last executing test programs: 14.059587812s ago: executing program 3 (id=5416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r4, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_targets\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000200)=""/235, 0xeb}], 0x1, 0xfff, 0xfffffffe) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}, 0xa) 12.63954184s ago: executing program 3 (id=5419): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2, 0x9, 0x14, "2cf5c70b0b284c81f83143810b4a71ffcb375325c86829381495265ceecf444a28178ef925a84f7f9eb646cad27cfda8bbcaa2f1d2280c11b1505e4bbbc8fbda", "190b4de479e73750618816dabedbff4a0a2e75b44e2cc115632179aca631a6a9d774adda677624b790b5d6617f89540b338290e27d4be7cb387cb05ce62f5f77", "57d8695804cc86297563ad6985c5b2634cccb18b6be822230000000000000100", [0xb, 0x5]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x2, 0x10}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) msgget$private(0x0, 0xfffffffffffffffd) 12.395341209s ago: executing program 4 (id=5420): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002e00000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000280)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'bond0\x00', @random}) 12.263882529s ago: executing program 0 (id=5421): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000001e80)={0x2020}, 0x2062) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) socketpair(0x23, 0x5, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="f9ff80ffe6"]) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={&(0x7f0000000640)="a54ba806448c448e7f987f2442752bf7afcd1c27d7a81299bbacf4e7214d4b1de05c8d061aba3a44b1bbe9b2a5aaacf74179e8be62e30d65d59b04019d1629c08e7b2a7c4d178b099e0c772c93d96a72403778be3b156888771761d3ec6dc7dd34280367b1dcdcda849f5719b55684212b2593422547ff0d7c7845cabcbaa2e009465e7a660b3177a3afd08a7cad04e564daa66408d488583714f8aba6ed6bda3635ed975795b90a8cf814b251adc6dcef8c5e4c5c298876d88c31eb1de80100000000000000b8d1ce9f6f88dcdf85c8118cc52f4664a5e92aa8ebd692187977c601af988e9a020023dc8a944fda4c8fa672b31999bebb5f", &(0x7f0000000540)="bec9166df6229409a558741c83e81599bc5fd48b7639edea4ccc0ef33c8bbd6b6daf6f06e9cb26d622981da2fa4d98058b6755bae285bbc35b0e91628173a748eebaa1d062b67245f721772b49631c139215b06ac0f836225747660c515f751f9751c1580965e602a3324dbdf55294cb9789164a7673a43f66746aebde5dd6f3fadc33b6b2c9cde8424016782603a528ed21418a594a4bf16e12ccbc8b7c1df5b38e349cd83d076f3616368f5bb71ed6ba8c476c07930cdf601210663aa552668d9a758907e22047af3fa447869f9c99d251de9b7f2006e83633168d7e3b6b40"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x2, 0x60d3, 0x7}) r5 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600609040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000006bc0)={0x84, &(0x7f0000006740)=ANY=[@ANYBLOB="040e00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006a40)={0x40, 0x17, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0x18, 0x3, 0x0, @random="1f0000000010"}, 0x10) 11.417250881s ago: executing program 2 (id=5422): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001300)="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", 0xd33}, {&(0x7f00000005c0)="e62fcd03b561fc06e7e6ec62e7eea2784cf9ab54b3da1b7cae0962d4e63694f475a231db5f0fb59b8baaca9c5d4cdb81952c9fc851e16338ffbc3ab32bca6d54c6d2c5261ceeda2cfe16472b3a790b8311e5ad79d904343745e8e9a25f5678475371256550d33971df716f54dd5b658ae5510adbf53e9b948fa4d060e3092ca478e48e99", 0x84}], 0x3, 0x0, 0x0, 0x2c}, 0x4004814) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) getitimer(0x0, &(0x7f0000000000)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 11.071313679s ago: executing program 4 (id=5423): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c0001800600060088a80000100004002524298d275c232f262d2b00041f02"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 10.622332603s ago: executing program 3 (id=5425): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r1 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x102) (rerun: 64) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000001c0)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x2f, 0x0, [{0x8, 0xc, 0x7, 0x4}, {0xffff, 0x2, 0x4, 0x1}, {0xfff, 0x8, 0x9f, 0x6}, {0x0, 0x9, 0xfc, 0x8}, {0x382c, 0x10, 0x5, 0x2}, {0x7ff, 0x59, 0x81, 0x10}, {0xcc, 0x2, 0x9b, 0x1}, {0x8, 0x7, 0x7, 0x8}, {0xbd, 0x2, 0x10, 0x5}, {0x99, 0x9, 0x7, 0x9}, {0x0, 0xd6, 0x10, 0x83}, {0x7fff, 0x40, 0x0, 0x9}, {0x40, 0xf7, 0x16, 0x2}, {0xf001, 0x2, 0xff, 0x10000000}, {0x7, 0x95, 0x8a, 0x2}, {0x7, 0xfe, 0x81, 0x1ff}, {0x721, 0x1, 0x4, 0x51c}, {0x5, 0x3, 0x6, 0x80000001}, {0x95cf, 0x8, 0xc, 0x9}, {0x7ff, 0x5, 0x2, 0x5}, {0x2, 0x80, 0x6, 0x7fff}, {0x81, 0xfb, 0x3, 0x5}, {0x100, 0x9, 0x1, 0xfffffffc}, {0x101, 0x10, 0x6, 0x7e2}, {0x800, 0x5e, 0x7, 0x3}, {0x3, 0x6, 0x1, 0x1}, {0x88c, 0x0, 0x0, 0x3}, {0xfff, 0x1, 0x3, 0x9}, {0x4, 0x0, 0x0, 0x4}, {0x8, 0xff, 0x0, 0x800}, {0x5cc, 0x8, 0x4, 0x5}, {0x1, 0xd, 0x9, 0xb}, {0xfffa, 0xc5, 0x0, 0x7ff}, {0x4d7e, 0xc7, 0x7, 0x1}, {0xf0, 0x4, 0x0, 0x6}, {0x2647, 0x4, 0x4, 0x6}, {0x6, 0x8, 0x0, 0xb}, {0x2, 0xbd, 0xa, 0x4acb}, {0x401, 0x1d, 0xc, 0x7f}, {0x1, 0x4, 0x4, 0x10001}, {0xb675, 0x4, 0x9, 0x3}, {0x8, 0x9, 0x6, 0x2}, {0x0, 0x2, 0x40}, {0x0, 0x7, 0x6, 0x3}, {0x7fff, 0x7, 0xe6, 0x26}, {0x458f, 0x65, 0x9, 0x200}, {0xff22, 0xf0, 0x5, 0x6}, {0xffff, 0xfa, 0x1, 0x4}, {0x1, 0x6, 0xf1, 0x5}, {0x4, 0x3, 0x4, 0xfffff5ab}, {0xfff, 0x7, 0x1, 0x1ff}, {0x7fff, 0x8, 0x4, 0x3}, {0x6, 0x1, 0xff, 0x1}, {0x1, 0x5, 0x80, 0xfffffffe}, {0xff, 0x1, 0x9, 0x3ff}, {0x5, 0x5, 0x4, 0x4}, {0x5a, 0x1, 0xf, 0x2}, {0x0, 0x5, 0x1, 0x7}, {0x8, 0x6, 0xff}, {0x6, 0x2, 0x0, 0x1}, {0x1, 0x9, 0x98, 0x7}, {0x8a0, 0x0, 0x2, 0x6}, {0x4, 0x8, 0x5, 0x81}, {0x800, 0x4, 0x0, 0x5}], {0x401}}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 9.76256946s ago: executing program 4 (id=5426): r0 = socket(0x10, 0x803, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000005c0)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0xfffffffffffffffe}, 0x10) sendmsg$nl_route(r3, 0x0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000001440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3800000070cadcaac5913dde6e806280fdd0396fd888853dfa2f2fe81832461c00"/42, @ANYRES16=r6, @ANYBLOB="020027bd7000ffdbdf25010000001400070000000000000000000000ffffac1414bb08000800ac14140f080006000a010100"], 0x38}, 0x1, 0x0, 0x0, 0x200440c0}, 0x20000010) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000004c0), &(0x7f0000000500)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r9 = socket(0x1d, 0x6, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000000f857582c3a7ebd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="010000000000000000000000000000000000000016916e23d0945026363f0e9809073fae210ef318b6b161f0ba81cbcf05b5b8e74cd437095176c94142f472a72586d8a120f6f5e2b13f072af9fa329e817f188d3643206e9f7977d6bcc15993a893750295cd7ffe32978c9eef30d927515c8bc45b64eb6d0563708b634879cf0deb0bc8c62aa1beaf1b92dd780b52fecb794c07c6e8453441d49fb205875357fa41f18c4f19573082a29ae77260a50854a384c8601b7c37d065f615673698ef45b2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000ddf7ffff000009820000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b509000001000000dbaaf8ff10010000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r7, 0x1) 9.578194226s ago: executing program 2 (id=5427): syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x18, 0x70, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x80000006, 0x8, 0x9219, 0x8}, {0x6, 0x24, 0x1a, 0x3, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xb, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x30, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x3c, 0xdf}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x3, 0x2, 0x1, 0x10, 0x82}, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc0a}}]}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@can_delroute={0x14, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0x1d, 0x1, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) r6 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r6, 0x0, 0x400000000000000, 0x7) socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) 9.376952976s ago: executing program 3 (id=5428): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}}}, 0x24}}, 0x0) 9.322180188s ago: executing program 1 (id=5429): setgid(0xee01) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x1c243811) keyctl$chown(0x4, r0, 0xee00, 0x0) keyctl$read(0xb, r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x442000, 0x0) poll(&(0x7f0000000040), 0x0, 0x3) 8.868509248s ago: executing program 1 (id=5430): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000340)=""/189) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200000800350000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r6, 0x200, 0x10000, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x3a, 0x0, &(0x7f00000001c0)="63eced8e46dc3f0adf33c9f7b986402678e7de40c2f984a2bb4fe682345cad7b54dc06e325968cf9c6c17d29817032ce4bafe2dd6dcf5537dcf5", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$MSR(&(0x7f0000000400), 0x7, 0x0) 8.797046694s ago: executing program 0 (id=5431): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x1802, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)="8b"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 8.366005249s ago: executing program 4 (id=5432): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') syz_emit_ethernet(0x32, 0x0, 0x0) unshare(0x6a040000) socket(0x8, 0x3, 0x3) socket$inet6_udplite(0xa, 0x2, 0x88) close(0x4) 8.18144556s ago: executing program 3 (id=5433): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, &(0x7f0000000000), &(0x7f0000000140)) r3 = eventfd2(0x6, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000040)=r3, 0x1) io_uring_enter(r2, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='f2fs_destroy_extent_tree\x00', r0}, 0x18) r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r9, 0xc0109414, &(0x7f0000000940)={0x5e1, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180200000200000000000000000002008500000011000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x25dfdbfe, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x1}}, @TCA_CT_ZONE={0x6, 0x4, 0x1000}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x52}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x88}}, 0x0) 8.065890024s ago: executing program 1 (id=5434): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000008003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) setns(r2, 0x66020000) open_tree(0xffffffffffffff9c, 0x0, 0x89901) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x4, 0x8, 0x7ff}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r7) 5.673224217s ago: executing program 1 (id=5435): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x45, 0x1d, 0x93, 0x10, 0x14aa, 0x301, 0x1e08, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x0, 0x40, 0x40, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x8b, 0xbe, 0x86}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000006a0083130000000000000000000000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x20000081}, 0x40048c0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x0, 0xf9, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x3c, 0x2, 0x20, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x7800, 0x4, 0xf}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10a, 0x10a, 0x6, [@ptr={0x10}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x3}, @struct={0x2, 0x2, 0x0, 0x4, 0x0, 0x100, [{0xf, 0x2, 0xfe1}, {0x9, 0x1, 0x9}]}, @restrict={0x7, 0x0, 0x0, 0xb, 0x5}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @var={0xb, 0x0, 0x0, 0xe, 0x1}, @var={0x6, 0x0, 0x0, 0xe, 0x4, 0x1}, @datasec={0x1, 0x9, 0x0, 0xf, 0x2, [{0x2, 0x2, 0xf}, {0x4, 0x7fffffff, 0x6}, {0x5, 0xa475, 0x69}, {0x3, 0x21bd, 0x4}, {0x2, 0x293d78ce, 0x356}, {0x4, 0x0, 0x5}, {0x3, 0x9d, 0x4042}, {0x4, 0x8000, 0x10}, {0x5, 0x1, 0x5}], 'Ww'}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x32, 0x0, 0x5e, 0x1}]}, {0x0, [0x61, 0x5f, 0x2e, 0x30]}}, &(0x7f00000003c0)=""/52, 0x12a, 0x34, 0x1, 0x6, 0x10000}, 0x28) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$P9_RMKDIR(r4, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) write$char_usb(r4, &(0x7f0000000600)="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", 0xfec) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x26, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x5f}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @exit, @jmp={0x5, 0x1, 0xd, 0x5, 0x1, 0x30}, @generic={0x6, 0x9, 0x3, 0x3, 0x4953}, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x988a}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xd, 0xa, 0x2, 0xfffffffffffffff8, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0xa3, &(0x7f0000000240)=""/163, 0x41100, 0x2e, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x7, 0xe7, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x1, r4], 0x0, 0x10, 0x8}, 0x94) 5.511517002s ago: executing program 0 (id=5436): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000040)) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x12001, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000008c0)={0x2, 0x1, 0x4, {0x8, 0xffff, 0x44e, 0x9}}) ioctl(r1, 0x8, &(0x7f0000000900)="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") ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000001900)=0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001980)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001a00)={{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000001b00)=0xe8) syz_clone3(&(0x7f0000001e00)={0x2200000, &(0x7f0000001b40)=0xffffffffffffffff, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0, {0x12}, &(0x7f0000001c00)=""/226, 0xe2, &(0x7f0000001d00)=""/183, &(0x7f0000001dc0)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r1}}, 0x58) sendmsg$nl_generic(r1, &(0x7f0000002480)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002440)={&(0x7f0000001e80)={0x59c, 0x2c, 0x10, 0x70bd26, 0x25dfdbff, {0x11}, [@nested={0x24, 0xd3, 0x0, 0x1, [@typed={0x8, 0x151, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x49}, @typed={0x14, 0xf0, 0x0, 0x0, @ipv6=@loopback}]}, @generic="bbda187795a05ca2697382be0cb4ff53ac8088eff39b879193d4f7c446b94e7f66efae8caad48d99f37b65aca89e08cc0f32a51bdfd51a76cd66ee05bc9324be9c300faaebacc3", @nested={0x90, 0x10e, 0x0, 0x1, [@generic="8aa91802c14fed418e3d7669136188e20a095424574c5b485c9c07aa4426ce51ad6d50d2dbf1e263a2697d9f50f3a918328ccec0df52e6dea722fcd39fd5d7319b2c2ad03cfdc4e91baa214056d850889f301dc365f0499a690bf9b37e6fa6225b43f7dfc6af07d2", @typed={0x8, 0x13, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x12d, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @typed={0x8, 0xd2, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x11a, 0x0, 0x0, @u32=0xfff}, @nested={0x289, 0x114, 0x0, 0x1, [@generic="cdb9965102b6d820971abde15f23cfe7eb8765e780e8691ca7a2540e027d4167eb4bbef9a973fd160509509a735ae614d55c189ae751a2ca1d667884f9a116632c46d95b62f145a28f3e5e2d28b0908bc06a58b8b196c14f5feb3e3b328ee736acc65c4b3a450eccd0d1d5be37d16fa37bd0cd2a07482c5e42188371b5fc0749ea97e9a8b9a015aa2f3225bd785aa095680240b2d43cb3f0745b2bbf42f8b734c462de331a7bda6b37f35dccb76ee3f0c5080529a99d2cbc1c4c977fde527d054f2ba4a664f82e3593f9af35180eea", @generic="3c232817b053d2064e7021198f6046ea6a6b46030abd706375af6aa6a3ccac565e56bd33b555c5ea4c8bff1d40c868074f64dca02b03fd677d556f44a57e8fa8601ab304be7db97a4ed52c9a986095455749c58d45df620e8c337a9a86", @generic="d8a51dcaec5b443dfef65009dbca0dd057f24a9fef31df09bd94cd2d366732bcf14baff41176ea4a1877a4be51ed2d29ddda76bd4ac0a30b6bc62a262a6fc83f9a531081ff5d4b36c1834be2a5fc3c6e4b32d7b0e6352a514a288c94d122bfb7fed8ad75343968cc6335686406639512c77fa7c816da05f3310428cd", @typed={0xc, 0x97, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xe8}, @generic="d82b1d86090662abd5e3ed584e4b9bb97852b02301d03aac2772dc25a1bd45ba3182e82f5562ae2bfdc63bc53709d7c08f1146a7f1273fae094459f3ae5a6137a82fb6563737d34bdbcf7ea769796c3a371df33207166b6e6f5fb25369f231b7aa09398e7d754c336cb84d101a6f98caaf9d8518a23b5434136d749ba34c126c2df73d28a158ad421fc8d0c774d1fc0320c80ef4018815a991a72c779a74a63d7493115ec3e0d9f263f81a6e446b8d15ba873843c70d9705669cd134de31f77b5955083384797a049ba3d543ca"]}, @nested={0x134, 0x14f, 0x0, 0x1, [@nested={0x4, 0x118}, @generic="64930f034e9693d0ec1183768922aa088cb71e64f308e3475ca99e647c4bead22862d7d5aa65c2d3d6261fb192defa", @typed={0x8, 0xe6, 0x0, 0x0, @uid=r4}, @typed={0x14, 0x109, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x55}, @typed={0x8, 0x65, 0x0, 0x0, @pid=r6}, @generic="3f0c1a508cab80e3c1f8bf05ce23e07d591133d43c82ccddd7eb09bf3c00", @nested={0x4, 0x151}, @generic="68db426593213eb9fb044bb04853d273ab5a0e5938a271000a2aba5ae5c254db6a020e903e9e4a38e61df0abc94136602abb81310b5a8abd7ecc8e30e7e16d10e0c2c0e32e536f5d1aa16153151e0d8fd48fcd96135fbc33fa9561639a814c5b59195f41300acab85177168339ac4d768fc7a239565becc029288fcfdc2aac6380a330744142b4ad540fb91ef5acf7805149bd6d0694c305f938db80d3df22b111424a32e352e3500daa30489743ec846491b0"]}, @generic="85fa8a45cae340b33083d3a89fc18f7eca5568b5e66a8b059a5f7753a6ce191bbdaa2ad393519d19377a284387b9785487aa9eb3ebd8632e752ed634e64c42eb7f45bc5a5a4d373c2cf44e004503a195304817abcf9163e77c49b700366d502629fc88d8e9ac7fb5ca23de20ac746d032af3c84fe64b6a84fbaa3b07d912f0755bb001098d2110528db39b9f4fc618d33953c674aeee0515475e91180c8566d874f76a86999787937032a2d9dd02b531632f74", @nested={0x10, 0x57, 0x0, 0x1, [@typed={0x8, 0x113, 0x0, 0x0, @fd}, @nested={0x4, 0xb4}]}]}, 0x59c}, 0x1, 0x0, 0x0, 0x48000}, 0x4068001) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002540), r1) getpeername$packet(r1, &(0x7f0000002580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000025c0)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000026c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x6c, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc004}, 0x1) setsockopt$inet_opts(r1, 0x0, 0x2, &(0x7f0000002700)="081f872e1feac93447ef529b662f11c19530a35459eca3316df6624e923c6b4d9de21a6d8875d6a53b3e5dc3f3ab4c9f72db3a5479555646cd587a8a0fcae665553c4f7b5697a46e41b8739ecb67a4ffdd6068d40b004e90a5d0a34aea958735932fa78207d452f416703a539325b518da84202e95b077a7b7fbc64781093a1ef222c4832cbddc7d30e8f9d2354076c37aecf43fd041a487abc9d6a51b4ca44e5ec262abd4c6667e0f0ee05bf76772b5", 0xb0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000002800)={0x0, 0x101, 0x0, '\x00', &(0x7f00000027c0)=0xfb}) r9 = openat$cgroup_ro(r1, &(0x7f0000002840)='blkio.bfq.io_merged\x00', 0x0, 0x0) sendmsg(r0, &(0x7f0000002c00)={&(0x7f0000002880)=@isdn={0x22, 0x2, 0x4, 0x6, 0x6}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002900)="2f14d6433e9e8911d62eefb26d37a2b60fc28f1d6c0d24f207cdca5e8684faa407732acdfcfe83fa1bceb1a24d4aec", 0x2f}, {&(0x7f0000002940)="de81a74325a94ed2b267ac5b608a5d411ca38f47c6b8942b6bbde7e0f387ab77f4cb3403a9250d4e29635356d7603b19fb3d3a283b11689fb3f9bc038a2856b674b83566193abd0f64bb66a6cb7ed254673c8d6d94b68174c8", 0x59}, {&(0x7f00000029c0)="ee27126a2cf8002dc9ba289bb44bf7099de6b2432e042347a4a5c1fb084790095c65a44d77f96528b0ee801684fc2cf270c9a621a71c9da63628732e64b447d87175d1644eaf6c3a6643a3738651bf4f9fe074042275479d17de7eb391e3aa3f54a1d3ba6cb639fc8204f135bc6e144ac9532591544bb3", 0x77}, {&(0x7f0000002a40)="3904dff09081e8b386106c8235f1f45093415213f22b91b0f9f2645888b15802ffe7b98772bd9d3a836ea18cecf316d2e4f23e7bd1707e9b39a0c66597d36ccc930b6fa30aee855f1842eea21f1cb71d334f2d1cc6066722a7964128122356458b3c5feaf883fa2cb928bc2caa318a8aa3a40a01969e1ef8b0cb8c19f374c4", 0x7f}, {&(0x7f0000002ac0)="5c032e42e11ff827aaae09e6e81ec54c5a2dbe07c6697da90f9a3ab8a167859040b329577171f1b391beaaf4eaee9057833edabfb1df6d79a06c10d5630482a6cc9dd7b1139e5e56984ed3986d7ea97d6983a76a9df4a28e40ccdf54343878e4e94accab43dfb1b5", 0x68}, {&(0x7f0000002b40)="1174bcfaca57e0426da100769a21eac648dddefb59a771f1fc70f62633d2f5ca", 0x20}], 0x6}, 0x4048800) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000002c40)={0x5f, 0x8000000000000000, 0x3, 0x1, 0x5, 0x9}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, &(0x7f0000002c80)={0x2, 0x0, [{0xc000000e, 0x8000, 0x7, 0xfffffffb, 0x9, 0x0, 0x7}, {0xc, 0x9, 0x4, 0x8, 0x2, 0x37537f6f, 0xd2a6}]}) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002d00), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r10, &(0x7f0000002d40)={0x35, 0x3, 0x0, {0x5, 0x14, 0x0, 'blkio.bfq.io_merged\x00'}}, 0x35) syz_open_dev$loop(&(0x7f0000002d80), 0x0, 0x8a0) r11 = open_tree(r9, &(0x7f0000002dc0)='./file0\x00', 0x1) socket$isdn_base(0x22, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000002e40)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x0, 0x1c0, 0xd0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, &(0x7f0000002e00), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xf}, [0x0, 0xffffff00], [0xff000000, 0x0, 0xff, 0xff], 'wlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x16, 0x0, 0x5, 0x6}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x80000000, {0x5}}}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@frag={{0x30}, {[0x800000, 0x3], 0x9, 0x20, 0x3}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffff00], 0x4e24, 0x4e22, 0x4e24, 0x4e20, 0xffffffff, 0x3ff, 0xfffffffd, 0xd, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) bind$inet(r11, &(0x7f0000003280)={0x2, 0x4e20, @multicast1}, 0x10) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r12, &(0x7f0000003380)={&(0x7f00000032c0), 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x10, 0x3f5, 0x20, 0x70bd28, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10008895}, 0x8081) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000003400)={0x18, 0x0, 0x0, {0xc}}, 0x18) 5.51008363s ago: executing program 2 (id=5437): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001300)="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", 0xd33}, {&(0x7f00000005c0)="e62fcd03b561fc06e7e6ec62e7eea2784cf9ab54b3da1b7cae0962d4e63694f475a231db5f0fb59b8baaca9c5d4cdb81952c9fc851e16338ffbc3ab32bca6d54c6d2c5261ceeda2cfe16472b3a790b8311e5ad79d904343745e8e9a25f5678475371256550d33971df716f54dd5b658ae5510adbf53e9b948fa4d060e3092ca478e48e99", 0x84}], 0x3, 0x0, 0x0, 0x2c}, 0x4004814) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) getitimer(0x0, &(0x7f0000000000)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 5.508609024s ago: executing program 3 (id=5438): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0xa000, 0x0) readv(r3, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000580)={'nat\x00', 0x0, 0x0, 0x0, [0xa1, 0x0, 0xf, 0x98, 0x3, 0x5], 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}]}, 0xc8) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x4}, 0x18) socket$inet6(0xa, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0xa4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) listen(r6, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3.850183459s ago: executing program 0 (id=5439): futex(0x0, 0x9, 0x0, 0x0, &(0x7f0000000000), 0x14fffffe) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000003080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = msgget$private(0x0, 0x200) msgsnd(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0xff, 0x0) msgrcv(r4, &(0x7f0000000f40)={0x0, ""/255}, 0x107, 0xffffffffffffffff, 0x2000) msgsnd(r4, &(0x7f0000000340)={0x3}, 0x8, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x50) close(0x3) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0xf9fdffffffffffff, 0x0) 3.791021444s ago: executing program 2 (id=5440): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x800, 0x0, 0x3, 0x0, 0xf, 0x1}, 0x20) (async) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) (async) setsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f00000000c0)="1981d90dfa1dc00757d52587e1b419e723857878c7de91dc0b5b778b00772ea8bb74fc549e62e8e23d7d80bf5a59cd5d515a984a28d112d1ab0f504a888e3e32f1b16b698e2580004051392fcf36", 0x4e) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9d679a613b8016993e90bf2a2b3a8e561c1fde13350ac0649ffc8726a1654d753aecbf8b4fe21aa62978ebee6b26b2e0a830a17d08bdda7db4cef025e283572d", 0x40}, {&(0x7f0000000180)="084c10cbb8854444acee2685191d1423f49d5b9671406c6ca2bac37ca99efd22f2162f4b1ce4ec2104e467d1b597696d8f1c6432213ff03c6647f902f96b27f6afdf833482b5c8c1aa458f8ff3d36f011f0ff5fd6ebd85c0dff2f8", 0x5b}, {&(0x7f0000000200)="54c14fbed67e91b7189db2914fc24350a5cf013242d739827180c297b30b0bab092a20d3f68f3d3a568d4d28c0d037b6f5df08958b1ea4d441016a86c9f42824a5a75b9f40d4fc1434900591c41363012bb4698401a4285f6b4abd09be1c118a2160", 0x62}, {&(0x7f0000000280)="dc90", 0x2}, {&(0x7f00000002c0)="da909cdd0927fc8bc36b47fcf229c8f0a41d33a275fd6e2862d25f3c29534c4d7f4bf891de1cb2e41d3a476c2ab278d5032917c52364a216e71a43b0a751dc89324852d0", 0x44}, {&(0x7f0000000340)="4509bd5f8163e54fbb088a1a0db4061696d9c4e245d07afc652856fa8fa3749bab8dd533e0b0202d601976f021bbc750043bfc604b74869393b8c0249f70c2f769902c0ee057c02c867ed8e0cd0f7fa417241d913edecc2aa67bce762398572b9010655dd99f1630bd839bbef3dcd2e05e712dc9", 0x74}, {&(0x7f00000003c0)="1d9cc9f6ad55329c3f68b16cf8b5009ec092e617eb5ba92970ec2b72eca04225cb87ad0e8c4920f5265cfba4682f8abb7900cac2fc0f358ebd84acb89e837d365a880bc4619341996cd67a7f398855089f2ad5b69cf755942873ba6c27bbf846c72ad9865ab0233457c8f6bf23b9d5747b1e6051f607e128a44122502bf9d794419e56046969fe5233d83982c8a7b1ac80a2dee56d936e8655d5818ad3f9c0f4a57ae74218", 0xa5}], 0x7, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_retopts={{0x98, 0x0, 0x7, {[@rr={0x7, 0x23, 0xe9, [@broadcast, @remote, @remote, @multicast2, @local, @empty, @local, @dev={0xac, 0x14, 0x14, 0x29}]}, @timestamp_addr={0x44, 0x54, 0x91, 0x1, 0xc, [{@empty, 0xf}, {@remote, 0xc}, {@rand_addr=0x64010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x8}, {@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@broadcast, 0x107}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0x1}]}, @generic={0x82, 0xe, "60db5dbeb7ef90d705eeb61c"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @rand_addr=0x64010101}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x83, 0xa, "31b1a27b82d4c8dc"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_ttl={{0x14, 0x0, 0x2, 0xbdc}}], 0x120}, 0x4091) (async, rerun: 64) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000700)=""/26, &(0x7f0000000740)=0x1a) (async, rerun: 64) getpid() (async) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000780)={0x9, {{0xa, 0x4e24, 0x6, @loopback, 0x1}}}, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'veth1_to_bond\x00'}) (async, rerun: 32) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000880)=0x10, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000008c0)={@private2, r1}, 0x14) (async, rerun: 32) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000940)={0x0, 0x15, "f83b984fde42b743b65ed32f4fac8c5f4e27876e60"}, &(0x7f0000000980)=0x1d) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000009c0)={r5, 0xf8f4}, 0x8) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0x810, r3, 0x74c1b000) (async) madvise(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x65) (async, rerun: 64) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000a40), r4) (rerun: 64) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000a80)={0xfcc, r6, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x22b2}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PEERS={0x3e0, 0x8, 0x0, 0x1, [{0x3dc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x248, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x180, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PEERS={0xb90, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "daffc34963a1fb3cb125b8cf730eaead1196af71b9388554b82ec7106daea101"}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}]}, {0x2c4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xc00, @empty, 0x4}}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5f22b3cba416c0bd34aa613aa2b3166e9263e7b8c95d574d08400e218d6bc00b"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x360, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2f8, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}, {0x420, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3f8, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0xe6}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x4}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0xa, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ae46f73e5fa637392c18f4861ecc0d56f466726ce8a6eb6d13d25d65e7a4fae3"}]}]}]}, 0xfcc}, 0x1, 0x0, 0x0, 0x4040000}, 0x24040010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ec0)={r3, 0xe0, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001c00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000001c40)=[0x0, 0x0], &(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f0000001cc0)=[{}], 0x8, 0x10, &(0x7f0000001d00), &(0x7f0000001d40), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000001d80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0xc, 0xb, &(0x7f0000001b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0x7, 0x4, 0x4, 0x6, 0x3}, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xe5d4}, @jmp={0x5, 0x0, 0x0, 0x6, 0x5, 0x6, 0x8}, @alu={0x0, 0x1, 0x5, 0xb, 0xa, 0xffffffffffffffc0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001b80)='syzkaller\x00', 0xbd, 0x0, 0x0, 0x41100, 0x9, '\x00', r1, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001bc0)={0x1, 0x7, 0x8, 0x4}, 0x10, r7, r4, 0x3, &(0x7f0000001f00)=[r3, r3, r3], &(0x7f0000001f40)=[{0x1, 0x3, 0x0, 0xb}, {0x1, 0x2, 0x5, 0x3}, {0x2, 0x5, 0x10, 0x7}], 0x10, 0x7}, 0x94) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x58, 0x15, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x12, 0x8, "e139ca29ae155b37bc42695803d3"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x44000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002180)) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000021c0)={0x2, 'batadv_slave_1\x00', {0x7}, 0x6}) (async, rerun: 64) recvfrom$l2tp6(r4, &(0x7f0000002200)=""/49, 0x31, 0x10000, &(0x7f0000002240)={0xa, 0x0, 0x0, @private1}, 0x20) (async, rerun: 32) getresgid(&(0x7f0000002280), &(0x7f00000022c0), &(0x7f0000002300)) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x54, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xaf0}]}, 0x54}, 0x1, 0x0, 0x0, 0x10044000}, 0x3) 2.962475609s ago: executing program 2 (id=5441): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2}) r2 = userfaultfd(0x801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f00000000c0)=@ethtool_cmd={0x25, 0x2, 0x9, 0xb, 0x3, 0xa5, 0x8, 0xf3, 0x6, 0x97, 0x1, 0x5, 0x6, 0x6, 0x3, 0xb4, [0xfffffffb, 0x48000]}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) syz_io_uring_setup(0x1371, &(0x7f00000000c0)={0x0, 0x49fe, 0x2000, 0xfffffffd, 0x4e}, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) sendmmsg$unix(r0, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x11, 0x0, 0xa4ff) 2.673018614s ago: executing program 1 (id=5442): r0 = socket(0x10, 0x803, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000005c0)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0xfffffffffffffffe}, 0x10) sendmsg$nl_route(r3, 0x0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000001440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3800000070cadcaac5913dde6e806280fdd0396fd888853dfa2f2fe81832461c00"/42, @ANYRES16=r6, @ANYBLOB="020027bd7000ffdbdf25010000001400070000000000000000000000ffffac1414bb08000800ac14140f080006000a010100"], 0x38}, 0x1, 0x0, 0x0, 0x200440c0}, 0x20000010) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000004c0), &(0x7f0000000500)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r9 = socket(0x1d, 0x6, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000000f857582c3a7ebd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="010000000000000000000000000000000000000016916e23d0945026363f0e9809073fae210ef318b6b161f0ba81cbcf05b5b8e74cd437095176c94142f472a72586d8a120f6f5e2b13f072af9fa329e817f188d3643206e9f7977d6bcc15993a893750295cd7ffe32978c9eef30d927515c8bc45b64eb6d0563708b634879cf0deb0bc8c62aa1beaf1b92dd780b52fecb794c07c6e8453441d49fb205875357fa41f18c4f19573082a29ae77260a50854a384c8601b7c37d065f615673698ef45b2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000ddf7ffff000009820000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b509000001000000dbaaf8ff10010000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r7, 0x1) 2.591929053s ago: executing program 0 (id=5443): socket$inet6(0xa, 0x80002, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x80400, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0xa, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x1, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xf, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x80000001, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 2.538580237s ago: executing program 4 (id=5444): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001380)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000580)="c6e534fab98f779b34374d71beef17a7a031805ec35c9e47e12d28be7865660421ef2430da15fa3722d0fe3bc3eb50af01df58330494418e75813252847149d7dc3aaf85d714a6a0372c71f3a3b7c3ae7d3833100d86009aea8976001a3024f7561a5e92a2f780b7e705155e5f0ad51e2d07ed8d692ff7976761cc7bafd8d6c5bb41aa5608e95e6efda53c22a3ca4e0f03a5afafc1", 0x95}, {&(0x7f0000000640)="a3d0704b56d94ee687ccea6a87e0e284e95e7279b0da24a44ed78c4a4ee4927da7df79e8f40a5a30acb0fef98971912d0dd00158f52b3d160b4b0660542b0d2200fc06286fbbe984151934c6750014583ae8", 0x52}, {&(0x7f00000006c0)="5ff3e8064731fb09656a71e6cdbb1c161cfce7bcc57ad242df9b92dd74a4309edea4d39648d5c98fc8f64aed0111fd2f126c5ba4dc2a51462a0d88c106fb23b55f203d30977f985d43226132d377f7c0c501bbad68cf3a102832aec82a90baa4a39976052e5d6cc867ab16f6ec49581094339d78183b7f003b294dfb44b128142159374743e8d90bbedfd24062eedd4b285f7af9a94c56fe45e2384fbe7f2561470506d03118cc959b5b8d472f44349d0ab55ef758f172246c05a5a8dc47471a8fd392", 0xc3}, {&(0x7f0000000240)="462466e0ca14a0df262400fdbbf7c22590f5b560a0c6c6", 0x17}, {&(0x7f00000007c0)="90c02a49cb8a6a199754024e64b42eb1d0671be9180c1eb4b4ce926251813cbce0cb1c57ce49bebff8d7102bb24d68062d04823b13b76e7a627fe6bc9e973b19e32d30278f4e21633d", 0x49}], 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000632377febb5d03dd49b11d50351962e08adb243efd84cce5063d80", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x138, 0x40}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000ec0)="a62e5407cd1c0b1a57b8ae15da2d3c00c3c8fb508cb4f71c1a32ba74fa27cacba1aa3050a4adf43762a5e5a270905d4302f21df6587e53e88d40cbb4d38025453283152bbb75bc0fd21e82166df5afdd4fd54cbde607fa87cbc3f873a63946902f5e2a145842cee1fe7786ea300039ec4bee5a4eeb3a592e26ad19bafc24166da5f5ba7bec10eed0c64747e720716c56d515dbed222df82b929075", 0x9b}, {&(0x7f0000000f80)="230d188a2d406b1e1f8821afad08a36e514f5acb2a9914c91213cbab6e0a368f29c789f2e21138298972d12b0cf59fe947bb055a914fa11bf78676f9502c57c6533c7de7027e9a4d1182164dae3c94dc5c5b4bd57ce0cc39752d307be7a6bf6cc7170d898a5fc7ead73ab9657a70799fd1fb79622f97589a33dc1fc5cb26d6ecbac6c0ea1af11f37ae029205cef9fe4def0bc2cf010839e1c35a4f4948dcf20f6628ca6ee4a9c538d77260a1780bcf0c443cd8299a88ec57de29", 0xba}, {&(0x7f0000001040)="a947fddf1c56a14d0793247179b0d59906b9626e255398cf166066b799768ffd707370cfc095e2eb51e4938d790e61f5cee8864b5591a146842226a06797a2e3ca456e1355921c643ecebd43e0aa4f560acb012574bfe9268cf0ae089fb4be2232e147927ef3df46008a65a8cd48c631e05aa06bb7cd292d4463ec9542f2344cc28ce928ed4ce8e2db2da40632782e8a902d3cfe44e1cb05c1e1f0abd76d57bae9b0417f67ade1cccbafcff7c6db81", 0xaf}, {&(0x7f0000001100)="ecc7df20eb8404c7b23951791bf3f3b9da26147743773fa57a10caf2f05fd950ff1672984ccd6e5de1", 0x29}], 0x4, &(0x7f0000001300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58, 0x800}}], 0x2, 0x2000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040044) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r6 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r6, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x10, 0x2, 0x0) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, 0x0) 2.039771771s ago: executing program 2 (id=5445): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x0, 0xa}, [@mbim_extended={0x8, 0x24, 0x1c, 0x100, 0x1, 0x100}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x60, 0x2, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getuid() syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0xa941, 0x8, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x1000, 0x5, 0x81, 0x4, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.071023267s ago: executing program 0 (id=5446): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x1a0, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "a79798", 0x16a, 0x6, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0xff, 0x0, 0x6, 0x0, 0x0, 0x1f, 0x65}, @fragment={0x3a, 0x0, 0x2, 0x0, 0x0, 0x8, 0x66}, @hopopts={0x5c, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}]}, @hopopts={0x33, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @generic={0x1, 0x9b, "3941b6b496fe5ecd7dd535b8f9f4d9fbab2cb49a3ff5b42eacb0584da26658e6658c1508bd4fce390a8bf72a44c678584c44ea539aeeeba84f7b3bec0ac596322fbcd884701b40380e21a0ca2c49d2a440bd59a63d558c756278e1c1e2ac714e9f6641d1c3518d27fe9cecec95cd36e645ec8035248efb18eeaf2e57e0f37d72d3d4cdbfc7e7241e64a5e7164c7b814a12497de29c804fde057d24"}]}, @srh={0xff, 0x2, 0x4, 0x1, 0x2, 0x30, 0x1, [@dev={0xfe, 0x80, '\x00', 0x13}]}, @routing={0x32, 0x8, 0x0, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}]}], @payload_mcast={{{{{{0x32, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x8, 0x0, 0x2, 0x9, 0x5, 0x1, 0xe, 0x7, 0x1ff, 0x4e24, 0x4e23}, 0x2, 0x2}, 0x1, 0x1}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 497.028976ms ago: executing program 4 (id=5447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffff61) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) flock(r1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 0s ago: executing program 1 (id=5448): syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x18, 0x70, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x80000006, 0x8, 0x9219, 0x8}, {0x6, 0x24, 0x1a, 0x3, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xb, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x30, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x3c, 0xdf}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x3, 0x2, 0x1, 0x10, 0x82}, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc0a}}]}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@can_delroute={0x1c, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0x1d, 0x1, 0x7}, [@CGW_LIM_HOPS={0x5, 0xd, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r5, 0x0, 0x400000000000000, 0x7) socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) kernel console output (not intermixed with test programs): 0431][ T2199] bond0: (slave bond_slave_0): interface is now down [ 1878.839762][ T2199] bond0: (slave bond_slave_1): interface is now down [ 1878.859953][T19450] Bluetooth: hci0: command 0x0c1a tx timeout [ 1878.861473][T24157] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1878.994465][ T13] bond0: (slave bond_slave_0): interface is now down [ 1879.030918][ T13] bond0: (slave bond_slave_1): interface is now down [ 1879.259882][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1879.580165][ T4029] bond0: (slave bond_slave_0): interface is now down [ 1880.289774][ T4029] bond0: (slave bond_slave_1): interface is now down [ 1880.299910][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1880.339828][ T4029] bond0: (slave bond_slave_0): interface is now down [ 1880.346546][ T4029] bond0: (slave bond_slave_1): interface is now down [ 1880.409821][ T13] bond0: (slave bond_slave_0): interface is now down [ 1880.416541][ T13] bond0: (slave bond_slave_1): interface is now down [ 1880.524658][T19942] bond0: (slave bond_slave_0): interface is now down [ 1880.550254][T19942] bond0: (slave bond_slave_1): interface is now down [ 1880.594222][T26862] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1880.609947][T19942] bond0: (slave bond_slave_0): interface is now down [ 1880.693151][T19942] bond0: (slave bond_slave_1): interface is now down [ 1880.913207][T19048] bond0: (slave bond_slave_0): interface is now down [ 1880.969985][T19244] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1881.339872][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1881.372440][T19048] bond0: (slave bond_slave_1): interface is now down [ 1881.450373][T19048] bond0: (slave bond_slave_0): interface is now down [ 1881.472834][T19048] bond0: (slave bond_slave_1): interface is now down [ 1881.492047][T26864] overlay: ./file0 is not a directory [ 1881.569905][T19970] bond0: (slave bond_slave_0): interface is now down [ 1881.609821][T19244] usb 3-1: Using ep0 maxpacket: 16 [ 1881.623178][T19244] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1881.650100][T19244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1881.684703][T19244] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1881.703487][T19970] bond0: (slave bond_slave_1): interface is now down [ 1881.729767][T19244] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1881.779068][T26880] bridge_slave_0: left allmulticast mode [ 1881.785006][T26880] bridge_slave_0: left promiscuous mode [ 1881.793608][T26879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51824 sclass=netlink_route_socket pid=26879 comm=syz.4.5132 [ 1881.831473][T19244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.890158][T26880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1881.911705][T19970] bond0: (slave bond_slave_0): interface is now down [ 1881.981990][T26880] bridge_slave_1: left allmulticast mode [ 1881.987800][T26880] bridge_slave_1: left promiscuous mode [ 1881.993777][T19970] bond0: (slave bond_slave_1): interface is now down [ 1882.001535][T19244] usb 3-1: config 0 descriptor?? [ 1882.010512][T26880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1882.043890][T19244] usbhid 3-1:0.0: can't add hid device: -22 [ 1882.074331][T19244] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 1882.099930][T19970] bond0: (slave bond_slave_0): interface is now down [ 1882.123314][T19970] bond0: (slave bond_slave_1): interface is now down [ 1882.168658][T26888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5133'. [ 1882.199896][T19970] bond0: (slave bond_slave_0): interface is now down [ 1882.207735][T19970] bond0: (slave bond_slave_1): interface is now down [ 1882.275260][T19970] bond0: (slave bond_slave_0): interface is now down [ 1882.289752][T19970] bond0: (slave bond_slave_1): interface is now down [ 1882.379854][T19048] bond0: (slave bond_slave_0): interface is now down [ 1882.379916][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1882.419154][T26879] can: request_module (can-proto-0) failed. [ 1882.539844][T19048] bond0: (slave bond_slave_1): interface is now down [ 1883.090452][T26880] bond0: (slave bond_slave_0): Releasing backup interface [ 1883.106759][ T3005] bond0: (slave bond_slave_0): interface is now down [ 1883.114587][ T3005] bond0: (slave bond_slave_1): interface is now down [ 1883.154323][T26880] bond0: (slave bond_slave_1): Releasing backup interface [ 1883.180033][ T3005] bond0: (slave bond_slave_0): interface is now down [ 1883.190705][ T3005] bond0: (slave bond_slave_1): interface is now down [ 1883.209419][T26880] team0: Port device team_slave_0 removed [ 1883.257428][ T5959] bond0: (slave bond_slave_0): interface is now down [ 1883.265604][ T5959] bond0: (slave bond_slave_1): interface is now down [ 1883.291674][T26880] team0: Port device team_slave_1 removed [ 1883.300503][T26880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1883.308442][T26880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1883.319364][T26880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1883.349843][ T3005] bond0: (slave bond_slave_0): interface is now down [ 1883.357420][ T3005] bond0: (slave bond_slave_1): interface is now down [ 1883.371878][T26880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1883.406670][T26880] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1883.440046][ T13] bond0: (slave bond_slave_0): interface is now down [ 1883.451448][ T13] bond0: (slave bond_slave_1): interface is now down [ 1883.520054][ T3005] bond0: (slave bond_slave_0): interface is now down [ 1883.526821][ T3005] bond0: (slave bond_slave_1): interface is now down [ 1883.621306][T26881] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 1883.710069][T19970] bond0: (slave bond_slave_0): interface is now down [ 1883.718696][T19970] bond0: (slave bond_slave_1): interface is now down [ 1883.790016][ T3005] bond0: (slave bond_slave_0): interface is now down [ 1883.810387][ T3005] bond0: (slave bond_slave_1): interface is now down [ 1883.914391][T20673] bond0: (slave bond_slave_0): interface is now down [ 1883.934010][T20673] bond0: (slave bond_slave_1): interface is now down [ 1884.011261][T20131] usb 3-1: USB disconnect, device number 88 [ 1884.033139][T20673] bond0: now running without any active interface! [ 1884.459942][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1884.868564][T26914] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5140'. [ 1885.218843][T26918] bridge5: entered allmulticast mode [ 1885.228920][T26917] bridge5: left allmulticast mode [ 1885.452675][T26928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5143'. [ 1885.460107][T26924] loop7: detected capacity change from 0 to 2 [ 1885.499863][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1886.006231][T26924] loop7: detected capacity change from 2 to 1 [ 1886.255331][T26924] Dev loop7: unable to read RDB block 1 [ 1886.333298][T26924] loop7: unable to read partition table [ 1886.388784][T26924] loop7: partition table beyond EOD, truncated [ 1886.427401][T26924] loop_reread_partitions: partition scan of loop7 ((õÉê—) failed (rc=-5) [ 1886.539903][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1887.579868][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1888.619872][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1888.880015][T26963] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 1888.893462][T26963] team0: Port device batadv8 added [ 1889.101127][T26975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5153'. [ 1889.481660][T26983] FAULT_INJECTION: forcing a failure. [ 1889.481660][T26983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1889.503761][T26982] bridge5: entered allmulticast mode [ 1889.530274][T26983] CPU: 1 UID: 0 PID: 26983 Comm: syz.0.5156 Not tainted syzkaller #0 PREEMPT(full) [ 1889.530303][T26983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1889.530315][T26983] Call Trace: [ 1889.530322][T26983] [ 1889.530332][T26983] dump_stack_lvl+0x16c/0x1f0 [ 1889.530360][T26983] should_fail_ex+0x512/0x640 [ 1889.530384][T26983] _copy_from_user+0x2e/0xd0 [ 1889.530405][T26983] copy_msghdr_from_user+0x98/0x160 [ 1889.530425][T26983] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1889.530455][T26983] ? __pfx__kstrtoull+0x10/0x10 [ 1889.530484][T26983] ___sys_sendmsg+0xfe/0x1d0 [ 1889.530506][T26983] ? __pfx____sys_sendmsg+0x10/0x10 [ 1889.530541][T26983] ? find_held_lock+0x2b/0x80 [ 1889.530580][T26983] __sys_sendmmsg+0x200/0x420 [ 1889.530601][T26983] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1889.530628][T26983] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1889.530665][T26983] ? fput+0x70/0xf0 [ 1889.530691][T26983] ? ksys_write+0x1ac/0x250 [ 1889.530714][T26983] ? __pfx_ksys_write+0x10/0x10 [ 1889.530742][T26983] __x64_sys_sendmmsg+0x9c/0x100 [ 1889.530761][T26983] ? lockdep_hardirqs_on+0x7c/0x110 [ 1889.530783][T26983] do_syscall_64+0xcd/0xf80 [ 1889.530807][T26983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.530827][T26983] RIP: 0033:0x7fd75f78f749 [ 1889.530841][T26983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1889.530858][T26983] RSP: 002b:00007fd760647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1889.530876][T26983] RAX: ffffffffffffffda RBX: 00007fd75f9e5fa0 RCX: 00007fd75f78f749 [ 1889.530888][T26983] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1889.530899][T26983] RBP: 00007fd760647090 R08: 0000000000000000 R09: 0000000000000000 [ 1889.530911][T26983] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 1889.530922][T26983] R13: 00007fd75f9e6038 R14: 00007fd75f9e5fa0 R15: 00007ffcf1bfe3b8 [ 1889.530951][T26983] [ 1889.733862][ C1] vkms_vblank_simulate: vblank timer overrun [ 1889.740384][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1890.138008][T26985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5157'. [ 1890.229965][T20131] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1890.244018][T26997] FAULT_INJECTION: forcing a failure. [ 1890.244018][T26997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1890.359895][T26997] CPU: 0 UID: 0 PID: 26997 Comm: syz.0.5161 Not tainted syzkaller #0 PREEMPT(full) [ 1890.359914][T26997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1890.359921][T26997] Call Trace: [ 1890.359925][T26997] [ 1890.359930][T26997] dump_stack_lvl+0x16c/0x1f0 [ 1890.359947][T26997] should_fail_ex+0x512/0x640 [ 1890.359962][T26997] _copy_from_user+0x2e/0xd0 [ 1890.359974][T26997] copy_msghdr_from_user+0x98/0x160 [ 1890.359986][T26997] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1890.359997][T26997] ? __lock_acquire+0x433/0x22f0 [ 1890.360018][T26997] ___sys_sendmsg+0xfe/0x1d0 [ 1890.360030][T26997] ? __pfx____sys_sendmsg+0x10/0x10 [ 1890.360041][T26997] ? __lock_acquire+0x433/0x22f0 [ 1890.360075][T26997] __sys_sendmsg+0x16d/0x220 [ 1890.360086][T26997] ? __pfx___sys_sendmsg+0x10/0x10 [ 1890.360107][T26997] do_syscall_64+0xcd/0xf80 [ 1890.360121][T26997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.360133][T26997] RIP: 0033:0x7fd75f78f749 [ 1890.360143][T26997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1890.360154][T26997] RSP: 002b:00007fd760647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1890.360165][T26997] RAX: ffffffffffffffda RBX: 00007fd75f9e5fa0 RCX: 00007fd75f78f749 [ 1890.360173][T26997] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1890.360179][T26997] RBP: 00007fd760647090 R08: 0000000000000000 R09: 0000000000000000 [ 1890.360186][T26997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1890.360192][T26997] R13: 00007fd75f9e6038 R14: 00007fd75f9e5fa0 R15: 00007ffcf1bfe3b8 [ 1890.360208][T26997] [ 1890.419918][T20131] usb 5-1: Using ep0 maxpacket: 8 [ 1890.779858][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1890.819803][T24157] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1890.826920][T24157] Bluetooth: hci0: command 0x0c1a tx timeout [ 1890.981043][ T30] audit: type=1400 audit(1764771408.230:729): avc: denied { ioctl } for pid=26994 comm="syz.3.5160" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1890.986544][T27005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5163'. [ 1891.006084][ C1] vkms_vblank_simulate: vblank timer overrun [ 1891.081365][T20131] usb 5-1: no configurations [ 1891.085997][T20131] usb 5-1: can't read configurations, error -22 [ 1891.819863][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1891.929973][T20131] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1892.267504][T20131] usb 5-1: Using ep0 maxpacket: 8 [ 1892.290811][T20131] usb 5-1: no configurations [ 1892.295436][T20131] usb 5-1: can't read configurations, error -22 [ 1892.859891][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1893.041600][T27030] FAULT_INJECTION: forcing a failure. [ 1893.041600][T27030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1893.067945][ T30] audit: type=1400 audit(1764771410.310:730): avc: denied { name_bind 0x1000000 } for pid=27027 comm="syz.0.5170" path="socket:[85437]" dev="sockfs" ino=85437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1893.150663][T27030] CPU: 0 UID: 0 PID: 27030 Comm: syz.4.5169 Not tainted syzkaller #0 PREEMPT(full) [ 1893.150688][T27030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1893.150695][T27030] Call Trace: [ 1893.150699][T27030] [ 1893.150706][T27030] dump_stack_lvl+0x16c/0x1f0 [ 1893.150724][T27030] should_fail_ex+0x512/0x640 [ 1893.150739][T27030] _copy_to_user+0x32/0xd0 [ 1893.150752][T27030] simple_read_from_buffer+0xcb/0x170 [ 1893.150769][T27030] proc_fail_nth_read+0x197/0x240 [ 1893.150782][T27030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1893.150795][T27030] ? rw_verify_area+0xcf/0x6c0 [ 1893.150806][T27030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1893.150818][T27030] vfs_read+0x1e4/0xcf0 [ 1893.150831][T27030] ? __pfx___mutex_lock+0x10/0x10 [ 1893.150847][T27030] ? __pfx_vfs_read+0x10/0x10 [ 1893.150863][T27030] ? __fget_files+0x20e/0x3c0 [ 1893.150883][T27030] ksys_read+0x12a/0x250 [ 1893.150895][T27030] ? __pfx_ksys_read+0x10/0x10 [ 1893.150913][T27030] do_syscall_64+0xcd/0xf80 [ 1893.150929][T27030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.150942][T27030] RIP: 0033:0x7f63e2d8e15c [ 1893.150952][T27030] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1893.150963][T27030] RSP: 002b:00007f63e3c97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1893.150975][T27030] RAX: ffffffffffffffda RBX: 00007f63e2fe5fa0 RCX: 00007f63e2d8e15c [ 1893.150982][T27030] RDX: 000000000000000f RSI: 00007f63e3c970a0 RDI: 0000000000000004 [ 1893.150989][T27030] RBP: 00007f63e3c97090 R08: 0000000000000000 R09: 0000000000000000 [ 1893.150996][T27030] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1893.151003][T27030] R13: 00007f63e2fe6038 R14: 00007f63e2fe5fa0 R15: 00007fff6e605418 [ 1893.151019][T27030] [ 1893.540062][T20131] usb usb5-port1: attempt power cycle [ 1893.602233][ T30] audit: type=1400 audit(1764771410.850:731): avc: denied { execmod } for pid=27021 comm="syz.1.5168" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=85436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1893.762357][T27035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5170'. [ 1893.769949][T27043] FAULT_INJECTION: forcing a failure. [ 1893.769949][T27043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1893.812789][T27043] CPU: 1 UID: 0 PID: 27043 Comm: syz.2.5172 Not tainted syzkaller #0 PREEMPT(full) [ 1893.812817][T27043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1893.812829][T27043] Call Trace: [ 1893.812836][T27043] [ 1893.812845][T27043] dump_stack_lvl+0x16c/0x1f0 [ 1893.812872][T27043] should_fail_ex+0x512/0x640 [ 1893.812897][T27043] _copy_from_user+0x2e/0xd0 [ 1893.812918][T27043] move_addr_to_kernel+0x65/0x170 [ 1893.812946][T27043] __sys_bind+0x11b/0x260 [ 1893.812972][T27043] ? __pfx___sys_bind+0x10/0x10 [ 1893.812996][T27043] ? __fget_files+0x20e/0x3c0 [ 1893.813031][T27043] ? __pfx_ksys_write+0x10/0x10 [ 1893.813061][T27043] __x64_sys_bind+0x72/0xb0 [ 1893.813085][T27043] ? lockdep_hardirqs_on+0x7c/0x110 [ 1893.813106][T27043] do_syscall_64+0xcd/0xf80 [ 1893.813131][T27043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.813150][T27043] RIP: 0033:0x7fe91cb8f749 [ 1893.813166][T27043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1893.813185][T27043] RSP: 002b:00007fe91daae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1893.813204][T27043] RAX: ffffffffffffffda RBX: 00007fe91cde5fa0 RCX: 00007fe91cb8f749 [ 1893.813217][T27043] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 1893.813229][T27043] RBP: 00007fe91daae090 R08: 0000000000000000 R09: 0000000000000000 [ 1893.813241][T27043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1893.813253][T27043] R13: 00007fe91cde6038 R14: 00007fe91cde5fa0 R15: 00007fff20ac2678 [ 1893.813283][T27043] [ 1893.977839][ C1] vkms_vblank_simulate: vblank timer overrun [ 1894.340332][ T30] audit: type=1400 audit(1764771411.590:732): avc: denied { write } for pid=27047 comm="syz.2.5173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1895.019859][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1895.612666][T27063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5178'. [ 1895.900833][T27057] overlayfs: overlapping lowerdir path [ 1896.001265][T27059] overlayfs: overlapping lowerdir path [ 1896.059955][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1896.630263][T20131] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1896.791220][T20131] usb 4-1: Using ep0 maxpacket: 8 [ 1896.801485][T20131] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1896.809899][T20131] usb 4-1: config 0 has no interface number 0 [ 1896.830643][T20131] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1896.845721][T20131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.874129][T20131] usb 4-1: Product: syz [ 1896.878334][T20131] usb 4-1: Manufacturer: syz [ 1896.899971][T20131] usb 4-1: SerialNumber: syz [ 1896.915426][T20131] usb 4-1: config 0 descriptor?? [ 1897.099918][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1897.215376][T27093] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5187'. [ 1897.264226][T20131] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1897.300781][T20131] uvcvideo 4-1:0.31: No valid video chain found. [ 1897.329295][T27097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5187'. [ 1897.490549][T22473] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1897.499116][T20131] usb 4-1: USB disconnect, device number 80 [ 1898.077489][T22473] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 1898.102001][T22473] usb 2-1: config 0 has no interface number 0 [ 1898.115669][T22473] usb 2-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1898.140201][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1898.179798][T22473] usb 2-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 1898.189697][T22473] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1898.190987][T27101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5189'. [ 1898.336562][T22473] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.361115][T22473] usb 2-1: config 0 descriptor?? [ 1898.380865][T22473] port100 2-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1899.103637][T27110] bond0: option ad_actor_sys_prio: invalid value (0) [ 1899.110410][T27110] bond0: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1899.179861][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1899.384454][T27110] bond0 (unregistering): Released all slaves [ 1899.402397][T27116] IPVS: Error connecting to the multicast addr [ 1899.944025][T27109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1899.977015][T19037] usb 2-1: USB disconnect, device number 53 [ 1900.222188][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1900.712639][T27126] FAULT_INJECTION: forcing a failure. [ 1900.712639][T27126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1900.725921][T27126] CPU: 0 UID: 0 PID: 27126 Comm: syz.2.5194 Not tainted syzkaller #0 PREEMPT(full) [ 1900.725949][T27126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1900.725961][T27126] Call Trace: [ 1900.725968][T27126] [ 1900.725978][T27126] dump_stack_lvl+0x16c/0x1f0 [ 1900.726005][T27126] should_fail_ex+0x512/0x640 [ 1900.726029][T27126] _copy_from_user+0x2e/0xd0 [ 1900.726050][T27126] do_ip_vs_set_ctl+0xdfa/0x11d0 [ 1900.726078][T27126] ? trace_sched_exit_tp+0xd1/0x110 [ 1900.726107][T27126] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1900.726143][T27126] ? __pfx___schedule+0x10/0x10 [ 1900.726164][T27126] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 1900.726210][T27126] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1900.726241][T27126] ? nf_setsockopt+0x8d/0xf0 [ 1900.726264][T27126] nf_setsockopt+0x8d/0xf0 [ 1900.726291][T27126] ip_setsockopt+0xcb/0xf0 [ 1900.726322][T27126] sctp_setsockopt+0x16c/0xb870 [ 1900.726349][T27126] ? irqentry_exit+0x1dd/0x8c0 [ 1900.726370][T27126] ? lockdep_hardirqs_on+0x7c/0x110 [ 1900.726395][T27126] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1900.726426][T27126] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1900.726452][T27126] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1900.726480][T27126] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1900.726506][T27126] do_sock_setsockopt+0xf3/0x1d0 [ 1900.726533][T27126] __sys_setsockopt+0x1a0/0x230 [ 1900.726557][T27126] __x64_sys_setsockopt+0xbd/0x160 [ 1900.726575][T27126] ? do_syscall_64+0x91/0xf80 [ 1900.726596][T27126] ? lockdep_hardirqs_on+0x7c/0x110 [ 1900.726617][T27126] do_syscall_64+0xcd/0xf80 [ 1900.726641][T27126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.726663][T27126] RIP: 0033:0x7fe91cb8f749 [ 1900.726679][T27126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1900.726703][T27126] RSP: 002b:00007fe91da8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1900.726724][T27126] RAX: ffffffffffffffda RBX: 00007fe91cde6090 RCX: 00007fe91cb8f749 [ 1900.726738][T27126] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000006 [ 1900.726750][T27126] RBP: 00007fe91da8d090 R08: 0000000000000018 R09: 0000000000000000 [ 1900.726762][T27126] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1900.726775][T27126] R13: 00007fe91cde6128 R14: 00007fe91cde6090 R15: 00007fff20ac2678 [ 1900.726805][T27126] [ 1901.259932][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1901.374856][T27120] overlayfs: overlapping lowerdir path [ 1901.735248][T27132] block device autoloading is deprecated and will be removed. [ 1901.866575][T27139] FAULT_INJECTION: forcing a failure. [ 1901.866575][T27139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1901.970257][T27139] CPU: 1 UID: 0 PID: 27139 Comm: syz.2.5199 Not tainted syzkaller #0 PREEMPT(full) [ 1901.970287][T27139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1901.970300][T27139] Call Trace: [ 1901.970307][T27139] [ 1901.970316][T27139] dump_stack_lvl+0x16c/0x1f0 [ 1901.970343][T27139] should_fail_ex+0x512/0x640 [ 1901.970368][T27139] _copy_from_user+0x2e/0xd0 [ 1901.970390][T27139] copy_msghdr_from_user+0x98/0x160 [ 1901.970412][T27139] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1901.970431][T27139] ? __lock_acquire+0x433/0x22f0 [ 1901.970470][T27139] ___sys_sendmsg+0xfe/0x1d0 [ 1901.970492][T27139] ? __pfx____sys_sendmsg+0x10/0x10 [ 1901.970511][T27139] ? __lock_acquire+0x433/0x22f0 [ 1901.970571][T27139] __sys_sendmsg+0x16d/0x220 [ 1901.970592][T27139] ? __pfx___sys_sendmsg+0x10/0x10 [ 1901.970638][T27139] do_syscall_64+0xcd/0xf80 [ 1901.970661][T27139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.970680][T27139] RIP: 0033:0x7fe91cb8f749 [ 1901.970694][T27139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1901.970713][T27139] RSP: 002b:00007fe91daae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1901.970732][T27139] RAX: ffffffffffffffda RBX: 00007fe91cde5fa0 RCX: 00007fe91cb8f749 [ 1901.970746][T27139] RDX: 000000002400c800 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1901.970759][T27139] RBP: 00007fe91daae090 R08: 0000000000000000 R09: 0000000000000000 [ 1901.970771][T27139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1901.970783][T27139] R13: 00007fe91cde6038 R14: 00007fe91cde5fa0 R15: 00007fff20ac2678 [ 1901.970813][T27139] [ 1902.010700][T27144] wg1 speed is unknown, defaulting to 1000 [ 1902.014697][ C1] vkms_vblank_simulate: vblank timer overrun [ 1902.070567][ T5937] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1902.299863][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1902.470871][ T5937] usb 4-1: Using ep0 maxpacket: 8 [ 1902.483109][ T5937] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1902.488268][T27150] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1902.557968][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.779000][ T5937] usb 4-1: config 0 descriptor?? [ 1902.814577][ T5937] gm12u320 4-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 1902.859694][ T5937] gm12u320 4-1:0.0: probe with driver gm12u320 failed with error -5 [ 1902.897389][ T5937] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1902.949331][ T5937] usb-storage 4-1:0.0: device ignored [ 1903.058825][ T5937] usb 4-1: USB disconnect, device number 81 [ 1903.339885][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1903.976598][T27168] bond1: option ad_actor_sys_prio: invalid value (0) [ 1903.983493][T27168] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1904.011381][T27168] bond1 (unregistering): Released all slaves [ 1904.381579][T27179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5207'. [ 1905.235014][T27190] wg1 speed is unknown, defaulting to 1000 [ 1905.419873][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1905.435231][T27195] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 1905.451513][T27195] team0: Port device batadv7 added [ 1905.761859][T27203] autofs: Bad value for 'fd' [ 1905.776321][T27203] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1905.783588][T27203] overlayfs: failed to set xattr on upper [ 1905.789288][T27203] overlayfs: ...falling back to redirect_dir=nofollow. [ 1905.796175][T27203] overlayfs: ...falling back to index=off. [ 1905.802011][T27203] overlayfs: ...falling back to uuid=null. [ 1905.807812][T27203] overlayfs: maximum fs stacking depth exceeded [ 1905.827775][ T30] audit: type=1400 audit(1764771423.010:733): avc: denied { mount } for pid=27201 comm="syz.4.5212" name="/" dev="hugetlbfs" ino=85794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1905.928394][ T30] audit: type=1400 audit(1764771423.020:734): avc: denied { mounton } for pid=27201 comm="syz.4.5212" path="/file0" dev="hugetlbfs" ino=85796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 1906.459877][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1907.259994][ T5819] Bluetooth: hci0: command 0x0c1a tx timeout [ 1907.266133][T19450] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1907.499907][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1907.601596][T27216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5215'. [ 1907.764736][T27225] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5217'. [ 1908.540026][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1908.821074][ T30] audit: type=1400 audit(1764771426.070:735): avc: denied { ioctl } for pid=27236 comm="syz.1.5221" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1909.469137][T27244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5222'. [ 1909.510041][T24982] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 1909.579883][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1909.679896][T24982] usb 2-1: device descriptor read/64, error -71 [ 1909.929818][T24982] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 1910.000229][T27253] (syz.4.5223,27253,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1910.092013][T24982] usb 2-1: device descriptor read/64, error -71 [ 1910.140902][T27255] overlay: ./file0 is not a directory [ 1910.146689][T27253] (syz.4.5223,27253,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1910.619883][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1911.659892][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1912.085019][T24982] usb usb2-port1: attempt power cycle [ 1912.208521][T27259] infiniband syz2: set down [ 1912.213098][T27259] infiniband syz2: added ipvlan0 [ 1912.218454][T27259] syz2: rxe_create_cq: returned err = -12 [ 1912.224979][T27259] infiniband syz2: Couldn't create ib_mad CQ [ 1912.231124][T27259] infiniband syz2: Couldn't open port 1 [ 1912.248942][T27259] RDS/IB: syz2: added [ 1912.253023][T27259] smc: adding ib device syz2 with port count 1 [ 1912.259180][T27259] smc: ib device syz2 port 1 has no pnetid [ 1912.479847][T24982] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 1912.666375][T27264] FAULT_INJECTION: forcing a failure. [ 1912.666375][T27264] name failslab, interval 1, probability 0, space 0, times 0 [ 1912.699888][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1912.709989][ T30] audit: type=1400 audit(1764771429.960:736): avc: granted { setsecparam } for pid=27265 comm="syz.3.5228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1912.773423][T24982] usb 2-1: device descriptor read/8, error -71 [ 1912.792691][T27264] CPU: 0 UID: 0 PID: 27264 Comm: syz.0.5227 Not tainted syzkaller #0 PREEMPT(full) [ 1912.792720][T27264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1912.792732][T27264] Call Trace: [ 1912.792739][T27264] [ 1912.792748][T27264] dump_stack_lvl+0x16c/0x1f0 [ 1912.792776][T27264] should_fail_ex+0x512/0x640 [ 1912.792796][T27264] ? kmem_cache_alloc_node_noprof+0x65/0x7b0 [ 1912.792830][T27264] should_failslab+0xc2/0x120 [ 1912.792855][T27264] kmem_cache_alloc_node_noprof+0x78/0x7b0 [ 1912.792883][T27264] ? __alloc_skb+0x2b2/0x380 [ 1912.792917][T27264] ? __alloc_skb+0x2b2/0x380 [ 1912.792941][T27264] __alloc_skb+0x2b2/0x380 [ 1912.792968][T27264] ? __pfx___alloc_skb+0x10/0x10 [ 1912.793006][T27264] alloc_skb_with_frags+0xe0/0x860 [ 1912.793037][T27264] sock_alloc_send_pskb+0x7f9/0x980 [ 1912.793066][T27264] ? avc_has_perm+0x144/0x1f0 [ 1912.793090][T27264] ? __pfx_avc_has_perm+0x10/0x10 [ 1912.793115][T27264] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1912.793148][T27264] ? sock_has_perm+0x259/0x2f0 [ 1912.793172][T27264] ? __pfx_sock_has_perm+0x10/0x10 [ 1912.793199][T27264] hci_sock_sendmsg+0x1c7/0x25f0 [ 1912.793228][T27264] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1912.793259][T27264] sock_write_iter+0x566/0x610 [ 1912.793284][T27264] ? __pfx_sock_write_iter+0x10/0x10 [ 1912.793320][T27264] ? bpf_lsm_file_permission+0x9/0x10 [ 1912.793347][T27264] ? security_file_permission+0x71/0x210 [ 1912.793377][T27264] ? rw_verify_area+0xcf/0x6c0 [ 1912.793401][T27264] vfs_write+0x7d3/0x11d0 [ 1912.793425][T27264] ? __pfx_sock_write_iter+0x10/0x10 [ 1912.793452][T27264] ? __pfx_vfs_write+0x10/0x10 [ 1912.793472][T27264] ? find_held_lock+0x2b/0x80 [ 1912.793511][T27264] ksys_write+0x1f8/0x250 [ 1912.793533][T27264] ? __pfx_ksys_write+0x10/0x10 [ 1912.793565][T27264] do_syscall_64+0xcd/0xf80 [ 1912.793589][T27264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.793614][T27264] RIP: 0033:0x7fd75f78f749 [ 1912.793630][T27264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1912.793649][T27264] RSP: 002b:00007fd760647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1912.793668][T27264] RAX: ffffffffffffffda RBX: 00007fd75f9e5fa0 RCX: 00007fd75f78f749 [ 1912.793681][T27264] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000004 [ 1912.793694][T27264] RBP: 00007fd760647090 R08: 0000000000000000 R09: 0000000000000000 [ 1912.793706][T27264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1912.793720][T27264] R13: 00007fd75f9e6038 R14: 00007fd75f9e5fa0 R15: 00007ffcf1bfe3b8 [ 1912.793750][T27264] [ 1913.420698][T27270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1913.739847][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1914.320420][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.326745][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.357397][T27282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1914.485675][T27282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1914.731905][T24982] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1914.867800][T27289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5233'. [ 1915.540819][T24982] usb 2-1: Using ep0 maxpacket: 16 [ 1915.564017][T24982] usb 2-1: device descriptor read/all, error -71 [ 1915.587552][T27294] FAULT_INJECTION: forcing a failure. [ 1915.587552][T27294] name failslab, interval 1, probability 0, space 0, times 0 [ 1915.600425][T27294] CPU: 0 UID: 0 PID: 27294 Comm: syz.0.5235 Not tainted syzkaller #0 PREEMPT(full) [ 1915.600451][T27294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1915.600463][T27294] Call Trace: [ 1915.600469][T27294] [ 1915.600476][T27294] dump_stack_lvl+0x16c/0x1f0 [ 1915.600502][T27294] should_fail_ex+0x512/0x640 [ 1915.600520][T27294] ? fs_reclaim_acquire+0xae/0x150 [ 1915.600545][T27294] should_failslab+0xc2/0x120 [ 1915.600568][T27294] __kmalloc_noprof+0xdd/0x870 [ 1915.600595][T27294] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1915.600628][T27294] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1915.600655][T27294] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1915.600686][T27294] ? tomoyo_profile+0x47/0x60 [ 1915.600708][T27294] tomoyo_path_number_perm+0x245/0x580 [ 1915.600731][T27294] ? tomoyo_path_number_perm+0x237/0x580 [ 1915.600758][T27294] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1915.600786][T27294] ? find_held_lock+0x2b/0x80 [ 1915.600829][T27294] ? find_held_lock+0x2b/0x80 [ 1915.600847][T27294] ? hook_file_ioctl_common+0x145/0x410 [ 1915.600874][T27294] ? __fget_files+0x20e/0x3c0 [ 1915.600902][T27294] security_file_ioctl+0x9b/0x240 [ 1915.600932][T27294] __x64_sys_ioctl+0xb7/0x210 [ 1915.600956][T27294] do_syscall_64+0xcd/0xf80 [ 1915.600979][T27294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1915.600998][T27294] RIP: 0033:0x7fd75f78f749 [ 1915.601014][T27294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1915.601030][T27294] RSP: 002b:00007fd760647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1915.601048][T27294] RAX: ffffffffffffffda RBX: 00007fd75f9e5fa0 RCX: 00007fd75f78f749 [ 1915.601062][T27294] RDX: 0000200000000380 RSI: 000000000000890b RDI: 0000000000000009 [ 1915.601073][T27294] RBP: 00007fd760647090 R08: 0000000000000000 R09: 0000000000000000 [ 1915.601084][T27294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1915.601095][T27294] R13: 00007fd75f9e6038 R14: 00007fd75f9e5fa0 R15: 00007ffcf1bfe3b8 [ 1915.601125][T27294] [ 1915.601133][T27294] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1915.819856][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1915.991639][T27300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5236'. [ 1916.663947][T27311] tipc: Enabled bearer , priority 0 [ 1916.683269][T27311] syzkaller0: entered promiscuous mode [ 1916.698533][T27311] syzkaller0: entered allmulticast mode [ 1916.849927][T24982] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1916.859933][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1917.108124][T24982] usb 2-1: Using ep0 maxpacket: 16 [ 1917.175088][T24982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1917.301180][T27315] tipc: Resetting bearer [ 1917.310983][T27310] tipc: Resetting bearer [ 1917.329761][T24982] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1917.373760][T24982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.438880][T24982] usb 2-1: config 0 descriptor?? [ 1917.580611][T27310] tipc: Disabling bearer [ 1917.883016][T24982] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1917.899868][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1918.934237][T27331] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1918.939889][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1919.015543][T27331] batadv4: entered allmulticast mode [ 1919.021942][T27331] team0: Port device batadv4 added [ 1919.035862][T27334] FAULT_INJECTION: forcing a failure. [ 1919.035862][T27334] name failslab, interval 1, probability 0, space 0, times 0 [ 1919.056686][T27334] CPU: 0 UID: 0 PID: 27334 Comm: syz.2.5247 Not tainted syzkaller #0 PREEMPT(full) [ 1919.056716][T27334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1919.056730][T27334] Call Trace: [ 1919.056737][T27334] [ 1919.056746][T27334] dump_stack_lvl+0x16c/0x1f0 [ 1919.056774][T27334] should_fail_ex+0x512/0x640 [ 1919.056794][T27334] ? fs_reclaim_acquire+0xae/0x150 [ 1919.056822][T27334] should_failslab+0xc2/0x120 [ 1919.056847][T27334] __kmalloc_noprof+0xdd/0x870 [ 1919.056875][T27334] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1919.056911][T27334] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1919.056939][T27334] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1919.056970][T27334] ? tomoyo_profile+0x47/0x60 [ 1919.056994][T27334] tomoyo_path_number_perm+0x245/0x580 [ 1919.057020][T27334] ? tomoyo_path_number_perm+0x237/0x580 [ 1919.057048][T27334] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1919.057076][T27334] ? find_held_lock+0x2b/0x80 [ 1919.057124][T27334] ? find_held_lock+0x2b/0x80 [ 1919.057143][T27334] ? hook_file_ioctl_common+0x145/0x410 [ 1919.057172][T27334] ? __fget_files+0x20e/0x3c0 [ 1919.057202][T27334] security_file_ioctl+0x9b/0x240 [ 1919.057233][T27334] __x64_sys_ioctl+0xb7/0x210 [ 1919.057258][T27334] do_syscall_64+0xcd/0xf80 [ 1919.057283][T27334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1919.057309][T27334] RIP: 0033:0x7fe91cb8f749 [ 1919.057325][T27334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1919.057343][T27334] RSP: 002b:00007fe91daae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1919.057362][T27334] RAX: ffffffffffffffda RBX: 00007fe91cde5fa0 RCX: 00007fe91cb8f749 [ 1919.057375][T27334] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 1919.057388][T27334] RBP: 00007fe91daae090 R08: 0000000000000000 R09: 0000000000000000 [ 1919.057400][T27334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1919.057412][T27334] R13: 00007fe91cde6038 R14: 00007fe91cde5fa0 R15: 00007fff20ac2678 [ 1919.057442][T27334] [ 1919.057498][T27334] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1919.384787][ T5937] usb 2-1: USB disconnect, device number 60 [ 1919.556634][T27341] FAULT_INJECTION: forcing a failure. [ 1919.556634][T27341] name failslab, interval 1, probability 0, space 0, times 0 [ 1919.607420][T27341] CPU: 0 UID: 0 PID: 27341 Comm: syz.4.5250 Not tainted syzkaller #0 PREEMPT(full) [ 1919.607444][T27341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1919.607454][T27341] Call Trace: [ 1919.607460][T27341] [ 1919.607467][T27341] dump_stack_lvl+0x16c/0x1f0 [ 1919.607494][T27341] should_fail_ex+0x512/0x640 [ 1919.607512][T27341] ? __kmalloc_noprof+0xca/0x870 [ 1919.607537][T27341] should_failslab+0xc2/0x120 [ 1919.607560][T27341] __kmalloc_noprof+0xdd/0x870 [ 1919.607582][T27341] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1919.607609][T27341] ? sock_kmalloc+0x111/0x170 [ 1919.607637][T27341] ? sock_kmalloc+0x111/0x170 [ 1919.607656][T27341] sock_kmalloc+0x111/0x170 [ 1919.607679][T27341] alg_setsockopt+0x3ff/0xef0 [ 1919.607703][T27341] ? __pfx_alg_setsockopt+0x10/0x10 [ 1919.607729][T27341] ? selinux_socket_setsockopt+0x6a/0x80 [ 1919.607750][T27341] ? __pfx_alg_setsockopt+0x10/0x10 [ 1919.607775][T27341] do_sock_setsockopt+0xf3/0x1d0 [ 1919.607803][T27341] __sys_setsockopt+0x1a0/0x230 [ 1919.607828][T27341] __x64_sys_setsockopt+0xbd/0x160 [ 1919.607846][T27341] ? do_syscall_64+0x91/0xf80 [ 1919.607868][T27341] ? lockdep_hardirqs_on+0x7c/0x110 [ 1919.607887][T27341] do_syscall_64+0xcd/0xf80 [ 1919.607908][T27341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1919.607926][T27341] RIP: 0033:0x7f63e2d8f749 [ 1919.607942][T27341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1919.607959][T27341] RSP: 002b:00007f63e3c97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1919.607977][T27341] RAX: ffffffffffffffda RBX: 00007f63e2fe5fa0 RCX: 00007f63e2d8f749 [ 1919.607989][T27341] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 1919.608009][T27341] RBP: 00007f63e3c97090 R08: 0000000000000021 R09: 0000000000000000 [ 1919.608020][T27341] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1919.608032][T27341] R13: 00007f63e2fe6038 R14: 00007f63e2fe5fa0 R15: 00007fff6e605418 [ 1919.608061][T27341] [ 1919.979847][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1921.019917][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1921.033498][ T5819] Bluetooth: hci0: command 0x0c1a tx timeout [ 1921.044493][T19450] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1921.133345][ T5937] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1921.421304][ T5937] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1922.069876][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1922.518116][ T5937] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 1922.568385][ T5937] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1922.640061][ T5937] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1922.701736][T27365] tipc: Enabled bearer , priority 0 [ 1922.726335][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.762261][T27368] syzkaller0: entered promiscuous mode [ 1922.870003][T27368] syzkaller0: entered allmulticast mode [ 1923.099843][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1923.252093][ T5937] usb 2-1: can't set config #27, error -71 [ 1923.278739][ T5937] usb 2-1: USB disconnect, device number 61 [ 1923.325575][T27377] tipc: Resetting bearer [ 1923.480244][T27358] tipc: Resetting bearer [ 1924.082615][T27358] tipc: Disabling bearer [ 1924.126072][T24982] tipc: Node number set to 4024210329 [ 1924.139865][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1924.411897][T27383] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5260'. [ 1924.759796][ T5897] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1924.989787][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 1924.995898][T27394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5264'. [ 1924.996905][T27396] FAULT_INJECTION: forcing a failure. [ 1924.996905][T27396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1925.021386][ T5897] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1925.049859][T27396] CPU: 0 UID: 0 PID: 27396 Comm: syz.3.5265 Not tainted syzkaller #0 PREEMPT(full) [ 1925.049887][T27396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1925.049899][T27396] Call Trace: [ 1925.049907][T27396] [ 1925.049922][T27396] dump_stack_lvl+0x16c/0x1f0 [ 1925.049951][T27396] should_fail_ex+0x512/0x640 [ 1925.049976][T27396] _copy_from_user+0x2e/0xd0 [ 1925.049998][T27396] copy_msghdr_from_user+0x98/0x160 [ 1925.050020][T27396] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1925.050039][T27396] ? __lock_acquire+0x433/0x22f0 [ 1925.050078][T27396] ___sys_sendmsg+0xfe/0x1d0 [ 1925.050100][T27396] ? __pfx____sys_sendmsg+0x10/0x10 [ 1925.050149][T27396] ? __pfx_vfs_write+0x10/0x10 [ 1925.050174][T27396] ? do_sys_openat2+0x190/0x280 [ 1925.050206][T27396] __sys_sendmsg+0x16d/0x220 [ 1925.050227][T27396] ? __pfx___sys_sendmsg+0x10/0x10 [ 1925.050267][T27396] do_syscall_64+0xcd/0xf80 [ 1925.050290][T27396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1925.050309][T27396] RIP: 0033:0x7f7d8b18f749 [ 1925.050324][T27396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1925.050343][T27396] RSP: 002b:00007f7d8c0f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1925.050363][T27396] RAX: ffffffffffffffda RBX: 00007f7d8b3e5fa0 RCX: 00007f7d8b18f749 [ 1925.050376][T27396] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1925.050389][T27396] RBP: 00007f7d8c0f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1925.050402][T27396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1925.050414][T27396] R13: 00007f7d8b3e6038 R14: 00007f7d8b3e5fa0 R15: 00007ffe9ba3d598 [ 1925.050444][T27396] [ 1925.062361][ T5897] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 1925.336799][T27394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5264'. [ 1925.407386][T27402] netlink: 'syz.3.5266': attribute type 33 has an invalid length. [ 1925.446258][T27402] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5266'. [ 1925.569810][ T5897] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1925.578880][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.219866][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1926.285174][ T37] usb 3-1: USB disconnect, device number 89 [ 1927.240087][ T5937] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1927.259865][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1927.381319][T27426] Can't find ip_set type hash:ip,po [ 1927.622695][ T30] audit: type=1400 audit(1764771444.870:737): avc: denied { create } for pid=27432 comm="syz.0.5272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1927.680050][ T5937] usb 2-1: config 4 has an invalid interface number: 231 but max is 0 [ 1927.689054][ T5937] usb 2-1: config 4 has no interface number 0 [ 1928.221611][ T5937] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1928.239825][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.247853][ T5937] usb 2-1: Product: syz [ 1928.272001][ T5937] usb 2-1: Manufacturer: syz [ 1928.276638][ T5937] usb 2-1: SerialNumber: syz [ 1928.299880][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1928.335077][T27446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.428670][T27446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.484716][ T5937] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1928.486238][T27446] hfsplus: unable to find HFS+ superblock [ 1928.545030][T27412] hfsplus: unable to find HFS+ superblock [ 1928.646267][T27454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5276'. [ 1928.689058][ T30] audit: type=1400 audit(1764771445.920:738): avc: denied { prog_load } for pid=27411 comm="syz.1.5268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1928.958839][ T30] audit: type=1400 audit(1764771445.930:740): avc: denied { read write } for pid=27449 comm="syz.3.5276" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1929.079004][ T30] audit: type=1400 audit(1764771445.930:741): avc: denied { open } for pid=27449 comm="syz.3.5276" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1929.203348][ T30] audit: type=1400 audit(1764771445.930:739): avc: denied { bpf } for pid=27411 comm="syz.1.5268" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1929.339847][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1929.416945][ T5937] vp7045: USB control message 'out' went wrong. [ 1929.439768][ T5937] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1929.467928][ T30] audit: type=1400 audit(1764771445.960:742): avc: denied { perfmon } for pid=27411 comm="syz.1.5268" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1929.694013][T27455] kvm: user requested TSC rate below hardware speed [ 1929.701135][ T5937] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1929.704958][T27462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5278'. [ 1929.783015][ T5937] usb 2-1: USB disconnect, device number 62 [ 1929.808599][ T30] audit: type=1400 audit(1764771445.960:743): avc: denied { map_create } for pid=27411 comm="syz.1.5268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1929.923339][ T30] audit: type=1400 audit(1764771445.970:744): avc: denied { map_read map_write } for pid=27411 comm="syz.1.5268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1930.188204][T27462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5278'. [ 1930.201957][ T30] audit: type=1400 audit(1764771446.190:745): avc: denied { prog_run } for pid=27411 comm="syz.1.5268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1930.303138][ T30] audit: type=1400 audit(1764771446.260:746): avc: denied { create } for pid=27447 comm="syz.4.5275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1930.379842][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1930.770663][T19244] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1931.339836][T19244] usb 5-1: Using ep0 maxpacket: 8 [ 1931.419848][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1931.629820][T24982] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1931.789844][T24982] usb 3-1: Using ep0 maxpacket: 8 [ 1931.803428][T24982] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1931.869812][T24982] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 1931.878925][T24982] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1931.969763][T24982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.219127][T20131] usb 3-1: USB disconnect, device number 90 [ 1932.459856][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1933.029558][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 1933.029577][ T30] audit: type=1400 audit(1764771449.780:878): avc: denied { prog_load } for pid=27488 comm="syz.0.5282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1933.113949][ T30] audit: type=1400 audit(1764771449.780:879): avc: denied { bpf } for pid=27488 comm="syz.0.5282" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1933.179379][ T30] audit: type=1400 audit(1764771449.790:880): avc: denied { perfmon } for pid=27488 comm="syz.0.5282" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1933.271965][T19244] usb 5-1: device descriptor read/all, error -71 [ 1933.272164][ T30] audit: type=1400 audit(1764771449.810:881): avc: denied { execute } for pid=27488 comm="syz.0.5282" dev="tmpfs" ino=1992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1933.417644][ T30] audit: type=1400 audit(1764771449.820:882): avc: denied { execute_no_trans } for pid=27488 comm="syz.0.5282" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1933.459807][ T5897] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1933.500675][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1933.570138][ T30] audit: type=1400 audit(1764771449.760:877): avc: denied { read } for pid=27489 comm="syz.1.5283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1933.679827][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 1933.693426][ T30] audit: type=1400 audit(1764771450.320:883): avc: denied { read } for pid=27489 comm="syz.1.5283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1933.779247][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1933.820541][ T30] audit: type=1400 audit(1764771450.420:884): avc: denied { read write } for pid=27492 comm="syz.3.5284" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1933.821152][ T5897] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1934.039794][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.060030][ T30] audit: type=1400 audit(1764771450.420:885): avc: denied { read write open } for pid=27492 comm="syz.3.5284" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1934.182245][T27512] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1934.510497][T27512] bond3: option ad_actor_sys_prio: invalid value (0) [ 1934.517225][T27512] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1934.540285][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1934.556324][ T5897] usb 4-1: config 0 descriptor?? [ 1934.788229][ T5897] dvb-usb: found a 'TeVii S662' in warm state. [ 1934.811561][T27512] bond3 (unregistering): Released all slaves [ 1935.135736][ T5897] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1935.162831][ T5897] dvb-usb: bulk message failed: -22 (2/0) [ 1935.381639][ T5897] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1935.502831][ T5897] dvbdev: DVB: registering new adapter (TeVii S662) [ 1935.509503][ T5897] usb 4-1: media controller created [ 1935.609852][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 1935.615671][ T5897] dw2102: i2c transfer failed. [ 1935.668760][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 1935.724465][ T5897] dw2102: i2c transfer failed. [ 1935.729270][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 1935.790025][ T5897] dw2102: i2c transfer failed. [ 1935.798302][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 1935.849842][ T5897] dw2102: i2c transfer failed. [ 1935.854726][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 1935.929849][ T5897] dw2102: i2c transfer failed. [ 1935.934671][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 1935.989816][ T5897] dw2102: i2c transfer failed. [ 1935.994626][ T5897] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1936.087132][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1936.381615][ T5897] dvb-usb: bulk message failed: -22 (3/0) [ 1936.389105][ T5897] dw2102: command 0x0e transfer failed. [ 1936.410702][ T5897] dvb-usb: bulk message failed: -22 (3/0) [ 1936.416456][ T5897] dw2102: command 0x0e transfer failed. [ 1936.581635][T19764] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1936.619907][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1936.750580][ T5897] dvb-usb: bulk message failed: -22 (3/0) [ 1936.888117][ T5897] dw2102: command 0x0e transfer failed. [ 1936.924724][ T5897] dvb-usb: bulk message failed: -22 (3/0) [ 1936.959019][ T5897] dw2102: command 0x0e transfer failed. [ 1937.079823][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 1937.085613][ T5897] dw2102: command 0x51 transfer failed. [ 1937.100072][ T5897] dvb-usb: bulk message failed: -22 (5/0) [ 1937.105866][ T5897] dw2102: i2c probe for address 0x68 failed. [ 1937.180017][ T5897] dvb-usb: bulk message failed: -22 (5/0) [ 1937.221419][T19764] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1937.239843][ T5897] dw2102: i2c probe for address 0x69 failed. [ 1937.245871][ T5897] dvb-usb: bulk message failed: -22 (5/0) [ 1937.280877][T19764] usb 2-1: not running at top speed; connect to a high speed hub [ 1937.309774][ T5897] dw2102: i2c probe for address 0x6a failed. [ 1937.322905][T19764] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1937.360035][ T5897] dw2102: probing for demodulator failed. Is the external power switched on? [ 1937.368832][ T5897] dvb-usb: no frontend was attached by 'TeVii S662' [ 1937.409976][T19764] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1937.554050][T19764] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1937.589851][T19764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.597878][T19764] usb 2-1: Product: syz [ 1937.659856][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1937.743903][T27550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5294'. [ 1938.042942][T19764] usb 2-1: Manufacturer: à°Š [ 1938.147329][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 1938.147346][ T30] audit: type=1400 audit(1764771455.390:1071): avc: denied { create } for pid=27547 comm="syz.2.5295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1938.180949][T19764] usb 2-1: SerialNumber: syz [ 1938.226000][T27522] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1938.286234][ T30] audit: type=1400 audit(1764771455.400:1072): avc: denied { read write } for pid=27547 comm="syz.2.5295" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1938.414181][ T30] audit: type=1400 audit(1764771455.420:1073): avc: denied { read write open } for pid=27547 comm="syz.2.5295" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1938.549807][ T5897] rc_core: IR keymap rc-tt-1500 not found [ 1938.555586][ T5897] Registered IR keymap rc-empty [ 1938.590041][ T30] audit: type=1400 audit(1764771455.440:1074): avc: denied { ioctl } for pid=27542 comm="syz.3.5293" path="socket:[87461]" dev="sockfs" ino=87461 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1938.641160][ T5897] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1938.699859][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1938.750611][ T5897] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input57 [ 1939.229786][ T30] audit: type=1400 audit(1764771455.450:1075): avc: denied { write } for pid=27547 comm="syz.2.5295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1939.272378][ T5897] dvb-usb: schedule remote query interval to 250 msecs. [ 1939.347843][ T5897] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1939.403336][ T5897] dvb-usb: TeVii S662 successfully initialized and connected. [ 1939.439853][ T30] audit: type=1400 audit(1764771455.450:1076): avc: denied { execmem } for pid=27547 comm="syz.2.5295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1939.525048][ T5897] usb 4-1: USB disconnect, device number 82 [ 1939.619935][ T30] audit: type=1400 audit(1764771455.460:1077): avc: denied { module_request } for pid=27546 comm="syz.0.5296" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1939.739847][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1939.824773][ T30] audit: type=1400 audit(1764771455.470:1078): avc: denied { ioctl } for pid=27521 comm="syz.1.5288" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1939.932095][ T5897] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1940.030387][ T30] audit: type=1400 audit(1764771455.470:1079): avc: denied { ioctl } for pid=27521 comm="syz.1.5288" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1940.065097][T19246] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1940.162427][T27574] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1940.267531][T19764] cdc_ncm 2-1:1.0: bind() failure [ 1940.309825][T19246] usb 5-1: Using ep0 maxpacket: 8 [ 1940.376177][T19246] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1940.408218][T19764] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1940.420071][T19246] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1940.449947][T19246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.456195][T19764] cdc_ncm 2-1:1.1: bind() failure [ 1940.550089][T19764] usb 2-1: USB disconnect, device number 63 [ 1940.620534][T24982] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1940.779844][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1940.811192][ T5937] usb 5-1: USB disconnect, device number 87 [ 1940.993282][T24982] usb 3-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 1941.063821][T24982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.142360][T24982] usb 3-1: config 0 descriptor?? [ 1941.819868][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1942.859866][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1943.461009][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 1943.461025][ T30] audit: type=1400 audit(1764771460.490:1241): avc: denied { execmem } for pid=27600 comm="syz.4.5303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1943.899891][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1944.275501][ T30] audit: type=1400 audit(1764771460.630:1242): avc: denied { read } for pid=27600 comm="syz.4.5303" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1944.349842][T24982] usb 3-1: can't set config #0, error -71 [ 1944.381283][T24982] usb 3-1: USB disconnect, device number 91 [ 1944.404674][ T30] audit: type=1400 audit(1764771460.630:1243): avc: denied { read open } for pid=27600 comm="syz.4.5303" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1944.652096][ T30] audit: type=1400 audit(1764771460.700:1244): avc: denied { create } for pid=27600 comm="syz.4.5303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1944.749863][ T30] audit: type=1400 audit(1764771460.700:1245): avc: denied { create } for pid=27600 comm="syz.4.5303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1944.830934][ T30] audit: type=1400 audit(1764771460.700:1246): avc: denied { ioctl } for pid=27600 comm="syz.4.5303" path="socket:[87513]" dev="sockfs" ino=87513 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1944.937154][ T30] audit: type=1400 audit(1764771460.710:1247): avc: denied { ioctl } for pid=27600 comm="syz.4.5303" path="socket:[87513]" dev="sockfs" ino=87513 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1944.962212][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1945.059803][ T30] audit: type=1400 audit(1764771460.740:1248): avc: denied { setopt } for pid=27600 comm="syz.4.5303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1945.130381][ T30] audit: type=1400 audit(1764771460.740:1249): avc: denied { write } for pid=27600 comm="syz.4.5303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1945.219790][ T30] audit: type=1400 audit(1764771460.740:1250): avc: denied { read write } for pid=27600 comm="syz.4.5303" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1946.789808][T19322] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1947.019915][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1947.049845][T19322] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1947.079541][T19322] usb 4-1: not running at top speed; connect to a high speed hub [ 1947.122719][T19322] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1947.139839][T20131] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1947.155596][T19322] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1947.210065][T19322] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1947.230255][T19322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.257530][T19322] usb 4-1: Product: syz [ 1947.267687][T19322] usb 4-1: Manufacturer: à°Š [ 1947.288031][T19322] usb 4-1: SerialNumber: syz [ 1947.317565][T27625] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1947.360543][T20131] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1947.379419][T20131] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1947.409819][T20131] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1947.439335][T20131] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1947.504635][T20131] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1947.519780][T20131] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1947.548162][T20131] usb 2-1: Product: syz [ 1947.556967][T20131] usb 2-1: Manufacturer: syz [ 1947.604204][T20131] cdc_wdm 2-1:1.0: skipping garbage [ 1947.609466][T20131] cdc_wdm 2-1:1.0: skipping garbage [ 1947.648299][T20131] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1947.668387][T20131] cdc_wdm 2-1:1.0: Unknown control protocol [ 1948.059857][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1948.252941][T20131] usb 2-1: USB disconnect, device number 64 [ 1948.479208][ T30] kauditd_printk_skb: 231 callbacks suppressed [ 1948.479224][ T30] audit: type=1400 audit(1764771465.720:1482): avc: denied { ioctl } for pid=27626 comm="syz.1.5311" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1948.581748][T27637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5312'. [ 1948.631220][ T30] audit: type=1400 audit(1764771465.780:1483): avc: denied { ioctl } for pid=27626 comm="syz.1.5311" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1948.631315][ T30] audit: type=1400 audit(1764771465.810:1484): avc: denied { name_bind } for pid=27636 comm="syz.4.5312" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1948.631357][ T30] audit: type=1400 audit(1764771465.810:1485): avc: denied { node_bind } for pid=27636 comm="syz.4.5312" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1948.645439][ T30] audit: type=1400 audit(1764771465.890:1486): avc: denied { ioctl } for pid=27626 comm="syz.1.5311" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1948.673792][ C1] vkms_vblank_simulate: vblank timer overrun [ 1948.711472][ T30] audit: type=1400 audit(1764771465.960:1487): avc: denied { ioctl } for pid=27626 comm="syz.1.5311" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1948.769886][T20131] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1948.771483][ T30] audit: type=1400 audit(1764771466.020:1488): avc: denied { ioctl } for pid=27626 comm="syz.1.5311" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1948.778899][ T30] audit: type=1400 audit(1764771466.020:1489): avc: denied { ioctl } for pid=27626 comm="syz.1.5311" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1948.781757][ T30] audit: type=1400 audit(1764771466.030:1490): avc: denied { ioctl } for pid=27626 comm="syz.1.5311" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1948.841870][ T30] audit: type=1400 audit(1764771466.090:1491): avc: denied { ioctl } for pid=27626 comm="syz.1.5311" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1948.935230][T20131] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1948.935332][T20131] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1948.935355][T20131] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1948.935399][T20131] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1948.978547][T20131] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1948.978582][T20131] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1948.978605][T20131] usb 2-1: Product: syz [ 1948.978621][T20131] usb 2-1: Manufacturer: syz [ 1949.031179][T20131] cdc_wdm 2-1:1.0: skipping garbage [ 1949.031218][T20131] cdc_wdm 2-1:1.0: skipping garbage [ 1949.044960][T20131] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1949.045011][T20131] cdc_wdm 2-1:1.0: Unknown control protocol [ 1949.099894][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1949.138671][ C1] vkms_vblank_simulate: vblank timer overrun [ 1949.188614][ C1] vkms_vblank_simulate: vblank timer overrun [ 1949.464587][T19322] cdc_ncm 4-1:1.0: bind() failure [ 1949.542740][T19322] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1949.549583][T19322] cdc_ncm 4-1:1.1: bind() failure [ 1949.670165][T19322] usb 4-1: USB disconnect, device number 83 [ 1950.140071][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1950.575347][T27648] wg1 speed is unknown, defaulting to 1000 [ 1950.781400][T27644] zonefs (nullb0) ERROR: Not a zoned block device [ 1951.179852][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1951.220552][T27660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5320'. [ 1951.525878][T27661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5320'. [ 1951.680280][T22473] usb 2-1: USB disconnect, device number 65 [ 1952.219841][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1953.259850][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1953.719765][ T30] kauditd_printk_skb: 152 callbacks suppressed [ 1953.719783][ T30] audit: type=1400 audit(1764771470.900:1644): avc: denied { module_request } for pid=27671 comm="syz.4.5324" kmod="net-pf-10-proto-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1953.911976][ T30] audit: type=1400 audit(1764771470.960:1645): avc: denied { read write } for pid=19591 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1953.994347][T27681] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5325'. [ 1954.029800][ T30] audit: type=1400 audit(1764771470.960:1646): avc: denied { read write open } for pid=19591 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1954.136533][ T30] audit: type=1400 audit(1764771470.960:1647): avc: denied { ioctl } for pid=19591 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1954.240028][ T30] audit: type=1400 audit(1764771471.070:1648): avc: denied { read write } for pid=18317 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1954.299825][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1954.337080][ T30] audit: type=1400 audit(1764771471.070:1649): avc: denied { read write open } for pid=18317 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1954.738552][T27689] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1954.773733][ T30] audit: type=1400 audit(1764771471.070:1650): avc: denied { ioctl } for pid=18317 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1954.826914][T19971] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1954.837259][T27689] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 1955.339849][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1955.390878][T27681] bond0 (unregistering): Released all slaves [ 1955.500997][T27697] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5329'. [ 1955.949683][ T5937] IPVS: starting estimator thread 0... [ 1955.963716][T27700] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1956.271958][T27701] IPVS: using max 41 ests per chain, 98400 per kthread [ 1957.419841][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1958.459863][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1958.732008][ T30] kauditd_printk_skb: 440 callbacks suppressed [ 1958.732026][ T30] audit: type=1400 audit(1764771475.980:2034): avc: denied { write } for pid=27684 comm="syz.4.5328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1959.299788][ T30] audit: type=1400 audit(1764771476.040:2035): avc: denied { write } for pid=27684 comm="syz.4.5328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1959.339779][ T30] audit: type=1400 audit(1764771476.040:2036): avc: denied { write } for pid=27684 comm="syz.4.5328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1959.423218][ T30] audit: type=1400 audit(1764771476.040:2037): avc: denied { write } for pid=27684 comm="syz.4.5328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1959.458142][T27689] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1959.499830][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1959.504111][T27712] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1959.517909][T27715] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1959.525515][T27715] audit: audit_lost=31 audit_rate_limit=0 audit_backlog_limit=64 [ 1959.533338][T27689] audit: audit_lost=32 audit_rate_limit=0 audit_backlog_limit=64 [ 1959.533358][T27689] audit: backlog limit exceeded [ 1959.841983][T27715] wg1 speed is unknown, defaulting to 1000 [ 1960.539882][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1961.579859][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1962.619840][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1962.730163][T22473] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1962.919804][T22473] usb 5-1: Using ep0 maxpacket: 16 [ 1963.079813][T22473] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1963.145910][T22473] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 1963.249917][T22473] usb 5-1: config 13 has no interface number 0 [ 1963.281641][T22473] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1963.659830][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1963.760987][ T30] kauditd_printk_skb: 603 callbacks suppressed [ 1963.761004][ T30] audit: type=1400 audit(1764771481.010:2587): avc: denied { create } for pid=27756 comm="syz.1.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1963.805884][T22473] usb 5-1: config 13 interface 50 has no altsetting 0 [ 1963.869809][ T30] audit: type=1400 audit(1764771481.050:2588): avc: denied { bpf } for pid=27762 comm="syz.3.5346" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1963.920107][ T30] audit: type=1400 audit(1764771481.060:2589): avc: denied { ioctl } for pid=27756 comm="syz.1.5344" path="socket:[88326]" dev="sockfs" ino=88326 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1964.141472][T22473] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1964.164186][ T30] audit: type=1400 audit(1764771481.070:2590): avc: denied { ioctl } for pid=27752 comm="syz.4.5342" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1964.192205][T22473] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1964.211948][T22473] usb 5-1: Product: syz [ 1964.216148][T22473] usb 5-1: Manufacturer: syz [ 1964.271248][T22473] usb 5-1: SerialNumber: syz [ 1964.289550][ T30] audit: type=1400 audit(1764771481.070:2591): avc: denied { ioctl } for pid=27752 comm="syz.4.5342" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1964.365304][T27753] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1964.439871][ T30] audit: type=1400 audit(1764771481.070:2592): avc: denied { ioctl } for pid=27752 comm="syz.4.5342" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1964.555481][ T30] audit: type=1400 audit(1764771481.230:2593): avc: denied { ioctl } for pid=27752 comm="syz.4.5342" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1964.699837][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1964.772996][ T30] audit: type=1400 audit(1764771481.240:2594): avc: denied { ioctl } for pid=27752 comm="syz.4.5342" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1965.405427][ T30] audit: type=1400 audit(1764771481.240:2595): avc: denied { ioctl } for pid=27752 comm="syz.4.5342" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1965.406454][T22473] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1965.629869][ T30] audit: type=1400 audit(1764771481.250:2596): avc: denied { execmem } for pid=27762 comm="syz.3.5346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1965.690516][T22473] usb 5-1: MIDIStreaming interface descriptor not found [ 1965.739859][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1965.981026][T22473] usb 5-1: USB disconnect, device number 88 [ 1966.960689][T27584] udevd[27584]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1967.500006][T19450] Bluetooth: hci0: command 0x0c1a tx timeout [ 1967.506090][ T5819] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1967.819834][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1968.859854][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1968.877244][ T30] kauditd_printk_skb: 167 callbacks suppressed [ 1968.877262][ T30] audit: type=1400 audit(1764771486.120:2764): avc: denied { module_request } for pid=27797 comm="syz.0.5354" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1969.274652][T27798] Cannot find del_set index 3 as target [ 1969.403313][ T5905] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1969.786417][T27816] FAULT_INJECTION: forcing a failure. [ 1969.786417][T27816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1969.909843][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1970.036055][T27816] CPU: 0 UID: 0 PID: 27816 Comm: syz.2.5357 Not tainted syzkaller #0 PREEMPT(full) [ 1970.036087][T27816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1970.036099][T27816] Call Trace: [ 1970.036107][T27816] [ 1970.036115][T27816] dump_stack_lvl+0x16c/0x1f0 [ 1970.036144][T27816] should_fail_ex+0x512/0x640 [ 1970.036169][T27816] _copy_from_user+0x2e/0xd0 [ 1970.036190][T27816] kstrtouint_from_user+0xd6/0x1d0 [ 1970.036215][T27816] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1970.036246][T27816] ? lock_acquire+0x179/0x330 [ 1970.036279][T27816] proc_fail_nth_write+0x83/0x220 [ 1970.036301][T27816] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1970.036331][T27816] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1970.036350][T27816] vfs_write+0x2a0/0x11d0 [ 1970.036374][T27816] ? __pfx___mutex_lock+0x10/0x10 [ 1970.036401][T27816] ? __pfx_vfs_write+0x10/0x10 [ 1970.036432][T27816] ? __fget_files+0x20e/0x3c0 [ 1970.036467][T27816] ksys_write+0x12a/0x250 [ 1970.036497][T27816] ? __pfx_ksys_write+0x10/0x10 [ 1970.036530][T27816] do_syscall_64+0xcd/0xf80 [ 1970.036556][T27816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1970.036576][T27816] RIP: 0033:0x7fe91cb8e1ff [ 1970.036593][T27816] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1970.036611][T27816] RSP: 002b:00007fe91da8d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1970.036631][T27816] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe91cb8e1ff [ 1970.036644][T27816] RDX: 0000000000000001 RSI: 00007fe91da8d0a0 RDI: 0000000000000004 [ 1970.036657][T27816] RBP: 00007fe91da8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1970.036669][T27816] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1970.036681][T27816] R13: 00007fe91cde6128 R14: 00007fe91cde6090 R15: 00007fff20ac2678 [ 1970.036713][T27816] [ 1970.606191][ T5905] usb 5-1: device descriptor read/64, error -71 [ 1970.624738][T27817] netlink: 'syz.3.5355': attribute type 4 has an invalid length. [ 1970.939817][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1971.270005][ T30] audit: type=1400 audit(1764771486.180:2765): avc: denied { create } for pid=27797 comm="syz.0.5354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1971.349875][ T5905] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1971.439836][ T30] audit: type=1400 audit(1764771486.180:2766): avc: denied { write } for pid=27797 comm="syz.0.5354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1971.544924][ T30] audit: type=1400 audit(1764771486.250:2767): avc: denied { ioctl } for pid=27801 comm="syz.4.5356" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1971.694621][ T30] audit: type=1400 audit(1764771486.250:2768): avc: denied { ioctl } for pid=27801 comm="syz.4.5356" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1971.819625][ T30] audit: type=1400 audit(1764771486.460:2769): avc: denied { ioctl } for pid=27801 comm="syz.4.5356" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1971.979830][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1972.031326][T19245] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1972.057088][T27822] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1972.135929][T27828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1972.142683][T27828] audit: audit_lost=51 audit_rate_limit=0 audit_backlog_limit=64 [ 1972.150573][T27828] audit: backlog limit exceeded [ 1972.597013][T19245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1972.641450][T19245] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1972.739746][T19245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.792630][T19245] usb 3-1: config 0 descriptor?? [ 1973.019812][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1973.060720][T27833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5360'. [ 1973.260327][T27841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5362'. [ 1973.272411][T19245] usbhid 3-1:0.0: can't add hid device: -71 [ 1973.279440][T19245] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1973.333694][T19245] usb 3-1: USB disconnect, device number 92 [ 1974.010384][ T30] kauditd_printk_skb: 150 callbacks suppressed [ 1974.010400][ T30] audit: type=1400 audit(1764771491.260:2900): avc: denied { sys_module } for pid=27832 comm="syz.0.5362" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1974.066454][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1974.159885][ T30] audit: type=1400 audit(1764771491.290:2901): avc: denied { module_request } for pid=27832 comm="syz.0.5362" kmod="dummy0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1974.231731][ T30] audit: type=1400 audit(1764771491.470:2902): avc: denied { read } for pid=27847 comm="syz.3.5364" dev="nsfs" ino=4026533137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1974.313355][T27848] netlink: 'syz.3.5364': attribute type 1 has an invalid length. [ 1974.327785][ T30] audit: type=1400 audit(1764771491.470:2903): avc: denied { read open } for pid=27847 comm="syz.3.5364" path="net:[4026533137]" dev="nsfs" ino=4026533137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1974.369995][T27848] nbd: error processing sock list [ 1974.446552][ T30] audit: type=1400 audit(1764771491.470:2904): avc: denied { create } for pid=27847 comm="syz.3.5364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1974.669755][ T30] audit: type=1400 audit(1764771491.510:2905): avc: denied { create } for pid=27847 comm="syz.3.5364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1975.109873][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1975.290205][ T30] audit: type=1400 audit(1764771491.510:2906): avc: denied { write } for pid=27847 comm="syz.3.5364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1975.339817][ T30] audit: type=1400 audit(1764771491.510:2907): avc: denied { read } for pid=27847 comm="syz.3.5364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1975.379756][ T30] audit: type=1400 audit(1764771491.510:2908): avc: denied { read } for pid=27847 comm="syz.3.5364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1975.437990][ T30] audit: type=1400 audit(1764771491.560:2909): avc: denied { write } for pid=27847 comm="syz.3.5364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1975.534692][T27860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5368'. [ 1975.746267][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1975.755521][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.761950][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1975.849885][ T5897] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1975.915339][T27868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5371'. [ 1976.043493][ T5897] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1976.110024][ T5897] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1976.139971][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.149831][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1976.178390][ T5897] usb 4-1: Product: syz [ 1976.201934][T27871] FAULT_INJECTION: forcing a failure. [ 1976.201934][T27871] name failslab, interval 1, probability 0, space 0, times 0 [ 1976.208729][ T5897] usb 4-1: Manufacturer: syz [ 1976.264964][ T5897] usb 4-1: SerialNumber: syz [ 1976.282029][T27871] CPU: 0 UID: 0 PID: 27871 Comm: syz.4.5373 Not tainted syzkaller #0 PREEMPT(full) [ 1976.282058][T27871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1976.282070][T27871] Call Trace: [ 1976.282077][T27871] [ 1976.282085][T27871] dump_stack_lvl+0x16c/0x1f0 [ 1976.282115][T27871] should_fail_ex+0x512/0x640 [ 1976.282136][T27871] ? fs_reclaim_acquire+0xae/0x150 [ 1976.282162][T27871] should_failslab+0xc2/0x120 [ 1976.282187][T27871] __kmalloc_noprof+0xdd/0x870 [ 1976.282214][T27871] ? tomoyo_encode2+0x100/0x3e0 [ 1976.282245][T27871] ? tomoyo_encode2+0x100/0x3e0 [ 1976.282272][T27871] tomoyo_encode2+0x100/0x3e0 [ 1976.282304][T27871] tomoyo_encode+0x29/0x50 [ 1976.282330][T27871] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1976.282362][T27871] ? tomoyo_profile+0x47/0x60 [ 1976.282386][T27871] tomoyo_path_number_perm+0x245/0x580 [ 1976.282410][T27871] ? tomoyo_path_number_perm+0x237/0x580 [ 1976.282439][T27871] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1976.282466][T27871] ? find_held_lock+0x2b/0x80 [ 1976.282518][T27871] ? find_held_lock+0x2b/0x80 [ 1976.282537][T27871] ? hook_file_ioctl_common+0x145/0x410 [ 1976.282566][T27871] ? __fget_files+0x20e/0x3c0 [ 1976.282597][T27871] security_file_ioctl+0x9b/0x240 [ 1976.282627][T27871] __x64_sys_ioctl+0xb7/0x210 [ 1976.282649][T27871] do_syscall_64+0xcd/0xf80 [ 1976.282673][T27871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1976.282694][T27871] RIP: 0033:0x7f63e2d8f749 [ 1976.282710][T27871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1976.282729][T27871] RSP: 002b:00007f63e3c97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1976.282749][T27871] RAX: ffffffffffffffda RBX: 00007f63e2fe5fa0 RCX: 00007f63e2d8f749 [ 1976.282763][T27871] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000004 [ 1976.282775][T27871] RBP: 00007f63e3c97090 R08: 0000000000000000 R09: 0000000000000000 [ 1976.282788][T27871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1976.282800][T27871] R13: 00007f63e2fe6038 R14: 00007f63e2fe5fa0 R15: 00007fff6e605418 [ 1976.282832][T27871] [ 1976.282851][T27871] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1976.294622][T27874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5371'. [ 1976.411376][T27873] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5372'. [ 1976.722931][ T5819] Bluetooth: hci2: Unknown advertising packet type: 0x1e [ 1976.723000][ T5819] Bluetooth: hci2: adv larger than maximum supported [ 1976.734164][ T5819] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1976.843212][ T5897] as10x_usb: device has been detected [ 1976.849263][ T5897] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1976.945430][ T5897] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1977.599935][T27881] netlink: 'syz.2.5376': attribute type 1 has an invalid length. [ 1978.154413][ T5897] as10x_usb: error during firmware upload part1 [ 1978.170668][ T5897] Registered device Elgato EyeTV DTT Deluxe [ 1978.190496][ T5897] usb 4-1: USB disconnect, device number 84 [ 1978.215091][T27881] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1978.219863][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1978.346585][ T5897] Unregistered device Elgato EyeTV DTT Deluxe [ 1978.370485][ T5897] as10x_usb: device has been disconnected [ 1978.610781][T27887] syzkaller0: entered promiscuous mode [ 1978.642591][T27887] syzkaller0: entered allmulticast mode [ 1979.144163][ T30] kauditd_printk_skb: 200 callbacks suppressed [ 1979.144181][ T30] audit: type=1400 audit(1764771496.230:3110): avc: denied { execmem } for pid=27888 comm="syz.4.5378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1979.269834][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1979.937361][T27896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1979.992928][ T30] audit: type=1400 audit(1764771496.710:3111): avc: denied { prog_load } for pid=27891 comm="syz.0.5379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1980.125898][ T30] audit: type=1400 audit(1764771496.720:3112): avc: denied { bpf } for pid=27891 comm="syz.0.5379" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1980.242489][T27901] syzkaller1: entered promiscuous mode [ 1980.247997][T27901] syzkaller1: entered allmulticast mode [ 1980.257171][ T30] audit: type=1400 audit(1764771496.740:3113): avc: denied { perfmon } for pid=27891 comm="syz.0.5379" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1980.299871][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1980.339785][ T30] audit: type=1400 audit(1764771496.810:3114): avc: denied { execute } for pid=27891 comm="syz.0.5379" dev="tmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1980.410409][ T30] audit: type=1400 audit(1764771496.810:3115): avc: denied { execute_no_trans } for pid=27891 comm="syz.0.5379" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1980.530932][ T30] audit: type=1400 audit(1764771497.180:3116): avc: denied { ioctl } for pid=27888 comm="syz.4.5378" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1980.615598][ T30] audit: type=1400 audit(1764771497.190:3117): avc: denied { create } for pid=27888 comm="syz.4.5378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1980.634041][T27908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5384'. [ 1980.730645][ T30] audit: type=1400 audit(1764771497.340:3118): avc: denied { create } for pid=27895 comm="syz.3.5381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1980.730690][ T30] audit: type=1400 audit(1764771497.430:3119): avc: denied { name_bind } for pid=27895 comm="syz.3.5381" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1981.339819][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1981.985746][T27926] netlink: zone id is out of range [ 1982.258551][T27926] netlink: set zone limit has 4 unknown bytes [ 1982.285812][T27927] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5380'. [ 1982.379849][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1983.419821][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1984.172153][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 1984.172171][ T30] audit: type=1400 audit(1764771501.420:3223): avc: denied { read } for pid=27924 comm="syz.1.5388" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1984.201004][ C1] vkms_vblank_simulate: vblank timer overrun [ 1984.209489][ T5905] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1984.459934][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1984.476765][ T5905] usb 3-1: device descriptor read/64, error -71 [ 1984.497860][ T30] audit: type=1400 audit(1764771501.420:3224): avc: denied { read open } for pid=27924 comm="syz.1.5388" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1984.513510][T27932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5388'. [ 1984.522006][ C1] vkms_vblank_simulate: vblank timer overrun [ 1984.670270][ T30] audit: type=1400 audit(1764771501.450:3225): avc: denied { name_connect } for pid=27913 comm="syz.0.5387" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1985.045053][T27928] fuse: Unknown parameter '/dev/cpu/#/msr' [ 1985.509821][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1985.545267][ T30] audit: type=1400 audit(1764771501.590:3226): avc: denied { ioctl } for pid=27922 comm="syz.2.5380" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1985.570236][ C1] vkms_vblank_simulate: vblank timer overrun [ 1985.699913][ T30] audit: type=1400 audit(1764771501.590:3227): avc: denied { ioctl } for pid=27922 comm="syz.2.5380" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1985.868007][ T30] audit: type=1400 audit(1764771501.590:3228): avc: denied { ioctl } for pid=27922 comm="syz.2.5380" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1986.050808][ T30] audit: type=1400 audit(1764771501.600:3229): avc: denied { create } for pid=27924 comm="syz.1.5388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1986.201735][T27949] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1986.208271][T27949] audit: audit_lost=59 audit_rate_limit=0 audit_backlog_limit=64 [ 1986.236392][T27956] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1986.539961][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1987.349831][T19450] Bluetooth: hci0: command 0x0c1a tx timeout [ 1987.356033][ T5819] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1987.370728][ T5947] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1987.991221][ T5947] usb 4-1: Using ep0 maxpacket: 16 [ 1988.100553][T27976] hub 6-0:1.0: USB hub found [ 1988.108237][T27976] hub 6-0:1.0: 1 port detected [ 1988.143246][ T5947] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1988.169878][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1988.258056][ T5947] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1988.294585][ T5947] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1988.319768][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.372007][ T5947] usb 4-1: config 0 descriptor?? [ 1988.403393][ T5947] usbhid 4-1:0.0: can't add hid device: -22 [ 1988.439858][ T5947] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1988.619831][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1988.713545][T27986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5398'. [ 1989.453256][ T30] kauditd_printk_skb: 274 callbacks suppressed [ 1989.453276][ T30] audit: type=1400 audit(1764771506.140:3501): avc: denied { bpf } for pid=27969 comm="syz.3.5394" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1989.531952][ T30] audit: type=1400 audit(1764771506.170:3502): avc: denied { perfmon } for pid=27969 comm="syz.3.5394" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1989.532006][ T30] audit: type=1400 audit(1764771506.210:3503): avc: denied { create } for pid=27983 comm="syz.2.5399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1989.532045][ T30] audit: type=1400 audit(1764771506.230:3504): avc: denied { bind } for pid=27983 comm="syz.2.5399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1989.532085][ T30] audit: type=1400 audit(1764771506.250:3505): avc: denied { accept } for pid=27983 comm="syz.2.5399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1989.532124][ T30] audit: type=1400 audit(1764771506.270:3506): avc: denied { read } for pid=27983 comm="syz.2.5399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1989.532167][ T30] audit: type=1400 audit(1764771506.670:3507): avc: denied { read append } for pid=27983 comm="syz.2.5399" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1989.532208][ T30] audit: type=1400 audit(1764771506.670:3508): avc: denied { read open } for pid=27983 comm="syz.2.5399" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1989.532251][ T30] audit: type=1400 audit(1764771506.670:3509): avc: denied { bpf } for pid=27969 comm="syz.3.5394" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1989.532292][ T30] audit: type=1400 audit(1764771506.670:3510): avc: denied { perfmon } for pid=27969 comm="syz.3.5394" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1989.659832][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1990.438258][T27994] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5400'. [ 1990.709901][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1991.450777][ T5897] usb 4-1: USB disconnect, device number 85 [ 1991.739989][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1992.689371][T19246] hid-generic 0000:0003:0001.000D: unknown main item tag 0x0 [ 1992.771752][T19246] hid-generic 0000:0003:0001.000D: unknown main item tag 0x0 [ 1992.789824][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1993.801033][T19246] hid-generic 0000:0003:0001.000D: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1993.819817][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1993.823995][T28023] tmpfs: Bad value for 'mpol' [ 1993.856173][T28023] input: syz0 as /devices/virtual/input/input58 [ 1994.495312][ T30] kauditd_printk_skb: 178 callbacks suppressed [ 1994.495329][ T30] audit: type=1400 audit(1764771511.740:3689): avc: denied { create } for pid=28021 comm="syz.3.5406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1994.543912][T28025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5406'. [ 1994.682003][ T30] audit: type=1400 audit(1764771511.780:3690): avc: denied { write } for pid=28021 comm="syz.3.5406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1994.799852][ T30] audit: type=1400 audit(1764771511.780:3691): avc: denied { read } for pid=28021 comm="syz.3.5406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1994.859850][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1994.920041][ T30] audit: type=1400 audit(1764771511.780:3692): avc: denied { read } for pid=28021 comm="syz.3.5406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1995.031477][ T30] audit: type=1400 audit(1764771511.790:3693): avc: denied { ioctl } for pid=28021 comm="syz.3.5406" path="socket:[88684]" dev="sockfs" ino=88684 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1995.089292][T28036] FAULT_INJECTION: forcing a failure. [ 1995.089292][T28036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1995.104516][T28036] CPU: 1 UID: 0 PID: 28036 Comm: syz.2.5408 Not tainted syzkaller #0 PREEMPT(full) [ 1995.104539][T28036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1995.104546][T28036] Call Trace: [ 1995.104551][T28036] [ 1995.104555][T28036] dump_stack_lvl+0x16c/0x1f0 [ 1995.104573][T28036] should_fail_ex+0x512/0x640 [ 1995.104588][T28036] _copy_from_user+0x2e/0xd0 [ 1995.104603][T28036] ____sys_sendmsg+0x607/0xc30 [ 1995.104619][T28036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1995.104636][T28036] ? __pfx__kstrtoull+0x10/0x10 [ 1995.104652][T28036] ___sys_sendmsg+0x134/0x1d0 [ 1995.104664][T28036] ? __pfx____sys_sendmsg+0x10/0x10 [ 1995.104683][T28036] ? find_held_lock+0x2b/0x80 [ 1995.104704][T28036] __sys_sendmmsg+0x200/0x420 [ 1995.104717][T28036] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1995.104734][T28036] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1995.104754][T28036] ? fput+0x70/0xf0 [ 1995.104769][T28036] ? ksys_write+0x1ac/0x250 [ 1995.104782][T28036] ? __pfx_ksys_write+0x10/0x10 [ 1995.104797][T28036] __x64_sys_sendmmsg+0x9c/0x100 [ 1995.104808][T28036] ? lockdep_hardirqs_on+0x7c/0x110 [ 1995.104820][T28036] do_syscall_64+0xcd/0xf80 [ 1995.104834][T28036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1995.104845][T28036] RIP: 0033:0x7fe91cb8f749 [ 1995.104856][T28036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1995.104867][T28036] RSP: 002b:00007fe91daae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1995.104879][T28036] RAX: ffffffffffffffda RBX: 00007fe91cde5fa0 RCX: 00007fe91cb8f749 [ 1995.104886][T28036] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 1995.104893][T28036] RBP: 00007fe91daae090 R08: 0000000000000000 R09: 0000000000000000 [ 1995.104900][T28036] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 1995.104906][T28036] R13: 00007fe91cde6038 R14: 00007fe91cde5fa0 R15: 00007fff20ac2678 [ 1995.104922][T28036] [ 1995.303847][ T30] audit: type=1400 audit(1764771511.790:3694): avc: denied { write } for pid=28021 comm="syz.3.5406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1995.324659][ T30] audit: type=1400 audit(1764771511.820:3695): avc: denied { write } for pid=28021 comm="syz.3.5406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1995.346424][ T30] audit: type=1400 audit(1764771511.880:3696): avc: denied { read write } for pid=18317 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1995.370723][ T30] audit: type=1400 audit(1764771511.880:3697): avc: denied { read write open } for pid=18317 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1995.396248][ T30] audit: type=1400 audit(1764771511.880:3698): avc: denied { ioctl } for pid=18317 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1995.899913][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1996.678665][T28046] wg1 speed is unknown, defaulting to 1000 [ 1996.939880][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1996.963024][ T5897] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1997.188167][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 1997.253379][ T5897] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1997.270702][ T5897] usb 2-1: can't read configurations, error -61 [ 1997.519841][ T5897] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1998.130581][T28061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5417'. [ 1998.149897][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 1998.308823][ T5897] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1998.308862][ T5897] usb 2-1: can't read configurations, error -61 [ 1998.309096][ T5897] usb usb2-port1: attempt power cycle [ 1998.649776][ T5897] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1998.722358][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 1998.775608][ T5897] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1998.789773][ T5897] usb 2-1: can't read configurations, error -61 [ 1998.939856][ T5897] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1999.019816][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1999.044402][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 1999.128422][ T5897] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1999.138940][ T5897] usb 2-1: can't read configurations, error -61 [ 1999.151174][ T5897] usb usb2-port1: unable to enumerate USB device [ 1999.338270][T28078] program syz.0.5421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1999.514489][ T30] kauditd_printk_skb: 279 callbacks suppressed [ 1999.514505][ T30] audit: type=1400 audit(1764771516.760:3978): avc: denied { create } for pid=28074 comm="syz.0.5421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1999.583264][ T30] audit: type=1400 audit(1764771516.830:3979): avc: denied { read write } for pid=28074 comm="syz.0.5421" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1999.632908][ T30] audit: type=1400 audit(1764771516.880:3980): avc: denied { read write open } for pid=28074 comm="syz.0.5421" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1999.714132][ T30] audit: type=1400 audit(1764771516.910:3981): avc: denied { ioctl } for pid=28074 comm="syz.0.5421" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1999.809863][ T30] audit: type=1400 audit(1764771516.910:3982): avc: denied { ioctl } for pid=28074 comm="syz.0.5421" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1999.990154][ T30] audit: type=1400 audit(1764771516.920:3983): avc: denied { ioctl } for pid=28074 comm="syz.0.5421" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2000.059888][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2000.079736][T19450] Bluetooth: hci3: command 0x0405 tx timeout [ 2000.149636][ T30] audit: type=1400 audit(1764771516.920:3984): avc: denied { ioctl } for pid=28074 comm="syz.0.5421" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2000.290686][ T30] audit: type=1400 audit(1764771516.940:3985): avc: denied { read write } for pid=19971 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2000.449777][ T30] audit: type=1400 audit(1764771516.940:3986): avc: denied { read write open } for pid=19971 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2000.996148][T28086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5423'. [ 2001.010164][ T30] audit: type=1400 audit(1764771516.960:3987): avc: denied { ioctl } for pid=19971 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2001.051524][T28086] openvswitch: netlink: Flow actions attr not present in new flow. [ 2001.099858][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2001.295407][T28094] xt_bpf: check failed: parse error [ 2001.814918][T28099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51824 sclass=netlink_route_socket pid=28099 comm=syz.4.5426 [ 2001.844913][T28104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5428'. [ 2002.019779][T19237] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 2002.139842][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2002.231867][T28109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5428'. [ 2002.324812][T19237] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2002.355845][T19237] usb 3-1: not running at top speed; connect to a high speed hub [ 2002.385463][T19237] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2002.430914][T19237] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 2002.452783][T28101] can: request_module (can-proto-0) failed. [ 2002.516398][T19237] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2002.549862][T19237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.578650][T19237] usb 3-1: Product: syz [ 2002.588755][T19237] usb 3-1: Manufacturer: à°Š [ 2002.604014][T19237] usb 3-1: SerialNumber: syz [ 2002.655530][T28103] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2003.189834][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2003.898890][T28119] wg1 speed is unknown, defaulting to 1000 [ 2004.077623][ T5819] Bluetooth: hci3: command 0x0405 tx timeout [ 2004.219944][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2004.545526][ T30] kauditd_printk_skb: 277 callbacks suppressed [ 2004.545559][ T30] audit: type=1400 audit(1764771521.390:4265): avc: denied { prog_load } for pid=28121 comm="syz.1.5434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2005.211926][T19237] cdc_ncm 3-1:1.0: bind() failure [ 2005.241063][T28134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5433'. [ 2005.250527][T28134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5433'. [ 2005.259842][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2005.289762][ T30] audit: type=1400 audit(1764771521.390:4266): avc: denied { bpf } for pid=28121 comm="syz.1.5434" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2005.394474][T19237] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 2005.443775][T19237] cdc_ncm 3-1:1.1: bind() failure [ 2005.470116][ T30] audit: type=1400 audit(1764771521.490:4267): avc: denied { prog_load } for pid=28121 comm="syz.1.5434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2005.539985][T19237] usb 3-1: USB disconnect, device number 95 [ 2005.639762][ T30] audit: type=1400 audit(1764771521.490:4268): avc: denied { bpf } for pid=28121 comm="syz.1.5434" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2005.790260][ T30] audit: type=1400 audit(1764771521.500:4269): avc: denied { map_create } for pid=28121 comm="syz.1.5434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2005.869795][ T30] audit: type=1400 audit(1764771521.510:4270): avc: denied { bpf } for pid=28121 comm="syz.1.5434" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2006.034674][ T30] audit: type=1400 audit(1764771521.520:4271): avc: denied { map_create } for pid=28121 comm="syz.1.5434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2006.114848][ T30] audit: type=1400 audit(1764771521.520:4272): avc: denied { bpf } for pid=28121 comm="syz.1.5434" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2006.299813][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2006.369885][ T30] audit: type=1400 audit(1764771521.670:4273): avc: denied { map_create } for pid=28121 comm="syz.1.5434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2006.399784][ T5897] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2006.444328][ T30] audit: type=1400 audit(1764771521.670:4274): avc: denied { bpf } for pid=28121 comm="syz.1.5434" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2006.799988][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 2006.921783][ T5897] usb 2-1: config 10 has an invalid interface number: 93 but max is 0 [ 2006.941831][ T5897] usb 2-1: config 10 has no interface number 0 [ 2007.087441][ T5897] usb 2-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=1e.08 [ 2007.096831][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.112116][ T5897] usb 2-1: Product: syz [ 2007.116317][ T5897] usb 2-1: Manufacturer: syz [ 2007.130427][ T5897] usb 2-1: SerialNumber: syz [ 2007.181839][ T5897] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state. [ 2007.237305][ T5897] dvb-usb: bulk message failed: -22 (2/0) [ 2007.269761][ T5897] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 2007.310129][ T5897] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)) [ 2007.339832][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2007.354270][ T5897] usb 2-1: media controller created [ 2007.382597][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2007.570178][ T5897] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 2007.586903][T28154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2007.620482][ T5897] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 2008.479940][ T5897] rc_core: IR keymap rc-dtt200u not found [ 2008.485701][ T5897] Registered IR keymap rc-empty [ 2008.539978][ T5897] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 2008.621133][ T5897] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input59 [ 2008.704410][ T5897] dvb-usb: schedule remote query interval to 300 msecs. [ 2008.732835][ T5897] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected. [ 2008.791960][ T5897] usb 2-1: USB disconnect, device number 70 [ 2009.419825][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2009.633269][ T30] kauditd_printk_skb: 223 callbacks suppressed [ 2009.633288][ T30] audit: type=1400 audit(1764771526.430:4447): avc: denied { create } for pid=28168 comm="syz.0.5443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2009.893888][T28169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51824 sclass=netlink_route_socket pid=28169 comm=syz.1.5442 [ 2009.942635][ T30] audit: type=1400 audit(1764771526.450:4448): avc: denied { bind } for pid=28168 comm="syz.0.5443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2010.004518][ T5897] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected. [ 2010.144821][ T30] audit: type=1400 audit(1764771526.470:4449): avc: denied { accept } for pid=28168 comm="syz.0.5443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2010.362063][ T30] audit: type=1400 audit(1764771526.490:4450): avc: denied { read } for pid=28168 comm="syz.0.5443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2010.459811][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2010.494317][ T30] audit: type=1400 audit(1764771526.880:4451): avc: denied { read append } for pid=28168 comm="syz.0.5443" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2010.637023][ T30] audit: type=1400 audit(1764771526.880:4452): avc: denied { read open } for pid=28168 comm="syz.0.5443" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2010.691121][T19245] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2010.729941][ T30] audit: type=1400 audit(1764771526.890:4453): avc: denied { perfmon } for pid=28167 comm="syz.1.5442" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2010.778638][T28174] can: request_module (can-proto-0) failed. [ 2010.819864][ T30] audit: type=1400 audit(1764771526.890:4454): avc: denied { perfmon } for pid=28167 comm="syz.1.5442" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2010.894750][T28183] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2010.940585][T28183] audit: audit_lost=78 audit_rate_limit=0 audit_backlog_limit=64 [ 2010.993868][T19245] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2011.023202][T19245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.219191][ T4029] [ 2011.221540][ T4029] ============================================ [ 2011.227675][ T4029] WARNING: possible recursive locking detected [ 2011.230865][T19245] usb 3-1: Product: syz [ 2011.233805][ T4029] syzkaller #0 Not tainted [ 2011.237944][T19245] usb 3-1: Manufacturer: syz [ 2011.242326][ T4029] -------------------------------------------- [ 2011.242334][ T4029] kworker/u8:16/4029 is trying to acquire lock: [ 2011.242343][ T4029] ffffe8ffffd6c5a8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x7d7/0xda0 [ 2011.242385][ T4029] [ 2011.242385][ T4029] but task is already holding lock: [ 2011.275736][ T4029] ffffe8ffffcdb148 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x6b0/0xda0 [ 2011.284925][ T4029] [ 2011.284925][ T4029] other info that might help us debug this: [ 2011.292950][ T4029] Possible unsafe locking scenario: [ 2011.292950][ T4029] [ 2011.300369][ T4029] CPU0 [ 2011.303618][ T4029] ---- [ 2011.306865][ T4029] lock(&pd_list->lock); [ 2011.311163][ T4029] lock(&pd_list->lock); [ 2011.315461][ T4029] [ 2011.315461][ T4029] *** DEADLOCK *** [ 2011.315461][ T4029] [ 2011.323574][ T4029] May be due to missing lock nesting notation [ 2011.323574][ T4029] [ 2011.331860][ T4029] 3 locks held by kworker/u8:16/4029: [ 2011.337197][ T4029] #0: ffff88801d75f148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 2011.348558][ T4029] #1: ffffc9000d847c90 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 2011.359743][ T4029] #2: ffffe8ffffcdb148 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x6b0/0xda0 [ 2011.369381][ T4029] [ 2011.369381][ T4029] stack backtrace: [ 2011.375237][ T4029] CPU: 1 UID: 0 PID: 4029 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 2011.375251][ T4029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2011.375261][ T4029] Workqueue: pencrypt_parallel padata_parallel_worker [ 2011.375275][ T4029] Call Trace: [ 2011.375280][ T4029] [ 2011.375286][ T4029] dump_stack_lvl+0x116/0x1f0 [ 2011.375300][ T4029] print_deadlock_bug+0x285/0x3b0 [ 2011.375314][ T4029] __lock_acquire+0x136e/0x22f0 [ 2011.375330][ T4029] lock_acquire+0x179/0x330 [ 2011.375343][ T4029] ? padata_do_serial+0x7d7/0xda0 [ 2011.375353][ T4029] ? mark_held_locks+0x49/0x80 [ 2011.375366][ T4029] ? queue_work_on+0x12a/0x1f0 [ 2011.375381][ T4029] _raw_spin_lock+0x2e/0x40 [ 2011.375391][ T4029] ? padata_do_serial+0x7d7/0xda0 [ 2011.375401][ T4029] padata_do_serial+0x7d7/0xda0 [ 2011.375415][ T4029] pcrypt_aead_enc+0x5b/0x70 [ 2011.375426][ T4029] padata_parallel_worker+0x65/0xb0 [ 2011.375436][ T4029] process_one_work+0x9ba/0x1b20 [ 2011.375453][ T4029] ? __pfx_process_one_work+0x10/0x10 [ 2011.375469][ T4029] ? assign_work+0x1a0/0x250 [ 2011.375482][ T4029] worker_thread+0x6c8/0xf10 [ 2011.375499][ T4029] ? __pfx_worker_thread+0x10/0x10 [ 2011.375513][ T4029] kthread+0x3c5/0x780 [ 2011.375527][ T4029] ? __pfx_kthread+0x10/0x10 [ 2011.375539][ T4029] ? rcu_is_watching+0x12/0xc0 [ 2011.375551][ T4029] ? __pfx_kthread+0x10/0x10 [ 2011.375564][ T4029] ret_from_fork+0x983/0xb10 [ 2011.375575][ T4029] ? __pfx_ret_from_fork+0x10/0x10 [ 2011.375586][ T4029] ? __switch_to+0x7af/0x10d0 [ 2011.375599][ T4029] ? __pfx_kthread+0x10/0x10 [ 2011.375612][ T4029] ret_from_fork_asm+0x1a/0x30 [ 2011.375630][ T4029] [ 2011.534321][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2011.638119][T19245] usb 3-1: SerialNumber: syz [ 2012.214425][T19764] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 2012.518461][T19764] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2012.528611][T19764] usb 2-1: not running at top speed; connect to a high speed hub [ 2012.539794][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2012.556672][T19764] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2012.589117][T19764] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 2012.639033][T19764] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2012.667453][T19764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.691837][T19764] usb 2-1: Product: syz [ 2012.716304][T19764] usb 2-1: Manufacturer: à°Š [ 2012.731527][T19764] usb 2-1: SerialNumber: syz [ 2012.758814][T28194] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2013.579768][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2013.611166][T19245] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2013.617710][T19245] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2013.628295][T19245] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2013.819981][T19245] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 2013.845869][T19245] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 2013.867140][T19245] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2013.926125][T19245] usb 3-1: USB disconnect, device number 96 [ 2013.938888][T19245] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 2013.967561][T19245] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 2014.004826][T19245] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 2014.619767][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2014.817428][T19764] cdc_ncm 2-1:1.0: bind() failure [ 2014.855067][T19764] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2014.878542][ T30] kauditd_printk_skb: 187 callbacks suppressed [ 2014.878558][ T30] audit: type=1400 audit(1764771532.120:4641): avc: denied { read write } for pid=18578 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2014.878670][T19764] cdc_ncm 2-1:1.1: bind() failure [ 2014.890442][ T30] audit: type=1400 audit(1764771532.130:4642): avc: denied { read write open } for pid=18578 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2014.959154][T19764] usb 2-1: USB disconnect, device number 71 [ 2015.055811][ T30] audit: type=1400 audit(1764771532.190:4643): avc: denied { ioctl } for pid=18578 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2015.659790][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2016.699906][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2017.739794][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2019.819787][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2020.859780][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available