (id=1234): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/meminfo\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpriority(0x2, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$radio(&(0x7f0000000240), 0x3, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7cb, &(0x7f0000000140)={&(0x7f0000000440)={{@my=0x1, 0x10000}, {}, 0x400, "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"}, 0x418, 0x7}) close_range(r3, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001940), 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f5, 0x3f, 0x7, 0x7, 0x623, 0x2800, 0x6, 0x15, 0xba2, 0x5, 0x3e, {0x8, 0xffffffff}, 0xd0, 0x9}}) lseek(r0, 0x164, 0x0) 4m55.058692785s ago: executing program 36 (id=1286): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0xf82, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x628, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x5dc, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast2, 0x6}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x48c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba98df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x418, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0xff}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x628}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x5, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f00000000c0)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4m54.820923971s ago: executing program 37 (id=1285): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0xd, 0x0, 0x7fffffff}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100), 0x20) 4m54.709189096s ago: executing program 38 (id=1283): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb3, 0x93, 0x81, 0x8, 0xb48, 0x1003, 0x7b54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xb7, 0xfd, 0x27}}]}}]}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, 0x0}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001000)=ANY=[@ANYBLOB="140100002d0001010000000000000000050100800c0011"], 0x114}], 0x1}, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r4, 0x1) 3m18.237141436s ago: executing program 9 (id=1316): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, &(0x7f0000000280)) io_uring_enter(r4, 0x263e, 0xf714, 0x6f, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"/329], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f6000002", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x240009, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m15.738692056s ago: executing program 9 (id=1318): r0 = socket(0x2, 0x80805, 0x0) getitimer(0x2, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000340)={0x0, r2, 0x6, 0xe06, 0x2, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) syz_emit_ethernet(0x3e6, &(0x7f0000000400)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3b0, 0x3a, 0xff, @private2, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x22, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x4, 0xb, "d517000036ca018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed884e4859bcfa9c7d5632e170b4379f08e892f891fcb5c8bdf9518f526b6b16a1a52d6a6a8397beb849a9bda8f382346ff8ccf74a"}]}}}}}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000001900)={0x14, {{0x29, 0x0, 0x37000000, @local}}}, 0x88) keyctl$link(0x8, 0x0, 0xfffffffffffffffc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) 3m13.130045432s ago: executing program 9 (id=1319): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0xf82, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x634, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x5e8, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast2, 0x6}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x498, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba98df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x424, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0xff}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x634}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x5, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f00000000c0)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3m11.968026365s ago: executing program 9 (id=1320): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = semget$private(0x0, 0x1, 0x400) semctl$SEM_STAT(r1, 0x5, 0x12, &(0x7f0000000080)=""/99) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xc2, 0x42, 0x7a, 0x20, 0x46d, 0x960, 0xa5af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x35, 0x1f}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) 3m7.35433986s ago: executing program 9 (id=1322): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000", @ANYRES32=0x0, @ANYBLOB="080002"], 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400000045000701000000000000000001"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x13, 0x18, 0x1, 0x0, 0x1, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0xfc, 0xc, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x10, 0xfffffffffffffffd, 0x8, 0x2}}]}, 0x154}}, 0x20008030) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x9, 0x3, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xfffffffa, 0x3, 0x3, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x4, 0xa, 0x0, 0x80071, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x1, 0x1000, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffc], [0x10000007, 0xffff, 0x1, 0x8000, 0x10, 0xfffffff5, 0x129432e6, 0x7, 0x6, 0x0, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0xfff, 0x1000, 0x4, 0x7, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x6d01, 0x5, 0x3b, 0x3, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0x3, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0x6, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x7, 0x7ffffffe, 0x5, 0x8, 0x8, 0x3, 0x50fd, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x80000004, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0xb1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x918) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x5}, 0x18, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10}, 0x50) landlock_restrict_self(r9, 0x0) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000002030109021b00010000000009047800018fa68d0009058a"], 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) syz_usb_control_io$uac1(r11, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x10, 0x8c, {0x8c, 0x3, "c75874190c021ffeea60c5bf4d327268ce6c8fe3f2874a82125941b90a60aa6e3f67512c56516f884bd4ecdadc0fa81206fff0c4316a073418ac2efed910f6d9b33afeda4332ff654f6c6273c1b16de7b818922417357862f90eaf453ef404c3db73fc17e43d6f80502b35013958ec28c98118144d372d944347b1daff9648030f12b0948518ee3853c3"}}, &(0x7f0000000180)={0x0, 0x3, 0x57, @string={0x57, 0x3, "a79b47522a96926c6f78fa8b969e51423cdbe668c675bb122ce8e45fafbebc5306ca9f6de7079ca0232833fc6579f3ba593c0304996053434d8b4456c78e5060ae779bdd8d1ec9a07dac605e8d9fda5273ee97a907"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x0, 0x11, 0xad, "9e1fc25d3dc149c75c4818bf58c4408dd09313c467aa88660bcef759dcca46312cb11d39af570a30568a376d33daa6812eafdbbb2303c22a8b475a0f3bad45c92c3ef2ec99bb70e6b83f1f47af1aba94415208b1ff02a7716c099d889d2c10be1323e6bc9d741e09bb07f8dd63dd4a06d1468ca2428013814beadd1cbf67f7c6d4bfc64e4fb7edc6737bfa11c222dbdca92d23293228aca5f05ce2287a899ec8bf171bb479e6878710f63250d8"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000003c0)={0x20, 0x81, 0x1, "be"}, &(0x7f0000000400)={0x20, 0x82, 0x3, "120973"}, &(0x7f0000000880)=ANY=[@ANYBLOB="d898691ba71bb2604f3a3208185594582d0c388138bc88b654852204711732f109587c0665ab3f620b3bf3"], &(0x7f0000000480)={0x20, 0x84, 0x3, "25b597"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "a98bc6"}}) 3m2.617517827s ago: executing program 9 (id=1326): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) mknodat(r0, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = syz_clone(0x40041080, 0x0, 0x4d, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000080)=0x5) r2 = getpid() sendmsg$unix(r0, &(0x7f00000008c0)={&(0x7f0000000340)=@file={0x1, './file8\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="42b2e08ea3dbb056254196a8e9158a42ce3ba7321e2b0e9ead4ee987b16df6c47df0c2781d70f87f7da26b3d2783b7812b14a0d4a61f2bd6448e751082fc7273e470bf243d568e6f4fc602ded39e868c9d9518afad343d2613f55c3a891c35a12f80fc3483f9958e8724762423013d858651cdb5f36d2f2b3e650835d7fb3889621aa2c61de543aaf4fa6d0623e787699df414", 0x93}, {&(0x7f0000000480)="cdde30c6cdc612979189c320a836dd9aa6f1daffbab85a667c2c56feb216dcadd2bd1805ad09debcd8a9e209b2b77889b4cbdc7ff45e40aae285dcd6586d4479f58dd5e333339fa34198ce72a279e95e9170670b95dbef0e7c8bfb2e3dc875ec82fa290764be98632543e4e2df30edd3af73e83bc0e39ec6bde4a7fb97dae051e8adbaf3203626ae727af1b4390dd91f354e167b", 0x94}, {&(0x7f0000000540)}, {&(0x7f0000000580)="1bea1d395b8b1ad731759618509d4a741b8c9d51b2f70cc9ceed2d1fd5112f123942237dec676191f14e6d233614ce65dc7b15eb377fb30e3ecd8ff6e04950f11a9b24f4c7b577e58a7ecd2b342a381435cb51fa9d0ee5f8a3750b4e957a1d7a24694f4d62774674cc60a0640371eec6fe0956e726", 0x75}, {&(0x7f0000000600)="60573ff4307585c0eff32979bd6ea5d7358c1196c8670723761c724dd999f9132cab73b3abfef756e20f51273884c83c715876bf327e9cea3b571870ddd7dd207240e1239d88902467152e41f1de7b5447251845d16a18d10c0688067a63d6739d93", 0x62}, {&(0x7f0000000680)="de8e01246b7f9ccc7c2a7287eabb8c40b6aa", 0x12}, {&(0x7f00000006c0)="6b72e72942c859c0b7b43f23196cd59c5e91e0e86dd285c192cc330d93feefabe6f05cb36f0cfd89437a19599f5fb714c9e7e36a782fdd295d99f373a471c419d1c7589dbe86d287f75639c0569ca084ae3317451e605d28554163d60dcde1dd144264c035f487f6bbf4aeecab6329d6a0f719c9e42a8718868e4a08ed01ebe48d8da4f1e7963acf3f74038afe8c5c16b8031b63898a57bd92c9106517b541ec27ac7253fc2dfbabb1349706ec8d7544d265ba09c5377934e14aaee4885a7085d66f0d7b2f", 0xc5}], 0x7, &(0x7f0000000880)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0]}}], 0x20, 0x4080}, 0x4008040) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1f7ff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000074c7b4206d04f6088a810009000109021200010000000009"], 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="06000000000000001f0000181400000014000000030000000700"/37], 0x0, 0x2f, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES8, @ANYRES32=r9, @ANYRESHEX], 0x54}}, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000300)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000240)=0x7ff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/12, 0xc}, {&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/198, 0xc6}, {&(0x7f0000000a80)=""/239, 0xef}], 0x4, 0xa2, 0x2) 2m47.391376548s ago: executing program 39 (id=1326): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) mknodat(r0, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = syz_clone(0x40041080, 0x0, 0x4d, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000080)=0x5) r2 = getpid() sendmsg$unix(r0, &(0x7f00000008c0)={&(0x7f0000000340)=@file={0x1, './file8\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="42b2e08ea3dbb056254196a8e9158a42ce3ba7321e2b0e9ead4ee987b16df6c47df0c2781d70f87f7da26b3d2783b7812b14a0d4a61f2bd6448e751082fc7273e470bf243d568e6f4fc602ded39e868c9d9518afad343d2613f55c3a891c35a12f80fc3483f9958e8724762423013d858651cdb5f36d2f2b3e650835d7fb3889621aa2c61de543aaf4fa6d0623e787699df414", 0x93}, {&(0x7f0000000480)="cdde30c6cdc612979189c320a836dd9aa6f1daffbab85a667c2c56feb216dcadd2bd1805ad09debcd8a9e209b2b77889b4cbdc7ff45e40aae285dcd6586d4479f58dd5e333339fa34198ce72a279e95e9170670b95dbef0e7c8bfb2e3dc875ec82fa290764be98632543e4e2df30edd3af73e83bc0e39ec6bde4a7fb97dae051e8adbaf3203626ae727af1b4390dd91f354e167b", 0x94}, {&(0x7f0000000540)}, {&(0x7f0000000580)="1bea1d395b8b1ad731759618509d4a741b8c9d51b2f70cc9ceed2d1fd5112f123942237dec676191f14e6d233614ce65dc7b15eb377fb30e3ecd8ff6e04950f11a9b24f4c7b577e58a7ecd2b342a381435cb51fa9d0ee5f8a3750b4e957a1d7a24694f4d62774674cc60a0640371eec6fe0956e726", 0x75}, {&(0x7f0000000600)="60573ff4307585c0eff32979bd6ea5d7358c1196c8670723761c724dd999f9132cab73b3abfef756e20f51273884c83c715876bf327e9cea3b571870ddd7dd207240e1239d88902467152e41f1de7b5447251845d16a18d10c0688067a63d6739d93", 0x62}, {&(0x7f0000000680)="de8e01246b7f9ccc7c2a7287eabb8c40b6aa", 0x12}, {&(0x7f00000006c0)="6b72e72942c859c0b7b43f23196cd59c5e91e0e86dd285c192cc330d93feefabe6f05cb36f0cfd89437a19599f5fb714c9e7e36a782fdd295d99f373a471c419d1c7589dbe86d287f75639c0569ca084ae3317451e605d28554163d60dcde1dd144264c035f487f6bbf4aeecab6329d6a0f719c9e42a8718868e4a08ed01ebe48d8da4f1e7963acf3f74038afe8c5c16b8031b63898a57bd92c9106517b541ec27ac7253fc2dfbabb1349706ec8d7544d265ba09c5377934e14aaee4885a7085d66f0d7b2f", 0xc5}], 0x7, &(0x7f0000000880)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0]}}], 0x20, 0x4080}, 0x4008040) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1f7ff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000074c7b4206d04f6088a810009000109021200010000000009"], 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="06000000000000001f0000181400000014000000030000000700"/37], 0x0, 0x2f, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES8, @ANYRES32=r9, @ANYRESHEX], 0x54}}, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000300)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000240)=0x7ff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/12, 0xc}, {&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/198, 0xc6}, {&(0x7f0000000a80)=""/239, 0xef}], 0x4, 0xa2, 0x2) 2m11.21594673s ago: executing program 4 (id=1393): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x300) 2m9.892377118s ago: executing program 4 (id=1397): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, &(0x7f00000000c0)={{0xa, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x4, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x7c5, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0x7, 0x0, 0x100000000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x4, 0xfffffdfffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, 0x0, &(0x7f0000000400)) r6 = socket(0x15, 0x5, 0x0) ioctl$SIOCGETSGCNT(r6, 0x89e1, &(0x7f0000000040)={@broadcast, @multicast1}) r7 = fsopen(&(0x7f0000000040)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000100)='rw\x00', 0x0, 0xffffffffffffff9c) r8 = syz_io_uring_setup(0x52f2, 0x0, &(0x7f0000000180), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000680)=""/192, 0xc0}], 0x2) fsopen(&(0x7f0000000040)='ocfs2\x00', 0x0) (fail_nth: 1) 2m8.527602912s ago: executing program 4 (id=1400): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 2m5.292644127s ago: executing program 4 (id=1403): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 2m4.781603308s ago: executing program 4 (id=1405): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x509281, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x1400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, 0x0, 0x0) 2m2.975390392s ago: executing program 4 (id=1411): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x7f, &(0x7f00000001c0)="020900000080efff", 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r8, 0x114, 0x5, &(0x7f0000000140), 0x4) r9 = dup(0xffffffffffffffff) write$6lowpan_enable(r9, &(0x7f00000001c0)='0', 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x688c4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1m47.855303461s ago: executing program 40 (id=1411): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x7f, &(0x7f00000001c0)="020900000080efff", 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r8, 0x114, 0x5, &(0x7f0000000140), 0x4) r9 = dup(0xffffffffffffffff) write$6lowpan_enable(r9, &(0x7f00000001c0)='0', 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x688c4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 11.946965464s ago: executing program 8 (id=1797): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x70, 0x46e, 0x5577, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x3, 0x5f, {0x9, 0x21, 0x5, 0x47, 0x1, {0x22, 0x970}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x1, 0x3}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x2, 0x5, 0xef, 0x20, 0x1d}, 0x76, &(0x7f0000000100)={0x5, 0xf, 0x76, 0x2, [@ptm_cap={0x3}, @generic={0x6e, 0x10, 0x4, "3be09b8cf2a7c80d0e12710d00d691e1210574f8a20b8b5d17bc701b5ee002f1a9b6fcb3a03ba048be08f973d6c63f43c02cffab71a0df5a8eb636300dfb21a6dc87c249c5d1e6463125ff845291aed8b7a6267f17f39fa774c415c94f72cc6d2daa801123b5aa9a316796"}]}, 0x9, [{0x92, &(0x7f0000000180)=@string={0x92, 0x3, "597961cd256818e4a400d55fdc444729f4eef762f78cbfb3d6f6037f9d4203d25b21c706f07f74401f2b32b5144b8da350f45674ff8cf175d7c3ef76b565f3ac3e805f4e8056a953cb5b91c16615b2c576b688479378983d57af5606c8bfdc61e6291ff8d7332ad7fe8c1d21e9126bd07547f57a1f338c22212786b89f08c37ce33efeef3ec2f75e03b862936d23320c"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc17}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x425}}, {0x19, &(0x7f0000000440)=@string={0x19, 0x3, "3fc84e42d6a1bafd2a4acfba8417663572cfdf9be4963a"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0x3, &(0x7f00000004c0)=@string={0x3, 0x3, '\b'}}, {0xb3, &(0x7f0000000500)=@string={0xb3, 0x3, "b51172b74931306d29332ca494ce6946d79b21b9f727c11332ac1b7493e5581cccfbe5d5de06690c30edff608d9fc0dc2c89a50cd56b3343255a17f38d6b09954ac1f30d3dd8a60120cfac22ea2409b904c2fe468a7eecd593a1dfd6bc9ecd4ea5310857cd7ba096bb761b79396000f7c2cf5968274bd6eb6b39af09fb61753a9821c7306bcecfca7addce3401a2cd49976da59e3f6a5470cc4484958b58bb4c1b67236ed67c2b7cb273b67008b05fe750"}}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x80880) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x12) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0xfffffffe}, 0x20) r5 = io_uring_setup(0x563b, &(0x7f00000000c0)={0x0, 0xfffffff6, 0x1000, 0x400, 0x20002bb}) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf4ffffff}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x0, 0x13, 0x1, "fc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 10.352434811s ago: executing program 8 (id=1807): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet6(0xa, 0x80002, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x19, 0x7fff, 0x8, 0xa, 0x8, r4, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r7, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="298f3b5ff34266853d583fdec6ca6408560c28e0bbd536d97ea30d1c4153ad0ac2b80301a2e70c361484696e59939b4722f12d8f2d7907de92676489de2f63d9db1118ace19cf3ad4f72ae7b11ebea3bebf849a56f7985bd683ae7f9a993c9e1d70b9487cf06dd1d35b3018f70816ccd376fe029f7809b8e6af42fd3da2971e6512a09683150a687467d585f7fd32fd949ebef3806923f03a5391dd4779b", 0x9e}, {&(0x7f0000000400)="319390cac15d7a602bea8488e1ae82cf17b4171f389bfd7ed0d9018e88936da1b15bb12b73b5b5cfd277eacd1e8cbfde64c04a42b8293924e049857745d27c2dfb87786c83a56fcc2ce0347ff654c1ee21c11fce38b5371cdb21bd222c1118", 0x5f}, {&(0x7f0000000540)}, {&(0x7f00000005c0)}], 0x4}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x805, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040400000000000000f8625acb"], 0xf) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 10.144707131s ago: executing program 0 (id=1810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r2 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = getpid() prlimit64(r6, 0x5, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x40010000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r7, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='n', 0x1, 0x80, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x2}, 0x8) 9.244018805s ago: executing program 0 (id=1812): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e83, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYBLOB="891413900d"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$ITER_CREATE(0x21, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 7.544645557s ago: executing program 7 (id=1817): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x1000007, 0x8, 0x51424752, 0x5, 0x0, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3}}, 0x100}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000006000000020000000900010073797a3000e2ff000900020073797a32000000003c000480380001800b00010064796e736574000028000280080004400000000008000340000000000900010073797a3100000000080009"], 0x90}}, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="eb0f54890f8b8708820fea476e1bcd6f87a14595116bd2e8e97c781614db8e7fa8a5fca80bf925a8171d6b5c95225457e41b54a2477f754e95911c35bb3059746b02e4ac5208bf3f1be567629dd737fef0acd78b87b676eb01ba1579942adf2b4f409f1373321815f4c5c47b457a0e71921aef0e5625643dc72b34bb721317a7e61a5b6f8b85afcaa48ffbfc5b72e5cf0dcfaa4ca7d19b2eb28a4617208f6270b7b0ec8c4662f94609900cbd04bda08a229e3144afd9ffe7557c68a79901b30f37f3698519241ef9d8b4a3e0e295a2f89cf9cde1a9b773fa6c7d3ae57309", 0xde}], 0x1) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x9, 0x3}) 7.40116894s ago: executing program 6 (id=1818): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x3}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0}], 0x0) wait4(r1, &(0x7f0000000000), 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x1c, 0x16, 0xa01, 0x0, 0x0, {0x8}, [@typed={0x6, 0x0, 0x0, 0x0, @binary="8ff6"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 6.765646856s ago: executing program 7 (id=1819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r0}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80540, 0x188) read$hiddev(r6, &(0x7f0000000080)=""/39, 0x27) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0xfd, 0x0, 0x0, @broadcast, @private, {[@timestamp_addr={0x44, 0x14, 0xf9, 0x1, 0x0, [{@remote, 0x7f}, {@multicast2, 0x40}]}, @rr={0x7, 0x27, 0xa5, [@empty, @private=0xa010100, @local, @rand_addr=0x64010100, @loopback, @remote, @private=0xa010100, @loopback, @broadcast]}]}}}}}) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000056144820e105081011250102030109021b00010000000009040000012ec201000905d89195f39e9ee82aed2235fd5a2eab19d11346f41bf60742cf7a68f2e1b7463b4a9f17a1e81d3a8b708a13813180e9645811adf57a80bdd7a6c4fcf7fc9c5db0b280f07416a262c8a304d3435d32374192642a2ff10bed32218314a39fcc18c6a5703d660546d43a03235e87f9a8ea0d8df14cc8bef7a877110838200b6ca9af1077a0e0b27d3590a5a978f2f32df85647732e038421c4bbe4adda9c97aba50f214bdb662d094cd31ec3"], 0x0) 6.620573181s ago: executing program 1 (id=1820): sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002100)=@flushpolicy={0x124, 0x12, 0x105, 0x0, 0x0, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in6=@local, 0x2, 0x6, 0xcd}}, @policy={0xac, 0x7, {{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e21, 0x6, 0x4e20, 0x0, 0xa, 0x0, 0xa0, 0x2}, {0x43, 0x1, 0x18e8, 0x0, 0x6, 0x2, 0x9, 0x5471}, {0xd48a, 0xff, 0x7, 0x8000}, 0x10001, 0x6e6bb4, 0x0, 0x1, 0x0, 0x2}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0xa, 0x8e, 0x61}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7ff}]}, 0x124}}, 0x4000800) 4.98806333s ago: executing program 0 (id=1821): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000f1000040"]) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000f1000040"]) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 4.828634696s ago: executing program 0 (id=1822): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000) 4.268707666s ago: executing program 0 (id=1823): socket(0x10, 0x3, 0x6) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000000000401c1b071c00000000000001030084e9077c768eb99c00000921000000012207000905810308000000000000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303001000000220000000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301010000020000000000000000000c0002"], 0x20}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.256515481s ago: executing program 6 (id=1824): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000000000000000000000000008000185", @ANYRES32=0x0, @ANYBLOB="080002"], 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x13, 0x18, 0x1, 0x0, 0x1, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0xfc, 0xc, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x10, 0xfffffffffffffffd, 0x8, 0x2}}]}, 0x154}}, 0x20008030) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x9, 0x3, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xfffffffa, 0x3, 0x3, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x4, 0xa, 0x0, 0x80071, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x1, 0x1000, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffc], [0x10000007, 0xffff, 0x1, 0x8000, 0x10, 0xfffffff5, 0x129432e6, 0x7, 0x6, 0x0, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0xfff, 0x1000, 0x4, 0x7, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x6d01, 0x5, 0x3b, 0x3, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0x3, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0x6, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x7, 0x7ffffffe, 0x5, 0x8, 0x8, 0x3, 0x50fd, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x80000004, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0xb1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x918) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x5}, 0x18, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10}, 0x50) landlock_restrict_self(r9, 0x0) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000002030109021b00010000000009047800018fa68d0009058a"], 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) syz_usb_control_io$uac1(r11, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x10, 0x8c, {0x8c, 0x3, "c75874190c021ffeea60c5bf4d327268ce6c8fe3f2874a82125941b90a60aa6e3f67512c56516f884bd4ecdadc0fa81206fff0c4316a073418ac2efed910f6d9b33afeda4332ff654f6c6273c1b16de7b818922417357862f90eaf453ef404c3db73fc17e43d6f80502b35013958ec28c98118144d372d944347b1daff9648030f12b0948518ee3853c3"}}, &(0x7f0000000180)={0x0, 0x3, 0x57, @string={0x57, 0x3, "a79b47522a96926c6f78fa8b969e51423cdbe668c675bb122ce8e45fafbebc5306ca9f6de7079ca0232833fc6579f3ba593c0304996053434d8b4456c78e5060ae779bdd8d1ec9a07dac605e8d9fda5273ee97a907"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x0, 0x11, 0xad, "9e1fc25d3dc149c75c4818bf58c4408dd09313c467aa88660bcef759dcca46312cb11d39af570a30568a376d33daa6812eafdbbb2303c22a8b475a0f3bad45c92c3ef2ec99bb70e6b83f1f47af1aba94415208b1ff02a7716c099d889d2c10be1323e6bc9d741e09bb07f8dd63dd4a06d1468ca2428013814beadd1cbf67f7c6d4bfc64e4fb7edc6737bfa11c222dbdca92d23293228aca5f05ce2287a899ec8bf171bb479e6878710f63250d8"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000003c0)={0x20, 0x81, 0x1, "be"}, &(0x7f0000000400)={0x20, 0x82, 0x3, "120973"}, &(0x7f0000000880)=ANY=[@ANYBLOB="d898691ba71bb2604f3a3208185594582d0c388138bc88b654852204711732f109587c0665ab3f620b3bf3"], &(0x7f0000000480)={0x20, 0x84, 0x3, "25b597"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "a98bc6"}}) 4.228164865s ago: executing program 1 (id=1825): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x11a1, 0x0, 0x3, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000300010040", 0x7) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) syz_io_uring_setup(0x499, &(0x7f0000000200)={0x0, 0x4661, 0x8, 0x3, 0x288}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x10002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x4, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4.157740784s ago: executing program 8 (id=1826): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="10208100", 0x5dc, 0x0, &(0x7f0000000340)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x700, 0x8, 0xd, 0x2, {{0x15, 0x4, 0x2, 0x2, 0x54, 0x66, 0x0, 0x2, 0x2, 0x0, @loopback, @rand_addr=0x64010100, {[@ra={0x94, 0x4}, @cipso={0x86, 0x36, 0x3, [{0x5, 0x5, "1bce72"}, {0x0, 0x10, "10e7c826535f3a5c2549cdf415b8"}, {0x7, 0x4, "30ae"}, {0x0, 0x6, "78c4bad1"}, {0x6, 0x2}, {0x6, 0xf, "4314be05817a64d317de0f5b8f"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x20000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ffffff851000000200000020000200000000009500007b0000000095000000000d"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r5 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) (async, rerun: 32) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) (async, rerun: 32) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x4}, 0x2) (async) socket$packet(0x11, 0xa, 0x300) (async, rerun: 64) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb07a24f79ee3f86dd6020000000302f00fc000000000000000000000000000001ff0200000000000000000000000000010000883e0030902269d4c77febb30ee631ad1be1a15e592d3678edb6aaec874e00"/102], 0x0) (rerun: 64) 3.756250234s ago: executing program 8 (id=1827): set_tid_address(&(0x7f0000000040)) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000004640), 0x88902, 0x0) socket$inet6(0xa, 0x80000, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r5 = syz_clone(0x0, 0x0, 0xfffffffffffffddd, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8880b8409000) r6 = syz_open_procfs(r5, &(0x7f00000002c0)='attr\x00') (async) socket(0x10, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) r7 = fsopen(&(0x7f00000000c0)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x300, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtaction={0x14, 0x30, 0x0, 0x200000, 0x40000000, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x24008001) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.63048138s ago: executing program 1 (id=1828): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000500)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, 0x0, 0x2400c0c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$addseals(0xffffffffffffffff, 0x409, 0xe) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x9, @mcast1}, r1}}, 0x48) 3.552297228s ago: executing program 6 (id=1829): r0 = socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x7fe, 0x0, &(0x7f0000000040)=0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)) r3 = shmget$private(0x0, 0x1000, 0xa48, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x2, 0x7, {0x1, 0x1, 0x3}, {0x2, 0x0, 0x4}, 0xfe, 0xfe}, {0x0, 0x10000000000003, {0x0, 0xff, 0x4}, {0x2}, 0xfe, 0xff}], 0x40) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@initdev, @multicast1, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newtfilter={0x1310, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0x16}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @filter_kind_options=@f_route={{0xa}, {0xfc4, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_ROUTE4_ACT={0x2f0, 0x6, [@m_skbedit={0xa4, 0xf, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}]}, {0x70, 0x6, "19eacee2422fd5b53b437d937e1442b4573e2d83ce36fa7596cc6eb69e6be26e941633463382a013a2af2182a3af1ab81a8bb9937091085cc6d1e132889eba4cd45c105d0d3c17fcabd5b0a3d5bb48b6cca5f9babe0fb88affe47061383a53a48fef40422a998fee3a65cbfe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x8fd68343b8d4108e}}}}, @m_ife={0x144, 0x1c, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x81}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10001, 0x4, 0xffffffffffffffff, 0x2, 0x2}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x7, 0x20000003, 0x1, 0x8}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x237}]}, {0xc3, 0x6, "76e3e70131e7f9c1769390d4c4ba1d358ae0442da210070b25f55c632b4ddb8620d51dfa16e0205df1e5a149c24534469b28324fd61a4c1bb6c04c40825b2a34afec87213aa62c9acff397cdf5a18b7a7fec4140322bdd437814b20a90362acdce9aa51684ccdbc8443ac7714508d6e86d9b5e80ddeb9bdb10afd877e88e097cc426e334c5207f018e0b4e310b09ce300d7c5227a2a4e82ff0ffa71adddd9190ef48fab5deef104e86440782f195e6c48b36705cc076455a7e25d23f379cff"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0x104, 0x1c, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}]}, {0xcc, 0x6, "73881792c00f2c20969758b36ac1e3742eb3391dd328fbfdafbf7b72711f014902f1e9a1b04cae7f1f3912e3384b759d087768c75b1515dfd9a9d84d209086b1c1e9a0b609befe3a48e7bcf0041bfdf9ef22f6be9fa8c72d01c9d691e55a1d9d2991428b6df9301e5824aec641118aab97531e32e54b4f714abfcf9e57955bb5cbcfce0cd9b81bf63919cdb248ab391eecf0739363b92099e12cea92c678bc4c1a07bc0bed3f9245b6a5cc329429711a99370818425d8f80fcd7b9c3ff77f3a9cb0fe943e0e859cf"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x868, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x24, 0x7, 0x1, 0xe76, 0x1, 0x1, 0x5, 0x5, 0x3, 0x3, 0x219a, 0x6, 0x5, 0x80000001, 0x7, 0x4, 0x8001, 0x2, 0x40, 0x101, 0x95d80000, 0x0, 0x2, 0xe, 0x8, 0x3, 0x0, 0x0, 0x401, 0xbd17, 0x2, 0x3, 0xc, 0x6, 0x7a, 0x6, 0x1000, 0x10, 0x1ff, 0x2, 0xffffff41, 0x4e86, 0x5, 0x5, 0xa, 0x0, 0x10, 0xd6b7, 0x685, 0x101, 0x8, 0x1ff, 0xff, 0x5, 0x3, 0x3, 0xd, 0x2, 0x7ff, 0xc, 0x0, 0xffffff01, 0x5, 0xf59f, 0x1, 0xffff, 0x500, 0x6, 0xfdd, 0x671, 0x9, 0x200, 0x10001, 0x80000000, 0x0, 0x8, 0xfffffffb, 0x81, 0x1, 0x6, 0x3, 0x8, 0x6, 0x9, 0x8, 0xe, 0x7, 0x2, 0x7, 0x9, 0x80, 0x7, 0x8000, 0x200, 0x1, 0x8, 0xfffffff9, 0x2, 0x4, 0x7, 0xfff, 0x391c6bdd, 0x2, 0x2, 0x2, 0x9, 0x800000, 0x8, 0xd, 0x80, 0x7, 0x4, 0x1, 0xb, 0x4, 0xffffffff, 0x48a, 0x5, 0xfffffff3, 0x1, 0x4, 0x7, 0x5, 0x3, 0x0, 0x1, 0x1, 0x7fff, 0xffffffff, 0x40, 0x9, 0x3, 0x6, 0xfff, 0xa87, 0xffffffff, 0xfffffffd, 0xc, 0x8, 0x3ff, 0x4, 0x80, 0x2, 0x2c, 0x3, 0x4, 0x3, 0x9, 0x800, 0x5, 0xffff, 0x9986, 0x3, 0x8, 0x7, 0x1, 0xa6a5, 0x8, 0x7bd, 0x5, 0x1, 0x3, 0x0, 0x7ff, 0x4, 0x3, 0x81, 0x5, 0xa8, 0x33eddacd, 0x40, 0x8001, 0xffffff61, 0x9, 0x9, 0x8, 0x7, 0xf6, 0x40, 0x9eb, 0x200, 0xf32, 0x8, 0x40, 0x8, 0x5, 0x8, 0x6, 0x1881, 0xd567, 0x6, 0x8001, 0x1, 0x4, 0x3, 0x6, 0x100, 0x1, 0x8, 0x4, 0x406, 0x7, 0x7b12, 0x0, 0x0, 0x6, 0x1, 0x10000, 0x4, 0x6, 0x7f, 0x8b80, 0xa, 0xe75e, 0x1, 0x5, 0x6, 0x7, 0x3, 0xfaa8, 0x8f6, 0x7fff, 0x2, 0x10000, 0x7ff, 0x2, 0xfcd5, 0x5, 0x9ce7, 0xd8db, 0x80000000, 0x5a09f115, 0x7fffffff, 0x0, 0x3, 0xfffffffd, 0x2, 0x5, 0x4e, 0x7, 0xe, 0x1, 0x6, 0x236, 0x8, 0x705ebc92, 0x4, 0x9, 0x3, 0x81, 0x7, 0x3, 0x1, 0x2af2, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2d3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x72}, @TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x4, 0x0, 0xffff, 0xfbd, {0x6, 0x2, 0x9c5, 0xffff, 0x0, 0xa}, {0x17, 0x1, 0x9e40, 0x2, 0x8}, 0x8, 0x10000, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x3, 0x5, 0x10001, 0x3, 0x3, 0x3, 0xd78, 0x5, 0x6, 0x1, 0x98, 0xffff, 0x8, 0x8001, 0xa59, 0xd8, 0x0, 0x6, 0x1e00, 0x2, 0x7, 0x0, 0x7f, 0xc0000000, 0x4, 0x100000, 0x5, 0xfffffffc, 0x4, 0x2e, 0x663, 0x5, 0x8, 0x640, 0x1, 0x2, 0x7f, 0x1b, 0x2, 0xca, 0x2, 0x8, 0x100, 0x800, 0x453, 0x2, 0x2, 0xf, 0xf, 0x3, 0x9650fba9, 0x8001, 0x6, 0x9d, 0xd2, 0x5, 0x5, 0x100, 0x5, 0x9, 0x8, 0xc, 0xe, 0xfff, 0x1, 0x7, 0x0, 0x3, 0x8, 0x800, 0x6, 0x6, 0x7, 0x8, 0x0, 0x6, 0xfe3c, 0x8, 0xfffffff5, 0x0, 0x81, 0x18, 0x9, 0xf, 0xb5, 0x9, 0xa, 0xe, 0x9, 0xad7, 0x4, 0x1a85c5b0, 0xc020, 0x401, 0xfffffffb, 0x6bae0011, 0x2, 0x2, 0x101, 0x7, 0xb92, 0xa14, 0x10001, 0x4, 0x0, 0x101, 0x9, 0x0, 0x8001, 0x100, 0xeabe, 0x8, 0x8, 0x1, 0x6, 0x5bea, 0x2, 0xffff7fff, 0x8, 0x9, 0xfffffffc, 0x7fff, 0x2, 0x7521, 0x8, 0x4a, 0x9, 0x5, 0x9, 0x8, 0x8, 0x401, 0x6, 0x2000000, 0x101, 0x0, 0xff, 0x9, 0x0, 0x40, 0x84fa, 0xb, 0x5, 0x8, 0x4, 0x8000, 0x400, 0x14, 0xf3ea, 0x21ed, 0x1, 0x4, 0x8b1, 0x78, 0x2, 0x4, 0x4, 0x400, 0x9, 0x4, 0x8000, 0xfffffffa, 0x1, 0xffff, 0x9, 0x7, 0x6, 0xffffffff, 0x3d4, 0x1, 0x4, 0x9ff3, 0x4, 0x7fffffff, 0x17, 0x8, 0x6, 0x7, 0x1, 0x0, 0x7, 0x3, 0x896, 0x4, 0x8, 0x3, 0x6, 0x5, 0x4, 0x7f, 0x3, 0x80000001, 0x9, 0xffffff9b, 0x0, 0x0, 0x1, 0x4, 0x2, 0x81, 0xe8b, 0x2, 0x10000, 0x40, 0x2d1c, 0x3, 0x0, 0x7, 0x9, 0x7, 0x6, 0x7, 0xfffffffc, 0x839d, 0x5, 0x6, 0xd, 0x1ff, 0x400, 0x1, 0x40aa, 0x1, 0xfffffffb, 0x7, 0x0, 0x7, 0x6, 0xfffffffb, 0x7, 0x3, 0x41aa, 0x400, 0xb, 0x8, 0x1, 0xc37, 0x2, 0xa3f, 0x13, 0xf98, 0x9, 0x0, 0x7fffffff, 0x6, 0x80, 0x5, 0x0, 0x4, 0x8, 0x6, 0x80000001, 0x4, 0x2, 0x9, 0x9]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x5b}, @TCA_ROUTE4_POLICE={0x450, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb17, 0x4e6, 0x1, 0x3, 0x6, 0x6, 0x8, 0x8, 0x9, 0x7, 0x1, 0x9, 0x8, 0x2, 0x3, 0x0, 0xed, 0x6, 0x876a, 0x5, 0x1, 0xfffffffd, 0x4, 0x8000, 0x5, 0x200, 0x8a, 0x9, 0x9, 0x5, 0x3, 0x7fffffff, 0x6, 0x4, 0x1, 0x2, 0x0, 0x9, 0xc, 0x80, 0x5, 0x5a8, 0x7, 0xc, 0x0, 0x7fff, 0x3, 0x9, 0xf, 0x9c, 0x43de, 0x7fffffff, 0x10, 0x8, 0x7f, 0x4, 0xb, 0xb, 0x5, 0x8, 0x8e9, 0x7, 0x8, 0x0, 0x3, 0x800, 0x3, 0x7f, 0xd, 0x1, 0x80, 0x7, 0x2, 0x1, 0xb, 0x1, 0x0, 0x2, 0x9d, 0xbdb5, 0x2, 0xad68, 0x0, 0x800, 0x4, 0xf, 0xb, 0x194a9865, 0x5, 0x6, 0x10, 0x10000, 0xe59, 0xb8f2, 0x4093, 0x7fffffff, 0x3, 0x5, 0xffffffff, 0x4, 0xff, 0x3535d414, 0xf1eb, 0x5, 0x287, 0xeaeb, 0x13, 0xd1, 0x10000, 0x1, 0x3, 0x1, 0x7, 0xb, 0x6, 0x3, 0x9, 0x6, 0x5, 0xf6, 0x3, 0x3, 0x2, 0x5, 0x3, 0xfffffffc, 0xffffffff, 0x6, 0x6, 0x6019, 0x61, 0x2, 0x7d7f307f, 0x0, 0x800, 0x4, 0x40, 0x5, 0xe, 0x6, 0x1, 0x3, 0xb98, 0x7fff, 0x1, 0xd, 0x5, 0x401, 0x2, 0xa, 0x5, 0x80, 0x5, 0x9, 0x1, 0x5, 0xffff097b, 0xe5b, 0x4, 0x2, 0x5, 0x1, 0xffffffff, 0x1, 0x3, 0x1c, 0x9, 0x5, 0x6, 0x3, 0x2, 0x4, 0x4, 0x9, 0x3, 0x7, 0xfffff04a, 0x2, 0x81, 0x5, 0xdc2, 0x80, 0x4, 0x5, 0xbd, 0xcf3f, 0x1, 0x1387cb3e, 0x40, 0x62a, 0x401, 0xb8, 0x5, 0x8000, 0x8, 0x9, 0x5, 0x9, 0x7fff, 0x0, 0xe66e, 0xa0000000, 0x2, 0x2, 0x4, 0x0, 0x67f, 0xa5, 0x1, 0x1, 0xffffffff, 0x1, 0xf, 0x0, 0x1, 0xf, 0x8, 0x5, 0x4, 0x400, 0xffffff80, 0x401, 0xeff, 0x7, 0x8000, 0x3, 0x80000000, 0x5, 0x8, 0x401, 0xffff, 0x5c, 0x3, 0xffffff0d, 0x6, 0x6, 0x8, 0x3, 0x2, 0x40, 0x6, 0x5, 0xb56, 0x9, 0x4, 0x8, 0x101, 0x80000000, 0x5, 0x5, 0x5, 0x9, 0x100, 0x1, 0x5, 0xfe]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x81}}, @filter_kind_options=@f_basic={{0xa}, {0x2e0, 0x2, [@TCA_BASIC_EMATCHES={0x2dc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x2b8, 0x2, 0x0, 0x1, [@TCF_EM_META={0xb4, 0x3, 0x0, 0x0, {{0x3, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR="2e13ebb3f7b1", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="3d66abaefc", @TCF_META_TYPE_VAR="71b03677cfe572835fb0", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_VAR="3b93c7ab215d57bc58", @TCF_META_TYPE_VAR="70be6472941e12", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="711611cd61083d", @TCF_META_TYPE_VAR="b07ddde1a25048", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='p']}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc, 0x10, 0x2}, {0x48bb, 0x5}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x7, 0x1}, {0x4, 0x1, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x8}, {0xb, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe, 0x3}, {0x5, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x101, 0x1}, {0x2, 0x0, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6ab, 0x4}, {0x2, 0x40, 0x2}}}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x4, 0x2, 0x762}, {0xfff, 0x4, 0x1, "1d82518b"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x6}, {0x1, 0x6, 0x2}}}, @TCF_EM_META={0x40, 0x3, 0x0, 0x0, {{0x56ef, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x9, 0x2}, {0x8b07, 0x0, 0x2}}}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="c3950e3361"]}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="8adef904cc43209702", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="d00840", @TCF_META_TYPE_VAR="c2"]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xa47f, 0x7, 0xfffd}, {{0x3, 0x0, 0x1, 0x1}, {0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xea06}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPT={0x15c, 0x3, 0x0, 0x0, {{0x9, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0x4c, 0x5, "368ca073cc66c3e480dcd3c93e54c9f9c35bd81e51c76652ecf7c188737fcbce5449405d3a590c013962defac610b38f66502cbe4762ae57b3d7413b87c564a2790b86017c7fae60"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0xc1, 0x5, "6df62fc2583c5e0a8d62734ba6b23f999177e44be1d0140aea639260649187192f6b771b3cbb9a33982ec9cee30bbcf9f114c45a413cd24dc103833adf6ca3beb876f9e6a0d544e1c1a5f9a09119d3bb0ac9bc119b862a3f756de5ca2af9dea753df15b9983f9560a29146e908eb54047dd272019936600d96da3fb8e17362a85b9122e63892f6b5d8be7fdfb5efd1cad54b80ad17416c8f2303a6581b9a238de84d1d4a8080c9fe49145f8d796ac94bbb136e4ab7dd0b7aeefe423f1b"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x7}, {0xbd, 0x8, 0x2, 0x6, 0xc, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xaa3e}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7a9d}}]}]}}]}, 0x1310}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 3.500503004s ago: executing program 8 (id=1830): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="8dfb", 0x2}], 0x1, 0x0, 0x0, 0x803e}, 0x3) socket$packet(0x11, 0x3, 0x300) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x3, 0x370, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r10 = memfd_create(&(0x7f0000000b40)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\xbd/\xd0J\xce=\x924\xc0\x17\x871N:\xb4\xea \x8e\xdelV\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8H\x7fsk\x9cD\xb3w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N', 0x2) fcntl$addseals(r10, 0x409, 0x2f) close_range(r10, r7, 0x0) io_uring_enter(r7, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r11, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000700)={0x77359400}, 0x0) 2.824353815s ago: executing program 7 (id=1831): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0xd, 0x0, 0x7fffffff}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad855d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c8402b67801263c4ff97d2f85426a5963d4fa3e26cc05972c162f223f0000000000000003fe70928295a82b12d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100), 0x20) 2.646829792s ago: executing program 1 (id=1832): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x4180, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$bt_hci(r3, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x1, 0xfffffffc], 0x9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.524202724s ago: executing program 6 (id=1833): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x6) (async) sendfile(r0, r1, &(0x7f0000000100)=0x6, 0x100000000010001) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x3, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x0, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x5, 0xfffffffc, 0x3, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x5f, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x6, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x2, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x8000012f, 0x6, 0x401, 0x6, 0x129432e6, 0xc8, 0xf9, 0xf07d, 0x101, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x5, 0x312, 0x75, 0xea4, 0x0, 0x4, 0x7, 0xff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x7, 0x5, 0xb, 0x1, 0x2020000, 0x3, 0xbc45, 0x48c93690, 0x3e, 0x3], [0x7, 0x408, 0x4, 0x5, 0x6401d37b, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x65, 0x1000000b, 0x4, 0x9, 0x5, 0x0, 0x1, 0x2005, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0xc043, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x3, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x2, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x2, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x2, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x1, 0x4, 0xc4, 0x9, 0x1, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xc2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1ff, 0x200, 0x10001, 0xfff]}, 0x45c) (async, rerun: 32) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.080925212s ago: executing program 1 (id=1834): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000380)={0x2a, 0x3, 0x7ffe}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) bind$qrtr(r2, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) 2.078400462s ago: executing program 6 (id=1835): bpf$MAP_CREATE(0x0, &(0x7f0000032800)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000032700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) setrlimit(0x4, &(0x7f00000193c0)={0xffff, 0x9}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x23, 0x74, {0x74, 0x21, "4c0de4e8eb5080341d98884bbbce4740a62eefc523ed2d2ed52fd2ae49bd2b96166a6e03216596cc2acf9413fe9a8eb1114de66ee102a14a62964be6e0dc51d067227acd26d051005d015ce965da9347b884ee1f34a2f31a9ac97c59fcb2e2c870e2eeab1460f98d924ab5266be9115a1a42"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x26}}, &(0x7f0000000180)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "adb0a3d3c33cdcf71ae7c59da06569a5"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x3, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x86, 0x2, 0x80, 0xfffa, 0x2}]}}, 0x0, 0x0}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x40, 0xb}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x160, 0x10, [0xf00]}}, 0x0, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000480)={0x40, 0xb, 0x2, "2495"}, 0x0, &(0x7f0000000500)={0x40, 0x13, 0x6, @local}, 0x0, &(0x7f0000000580)={0x40, 0x19, 0x2, "0880"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xff}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0xb3}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0xb}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0xad}}) syz_usb_control_io(r2, &(0x7f00000005c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00fd2dac01a95d034f106939f16deaffff"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.896180579s ago: executing program 8 (id=1836): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0xf82, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x5c4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x578, 0x8, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast2, 0x6}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4}, {0x4b0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba98df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x43c, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0xff}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x5c4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x5, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f00000000c0)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.725182549s ago: executing program 7 (id=1837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000080)="64660f3882940000baa10066b8079fbe4966ef6766c744240026daf44f6766c7442402f07700006766c744240600000000670f011c240fc71b9acd001c01baf80c66b88218278a66efbafc0cedf30f0936da2866b8531700000f23d80f21f86635400000300f23f8ea00005700", 0x6d}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0x3, 0x0, &(0x7f0000000000)="63eced", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.324615643s ago: executing program 7 (id=1838): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x11a1, 0x0, 0x3, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000300010040", 0x7) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) syz_io_uring_setup(0x499, &(0x7f0000000200)={0x0, 0x4661, 0x8, 0x3, 0x288}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x10002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x4, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000000)=0x1, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.262153085s ago: executing program 6 (id=1839): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000000000000000000000000008000185", @ANYRES32=0x0, @ANYBLOB="080002"], 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x13, 0x18, 0x1, 0x0, 0x1, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0xfc, 0xc, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x10, 0xfffffffffffffffd, 0x8, 0x2}}]}, 0x154}}, 0x20008030) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000480)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x9, 0x3, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xfffffffa, 0x3, 0x3, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x4, 0xa, 0x0, 0x80071, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x1, 0x1000, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffc], [0x10000007, 0xffff, 0x1, 0x8000, 0x10, 0xfffffff5, 0x129432e6, 0x7, 0x6, 0x0, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0xfff, 0x1000, 0x4, 0x7, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x6d01, 0x5, 0x3b, 0x3, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0x3, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0x6, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x7, 0x7ffffffe, 0x5, 0x8, 0x8, 0x3, 0x50fd, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x80000004, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0xb1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x918) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x5}, 0x18, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10}, 0x50) landlock_restrict_self(r9, 0x0) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000002030109021b00010000000009047800018fa68d0009058a"], 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) syz_usb_control_io$uac1(r11, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x10, 0x8c, {0x8c, 0x3, "c75874190c021ffeea60c5bf4d327268ce6c8fe3f2874a82125941b90a60aa6e3f67512c56516f884bd4ecdadc0fa81206fff0c4316a073418ac2efed910f6d9b33afeda4332ff654f6c6273c1b16de7b818922417357862f90eaf453ef404c3db73fc17e43d6f80502b35013958ec28c98118144d372d944347b1daff9648030f12b0948518ee3853c3"}}, &(0x7f0000000180)={0x0, 0x3, 0x57, @string={0x57, 0x3, "a79b47522a96926c6f78fa8b969e51423cdbe668c675bb122ce8e45fafbebc5306ca9f6de7079ca0232833fc6579f3ba593c0304996053434d8b4456c78e5060ae779bdd8d1ec9a07dac605e8d9fda5273ee97a907"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x0, 0x11, 0xad, "9e1fc25d3dc149c75c4818bf58c4408dd09313c467aa88660bcef759dcca46312cb11d39af570a30568a376d33daa6812eafdbbb2303c22a8b475a0f3bad45c92c3ef2ec99bb70e6b83f1f47af1aba94415208b1ff02a7716c099d889d2c10be1323e6bc9d741e09bb07f8dd63dd4a06d1468ca2428013814beadd1cbf67f7c6d4bfc64e4fb7edc6737bfa11c222dbdca92d23293228aca5f05ce2287a899ec8bf171bb479e6878710f63250d8"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000003c0)={0x20, 0x81, 0x1, "be"}, &(0x7f0000000400)={0x20, 0x82, 0x3, "120973"}, &(0x7f0000000880)=ANY=[@ANYBLOB="d898691ba71bb2604f3a3208185594582d0c388138bc88b654852204711732f109587c0665ab3f620b3bf3"], &(0x7f0000000480)={0x20, 0x84, 0x3, "25b597"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "a98bc6"}}) 1.127457597s ago: executing program 0 (id=1840): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'sit0\x00', 0x1}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4f27f69b0618d8ae}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000c40)) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) unshare(0x64000600) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000000)) 864.106939ms ago: executing program 1 (id=1841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80540, 0x188) read$hiddev(r5, &(0x7f0000000080)=""/39, 0x27) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x89, 0x0, 0x0, {{0xb, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfd, 0x0, 0x0, @broadcast, @private, {[@timestamp_addr={0x44, 0x14, 0xf9, 0x1, 0x0, [{@multicast2, 0x7f}, {@multicast2, 0x40}]}, @rr={0x7, 0x3, 0xa5}]}}}}}) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000056144820e105081011250102030109021b00010000000009040000012ec201000905d89195f39e9ee82aed2235fd5a2eab19d11346f41bf60742cf7a68f2e1b7463b4a9f17a1e81d3a8b708a13813180e9645811adf57a80bdd7a6c4fcf7fc9c5db0b280f07416a262c8a304d3435d32374192642a2ff10bed32218314a39fcc18c6a5703d660546d43a03235e87f9a8ea0d8df14cc8bef7a877110838200b6ca9af1077a0e0b27d3590a5a978f2f32df85647732e038421c4bbe4adda9c97aba50f214bdb662d094cd31ec39495da"], 0x0) 0s ago: executing program 7 (id=1842): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x8, 0x6ec901) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000d40)={0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0], 0x2}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ng preconfigured BSSID 50:50:50:50:50:50 [ 533.577257][T11058] veth0_vlan: entered promiscuous mode [ 533.587196][ T3454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.611251][T11062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.649435][T11058] veth1_vlan: entered promiscuous mode [ 533.832749][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.854667][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.904795][T11058] veth0_macvtap: entered promiscuous mode [ 533.947137][T11058] veth1_macvtap: entered promiscuous mode [ 533.955044][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.964765][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.056529][T11058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.231575][T11058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.266137][T11058] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.278607][T11058] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.289464][T11058] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.306181][T11058] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.328437][ T6732] Bluetooth: hci3: Frame reassembly failed (-84) [ 534.537566][ T6724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.566868][ T6724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.639414][T11062] veth0_vlan: entered promiscuous mode [ 534.649768][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.667921][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.679262][T11062] veth1_vlan: entered promiscuous mode [ 534.772063][T11062] veth0_macvtap: entered promiscuous mode [ 534.813664][T11062] veth1_macvtap: entered promiscuous mode [ 534.850913][T11062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.865660][T11062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.879105][T11062] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.888417][T11062] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.899374][T11062] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.908428][T11062] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.050189][ T42] usb 9-1: USB disconnect, device number 5 [ 536.098949][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.107077][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.260449][ T6732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.292123][ T6732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.303217][T11384] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1356'. [ 536.352320][T11384] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1356'. [ 536.392040][ T5819] Bluetooth: hci3: command 0x1003 tx timeout [ 536.466357][ T5141] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 536.860836][T11399] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 536.874295][T11399] syz_tun: entered allmulticast mode [ 537.385590][T11388] syz_tun: left allmulticast mode [ 541.454223][T11442] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1368'. [ 541.535828][T11442] netlink: 47 bytes leftover after parsing attributes in process `syz.7.1368'. [ 541.564737][T11442] netlink: 47 bytes leftover after parsing attributes in process `syz.7.1368'. [ 544.707535][T11475] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1375'. [ 544.707749][ T30] audit: type=1400 audit(2000000226.460:621): avc: denied { nlmsg_write } for pid=11472 comm="syz.0.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 544.737410][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.800203][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 544.847414][T11481] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1377'. [ 544.954264][ T9] usb 5-1: device descriptor read/64, error -71 [ 545.273141][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 545.421720][ T5887] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 545.740144][ T9] usb 5-1: device descriptor read/64, error -71 [ 545.985490][ T5887] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 545.993989][ T9] usb usb5-port1: attempt power cycle [ 546.001650][ T5887] usb 8-1: config 0 has no interface number 0 [ 546.010341][ T5887] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 546.024057][ T5887] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 546.039898][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 546.061108][ T5887] usb 8-1: Product: syz [ 546.074019][ T5887] usb 8-1: SerialNumber: syz [ 546.102459][ T5887] usb 8-1: config 0 descriptor?? [ 546.123997][ T5887] input: syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.120/input/input15 [ 546.315527][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 546.349955][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 546.410437][ T9] usb 5-1: device descriptor read/8, error -71 [ 546.559937][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 546.566679][ T10] usb 9-1: config 127 has an invalid interface number: 171 but max is 1 [ 546.575297][ T10] usb 9-1: config 127 has no interface number 1 [ 546.585421][ T10] usb 9-1: config 127 interface 0 altsetting 10 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 546.597594][ T10] usb 9-1: config 127 interface 0 altsetting 10 endpoint 0x1 has invalid wMaxPacketSize 0 [ 546.608272][ T10] usb 9-1: config 127 interface 171 has no altsetting 0 [ 546.628876][ T10] usb 9-1: config 127 interface 0 has no altsetting 0 [ 546.650519][ T10] usb 9-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 546.659694][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.669804][ T10] usb 9-1: Product: syz [ 546.677133][ T10] usb 9-1: Manufacturer: syz [ 546.681847][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 546.702115][ T10] usb 9-1: SerialNumber: syz [ 546.721203][ T9] usb 5-1: device descriptor read/8, error -71 [ 546.860333][ T9] usb usb5-port1: unable to enumerate USB device [ 546.948444][T11491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.972164][T11491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.016910][ T10] xr_serial 9-1:127.171: xr_serial converter detected [ 547.064528][ T10] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 547.090909][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 547.144727][ T10] usb 9-1: USB disconnect, device number 6 [ 547.167967][ T10] xr_serial 9-1:127.171: device disconnected [ 547.301186][T11515] FAULT_INJECTION: forcing a failure. [ 547.301186][T11515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.317281][T11515] CPU: 0 UID: 0 PID: 11515 Comm: syz.4.1383 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 547.317306][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 547.317317][T11515] Call Trace: [ 547.317323][T11515] [ 547.317330][T11515] dump_stack_lvl+0x16c/0x1f0 [ 547.317359][T11515] should_fail_ex+0x512/0x640 [ 547.317387][T11515] _copy_from_user+0x2e/0xd0 [ 547.317411][T11515] copy_msghdr_from_user+0x98/0x160 [ 547.317435][T11515] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 547.317461][T11515] ? sched_clock_cpu+0x6c/0x530 [ 547.317493][T11515] ___sys_sendmsg+0xfe/0x1d0 [ 547.317519][T11515] ? __pfx____sys_sendmsg+0x10/0x10 [ 547.317542][T11515] ? __lock_acquire+0x622/0x1c90 [ 547.317589][T11515] ? warn_bogus_irq_restore+0x20/0x30 [ 547.317620][T11515] __sys_sendmsg+0x16d/0x220 [ 547.317645][T11515] ? __pfx___sys_sendmsg+0x10/0x10 [ 547.317668][T11515] ? rcu_is_watching+0x12/0xc0 [ 547.317699][T11515] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 547.317723][T11515] do_syscall_64+0xcd/0x4c0 [ 547.317750][T11515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.317767][T11515] RIP: 0033:0x7f653178e929 [ 547.317781][T11515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.317796][T11515] RSP: 002b:00007f653252e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.317812][T11515] RAX: ffffffffffffffda RBX: 00007f65319b6080 RCX: 00007f653178e929 [ 547.317823][T11515] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b [ 547.317833][T11515] RBP: 00007f653252e090 R08: 0000000000000000 R09: 0000000000000000 [ 547.317844][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.317854][T11515] R13: 0000000000000000 R14: 00007f65319b6080 R15: 00007fff7ad32818 [ 547.317877][T11515] [ 547.503239][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.935785][ T9] usb 8-1: USB disconnect, device number 2 [ 548.716058][ T30] audit: type=1400 audit(2000000230.470:622): avc: denied { mounton } for pid=11528 comm="syz.8.1386" path=2F34392FE91F7189591E9233614B dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 548.768444][ T30] audit: type=1400 audit(2000000230.520:623): avc: denied { write } for pid=11528 comm="syz.8.1386" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 548.850253][T11542] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1389'. [ 549.990464][T11556] netlink: 'syz.7.1392': attribute type 8 has an invalid length. [ 550.080101][ T30] audit: type=1400 audit(2000000231.810:624): avc: denied { write } for pid=11557 comm="syz.4.1393" path="socket:[31669]" dev="sockfs" ino=31669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 550.239921][ T9] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 550.293719][T11569] binder: 11568:11569 ioctl c018620c 200000000040 returned -22 [ 550.411628][ T9] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 550.422005][ T9] usb 9-1: config 0 has no interface number 0 [ 550.442961][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 550.463689][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.506922][ T9] usb 9-1: Product: syz [ 550.556004][ T9] usb 9-1: Manufacturer: syz [ 550.578550][ T9] usb 9-1: SerialNumber: syz [ 550.991588][ T9] usb 9-1: config 0 descriptor?? [ 551.235450][ T9] hub 9-1:0.132: bad descriptor, ignoring hub [ 551.244869][ T9] hub 9-1:0.132: probe with driver hub failed with error -5 [ 551.259605][ T9] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.132/input/input16 [ 552.677615][T11594] SELinux: failed to load policy [ 552.752210][ T30] audit: type=1400 audit(2000000234.430:625): avc: denied { load_policy } for pid=11587 comm="syz.1.1398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 555.307560][T10453] usb 9-1: USB disconnect, device number 7 [ 555.357071][ T30] audit: type=1400 audit(2000000237.110:626): avc: denied { setopt } for pid=11598 comm="syz.4.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 555.797298][T11604] netlink: 'syz.0.1402': attribute type 1 has an invalid length. [ 555.962545][T11604] netlink: 'syz.0.1402': attribute type 2 has an invalid length. [ 556.800651][T11627] Cannot find del_set index 1 as target [ 557.742991][ T30] audit: type=1400 audit(2000000239.470:627): avc: denied { append } for pid=11596 comm="syz.7.1399" name="cec0" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 558.123981][ T30] audit: type=1400 audit(2000000239.600:628): avc: denied { read } for pid=11640 comm="syz.8.1408" name="btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 558.235601][ T30] audit: type=1400 audit(2000000239.600:629): avc: denied { open } for pid=11640 comm="syz.8.1408" path="/dev/btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 558.352058][T11648] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1410'. [ 558.358863][T11653] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1412'. [ 559.699998][ T5823] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 559.767488][ T30] audit: type=1400 audit(2000000241.490:630): avc: denied { shutdown } for pid=11663 comm="syz.7.1414" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 559.829548][ T30] audit: type=1400 audit(2000000241.580:631): avc: denied { open } for pid=11666 comm="syz.8.1415" path="/dev/ptyr4" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 559.831908][T11673] pty pty36: ldisc open failed (-12), clearing slot 36 [ 559.853102][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.957727][ T5823] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 559.976283][ T5823] usb 1-1: config 0 has no interface number 0 [ 559.992265][ T5823] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 560.056365][ T5823] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 560.076609][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 560.119868][ T5823] usb 1-1: Product: syz [ 560.135205][ T5823] usb 1-1: SerialNumber: syz [ 560.176344][ T5823] usb 1-1: config 0 descriptor?? [ 560.196584][ T5823] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input18 [ 560.244957][T11685] Bluetooth: MGMT ver 1.23 [ 560.291605][ T30] audit: type=1400 audit(2000000242.050:632): avc: denied { bind } for pid=11681 comm="syz.8.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 560.711577][T11696] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input19 [ 560.828604][ T30] audit: type=1400 audit(2000000242.580:633): avc: denied { ioctl } for pid=5176 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=3013 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 560.853492][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.870676][ T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 560.965472][ T30] audit: type=1400 audit(2000000242.650:634): avc: denied { setopt } for pid=11649 comm="syz.4.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 561.126655][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 561.203995][ T10] usb 9-1: config 129 has an invalid interface number: 224 but max is 2 [ 561.215476][ T10] usb 9-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 561.251526][ T10] usb 9-1: config 129 has an invalid interface number: 179 but max is 2 [ 561.275585][T11664] Process accounting resumed [ 561.286284][ T10] usb 9-1: config 129 contains an unexpected descriptor of type 0x2, skipping [ 561.340167][T11704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=11704 comm=syz.1.1422 [ 561.358244][ T10] usb 9-1: config 129 contains an unexpected descriptor of type 0x2, skipping [ 561.388727][ T10] usb 9-1: config 129 has an invalid interface number: 118 but max is 2 [ 561.409965][ T10] usb 9-1: config 129 has no interface number 0 [ 561.428419][ T10] usb 9-1: config 129 has no interface number 1 [ 561.445442][ T10] usb 9-1: config 129 has no interface number 2 [ 561.463672][ T10] usb 9-1: config 129 interface 224 altsetting 206 has an invalid descriptor for endpoint zero, skipping [ 561.463711][T11707] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1423'. [ 561.509904][ T10] usb 9-1: config 129 interface 224 altsetting 206 endpoint 0x1 has invalid maxpacket 1040, setting to 64 [ 562.316637][ T42] usb 1-1: USB disconnect, device number 2 [ 562.357400][ T10] usb 9-1: config 129 interface 224 altsetting 206 endpoint 0x7 has invalid maxpacket 576, setting to 64 [ 562.379408][ T10] usb 9-1: config 129 interface 224 altsetting 206 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 562.400186][ T10] usb 9-1: config 129 interface 224 altsetting 206 has an invalid descriptor for endpoint zero, skipping [ 562.402287][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.411465][ T10] usb 9-1: config 129 interface 224 altsetting 206 has an invalid descriptor for endpoint zero, skipping [ 562.418663][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.430978][ T10] usb 9-1: config 129 interface 179 altsetting 2 has an invalid endpoint descriptor of length 5, skipping [ 562.446700][ T10] usb 9-1: config 129 interface 179 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 562.457751][ T10] usb 9-1: config 129 interface 179 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 562.469774][ T10] usb 9-1: config 129 interface 179 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 562.486863][ T30] audit: type=1400 audit(2000000244.240:635): avc: denied { append } for pid=11710 comm="syz.1.1424" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 562.507303][ T10] usb 9-1: config 129 interface 179 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 562.619319][T11658] infiniband syz!: set active [ 562.624181][T11658] infiniband syz!: added team_slave_0 [ 562.633839][T11658] syz!: rxe_create_cq: returned err = -12 [ 562.645015][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1425'. [ 562.654217][T11658] infiniband syz!: Couldn't create ib_mad CQ [ 562.685415][ T10] usb 9-1: config 129 interface 224 has no altsetting 0 [ 562.691016][T11714] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1425'. [ 562.713488][T11658] infiniband syz!: Couldn't open port 1 [ 562.822806][T11717] loop6: detected capacity change from 0 to 7 [ 562.833398][T11717] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.841913][T11717] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.849958][T11717] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.858126][T11717] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.866718][T11717] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.875889][T11717] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.884750][T11717] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.892878][T11717] ldm_validate_partition_table(): Disk read failed. [ 562.899684][T11717] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.907958][T11717] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.916195][T11717] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.924688][T11717] Dev loop6: unable to read RDB block 0 [ 562.931178][T11717] loop6: unable to read partition table [ 562.937550][T11717] loop6: partition table beyond EOD, truncated [ 562.943797][T11717] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 562.943797][T11717] ) failed (rc=-5) [ 563.070031][ T10] usb 9-1: config 129 interface 179 has no altsetting 0 [ 563.078055][ T10] usb 9-1: config 129 interface 118 has no altsetting 0 [ 563.093881][ T10] usb 9-1: New USB device found, idVendor=2001, idProduct=3701, bcdDevice=46.f1 [ 563.093930][ T30] audit: type=1326 audit(2000000244.540:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d18f8e929 code=0x7ffc0000 [ 563.119874][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.149415][ T30] audit: type=1326 audit(2000000244.540:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d18f8e929 code=0x7ffc0000 [ 563.179538][ T30] audit: type=1326 audit(2000000244.550:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f1d18f8e929 code=0x7ffc0000 [ 563.204486][T11658] RDS/IB: syz!: added [ 563.209169][T11658] smc: adding ib device syz! with port count 1 [ 563.211514][ T30] audit: type=1326 audit(2000000244.550:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d18f8e929 code=0x7ffc0000 [ 563.229944][ T10] usb 9-1: Product: syz [ 563.263759][T11658] smc: ib device syz! port 1 has pnetid [ 563.299923][ T10] usb 9-1: Manufacturer: Ь [ 563.304879][ T10] usb 9-1: SerialNumber: syz [ 563.366458][ T30] audit: type=1326 audit(2000000244.550:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d18f8e929 code=0x7ffc0000 [ 564.308787][ T30] audit: type=1326 audit(2000000244.550:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f1d18f8e929 code=0x7ffc0000 [ 564.308837][ T30] audit: type=1326 audit(2000000244.550:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d18f8e929 code=0x7ffc0000 [ 564.421843][ T10] usb 9-1: USB disconnect, device number 8 [ 564.470554][T11741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1431'. [ 565.523509][T11746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1431'. [ 565.871928][ T5141] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 566.537960][T11752] usb usb8: usbfs: process 11752 (syz.8.1434) did not claim interface 0 before use [ 567.270279][T11764] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1435'. [ 567.650247][T11767] net_ratelimit: 8042 callbacks suppressed [ 567.650265][T11767] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 567.662917][T11767] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 567.970069][ T42] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 568.956286][ T42] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 568.964768][ T42] usb 9-1: config 0 has no interface number 0 [ 568.970935][ T42] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 8 [ 569.003496][ T42] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 569.044724][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.068020][ T42] usb 9-1: config 0 descriptor?? [ 569.107125][T11765] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 569.346492][ T42] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 569.390191][ T42] usb 9-1: USB disconnect, device number 9 [ 570.237975][ T5929] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 571.081266][ T5929] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 571.093456][ T5929] usb 1-1: config 0 has no interface number 0 [ 571.107994][ T5929] usb 1-1: New USB device found, idVendor=2639, idProduct=0012, bcdDevice=65.b5 [ 571.120963][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.140347][ T5929] usb 1-1: Product: syz [ 571.158663][ T5929] usb 1-1: Manufacturer: syz [ 571.185876][ T5929] usb 1-1: SerialNumber: syz [ 571.237359][ T5929] usb 1-1: config 0 descriptor?? [ 571.293796][ T5929] xsens_mt 1-1:0.1: xsens_mt converter detected [ 571.363600][ T5929] usb 1-1: xsens_mt converter now attached to ttyUSB0 [ 571.424542][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 571.424557][ T30] audit: type=1400 audit(2000000253.180:678): avc: denied { append } for pid=11821 comm="syz.1.1446" name="sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 571.454852][T11822] FAULT_INJECTION: forcing a failure. [ 571.454852][T11822] name failslab, interval 1, probability 0, space 0, times 0 [ 571.470600][T11822] CPU: 1 UID: 0 PID: 11822 Comm: syz.1.1446 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 571.470624][T11822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.470634][T11822] Call Trace: [ 571.470640][T11822] [ 571.470647][T11822] dump_stack_lvl+0x16c/0x1f0 [ 571.470677][T11822] should_fail_ex+0x512/0x640 [ 571.470698][T11822] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 571.470723][T11822] should_failslab+0xc2/0x120 [ 571.470747][T11822] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 571.470768][T11822] ? getname_flags.part.0+0x4c/0x550 [ 571.470788][T11822] getname_flags.part.0+0x4c/0x550 [ 571.470822][T11822] getname_flags+0x93/0xf0 [ 571.470842][T11822] do_sys_openat2+0xb8/0x1d0 [ 571.470859][T11822] ? __pfx_do_sys_openat2+0x10/0x10 [ 571.470878][T11822] ? __fget_files+0x20e/0x3c0 [ 571.470906][T11822] __x64_sys_openat+0x174/0x210 [ 571.470921][T11822] ? __pfx___x64_sys_openat+0x10/0x10 [ 571.470936][T11822] ? ksys_write+0x1ac/0x250 [ 571.470965][T11822] do_syscall_64+0xcd/0x4c0 [ 571.470993][T11822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.471011][T11822] RIP: 0033:0x7f1d18f8d290 [ 571.471026][T11822] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 571.471042][T11822] RSP: 002b:00007f1d19edfb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 571.471059][T11822] RAX: ffffffffffffffda RBX: 0000000000109101 RCX: 00007f1d18f8d290 [ 571.471070][T11822] RDX: 0000000000109101 RSI: 00007f1d19edfc10 RDI: 00000000ffffff9c [ 571.471080][T11822] RBP: 00007f1d19edfc10 R08: 0000000000000000 R09: 002367732f766564 [ 571.471091][T11822] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 571.471101][T11822] R13: 0000000000000000 R14: 00007f1d191b5fa0 R15: 00007ffe39780a28 [ 571.471124][T11822] [ 571.697806][T11797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.706765][T11797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.757997][ T10] usb 1-1: USB disconnect, device number 3 [ 571.792068][ T10] xsens_mt ttyUSB0: xsens_mt converter now disconnected from ttyUSB0 [ 571.876363][T11826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=11826 comm=syz.1.1447 [ 571.929428][ T10] xsens_mt 1-1:0.1: device disconnected [ 573.940901][T11859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=11859 comm=syz.8.1454 [ 576.275530][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 576.300242][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 576.309193][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 576.347653][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 576.367325][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 576.420116][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'. [ 576.479078][T11878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1458'. [ 576.682228][ T3474] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.908933][ T3474] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.532511][ T3474] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.892425][T11901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.977187][ T30] audit: type=1400 audit(2000000259.730:679): avc: denied { bind } for pid=11898 comm="syz.0.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 578.182286][T11901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.349581][ T3474] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.390245][ T5819] Bluetooth: hci3: command tx timeout [ 578.444514][ T30] audit: type=1326 audit(2000000260.200:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b58e929 code=0x7ffc0000 [ 578.514693][T11911] netlink: 'syz.1.1463': attribute type 13 has an invalid length. [ 578.519895][ T30] audit: type=1326 audit(2000000260.230:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b58e929 code=0x7ffc0000 [ 578.614685][ T30] audit: type=1326 audit(2000000260.230:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f217b58e929 code=0x7ffc0000 [ 578.866826][ T30] audit: type=1326 audit(2000000260.270:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b58e929 code=0x7ffc0000 [ 578.969584][T11911] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.977262][T11911] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.129696][ T30] audit: type=1326 audit(2000000260.270:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f217b58e929 code=0x7ffc0000 [ 580.169004][ T30] audit: type=1326 audit(2000000260.270:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b58e929 code=0x7ffc0000 [ 580.194210][ T30] audit: type=1326 audit(2000000260.270:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f217b58e929 code=0x7ffc0000 [ 580.218238][ T30] audit: type=1326 audit(2000000260.270:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217b58e929 code=0x7ffc0000 [ 580.242391][ T30] audit: type=1326 audit(2000000260.280:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f217b58e929 code=0x7ffc0000 [ 580.470238][ T5819] Bluetooth: hci3: command tx timeout [ 580.612461][T11911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.677196][T11911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.908854][T11911] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.926668][T11911] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.937885][T11911] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.955618][T11911] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.736799][T11954] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1470'. [ 582.006500][ T3474] bridge_slave_1: left allmulticast mode [ 582.014199][ T3474] bridge_slave_1: left promiscuous mode [ 582.022427][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.036880][ T3474] bridge_slave_0: left allmulticast mode [ 582.042887][ T3474] bridge_slave_0: left promiscuous mode [ 582.048669][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.550121][ T5819] Bluetooth: hci3: command tx timeout [ 583.465773][T11969] ptrace attach of "./syz-executor exec"[10462] was attempted by "./syz-executor exec"[11969] [ 584.649921][ T5819] Bluetooth: hci3: command tx timeout [ 584.727473][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.738363][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.750681][ T3474] bond0 (unregistering): Released all slaves [ 584.795585][T11995] syz_tun: entered allmulticast mode [ 585.153126][T12006] nfs: Bad value for 'source' [ 585.185921][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 585.185936][ T30] audit: type=1400 audit(2000000266.900:692): avc: denied { getopt } for pid=12005 comm="syz.7.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 585.549403][ T30] audit: type=1400 audit(2000000266.910:693): avc: denied { mounton } for pid=12005 comm="syz.7.1478" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 585.981164][T12021] usb usb8: usbfs: process 12021 (syz.7.1480) did not claim interface 0 before use [ 586.336112][T11872] chnl_net:caif_netlink_parms(): no params data found [ 586.597019][T12026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=12026 comm=syz.7.1482 [ 586.935750][T11872] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.133978][T11872] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.162630][T11872] bridge_slave_0: entered allmulticast mode [ 587.181343][T11872] bridge_slave_0: entered promiscuous mode [ 587.834478][T11872] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.842216][T11872] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.883762][T11872] bridge_slave_1: entered allmulticast mode [ 587.911279][T11872] bridge_slave_1: entered promiscuous mode [ 587.926286][ T3474] hsr_slave_0: left promiscuous mode [ 587.982630][ T3474] hsr_slave_1: left promiscuous mode [ 587.988586][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.997343][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.067375][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.085115][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.316687][ T3474] veth1_macvtap: left promiscuous mode [ 588.330177][ T3474] veth0_macvtap: left promiscuous mode [ 588.335805][ T3474] veth1_vlan: left promiscuous mode [ 589.403305][ T3474] veth0_vlan: left promiscuous mode [ 590.321924][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 590.636838][ T30] audit: type=1400 audit(2000000272.380:694): avc: denied { watch_sb watch_reads } for pid=12067 comm="syz.8.1490" path="/72/file1" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 590.966635][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 591.000579][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 591.021375][ T6718] smc: removing ib device syz! [ 591.029005][T10451] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 591.202826][T10451] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.218964][T10451] usb 9-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 591.228621][T10451] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.243323][T10451] usb 9-1: Product: syz [ 591.247533][T10451] usb 9-1: Manufacturer: syz [ 591.254358][T10451] usb 9-1: SerialNumber: syz [ 591.264291][T10451] usb 9-1: config 0 descriptor?? [ 591.277852][T10451] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 591.296366][T10451] dvb-usb: bulk message failed: -22 (3/0) [ 591.327276][T10451] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 591.336818][T10451] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 591.357994][T10451] usb 9-1: media controller created [ 591.370337][T10451] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 591.389654][T10451] dvb-usb: bulk message failed: -22 (6/0) [ 591.396882][T10451] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 591.417500][T10451] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input20 [ 591.438068][T10451] dvb-usb: schedule remote query interval to 150 msecs. [ 591.446727][T10451] dvb-usb: bulk message failed: -22 (3/0) [ 591.549945][T10451] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 591.601681][T12073] dvb-usb: bulk message failed: -22 (1/0) [ 591.607565][T12073] dvb-usb: error while querying for an remote control event. [ 591.693065][T11872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.777494][T11872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.791149][T12073] dvb-usb: bulk message failed: -22 (1/0) [ 591.804325][T12073] dvb-usb: error while querying for an remote control event. [ 591.814763][T12068] dvb-usb: bulk message failed: -22 (2/0) [ 591.827177][T12068] SELinux: syz.8.1490 (12068) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 592.049971][ T5929] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 592.254372][T12073] dvb-usb: bulk message failed: -22 (1/0) [ 592.359987][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 592.372504][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.384266][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.394982][ T5929] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 592.405450][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.459201][T12073] dvb-usb: error while querying for an remote control event. [ 592.591356][T12073] usb 9-1: USB disconnect, device number 10 [ 592.594914][ T5929] usb 2-1: config 0 descriptor?? [ 592.605552][ T30] audit: type=1400 audit(2000000274.360:695): avc: denied { write } for pid=12082 comm="syz.7.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 592.641035][T10451] dvb-usb: bulk message failed: -22 (1/0) [ 592.646891][T10451] dvb-usb: error while querying for an remote control event. [ 592.876455][ T5929] hub 2-1:0.0: USB hub found [ 592.891431][ T5929] hub 2-1:0.0: 1 port detected [ 592.954764][T12073] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 593.369739][T11872] team0: Port device team_slave_0 added [ 593.409589][T11872] team0: Port device team_slave_1 added [ 593.625699][ T5929] hub 2-1:0.0: activate --> -90 [ 593.707379][T11872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.727564][T11872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.775124][T11872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.835153][T11872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.899921][T11872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.015861][T11872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.033031][T12073] usb 2-1: USB disconnect, device number 6 [ 594.068896][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1500'. [ 594.457083][T12136] FAULT_INJECTION: forcing a failure. [ 594.457083][T12136] name failslab, interval 1, probability 0, space 0, times 0 [ 594.470263][ T30] audit: type=1400 audit(2000000276.210:696): avc: denied { read write } for pid=12115 comm="syz.0.1499" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 594.499555][T12136] CPU: 0 UID: 0 PID: 12136 Comm: syz.8.1501 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 594.499578][T12136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 594.499587][T12136] Call Trace: [ 594.499592][T12136] [ 594.499598][T12136] dump_stack_lvl+0x16c/0x1f0 [ 594.499625][T12136] should_fail_ex+0x512/0x640 [ 594.499648][T12136] should_failslab+0xc2/0x120 [ 594.499671][T12136] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 594.499690][T12136] ? skb_clone+0x190/0x3f0 [ 594.499715][T12136] skb_clone+0x190/0x3f0 [ 594.499737][T12136] netlink_deliver_tap+0xabd/0xd30 [ 594.499762][T12136] netlink_unicast+0x6b2/0x7f0 [ 594.499781][T12136] ? __pfx_netlink_unicast+0x10/0x10 [ 594.499803][T12136] netlink_ack+0x696/0xb80 [ 594.499830][T12136] netlink_rcv_skb+0x332/0x420 [ 594.499848][T12136] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 594.499871][T12136] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 594.499902][T12136] ? ns_capable+0xd7/0x110 [ 594.499924][T12136] nfnetlink_rcv+0x1b3/0x430 [ 594.499946][T12136] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 594.499966][T12136] ? netlink_deliver_tap+0x1ae/0xd30 [ 594.499987][T12136] netlink_unicast+0x53d/0x7f0 [ 594.500006][T12136] ? __pfx_netlink_unicast+0x10/0x10 [ 594.500031][T12136] netlink_sendmsg+0x8d1/0xdd0 [ 594.500051][T12136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.500077][T12136] ____sys_sendmsg+0xa95/0xc70 [ 594.500097][T12136] ? copy_msghdr_from_user+0x10a/0x160 [ 594.500121][T12136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 594.500149][T12136] ___sys_sendmsg+0x134/0x1d0 [ 594.500172][T12136] ? __pfx____sys_sendmsg+0x10/0x10 [ 594.500194][T12136] ? __lock_acquire+0x622/0x1c90 [ 594.500244][T12136] __sys_sendmsg+0x16d/0x220 [ 594.500269][T12136] ? __pfx___sys_sendmsg+0x10/0x10 [ 594.500309][T12136] do_syscall_64+0xcd/0x4c0 [ 594.500338][T12136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.500356][T12136] RIP: 0033:0x7f217b58e929 [ 594.500370][T12136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.500386][T12136] RSP: 002b:00007f217c3a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.500403][T12136] RAX: ffffffffffffffda RBX: 00007f217b7b5fa0 RCX: 00007f217b58e929 [ 594.500415][T12136] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000004 [ 594.500426][T12136] RBP: 00007f217c3a4090 R08: 0000000000000000 R09: 0000000000000000 [ 594.500436][T12136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.500445][T12136] R13: 0000000000000000 R14: 00007f217b7b5fa0 R15: 00007ffe68b3d758 [ 594.500467][T12136] [ 594.534640][T11872] hsr_slave_0: entered promiscuous mode [ 594.538635][ T30] audit: type=1400 audit(2000000276.210:697): avc: denied { open } for pid=12115 comm="syz.0.1499" path="/31/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 594.668957][T11872] hsr_slave_1: entered promiscuous mode [ 595.162211][ T944] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 595.314303][ T944] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 595.314396][ T944] usb 9-1: config 0 interface 0 has no altsetting 0 [ 595.314562][ T944] usb 9-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 595.314625][ T944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.338162][ T944] usb 9-1: config 0 descriptor?? [ 595.339945][T12144] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 595.834534][ T30] audit: type=1400 audit(2000000277.590:698): avc: denied { bind } for pid=12154 comm="syz.7.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 595.899886][ T30] audit: type=1400 audit(2000000277.590:699): avc: denied { name_bind } for pid=12154 comm="syz.7.1506" src=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 595.929223][ T30] audit: type=1400 audit(2000000277.590:700): avc: denied { node_bind } for pid=12154 comm="syz.7.1506" src=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 596.619760][T12158] bridge0: port 3(vlan2) entered blocking state [ 596.626190][T12158] bridge0: port 3(vlan2) entered disabled state [ 596.632875][T12158] vlan2: entered allmulticast mode [ 596.638017][T12158] bridge0: entered allmulticast mode [ 596.645618][T12158] vlan2: left allmulticast mode [ 596.650572][T12158] bridge0: left allmulticast mode [ 596.841806][ T30] audit: type=1400 audit(2000000278.600:701): avc: denied { unmount } for pid=11004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 598.360791][ T944] usbhid 9-1:0.0: can't add hid device: -71 [ 598.367518][ T944] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 598.497047][ T944] usb 9-1: USB disconnect, device number 11 [ 598.983769][T11872] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 598.994232][T11872] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 599.016108][T11872] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 599.034886][T11872] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 599.124845][T11872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.148720][T11872] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.172387][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.179520][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.205481][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.212608][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.229433][T11872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 599.242238][T11872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 599.359280][T11872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.370093][T10451] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 599.430899][ T5887] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 599.522299][T10451] usb 9-1: Using ep0 maxpacket: 32 [ 599.532468][T10451] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 599.548257][T10451] usb 9-1: config 0 has no interface number 0 [ 599.580950][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 599.605001][T10451] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.648649][ T5887] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 599.665039][T11872] veth0_vlan: entered promiscuous mode [ 599.675689][ T5887] usb 2-1: config 0 has no interface number 0 [ 599.683122][T10451] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.695425][ T5887] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.706311][T11872] veth1_vlan: entered promiscuous mode [ 599.712345][T10451] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 599.723659][T10451] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.732309][ T5887] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.751249][ T5887] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 599.761053][T10451] usb 9-1: config 0 descriptor?? [ 599.784790][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.804330][T11872] veth0_macvtap: entered promiscuous mode [ 599.818633][ T5887] usb 2-1: config 0 descriptor?? [ 599.840229][T11872] veth1_macvtap: entered promiscuous mode [ 599.906647][T11872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.920887][T11872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.957983][T11872] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.973845][T11872] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.988043][T11872] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.993767][T12197] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1514'. [ 599.997837][T11872] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.434800][T10451] uclogic 0003:28BD:0094.0009: pen parameters not found [ 600.453414][T10451] uclogic 0003:28BD:0094.0009: interface is invalid, ignoring [ 600.467403][ T5887] uclogic 0003:28BD:0094.000A: pen parameters not found [ 600.484186][ T5887] uclogic 0003:28BD:0094.000A: interface is invalid, ignoring [ 600.528622][ T6718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.528832][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.560188][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.581283][ T6718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.656517][ T944] usb 9-1: USB disconnect, device number 12 [ 600.699105][ T5887] usb 2-1: USB disconnect, device number 7 [ 600.810148][ T5929] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 602.092388][ T5929] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 602.141224][ T5929] usb 1-1: config 0 has no interface number 0 [ 602.229676][ T5929] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 604.809326][ T5929] usb 1-1: string descriptor 0 read error: -71 [ 604.846451][ T5929] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 604.983702][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 605.018382][ T5929] usb 1-1: config 0 descriptor?? [ 605.040487][ T5929] usb 1-1: can't set config #0, error -71 [ 605.048006][ T5929] usb 1-1: USB disconnect, device number 4 [ 605.885286][T10632] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 605.941236][ T30] audit: type=1400 audit(2000000287.700:702): avc: denied { execute } for pid=12238 comm="syz.8.1525" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 606.276083][T10632] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 606.462351][T10632] usb 2-1: config 0 interface 0 has no altsetting 0 [ 606.490576][ T42] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 606.534191][T10632] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 606.643750][T10632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.660163][ T42] usb 9-1: Using ep0 maxpacket: 8 [ 606.995434][ T42] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.123893][T10632] usb 2-1: config 0 descriptor?? [ 607.158661][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 607.212781][T12231] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 607.338657][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 607.759259][ T42] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 607.782012][ T30] audit: type=1400 audit(2000000287.880:703): avc: denied { read } for pid=12238 comm="syz.8.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 607.820912][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.849155][ T42] usb 9-1: Product: syz [ 607.870226][ T42] usb 9-1: Manufacturer: syz [ 607.875592][ T42] usb 9-1: SerialNumber: syz [ 608.017153][ T42] usb 9-1: config 0 descriptor?? [ 608.039619][T12247] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 608.090047][T12073] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 608.279904][T12073] usb 7-1: Using ep0 maxpacket: 32 [ 608.318236][T12073] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 608.374888][T12073] usb 7-1: config 0 has no interface number 0 [ 608.395132][T12073] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.435290][T12073] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.448985][T12073] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 608.461866][T12073] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.479774][T12073] usb 7-1: config 0 descriptor?? [ 609.424322][ T42] usb 9-1: USB disconnect, device number 13 [ 609.430390][T12073] uclogic 0003:28BD:0094.000B: pen parameters not found [ 609.430414][T12073] uclogic 0003:28BD:0094.000B: interface is invalid, ignoring [ 609.790324][T10453] usb 7-1: USB disconnect, device number 2 [ 610.458640][T10632] usbhid 2-1:0.0: can't add hid device: -71 [ 610.504530][T10632] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 610.574267][ T30] audit: type=1400 audit(2000000292.270:704): avc: denied { write } for pid=12271 comm="syz.8.1535" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 610.729918][T10632] usb 2-1: USB disconnect, device number 8 [ 611.037772][T12284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1538'. [ 611.050623][ T30] audit: type=1400 audit(2000000292.810:705): avc: denied { getopt } for pid=12283 comm="syz.1.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 611.070255][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.117188][ T30] audit: type=1400 audit(2000000292.840:706): avc: denied { append } for pid=12283 comm="syz.1.1538" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 611.141649][ T30] audit: type=1400 audit(2000000292.840:707): avc: denied { ioctl } for pid=12283 comm="syz.1.1538" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 611.180389][T12279] block nbd0: server does not support multiple connections per device. [ 611.209456][T12279] block nbd0: shutting down sockets [ 611.324715][T12292] 9pnet_fd: Insufficient options for proto=fd [ 611.427472][T12296] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1542'. [ 611.496372][T12300] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1543'. [ 611.510085][ T944] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 611.673594][ T944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.685194][ T944] usb 7-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 611.695171][ T944] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.730612][ T944] usb 7-1: config 0 descriptor?? [ 612.168678][ T944] lenovo 0003:17EF:60A3.000C: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.6-1/input0 [ 612.545323][ T944] usb 7-1: USB disconnect, device number 3 [ 614.637384][T12310] fido_id[12310]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 614.742953][ T30] audit: type=1400 audit(2000000296.490:708): avc: denied { append } for pid=12322 comm="syz.0.1549" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 614.820918][ T30] audit: type=1400 audit(2000000296.490:709): avc: denied { ioctl } for pid=12322 comm="syz.0.1549" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 614.847200][ T30] audit: type=1400 audit(2000000296.540:710): avc: denied { setattr } for pid=12322 comm="syz.0.1549" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 614.870224][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.202989][T12331] FAULT_INJECTION: forcing a failure. [ 615.202989][T12331] name failslab, interval 1, probability 0, space 0, times 0 [ 615.215982][T12331] CPU: 1 UID: 0 PID: 12331 Comm: syz.8.1550 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 615.216008][T12331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 615.216018][T12331] Call Trace: [ 615.216025][T12331] [ 615.216033][T12331] dump_stack_lvl+0x16c/0x1f0 [ 615.216063][T12331] should_fail_ex+0x512/0x640 [ 615.216086][T12331] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 615.216109][T12331] should_failslab+0xc2/0x120 [ 615.216133][T12331] __kmalloc_cache_noprof+0x6a/0x3e0 [ 615.216153][T12331] ? do_blk_trace_setup+0x23c/0xb50 [ 615.216180][T12331] do_blk_trace_setup+0x23c/0xb50 [ 615.216207][T12331] blk_trace_setup+0xed/0x1b0 [ 615.216231][T12331] ? __pfx_blk_trace_setup+0x10/0x10 [ 615.216253][T12331] ? __pfx_snprintf+0x10/0x10 [ 615.216291][T12331] blk_trace_ioctl+0x146/0x280 [ 615.216315][T12331] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 615.216350][T12331] ? hook_file_ioctl_common+0x145/0x410 [ 615.216382][T12331] blkdev_ioctl+0x108/0x6d0 [ 615.216402][T12331] ? __pfx_blkdev_ioctl+0x10/0x10 [ 615.216419][T12331] ? selinux_file_ioctl+0x180/0x270 [ 615.216442][T12331] ? selinux_file_ioctl+0xb4/0x270 [ 615.216467][T12331] ? __pfx_blkdev_ioctl+0x10/0x10 [ 615.216486][T12331] __x64_sys_ioctl+0x18b/0x210 [ 615.216508][T12331] do_syscall_64+0xcd/0x4c0 [ 615.216536][T12331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.216555][T12331] RIP: 0033:0x7f217b58e929 [ 615.216569][T12331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.216585][T12331] RSP: 002b:00007f217c362038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 615.216602][T12331] RAX: ffffffffffffffda RBX: 00007f217b7b6160 RCX: 00007f217b58e929 [ 615.216614][T12331] RDX: 0000200000000000 RSI: 00000000c0481273 RDI: 0000000000000007 [ 615.216625][T12331] RBP: 00007f217c362090 R08: 0000000000000000 R09: 0000000000000000 [ 615.216635][T12331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.216646][T12331] R13: 0000000000000000 R14: 00007f217b7b6160 R15: 00007ffe68b3d758 [ 615.216670][T12331] [ 615.427884][ C1] vkms_vblank_simulate: vblank timer overrun [ 616.167929][T12333] sctp: [Deprecated]: syz.6.1551 (pid 12333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.167929][T12333] Use struct sctp_sack_info instead [ 616.989993][T10451] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 617.030779][ T30] audit: type=1400 audit(2000000298.710:711): avc: denied { read write } for pid=12339 comm="syz.6.1555" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 617.279956][ T30] audit: type=1400 audit(2000000298.710:712): avc: denied { open } for pid=12339 comm="syz.6.1555" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 617.304429][ C1] vkms_vblank_simulate: vblank timer overrun [ 617.459399][T12351] 9pnet_fd: Insufficient options for proto=fd [ 618.055002][T10451] usb 9-1: config 0 has an invalid interface number: 120 but max is 0 [ 618.082539][T10451] usb 9-1: config 0 has no interface number 0 [ 618.108455][T10451] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 618.154158][T10451] usb 9-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 618.198430][T10451] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 618.210438][T10451] usb 9-1: Product: syz [ 618.214620][T10451] usb 9-1: SerialNumber: syz [ 618.226496][T10451] usb 9-1: config 0 descriptor?? [ 618.277589][T10451] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.120/input/input21 [ 619.270622][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1561'. [ 619.440154][ T30] audit: type=1400 audit(2000000301.170:713): avc: denied { setopt } for pid=12370 comm="syz.0.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 620.219981][T10451] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 620.813671][T10451] usb 1-1: Using ep0 maxpacket: 16 [ 620.828568][T10451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.882515][T10451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.900140][T10451] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 620.909459][T10451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.878357][T10451] usb 1-1: config 0 descriptor?? [ 621.942837][T10632] usb 9-1: USB disconnect, device number 14 [ 622.414828][T10451] corsair 0003:1B1C:1B02.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 622.455348][T12405] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1573'. [ 622.537557][T10451] corsair 0003:1B1C:1B02.000D: Read invalid backlight brightness: a7. [ 622.890078][T10632] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 622.929628][T12416] 9pnet_fd: Insufficient options for proto=fd [ 623.001910][ T30] audit: type=1400 audit(2000000304.760:714): avc: denied { getopt } for pid=12419 comm="syz.1.1577" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 623.082134][T10632] usb 7-1: config index 0 descriptor too short (expected 62756, got 36) [ 623.090971][T10632] usb 7-1: config 130 has too many interfaces: 128, using maximum allowed: 32 [ 623.101905][T10632] usb 7-1: config 130 has an invalid descriptor of length 177, skipping remainder of the config [ 623.112998][T10632] usb 7-1: config 130 has 0 interfaces, different from the descriptor's value: 128 [ 623.122843][T10632] usb 7-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 623.132146][T10632] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.645180][T12409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.654061][T12409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.669126][T10632] usb 7-1: string descriptor 0 read error: -71 [ 623.696683][T10632] usb 7-1: USB disconnect, device number 4 [ 623.787387][T10451] usb 1-1: USB disconnect, device number 5 [ 623.837188][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.843848][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.967926][T12427] IPv6: syztnl0: Disabled Multicast RS [ 624.009547][T12427] 9pnet_fd: Insufficient options for proto=fd [ 624.174382][T12432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1580'. [ 624.642247][T10451] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 625.033011][T10451] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 625.160759][T12442] FAULT_INJECTION: forcing a failure. [ 625.160759][T12442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.174000][T12442] CPU: 1 UID: 0 PID: 12442 Comm: syz.6.1584 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 625.174025][T12442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 625.174035][T12442] Call Trace: [ 625.174041][T12442] [ 625.174047][T12442] dump_stack_lvl+0x16c/0x1f0 [ 625.174079][T12442] should_fail_ex+0x512/0x640 [ 625.174107][T12442] _copy_from_user+0x2e/0xd0 [ 625.174133][T12442] do_sock_getsockopt+0x5f4/0x800 [ 625.174155][T12442] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 625.174172][T12442] ? __fget_files+0x204/0x3c0 [ 625.174210][T12442] __sys_getsockopt+0x12f/0x260 [ 625.174239][T12442] __x64_sys_getsockopt+0xbd/0x160 [ 625.174263][T12442] ? do_syscall_64+0x91/0x4c0 [ 625.174287][T12442] ? lockdep_hardirqs_on+0x7c/0x110 [ 625.174312][T12442] do_syscall_64+0xcd/0x4c0 [ 625.174340][T12442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.174357][T12442] RIP: 0033:0x7f018b38e929 [ 625.174371][T12442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.174387][T12442] RSP: 002b:00007f018c25e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 625.174404][T12442] RAX: ffffffffffffffda RBX: 00007f018b5b5fa0 RCX: 00007f018b38e929 [ 625.174415][T12442] RDX: 0000000000000014 RSI: 0000000000000006 RDI: 0000000000000003 [ 625.174425][T12442] RBP: 00007f018c25e090 R08: 0000200000000180 R09: 0000000000000000 [ 625.174436][T12442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.174446][T12442] R13: 0000000000000000 R14: 00007f018b5b5fa0 R15: 00007ffef86d21f8 [ 625.174468][T12442] [ 625.374466][T10451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.400688][T10451] usb 1-1: config 0 descriptor?? [ 625.743376][T10453] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 625.756235][T10451] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 626.012056][ T30] audit: type=1400 audit(2000000307.590:715): avc: denied { read } for pid=12443 comm="syz.8.1585" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 626.019913][T10453] usb 2-1: Using ep0 maxpacket: 8 [ 626.041532][T10453] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 626.056806][T10453] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 626.068943][T10453] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 626.081077][T10453] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 626.092456][T10453] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 626.105637][T10453] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 626.108878][ T30] audit: type=1400 audit(2000000307.590:716): avc: denied { open } for pid=12443 comm="syz.8.1585" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 626.141371][T10453] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 626.169179][ T30] audit: type=1400 audit(2000000307.600:717): avc: denied { firmware_load } for pid=36 comm="kworker/u8:2" path="/lib/firmware/regulatory.db.p7s" dev="sda1" ino=449 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 626.194197][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.234533][T10453] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 626.263182][T10453] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 626.274693][T10453] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 626.302581][T10453] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 626.311822][T10453] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 626.323739][T12448] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 626.325171][T10453] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 626.330204][T12448] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 626.345510][T10453] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 626.363437][T12448] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 626.365757][T10453] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 626.369665][T12448] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 626.382791][T12457] fuse: Bad value for 'fd' [ 626.395219][T12448] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 626.404547][T10453] usb 2-1: string descriptor 0 read error: -22 [ 626.405089][T12448] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 626.412294][T10453] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 626.416969][T12448] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 626.434765][T12448] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 626.440439][T10453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.451576][T12448] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 626.457650][T12448] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 626.470364][T12448] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 626.477364][T12448] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 626.484307][T12448] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 626.491946][T12448] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 626.568906][T12425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.577805][T12425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.656165][T10453] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 626.856918][T10451] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 626.870747][T10451] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 626.910638][T10451] asix 1-1:0.0: probe with driver asix failed with error -71 [ 626.926882][T10451] usb 1-1: USB disconnect, device number 6 [ 626.936539][ T30] audit: type=1400 audit(2000000308.690:718): avc: denied { write } for pid=12444 comm="syz.1.1586" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 626.960331][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.976436][T12073] usb 2-1: USB disconnect, device number 9 [ 627.028922][T12468] 9pnet_fd: Insufficient options for proto=fd [ 627.051878][T12464] netlink: 'syz.6.1591': attribute type 11 has an invalid length. [ 628.046904][T12480] netlink: 'syz.1.1596': attribute type 5 has an invalid length. [ 628.350516][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 628.389915][ T5141] Bluetooth: hci5: command 0x0c1a tx timeout [ 628.444171][ T30] audit: type=1400 audit(2000000310.180:719): avc: denied { relabelfrom } for pid=12482 comm="syz.1.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 628.466551][ T30] audit: type=1400 audit(2000000310.180:720): avc: denied { relabelto } for pid=12482 comm="syz.1.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 628.486983][ T5819] Bluetooth: hci1: command 0x0c1a tx timeout [ 628.486994][ T5141] Bluetooth: hci6: command 0x0c1a tx timeout [ 628.558863][ T5141] Bluetooth: hci3: command 0x0c1a tx timeout [ 629.185293][ T30] audit: type=1400 audit(2000000310.940:721): avc: denied { map } for pid=12502 comm="syz.6.1604" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 629.208837][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.253953][ T30] audit: type=1400 audit(2000000310.940:722): avc: denied { execute } for pid=12502 comm="syz.6.1604" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 629.277859][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.315933][ T30] audit: type=1400 audit(2000000311.070:723): avc: denied { ioctl } for pid=12506 comm="syz.6.1605" path="socket:[35638]" dev="sockfs" ino=35638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 629.341325][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.593530][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1607'. [ 629.607021][ T30] audit: type=1400 audit(2000000311.350:724): avc: denied { setopt } for pid=12511 comm="syz.8.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 629.725193][T12516] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1607'. [ 630.251183][T12522] 9pnet_fd: Insufficient options for proto=fd [ 630.471474][ T5141] Bluetooth: hci5: command 0x0c1a tx timeout [ 630.482866][ T5141] Bluetooth: hci0: command 0x0406 tx timeout [ 630.555598][ T5141] Bluetooth: hci6: command 0x0c1a tx timeout [ 630.561896][ T5141] Bluetooth: hci1: command 0x0c1a tx timeout [ 630.630859][ T5141] Bluetooth: hci3: command 0x0c1a tx timeout [ 631.387558][T12515] dummy0: entered promiscuous mode [ 631.423559][T12528] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1611'. [ 631.579708][T12533] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 631.591665][T12533] VFS: Can't find a romfs filesystem on dev nullb0. [ 631.591665][T12533] [ 631.754000][T12533] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 631.810832][T10453] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 631.936682][T12545] netlink: 'syz.6.1617': attribute type 15 has an invalid length. [ 631.950486][T12545] netlink: 666 bytes leftover after parsing attributes in process `syz.6.1617'. [ 631.990710][T10453] usb 1-1: Using ep0 maxpacket: 8 [ 632.003599][T10453] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 632.004403][T12539] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1616'. [ 632.018919][T10453] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 632.050644][T10453] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 632.070912][T10453] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 632.097838][T10453] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 632.122169][T10453] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 632.136246][T10453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.164134][T10453] usb 1-1: Product: syz [ 632.188468][T10453] usb 1-1: Manufacturer: syz [ 632.203779][T10453] usb 1-1: SerialNumber: syz [ 632.218603][T12552] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1619'. [ 632.225916][T10453] usb 1-1: config 0 descriptor?? [ 632.268433][T10453] kvaser_usb 1-1:0.0: error -EMSGSIZE: Cannot get software info [ 632.292518][T10453] kvaser_usb 1-1:0.0: probe with driver kvaser_usb failed with error -90 [ 632.549955][ T5141] Bluetooth: hci5: command 0x0c1a tx timeout [ 632.554613][ T30] audit: type=1400 audit(2000000314.310:725): avc: denied { map } for pid=12530 comm="syz.0.1613" path="socket:[35774]" dev="sockfs" ino=35774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 632.629969][ T5141] Bluetooth: hci1: command 0x0c1a tx timeout [ 632.630200][ T5819] Bluetooth: hci6: command 0x0c1a tx timeout [ 632.710356][ T5819] Bluetooth: hci3: command 0x0c1a tx timeout [ 632.745315][ T30] audit: type=1326 audit(2000000314.500:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.7.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b758e929 code=0x7ffc0000 [ 633.130871][ T30] audit: type=1326 audit(2000000314.530:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.7.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b758e929 code=0x7ffc0000 [ 633.156439][ T30] audit: type=1326 audit(2000000314.540:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.7.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f36b758e929 code=0x7ffc0000 [ 634.505672][ T30] audit: type=1326 audit(2000000314.540:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.7.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b758e929 code=0x7ffc0000 [ 634.521077][T12571] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 634.546885][ T30] audit: type=1326 audit(2000000314.540:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.7.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b758e929 code=0x7ffc0000 [ 634.651953][T10453] usb 1-1: USB disconnect, device number 7 [ 634.821335][ T30] audit: type=1326 audit(2000000314.540:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.7.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36b758e929 code=0x7ffc0000 [ 634.821379][ T30] audit: type=1326 audit(2000000314.550:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.7.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b758e929 code=0x7ffc0000 [ 634.821429][ T30] audit: type=1326 audit(2000000314.560:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.7.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b758e929 code=0x7ffc0000 [ 634.821470][ T30] audit: type=1326 audit(2000000314.560:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.7.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36b758e929 code=0x7ffc0000 [ 634.821505][ T30] audit: type=1326 audit(2000000314.560:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.7.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b758e929 code=0x7ffc0000 [ 634.821539][ T30] audit: type=1326 audit(2000000314.560:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.7.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b758e929 code=0x7ffc0000 [ 634.821573][ T30] audit: type=1326 audit(2000000314.570:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.7.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f36b758e929 code=0x7ffc0000 [ 634.821607][ T30] audit: type=1326 audit(2000000314.570:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.7.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b758e929 code=0x7ffc0000 [ 634.994828][T12577] wg1: entered promiscuous mode [ 635.262085][T12587] FAULT_INJECTION: forcing a failure. [ 635.262085][T12587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.279050][T12587] CPU: 1 UID: 0 PID: 12587 Comm: syz.7.1629 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 635.279075][T12587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 635.279086][T12587] Call Trace: [ 635.279092][T12587] [ 635.279100][T12587] dump_stack_lvl+0x16c/0x1f0 [ 635.279131][T12587] should_fail_ex+0x512/0x640 [ 635.279169][T12587] _copy_to_user+0x32/0xd0 [ 635.279196][T12587] simple_read_from_buffer+0xcb/0x170 [ 635.279220][T12587] proc_fail_nth_read+0x197/0x270 [ 635.279243][T12587] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 635.279267][T12587] ? rw_verify_area+0xcf/0x680 [ 635.279286][T12587] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 635.279308][T12587] vfs_read+0x1e4/0xc60 [ 635.279333][T12587] ? __pfx___mutex_lock+0x10/0x10 [ 635.279360][T12587] ? __pfx_vfs_read+0x10/0x10 [ 635.279389][T12587] ? __fget_files+0x20e/0x3c0 [ 635.279421][T12587] ksys_read+0x12a/0x250 [ 635.279441][T12587] ? __pfx_ksys_read+0x10/0x10 [ 635.279463][T12587] ? fput+0x70/0xf0 [ 635.279493][T12587] do_syscall_64+0xcd/0x4c0 [ 635.279521][T12587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.279539][T12587] RIP: 0033:0x7f36b758d33c [ 635.279553][T12587] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 635.279570][T12587] RSP: 002b:00007f36b838d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 635.279588][T12587] RAX: ffffffffffffffda RBX: 00007f36b77b5fa0 RCX: 00007f36b758d33c [ 635.279598][T12587] RDX: 000000000000000f RSI: 00007f36b838d0a0 RDI: 0000000000000005 [ 635.279607][T12587] RBP: 00007f36b838d090 R08: 0000000000000000 R09: 0000000000000000 [ 635.279617][T12587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.279626][T12587] R13: 0000000000000000 R14: 00007f36b77b5fa0 R15: 00007fff16696208 [ 635.279652][T12587] [ 635.567466][T12595] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1632'. [ 635.937727][ T944] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 636.462418][ T5819] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 636.473594][ T944] usb 9-1: Using ep0 maxpacket: 16 [ 636.538689][ T944] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 636.542081][ T5887] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 636.555280][ T944] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 636.695170][ T944] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 636.707167][ T944] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 636.747260][ T944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.798782][ T944] usb 9-1: Product: syz [ 636.802349][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 636.808672][ T944] usb 9-1: Manufacturer: syz [ 636.923085][ T5887] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 636.931888][ T5887] usb 2-1: config 0 has no interface number 0 [ 636.947062][ T5887] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.948660][ T944] usb 9-1: SerialNumber: syz [ 637.343260][ T5887] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.353150][ T5887] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 637.372784][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.463771][ T5887] usb 2-1: config 0 descriptor?? [ 637.838519][ T944] usb 9-1: 0:2 : does not exist [ 638.245776][ T5887] uclogic 0003:28BD:0094.000E: pen parameters not found [ 638.253170][ T5887] uclogic 0003:28BD:0094.000E: interface is invalid, ignoring [ 638.488189][T10632] usb 2-1: USB disconnect, device number 10 [ 638.504899][T12633] Option 'D' to dns_resolver key: bad/missing value [ 638.688013][T12643] Bluetooth: MGMT ver 1.23 [ 638.795010][T12644] syz.6.1647: attempt to access beyond end of device [ 638.795010][T12644] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 638.808313][T12644] MINIX-fs: unable to read superblock [ 639.709323][T12654] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 639.721512][T12654] FAULT_INJECTION: forcing a failure. [ 639.721512][T12654] name failslab, interval 1, probability 0, space 0, times 0 [ 639.734432][T12654] CPU: 0 UID: 0 PID: 12654 Comm: syz.6.1651 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 639.734457][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 639.734467][T12654] Call Trace: [ 639.734475][T12654] [ 639.734483][T12654] dump_stack_lvl+0x16c/0x1f0 [ 639.734515][T12654] should_fail_ex+0x512/0x640 [ 639.734535][T12654] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 639.734557][T12654] should_failslab+0xc2/0x120 [ 639.734574][T12654] __kmalloc_cache_noprof+0x6a/0x3e0 [ 639.734586][T12654] ? __pfx___might_resched+0x10/0x10 [ 639.734600][T12654] ? __pfx___might_resched+0x10/0x10 [ 639.734612][T12654] ? ovl_iterate+0x7bb/0xe40 [ 639.734634][T12654] ovl_iterate+0x7bb/0xe40 [ 639.734657][T12654] ? __pfx_down_write+0x10/0x10 [ 639.734673][T12654] ? __pfx_down_read_killable+0x10/0x10 [ 639.734693][T12654] ? __pfx_ovl_iterate+0x10/0x10 [ 639.734712][T12654] wrap_directory_iterator+0x9f/0xe0 [ 639.734727][T12654] iterate_dir+0x296/0xb40 [ 639.734742][T12654] __x64_sys_getdents+0x13c/0x2b0 [ 639.734755][T12654] ? __pfx___x64_sys_getdents+0x10/0x10 [ 639.734767][T12654] ? fput+0x70/0xf0 [ 639.734790][T12654] ? __pfx_filldir+0x10/0x10 [ 639.734818][T12654] do_syscall_64+0xcd/0x4c0 [ 639.734844][T12654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.734858][T12654] RIP: 0033:0x7f018b38e929 [ 639.734868][T12654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.734878][T12654] RSP: 002b:00007f018c23d038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 639.734888][T12654] RAX: ffffffffffffffda RBX: 00007f018b5b6080 RCX: 00007f018b38e929 [ 639.734895][T12654] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000007 [ 639.734901][T12654] RBP: 00007f018c23d090 R08: 0000000000000000 R09: 0000000000000000 [ 639.734907][T12654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.734913][T12654] R13: 0000000000000000 R14: 00007f018b5b6080 R15: 00007ffef86d21f8 [ 639.734936][T12654] [ 640.179303][T12652] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1649'. [ 640.860048][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 640.860063][ T30] audit: type=1400 audit(2000000322.600:754): avc: denied { unmount } for pid=11872 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 641.136014][T12664] netlink: 'syz.0.1655': attribute type 7 has an invalid length. [ 641.828701][T12674] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 641.856745][T12674] CIFS mount error: No usable UNC path provided in device string! [ 641.856745][T12674] [ 641.857139][T12672] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1656'. [ 641.867734][T12674] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 641.898533][T12674] netlink: 'syz.7.1657': attribute type 11 has an invalid length. [ 641.906863][T12674] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1657'. [ 643.120083][T12687] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1662'. [ 643.220243][T10453] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 643.443052][T12692] XFS (nullb0): Invalid superblock magic number [ 643.480894][T10453] usb 1-1: Using ep0 maxpacket: 32 [ 643.560699][T10453] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 643.591624][T10453] usb 1-1: config 0 has no interface number 0 [ 643.607589][T10453] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.647879][T10453] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.679480][T10453] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 643.711639][T10453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.746463][T10453] usb 1-1: config 0 descriptor?? [ 644.173887][T12707] FAULT_INJECTION: forcing a failure. [ 644.173887][T12707] name failslab, interval 1, probability 0, space 0, times 0 [ 644.186885][T12707] CPU: 0 UID: 0 PID: 12707 Comm: syz.8.1666 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 644.186911][T12707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 644.186921][T12707] Call Trace: [ 644.186928][T12707] [ 644.186934][T12707] dump_stack_lvl+0x16c/0x1f0 [ 644.186964][T12707] should_fail_ex+0x512/0x640 [ 644.186986][T12707] ? hash_netnet4_add+0x1297/0x3120 [ 644.186998][T12707] should_failslab+0xc2/0x120 [ 644.187015][T12707] __kmalloc_noprof+0xd2/0x510 [ 644.187039][T12707] hash_netnet4_add+0x1297/0x3120 [ 644.187075][T12707] ? __pfx_hash_netnet4_add+0x10/0x10 [ 644.187095][T12707] ? ip_set_range_to_cidr+0xaf/0x110 [ 644.187118][T12707] hash_netnet4_uadt+0x833/0xe60 [ 644.187130][T12707] ? __pfx_hash_netnet4_add+0x10/0x10 [ 644.187142][T12707] ? __pfx_hash_netnet4_uadt+0x10/0x10 [ 644.187156][T12707] ? find_held_lock+0x2b/0x80 [ 644.187185][T12707] call_ad.constprop.0+0x16e/0x940 [ 644.187212][T12707] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 644.187233][T12707] ? __pfx___nla_validate_parse+0x10/0x10 [ 644.187256][T12707] ? __nla_parse+0x40/0x60 [ 644.187267][T12707] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 644.187287][T12707] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 644.187304][T12707] ? rcu_is_watching+0x12/0xc0 [ 644.187339][T12707] ? find_held_lock+0x2b/0x80 [ 644.187365][T12707] nfnetlink_rcv_msg+0x9f9/0x1200 [ 644.187394][T12707] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 644.187413][T12707] ? __lock_acquire+0x622/0x1c90 [ 644.187441][T12707] ? avc_has_perm_noaudit+0x149/0x3b0 [ 644.187456][T12707] netlink_rcv_skb+0x155/0x420 [ 644.187474][T12707] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 644.187497][T12707] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 644.187525][T12707] ? ns_capable+0xd7/0x110 [ 644.187543][T12707] nfnetlink_rcv+0x1b3/0x430 [ 644.187557][T12707] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 644.187570][T12707] ? netlink_deliver_tap+0x1ae/0xd30 [ 644.187583][T12707] netlink_unicast+0x53d/0x7f0 [ 644.187596][T12707] ? __pfx_netlink_unicast+0x10/0x10 [ 644.187618][T12707] netlink_sendmsg+0x8d1/0xdd0 [ 644.187641][T12707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.187667][T12707] ____sys_sendmsg+0xa95/0xc70 [ 644.187686][T12707] ? copy_msghdr_from_user+0x10a/0x160 [ 644.187702][T12707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.187720][T12707] ___sys_sendmsg+0x134/0x1d0 [ 644.187736][T12707] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.187753][T12707] ? __lock_acquire+0x622/0x1c90 [ 644.187807][T12707] __sys_sendmsg+0x16d/0x220 [ 644.187830][T12707] ? __pfx___sys_sendmsg+0x10/0x10 [ 644.187855][T12707] do_syscall_64+0xcd/0x4c0 [ 644.187875][T12707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.187886][T12707] RIP: 0033:0x7f217b58e929 [ 644.187898][T12707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.187913][T12707] RSP: 002b:00007f217c3a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.187929][T12707] RAX: ffffffffffffffda RBX: 00007f217b7b5fa0 RCX: 00007f217b58e929 [ 644.187939][T12707] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000005 [ 644.187948][T12707] RBP: 00007f217c3a4090 R08: 0000000000000000 R09: 0000000000000000 [ 644.187958][T12707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.187967][T12707] R13: 0000000000000000 R14: 00007f217b7b5fa0 R15: 00007ffe68b3d758 [ 644.187983][T12707] [ 644.647091][ T30] audit: type=1400 audit(2000000326.390:755): avc: denied { read } for pid=12709 comm="syz.6.1668" path="socket:[37059]" dev="sockfs" ino=37059 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 644.759997][T10451] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 644.799393][T10453] uclogic 0003:28BD:0094.000F: pen parameters not found [ 644.818992][T10453] uclogic 0003:28BD:0094.000F: interface is invalid, ignoring [ 644.846685][T12717] FAULT_INJECTION: forcing a failure. [ 644.846685][T12717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.867481][T12717] CPU: 1 UID: 0 PID: 12717 Comm: syz.7.1671 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 644.867508][T12717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 644.867518][T12717] Call Trace: [ 644.867524][T12717] [ 644.867531][T12717] dump_stack_lvl+0x16c/0x1f0 [ 644.867562][T12717] should_fail_ex+0x512/0x640 [ 644.867589][T12717] _copy_from_user+0x2e/0xd0 [ 644.867612][T12717] copy_msghdr_from_user+0x98/0x160 [ 644.867635][T12717] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 644.867660][T12717] ? kfree+0x24f/0x4d0 [ 644.867674][T12717] ? __pfx__kstrtoull+0x10/0x10 [ 644.867696][T12717] ___sys_sendmsg+0xfe/0x1d0 [ 644.867719][T12717] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.867759][T12717] ? __pfx___might_resched+0x10/0x10 [ 644.867784][T12717] __sys_sendmmsg+0x200/0x420 [ 644.867809][T12717] ? __pfx___sys_sendmmsg+0x10/0x10 [ 644.867840][T12717] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 644.867874][T12717] ? fput+0x70/0xf0 [ 644.867899][T12717] ? ksys_write+0x1ac/0x250 [ 644.867918][T12717] ? __pfx_ksys_write+0x10/0x10 [ 644.867942][T12717] __x64_sys_sendmmsg+0x9c/0x100 [ 644.867964][T12717] ? lockdep_hardirqs_on+0x7c/0x110 [ 644.867988][T12717] do_syscall_64+0xcd/0x4c0 [ 644.868014][T12717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.868031][T12717] RIP: 0033:0x7f36b758e929 [ 644.868045][T12717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.868061][T12717] RSP: 002b:00007f36b838d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 644.868079][T12717] RAX: ffffffffffffffda RBX: 00007f36b77b5fa0 RCX: 00007f36b758e929 [ 644.868090][T12717] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 644.868100][T12717] RBP: 00007f36b838d090 R08: 0000000000000000 R09: 0000000000000000 [ 644.868110][T12717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.868120][T12717] R13: 0000000000000000 R14: 00007f36b77b5fa0 R15: 00007fff16696208 [ 644.868149][T12717] [ 645.091593][T10451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 645.105989][T10451] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 645.126991][T10451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 645.157552][T10453] usb 1-1: USB disconnect, device number 8 [ 645.322943][T10451] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 645.394219][T10451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.468149][T10451] usb 2-1: Product: syz [ 645.498648][T10451] usb 2-1: Manufacturer: syz [ 645.543212][T10451] usb 2-1: SerialNumber: syz [ 645.645666][T10451] usb 2-1: config 0 descriptor?? [ 645.704766][T12706] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 645.718519][T12706] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 645.809726][T12728] openvswitch: netlink: ct_state flags 020000e0 unsupported [ 645.810939][T10451] usb 2-1: ucan: probing device on interface #0 [ 645.826057][ T30] audit: type=1400 audit(2000000327.560:756): avc: denied { ioctl } for pid=12727 comm="syz.8.1675" path="socket:[36758]" dev="sockfs" ino=36758 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 645.893993][ T30] audit: type=1400 audit(2000000327.580:757): avc: denied { shutdown } for pid=12727 comm="syz.8.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 645.927560][ T30] audit: type=1400 audit(2000000327.640:758): avc: denied { setattr } for pid=12729 comm="syz.6.1677" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 645.991697][T10451] usb 2-1: ucan: could not read protocol version, ret=-32 [ 646.001992][T10451] usb 2-1: ucan: probe failed; try to update the device firmware [ 646.025619][T10451] usb 2-1: USB disconnect, device number 11 [ 646.547522][ T30] audit: type=1326 audit(2000000328.300:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d18f2ab19 code=0x7ffc0000 [ 646.580165][ T30] audit: type=1326 audit(2000000328.300:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d18f8e929 code=0x7ffc0000 [ 646.606838][ T30] audit: type=1326 audit(2000000328.300:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d18f2ab19 code=0x7ffc0000 [ 646.635249][ T30] audit: type=1326 audit(2000000328.300:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d18f2ab19 code=0x7ffc0000 [ 646.662707][ T30] audit: type=1326 audit(2000000328.300:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d18f2ab19 code=0x7ffc0000 [ 646.694344][ T30] audit: type=1326 audit(2000000328.300:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d18f2ab19 code=0x7ffc0000 [ 646.721413][ T30] audit: type=1326 audit(2000000328.300:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d18f2ab19 code=0x7ffc0000 [ 646.749255][ T30] audit: type=1326 audit(2000000328.300:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d18f2ab19 code=0x7ffc0000 [ 647.180051][T12757] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 647.191671][T12757] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 648.428587][T12785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12785 comm=syz.8.1694 [ 648.471179][T12779] netlink: 'syz.8.1694': attribute type 1 has an invalid length. [ 648.516183][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1694'. [ 648.544584][T12781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.591543][T12781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.044994][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1696'. [ 649.085376][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1696'. [ 649.672653][T12798] netlink: 'syz.0.1699': attribute type 1 has an invalid length. [ 649.803877][T12798] bond1: entered promiscuous mode [ 649.809665][T12798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 650.197387][T12810] netlink: 'syz.1.1704': attribute type 39 has an invalid length. [ 650.201349][T12819] netlink: 'syz.7.1701': attribute type 12 has an invalid length. [ 650.213312][T12819] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1701'. [ 650.251653][T11728] IPVS: starting estimator thread 0... [ 650.471370][T12822] IPVS: using max 37 ests per chain, 88800 per kthread [ 650.961006][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'. [ 651.348319][ T30] kauditd_printk_skb: 1207 callbacks suppressed [ 651.348335][ T30] audit: type=1400 audit(2000000333.100:1974): avc: denied { listen } for pid=12833 comm="syz.0.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 652.191780][ T30] audit: type=1326 audit(2000000333.950:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.8.1711" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f217b58e929 code=0x0 [ 652.221010][T12847] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1712'. [ 652.277280][T12851] syzkaller1: entered promiscuous mode [ 652.288463][T12851] syzkaller1: entered allmulticast mode [ 653.467649][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1721'. [ 653.479530][T12883] netlink: 'syz.8.1721': attribute type 1 has an invalid length. [ 653.488553][T12883] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1721'. [ 653.891872][T12895] sctp: [Deprecated]: syz.6.1723 (pid 12895) Use of int in maxseg socket option. [ 653.891872][T12895] Use struct sctp_assoc_value instead [ 653.921168][T12894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.929978][T12894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.049919][ T30] audit: type=1326 audit(2000000335.800:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.0.1727" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19c2d8e929 code=0x0 [ 654.100314][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1726'. [ 654.104255][T12901] syzkaller1: entered promiscuous mode [ 654.232036][T12901] syzkaller1: entered allmulticast mode [ 654.375564][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1726'. [ 655.108690][T12921] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1733'. [ 655.138413][T12921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=12921 comm=syz.7.1733 [ 655.182904][ T30] audit: type=1400 audit(2000000336.940:1977): avc: denied { create } for pid=12922 comm="syz.0.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 655.234193][T12923] delete_channel: no stack [ 655.376498][ T30] audit: type=1400 audit(2000000336.940:1978): avc: denied { ioctl } for pid=12922 comm="syz.0.1736" path="socket:[37369]" dev="sockfs" ino=37369 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 656.373202][T12944] trusted_key: encrypted_key: insufficient parameters specified [ 656.391560][ T30] audit: type=1400 audit(2000000338.140:1979): avc: denied { accept } for pid=12943 comm="syz.6.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 656.419256][T12944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1742'. [ 656.443747][T12944] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1742'. [ 656.456134][T12944] netlink: 'syz.6.1742': attribute type 19 has an invalid length. [ 656.468526][T12949] netlink: 'syz.1.1744': attribute type 7 has an invalid length. [ 656.490411][T11728] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 656.504776][T12949] : entered promiscuous mode [ 656.599023][T12955] netlink: 1760 bytes leftover after parsing attributes in process `syz.6.1747'. [ 656.644920][T11728] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 656.658630][T11728] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 656.673520][T11728] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 656.683041][T11728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.705069][T12938] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 656.726186][T11728] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 657.162952][ T30] audit: type=1400 audit(2000000338.920:1980): avc: denied { ioctl } for pid=12965 comm="syz.8.1752" path="socket:[38187]" dev="sockfs" ino=38187 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 657.380784][ T30] audit: type=1400 audit(2000000338.950:1981): avc: denied { read } for pid=12965 comm="syz.8.1752" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 657.433050][ T30] audit: type=1400 audit(2000000338.950:1982): avc: denied { open } for pid=12965 comm="syz.8.1752" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 657.831805][T12977] netlink: 'syz.8.1755': attribute type 10 has an invalid length. [ 657.864135][T12977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.872148][T12977] team0: Port device bond0 added [ 657.880009][T12978] netlink: 'syz.8.1755': attribute type 10 has an invalid length. [ 659.064942][T10453] usb 1-1: USB disconnect, device number 9 [ 659.134461][T12991] netlink: 'syz.0.1761': attribute type 11 has an invalid length. [ 659.144023][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1761'. [ 659.153042][T12991] ksmbd: Unknown IPC event: 0, ignore. [ 659.817292][T12997] syz.0.1763: attempt to access beyond end of device [ 659.817292][T12997] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 659.831072][T12997] MINIX-fs: unable to read superblock [ 659.860548][T10453] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 660.190073][T10453] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 660.204675][T10453] usb 2-1: config 0 interface 0 has no altsetting 0 [ 660.211366][T10453] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 660.223516][T10453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.252905][T10453] usb 2-1: config 0 descriptor?? [ 660.259691][T12994] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 660.295165][T13003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.344150][T13005] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 660.759918][ T30] audit: type=1326 audit(2000000342.450:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13006 comm="syz.6.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018b38e929 code=0x7fc00000 [ 661.110229][T13018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.118984][T13018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.300270][ T944] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 661.451420][ T944] usb 1-1: config 0 has an invalid interface number: 44 but max is 0 [ 661.460775][ T944] usb 1-1: config 0 has no interface number 0 [ 661.468633][ T944] usb 1-1: New USB device found, idVendor=04cb, idProduct=012d, bcdDevice=aa.5d [ 661.478819][ T944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.487801][ T944] usb 1-1: Product: syz [ 661.492082][ T944] usb 1-1: Manufacturer: syz [ 661.496696][ T944] usb 1-1: SerialNumber: syz [ 661.502975][ T944] usb 1-1: config 0 descriptor?? [ 661.513815][ T944] gspca_main: finepix-2.14.0 probing 04cb:012d [ 661.692479][ T30] audit: type=1400 audit(2000000343.450:1984): avc: denied { append } for pid=13020 comm="syz.7.1771" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 661.751912][T11728] usb 1-1: USB disconnect, device number 10 [ 662.106823][T13032] netlink: 830 bytes leftover after parsing attributes in process `syz.7.1774'. [ 662.116699][T13032] bond_slave_0: entered promiscuous mode [ 662.122617][T13032] bond_slave_1: entered promiscuous mode [ 662.311074][ T30] audit: type=1400 audit(2000000344.070:1985): avc: denied { map } for pid=13035 comm="syz.0.1776" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 662.335269][ T30] audit: type=1400 audit(2000000344.070:1986): avc: denied { execute } for pid=13035 comm="syz.0.1776" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 663.244696][T13040] batadv1: entered promiscuous mode [ 663.272772][T13040] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 663.519903][ T30] audit: type=1326 audit(2000000345.270:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13006 comm="syz.6.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f018b38e929 code=0x7fc00000 [ 663.690055][T10453] usbhid 2-1:0.0: can't add hid device: -71 [ 663.696085][T10453] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 663.745933][T10453] usb 2-1: USB disconnect, device number 12 [ 663.850034][ T944] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 664.373231][ T944] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.448161][ T944] usb 1-1: config 0 interface 0 has no altsetting 0 [ 664.512149][ T944] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 664.523690][ T944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.535171][ T944] usb 1-1: config 0 descriptor?? [ 664.799292][T13067] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1784'. [ 664.869933][T10453] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 664.955607][ T944] apple 0003:05AC:027A.0010: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 665.031783][T10453] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 665.044276][T10453] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 665.055649][T10453] usb 2-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 665.067648][T10453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.077474][T10453] usb 2-1: config 0 descriptor?? [ 665.083435][T13058] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 665.844768][T10453] usbhid 2-1:0.0: can't add hid device: -71 [ 665.866334][T10453] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 665.878390][T10453] usb 2-1: USB disconnect, device number 13 [ 666.795437][T10451] usb 1-1: USB disconnect, device number 11 [ 666.986261][ T30] audit: type=1400 audit(2000000348.740:1988): avc: denied { setopt } for pid=13080 comm="syz.0.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 666.990709][T13081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.025926][T13081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.319888][T10451] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 667.481659][T10451] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 667.492763][T10451] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 667.505436][T10451] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 667.514688][T10451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.523371][T10451] usb 1-1: Product: syz [ 667.527634][T10451] usb 1-1: Manufacturer: syz [ 667.532622][T10451] usb 1-1: SerialNumber: syz [ 667.539582][T13082] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 667.542424][T10453] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 667.751932][T10453] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 667.785754][T10453] usb 2-1: config 0 interface 0 has no altsetting 0 [ 667.792862][T10453] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 667.809492][T10453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.832212][T10453] usb 2-1: config 0 descriptor?? [ 667.840904][T13085] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 667.907997][T13092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.943016][T13092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.961460][T10451] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 667.967562][T10451] cdc_ncm 1-1:1.0: bind() failure [ 668.965285][T10632] usb 1-1: USB disconnect, device number 12 [ 669.694699][T13111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.705513][T13112] IPv6: addrconf: prefix option has invalid lifetime [ 669.705569][T13111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.739332][T13111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.761440][T13111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.307427][T10453] usbhid 2-1:0.0: can't add hid device: -71 [ 670.315027][T10453] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 670.328494][T10453] usb 2-1: USB disconnect, device number 14 [ 670.410524][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 670.454488][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1804'. [ 670.507317][T13131] FAULT_INJECTION: forcing a failure. [ 670.507317][T13131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.520567][T13131] CPU: 0 UID: 0 PID: 13131 Comm: syz.1.1805 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 670.520592][T13131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 670.520601][T13131] Call Trace: [ 670.520606][T13131] [ 670.520613][T13131] dump_stack_lvl+0x16c/0x1f0 [ 670.520644][T13131] should_fail_ex+0x512/0x640 [ 670.520671][T13131] _copy_from_user+0x2e/0xd0 [ 670.520697][T13131] kstrtouint_from_user+0xd6/0x1d0 [ 670.520717][T13131] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 670.520735][T13131] ? __lock_acquire+0xb8a/0x1c90 [ 670.520773][T13131] proc_fail_nth_write+0x83/0x250 [ 670.520794][T13131] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 670.520823][T13131] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 670.520841][T13131] vfs_write+0x29d/0x1150 [ 670.520866][T13131] ? __pfx___mutex_lock+0x10/0x10 [ 670.520893][T13131] ? __pfx_vfs_write+0x10/0x10 [ 670.520922][T13131] ? __fget_files+0x20e/0x3c0 [ 670.520951][T13131] ksys_write+0x12a/0x250 [ 670.520971][T13131] ? __pfx_ksys_write+0x10/0x10 [ 670.520999][T13131] do_syscall_64+0xcd/0x4c0 [ 670.521027][T13131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.521043][T13131] RIP: 0033:0x7f1d18f8d3df [ 670.521057][T13131] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 670.521073][T13131] RSP: 002b:00007f1d19ee0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 670.521089][T13131] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1d18f8d3df [ 670.521099][T13131] RDX: 0000000000000001 RSI: 00007f1d19ee00a0 RDI: 0000000000000004 [ 670.521109][T13131] RBP: 00007f1d19ee0090 R08: 0000000000000000 R09: 0000000000000000 [ 670.521119][T13131] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 670.521129][T13131] R13: 0000000000000000 R14: 00007f1d191b5fa0 R15: 00007ffe39780a28 [ 670.521153][T13131] [ 670.867869][T13135] syzkaller0: entered promiscuous mode [ 670.873583][T13135] syzkaller0: entered allmulticast mode [ 671.144661][ T30] audit: type=1400 audit(2000000352.820:1989): avc: denied { nosuid_transition } for pid=13142 comm="syz.0.1810" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 671.170347][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1809'. [ 671.391192][ T30] audit: type=1400 audit(2000000352.820:1990): avc: denied { transition } for pid=13142 comm="syz.0.1810" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 671.430017][ T30] audit: type=1400 audit(2000000352.820:1991): avc: denied { entrypoint } for pid=13142 comm="syz.0.1810" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=189 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 671.430151][T10453] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 671.460225][ T30] audit: type=1400 audit(2000000352.820:1992): avc: denied { noatsecure } for pid=13142 comm="syz.0.1810" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 671.808692][ T5819] Bluetooth: hci0: unexpected event 0x04 length: 12 > 10 [ 671.808724][ T5819] Bluetooth: unknown link type 203 [ 671.826638][ T5819] Bluetooth: hci0: connection err: -111 [ 671.862655][T10453] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.975188][T10453] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.019740][T10453] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 672.031551][T10453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.057265][T10453] usb 2-1: config 0 descriptor?? [ 672.246386][T13159] 9pnet_fd: Insufficient options for proto=fd [ 672.450245][ T944] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 672.476305][T10453] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 672.524128][T10453] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0011/input/input22 [ 672.661204][ T944] usb 1-1: Using ep0 maxpacket: 16 [ 672.669336][T10453] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 672.688360][T13133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.700987][ T944] usb 1-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 672.719780][T13133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.727720][ T944] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 672.771084][ T944] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 672.815669][ T944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.837548][T10453] usb 2-1: USB disconnect, device number 15 [ 672.854004][ T944] usb 1-1: Product: syz [ 672.866138][ T944] usb 1-1: Manufacturer: syz [ 672.870956][ T944] usb 1-1: SerialNumber: syz [ 674.225682][T13173] random: crng reseeded on system resumption [ 674.242898][ T30] audit: type=1400 audit(2000000355.980:1993): avc: denied { write } for pid=13172 comm="syz.7.1817" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 674.266033][ C1] vkms_vblank_simulate: vblank timer overrun [ 674.987124][T13183] Cannot find add_set index 0 as target [ 676.111812][T13174] kexec: Could not allocate control_code_buffer [ 676.204453][ T944] usb 1-1: 0:2 : does not exist [ 676.238342][ T944] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 676.291584][ T944] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 676.309557][ T944] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 676.344891][ T944] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 676.412799][ T944] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 676.512731][ T944] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 676.537966][ T944] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 676.651976][ T944] usb 1-1: USB disconnect, device number 13 [ 676.712507][T10955] udevd[10955]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 676.868243][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1818'. [ 677.072038][T13200] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 677.276923][T13204] syz.1.1825: attempt to access beyond end of device [ 677.276923][T13204] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 677.292559][T13204] MINIX-fs: unable to read superblock [ 677.304808][T11728] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 677.581181][T11728] usb 1-1: no configurations [ 677.585956][T11728] usb 1-1: can't read configurations, error -22 [ 677.770050][T11728] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 678.059086][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077a63400: rx timeout, send abort [ 678.219960][ T30] audit: type=1400 audit(2000000359.940:1994): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 678.279560][ T30] audit: type=1400 audit(2000000359.940:1995): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.279664][T11728] usb 1-1: no configurations [ 678.306467][T11728] usb 1-1: can't read configurations, error -22 [ 678.315810][T11728] usb usb1-port1: attempt power cycle [ 678.380094][ T30] audit: type=1400 audit(2000000359.950:1996): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.401993][ T30] audit: type=1400 audit(2000000359.950:1997): avc: denied { add_name } for pid=5173 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.430287][ T30] audit: type=1400 audit(2000000359.950:1998): avc: denied { create } for pid=5173 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 678.451365][ T30] audit: type=1400 audit(2000000359.950:1999): avc: denied { append open } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 678.517303][ T30] audit: type=1400 audit(2000000359.960:2000): avc: denied { getattr } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 678.559384][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077a61400: rx timeout, send abort [ 678.568702][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077a63400: abort rx timeout. Force session deactivation [ 678.689862][T11728] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 679.000066][T11728] usb 1-1: no configurations [ 679.004741][T11728] usb 1-1: can't read configurations, error -22 [ 679.067679][ C0] vcan0: j1939_tp_rxtimer: 0xffff888077a61400: abort rx timeout. Force session deactivation [ 679.139910][T11728] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 679.162638][T11728] usb 1-1: no configurations [ 679.167291][T11728] usb 1-1: can't read configurations, error -22 [ 679.205850][T11728] usb usb1-port1: unable to enumerate USB device [ 679.226847][ T30] audit: type=1400 audit(2000000360.980:2001): avc: denied { ioctl } for pid=13238 comm="syz.1.1834" path="socket:[39267]" dev="sockfs" ino=39267 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 679.256973][ T30] audit: type=1400 audit(2000000360.980:2002): avc: denied { bind } for pid=13238 comm="syz.1.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 680.482395][T13267] netlink: 'syz.0.1840': attribute type 1 has an invalid length. [ 681.110738][T13275] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 681.210670][ T5887] ------------[ cut here ]------------ [ 681.216346][ T5887] WARNING: CPU: 0 PID: 5887 at kernel/cgroup/rstat.c:497 css_rstat_exit+0x368/0x470 [ 681.225948][ T5887] Modules linked in: [ 681.230168][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: kworker/0:5 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 681.242554][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 681.252895][ T5887] Workqueue: cgroup_destroy css_free_rwork_fn [ 681.258954][ T5887] RIP: 0010:css_rstat_exit+0x368/0x470 [ 681.264671][ T5887] Code: 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 0e 01 00 00 49 c7 85 70 05 00 00 00 00 00 00 e9 00 ff ff ff e8 c9 07 07 00 90 <0f> 0b 90 e9 3e ff ff ff e8 bb 07 07 00 90 0f 0b 90 e9 30 ff ff ff [ 681.264909][ T30] audit: type=1400 audit(2000000363.030:2003): avc: denied { getopt } for pid=13262 comm="syz.0.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 681.284431][ T5887] RSP: 0000:ffffc9000b6afbc0 EFLAGS: 00010293 [ 681.304234][ T944] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 681.310073][ T5887] RAX: 0000000000000000 RBX: ffff888057c7a800 RCX: ffff888124754000 [ 681.310089][ T5887] RDX: ffff8880308b8000 RSI: ffffffff81b514e7 RDI: ffffffff8df26da0 [ 681.310100][ T5887] RBP: ffff888057c7a808 R08: 0000000000000005 R09: 0000000000000007 [ 681.310110][ T5887] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888057c7a820 [ 681.310120][ T5887] R13: 0000000000000000 R14: 0000000000000003 R15: dffffc0000000000 [ 681.310131][ T5887] FS: 0000000000000000(0000) GS:ffff888124754000(0000) knlGS:0000000000000000 [ 681.310148][ T5887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 681.310161][ T5887] CR2: 0000001b31b10ff8 CR3: 0000000079092000 CR4: 00000000003526f0 [ 681.381723][ T5887] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 681.389673][ T5887] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 681.397678][ T5887] Call Trace: [ 681.400947][ T5887] [ 681.403858][ T5887] css_free_rwork_fn+0x80/0x12e0 [ 681.408787][ T5887] ? rcu_is_watching+0x12/0xc0 [ 681.413555][ T5887] process_one_work+0x9cf/0x1b70 [ 681.418487][ T5887] ? __pfx_srcu_invoke_callbacks+0x10/0x10 [ 681.424298][ T5887] ? __pfx_process_one_work+0x10/0x10 [ 681.429736][ T5887] ? assign_work+0x1a0/0x250 [ 681.434521][ T5887] worker_thread+0x6c8/0xf10 [ 681.439093][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 681.444202][ T5887] kthread+0x3c5/0x780 [ 681.448416][ T5887] ? __pfx_kthread+0x10/0x10 [ 681.453163][ T5887] ? rcu_is_watching+0x12/0xc0 [ 681.457907][ T5887] ? __pfx_kthread+0x10/0x10 [ 681.462511][ T5887] ret_from_fork+0x5d4/0x6f0 [ 681.467112][ T5887] ? __pfx_kthread+0x10/0x10 [ 681.471713][ T5887] ret_from_fork_asm+0x1a/0x30 [ 681.476462][ T5887] [ 681.479459][ T5887] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 681.486716][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: kworker/0:5 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 681.498752][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 681.508783][ T5887] Workqueue: cgroup_destroy css_free_rwork_fn [ 681.514832][ T5887] Call Trace: [ 681.518085][ T5887] [ 681.520993][ T5887] dump_stack_lvl+0x3d/0x1f0 [ 681.525579][ T5887] panic+0x71c/0x800 [ 681.529452][ T5887] ? __pfx_panic+0x10/0x10 [ 681.533850][ T5887] ? show_trace_log_lvl+0x29b/0x3e0 [ 681.539037][ T5887] ? check_panic_on_warn+0x1f/0xb0 [ 681.544129][ T5887] ? css_rstat_exit+0x368/0x470 [ 681.548956][ T5887] check_panic_on_warn+0xab/0xb0 [ 681.553880][ T5887] __warn+0xf6/0x3c0 [ 681.557756][ T5887] ? css_rstat_exit+0x368/0x470 [ 681.562584][ T5887] report_bug+0x3c3/0x580 [ 681.566890][ T5887] ? css_rstat_exit+0x368/0x470 [ 681.571719][ T5887] handle_bug+0x184/0x210 [ 681.576034][ T5887] exc_invalid_op+0x17/0x50 [ 681.580518][ T5887] asm_exc_invalid_op+0x1a/0x20 [ 681.585371][ T5887] RIP: 0010:css_rstat_exit+0x368/0x470 [ 681.590828][ T5887] Code: 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 0e 01 00 00 49 c7 85 70 05 00 00 00 00 00 00 e9 00 ff ff ff e8 c9 07 07 00 90 <0f> 0b 90 e9 3e ff ff ff e8 bb 07 07 00 90 0f 0b 90 e9 30 ff ff ff [ 681.610412][ T5887] RSP: 0000:ffffc9000b6afbc0 EFLAGS: 00010293 [ 681.616454][ T5887] RAX: 0000000000000000 RBX: ffff888057c7a800 RCX: ffff888124754000 [ 681.624398][ T5887] RDX: ffff8880308b8000 RSI: ffffffff81b514e7 RDI: ffffffff8df26da0 [ 681.632358][ T5887] RBP: ffff888057c7a808 R08: 0000000000000005 R09: 0000000000000007 [ 681.640318][ T5887] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888057c7a820 [ 681.648265][ T5887] R13: 0000000000000000 R14: 0000000000000003 R15: dffffc0000000000 [ 681.656217][ T5887] ? css_rstat_exit+0x367/0x470 [ 681.661056][ T5887] css_free_rwork_fn+0x80/0x12e0 [ 681.665968][ T5887] ? rcu_is_watching+0x12/0xc0 [ 681.670711][ T5887] process_one_work+0x9cf/0x1b70 [ 681.675626][ T5887] ? __pfx_srcu_invoke_callbacks+0x10/0x10 [ 681.681415][ T5887] ? __pfx_process_one_work+0x10/0x10 [ 681.686798][ T5887] ? assign_work+0x1a0/0x250 [ 681.691394][ T5887] worker_thread+0x6c8/0xf10 [ 681.695968][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 681.701067][ T5887] kthread+0x3c5/0x780 [ 681.705111][ T5887] ? __pfx_kthread+0x10/0x10 [ 681.709682][ T5887] ? rcu_is_watching+0x12/0xc0 [ 681.714422][ T5887] ? __pfx_kthread+0x10/0x10 [ 681.718985][ T5887] ret_from_fork+0x5d4/0x6f0 [ 681.723555][ T5887] ? __pfx_kthread+0x10/0x10 [ 681.728118][ T5887] ret_from_fork_asm+0x1a/0x30 [ 681.732895][ T5887] [ 681.736117][ T5887] Kernel Offset: disabled [ 681.740421][ T5887] Rebooting in 86400 seconds..