last executing test programs: 12.497499849s ago: executing program 1 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xfff1}, {0x0, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) getdents(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_io_uring_setup(0x2a29, &(0x7f0000000000)={0x0, 0x57ae, 0x10, 0x2, 0x2bc}, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_enter(r8, 0x2df1, 0x4000, 0x4, 0x0, 0x54) madvise(&(0x7f00005c6000/0x3000)=nil, 0x3000, 0xb) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f00000001c0)={'lo\x00', {0x2, 0x0, @private=0xa010101}}) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 10.833479045s ago: executing program 1 (id=18): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket(0x11, 0x3, 0x1000) close(r0) 10.779676995s ago: executing program 4 (id=19): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x7fffffff) 10.741729976s ago: executing program 4 (id=20): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00 \x00~\x00\x00\x00'], 0x14}}, 0x4000054) 10.707396436s ago: executing program 1 (id=22): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac056302000500000001090224000100004800090400000103000000092100000001220180000000000000000004"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, 0x0, 0xffffff6a) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/89, 0x59}], 0x1, &(0x7f0000000700)=""/149, 0x95}, 0x6}], 0x1, 0x2020, &(0x7f0000000840)={r2, r3+10000000}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r8}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000040)={0x20, 0x3, 0x2, {0x2, 0x2}}, &(0x7f0000000140)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "1cc1ca13eec1d879d067b1e13ae14c8a47e413ea9de08e1e5051358073f9980e360429442b82051e3e31731bf50cca97f88e70581b36984180ef4b2323bc46e52bebc84d48e61fe76006433f6cd826d69861ff070ddfa95f534840951ff963a2df549ce7366529457a42b1e7922a7e75ed9646f75cfae7cbb264d7b51bb2bf3e8e51df3e2d80ec6f6af8fd3ef0b734c66531d8bcb058f2e7c0751cf5911f520b1d7f7ddf271eb535e3983827a16a3328b5c85b4dd17bf4390ef57e6cbeda9806f6b289543dd5dafa36aac894183f"}}, &(0x7f0000000280)={0x0, 0x22, 0x26, {[@main=@item_4={0x3, 0x0, 0xb, "1ca9d4c6"}, @local=@item_4={0x3, 0x2, 0x7, "57017a9e"}, @main=@item_4={0x3, 0x0, 0xb, "63b158a1"}, @local=@item_012={0x2, 0x2, 0x0, 'Br'}, @main=@item_012={0x1, 0x0, 0xc, "c4"}, @main=@item_012={0x1, 0x0, 0xc, ':'}, @main=@item_4={0x3, 0x0, 0x8, "1e86f981"}, @global=@item_4={0x3, 0x1, 0x3, "b3a3cadc"}, @local=@item_4={0x3, 0x2, 0x6, "80eb44c6"}, @global=@item_012={0x0, 0x1, 0xa}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x81, 0x1, {0x22, 0x6a4}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0x16, 0x76, "f111df74ad771b135a62a263f67804654daf0deb05978251b18bde9e611bea506e1d93440e3c5ad32df7cb90db46e41170b8972ba5948df9b5ed487edd3ff1902145de6d73e6090967346932b4c7a3cf73e11b0e1517e76dbb1cc980d88fac30b5980b2a9d5e0034d41debe3a807707a2670eea70da9"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xbd}, &(0x7f0000000440)={0x20, 0x1, 0xbc, "111ef19a112202eaaec4240ba0f4f87ff32c50a6a8a8ac7586d0d37c074d2f4a590b26c62f2d64564d059124822daafd4a90cee12180deb8fa8fb32b4a88c6198f90ad431975c81e184aa8863b333030cbe59f9cac0fd92120ec47d173378476253995fac93b4081ed8f1674c420cebce21ce0c3ebb4255cab3172d09ddf2346b768ea00284e246cb2fc3392cfc0d19ad7593f8e8d2b44c1eb853510142f44045b7787233f9e6929c9facd70dc85a45b5436d0d61f2dc27c493bb533"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0022050000e7b6b2e404a3f497f11ed0f1e6868e00c79adefb2f03b58febf3505312b182add296c5d3"], 0x0}, 0x0) 9.488505315s ago: executing program 0 (id=23): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) 9.231921489s ago: executing program 2 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xfff1}, {0x0, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_io_uring_setup(0x2a29, &(0x7f0000000000)={0x0, 0x57ae, 0x10, 0x2, 0x2bc}, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_enter(r8, 0x2df1, 0x4000, 0x4, 0x0, 0x54) madvise(&(0x7f00005c6000/0x3000)=nil, 0x3000, 0xb) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f00000001c0)={'lo\x00', {0x2, 0x0, @private=0xa010101}}) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 9.16916412s ago: executing program 0 (id=28): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac056302000500000001090224000100004800090400000103000000092100000001220180000000000000000004"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, 0x0, 0xffffff6a) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/89, 0x59}], 0x1, &(0x7f0000000700)=""/149, 0x95}, 0x6}], 0x1, 0x2020, &(0x7f0000000840)={r2, r3+10000000}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r9}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000040)={0x20, 0x3, 0x8c, {0x8c, 0x2, "2cbe141a7a360b4113df6c1ed8a3dd95646f52499114cd8667674257600ef66a880a812bc06c2c96a5930a1ecd8a050838ed94d20dff55da44d338b61571f5d0c3e090d8d9df3c3b36a88a4e2ee3d9e633127bfac2ef9967a891f4e00791e6f810a66ad524fd7c169b0db9ec13dc2b1744d8fc79a90206297302cff38144dd4a6b45ceaf44be8b4a2c81"}}, &(0x7f0000000140)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "1cc1ca13eec1d879d067b1e13ae14c8a47e413ea9de08e1e5051358073f9980e360429442b82051e3e31731bf50cca97f88e70581b36984180ef4b2323bc46e52bebc84d48e61fe76006433f6cd826d69861ff070ddfa95f534840951ff963a2df549ce7366529457a42b1e7922a7e75ed9646f75cfae7cbb264d7b51bb2bf3e8e51df3e2d80ec6f6af8fd3ef0b734c66531d8bcb058f2e7c0751cf5911f520b1d7f7ddf271eb535e3983827a16a3328b5c85b4dd17bf4390ef57e6cbeda9806f6b289543dd5dafa36aac894183f"}}, &(0x7f0000000280)={0x0, 0x22, 0x21, {[@main=@item_4={0x3, 0x0, 0xb, "1ca9d4c6"}, @local=@item_4={0x3, 0x2, 0x7, "57017a9e"}, @main=@item_4={0x3, 0x0, 0xb, "63b158a1"}, @local=@item_012={0x2, 0x2, 0x0, 'Br'}, @main=@item_012={0x1, 0x0, 0xc, "c4"}, @main=@item_012={0x1, 0x0, 0xc, ':'}, @main=@item_4={0x3, 0x0, 0x8, "1e86f981"}, @local=@item_4={0x3, 0x2, 0x6, "80eb44c6"}, @global=@item_012={0x0, 0x1, 0xa}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x81, 0x1, {0x22, 0x6a4}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0x16, 0x76, "f111df74ad771b135a62a263f67804654daf0deb05978251b18bde9e611bea506e1d93440e3c5ad32df7cb90db46e41170b8972ba5948df9b5ed487edd3ff1902145de6d73e6090967346932b4c7a3cf73e11b0e1517e76dbb1cc980d88fac30b5980b2a9d5e0034d41debe3a807707a2670eea70da9"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xbd}, &(0x7f0000000440)={0x20, 0x1, 0xbc, "111ef19a112202eaaec4240ba0f4f87ff32c50a6a8a8ac7586d0d37c074d2f4a590b26c62f2d64564d059124822daafd4a90cee12180deb8fa8fb32b4a88c6198f90ad431975c81e184aa8863b333030cbe59f9cac0fd92120ec47d173378476253995fac93b4081ed8f1674c420cebce21ce0c3ebb4255cab3172d09ddf2346b768ea00284e246cb2fc3392cfc0d19ad7593f8e8d2b44c1eb853510142f44045b7787233f9e6929c9facd70dc85a45b5436d0d61f2dc27c493bb533"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0022050000e7b6b2e404a3f497f11ed0f1e6868e00c79adefb2f03b58febf3505312b182add296c5d3"], 0x0}, 0x0) 9.107475761s ago: executing program 4 (id=31): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd(0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[], 0x138}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01080000000000002a00004001"]) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x44}}, 0x0) 8.653768768s ago: executing program 4 (id=32): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac056302000500000001090224000100004800090400000103000000092100000001220180000000000000000004"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, 0x0, 0xffffff6a) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/89, 0x59}], 0x1, &(0x7f0000000700)=""/149, 0x95}, 0x6}], 0x1, 0x2020, &(0x7f0000000840)={r2, r3+10000000}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r9}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000040)={0x20, 0x3, 0x8c, {0x8c, 0x2, "2cbe141a7a360b4113df6c1ed8a3dd95646f52499114cd8667674257600ef66a880a812bc06c2c96a5930a1ecd8a050838ed94d20dff55da44d338b61571f5d0c3e090d8d9df3c3b36a88a4e2ee3d9e633127bfac2ef9967a891f4e00791e6f810a66ad524fd7c169b0db9ec13dc2b1744d8fc79a90206297302cff38144dd4a6b45ceaf44be8b4a2c81"}}, &(0x7f0000000140)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "1cc1ca13eec1d879d067b1e13ae14c8a47e413ea9de08e1e5051358073f9980e360429442b82051e3e31731bf50cca97f88e70581b36984180ef4b2323bc46e52bebc84d48e61fe76006433f6cd826d69861ff070ddfa95f534840951ff963a2df549ce7366529457a42b1e7922a7e75ed9646f75cfae7cbb264d7b51bb2bf3e8e51df3e2d80ec6f6af8fd3ef0b734c66531d8bcb058f2e7c0751cf5911f520b1d7f7ddf271eb535e3983827a16a3328b5c85b4dd17bf4390ef57e6cbeda9806f6b289543dd5dafa36aac894183f"}}, &(0x7f0000000280)={0x0, 0x22, 0x21, {[@main=@item_4={0x3, 0x0, 0xb, "1ca9d4c6"}, @local=@item_4={0x3, 0x2, 0x7, "57017a9e"}, @main=@item_4={0x3, 0x0, 0xb, "63b158a1"}, @local=@item_012={0x2, 0x2, 0x0, 'Br'}, @main=@item_012={0x1, 0x0, 0xc, "c4"}, @main=@item_012={0x1, 0x0, 0xc, ':'}, @main=@item_4={0x3, 0x0, 0x8, "1e86f981"}, @local=@item_4={0x3, 0x2, 0x6, "80eb44c6"}, @global=@item_012={0x0, 0x1, 0xa}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x81, 0x1, {0x22, 0x6a4}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0x16, 0x76, "f111df74ad771b135a62a263f67804654daf0deb05978251b18bde9e611bea506e1d93440e3c5ad32df7cb90db46e41170b8972ba5948df9b5ed487edd3ff1902145de6d73e6090967346932b4c7a3cf73e11b0e1517e76dbb1cc980d88fac30b5980b2a9d5e0034d41debe3a807707a2670eea70da9"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xbd}, &(0x7f0000000440)={0x20, 0x1, 0xbc, "111ef19a112202eaaec4240ba0f4f87ff32c50a6a8a8ac7586d0d37c074d2f4a590b26c62f2d64564d059124822daafd4a90cee12180deb8fa8fb32b4a88c6198f90ad431975c81e184aa8863b333030cbe59f9cac0fd92120ec47d173378476253995fac93b4081ed8f1674c420cebce21ce0c3ebb4255cab3172d09ddf2346b768ea00284e246cb2fc3392cfc0d19ad7593f8e8d2b44c1eb853510142f44045b7787233f9e6929c9facd70dc85a45b5436d0d61f2dc27c493bb533"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0022050000e7b6b2e404a3f497f11ed0f1e6868e00c79adefb2f03b58febf3505312b182add296c5d3"], 0x0}, 0x0) 8.276928043s ago: executing program 2 (id=33): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000240)="b9010000000061794f9f532186dd2855a5c867bb015fe365daeda74cf54d1c6c053a4e150808cd0c15bbb3bd6715d291c311f9222ddf", 0x0, 0x1fe7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000b40)={"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"}) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "c29c45fe4206669bcb51cb219a6e14a0df41489919"}}) r5 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") syz_usb_ep_write(r3, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") openat(r5, &(0x7f0000000040)='./file1\x00', 0x600000, 0x8) 6.332143603s ago: executing program 1 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="de1d2cac94e046f22d93feb4f3fda438c840fba36243e55f404de2379c59136d3be6f8fcefff475d9cb7cec9"]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@nouid32}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x4, 0x234, 0x0, 0x6, 0x3, 0x9, 'syz0\x00'}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 6.153231886s ago: executing program 0 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="de1d2cac94e046f22d93feb4f3fda438c840fba36243e55f404de2379c59136d3be6f8fcefff475d9cb7cec9"]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@nouid32}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x4, 0x234, 0x0, 0x6, 0x3, 0x9, 'syz0\x00'}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") 4.786210307s ago: executing program 2 (id=41): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x5, 0x200, 0x40, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000040)={r1, &(0x7f0000000100)='\x00\x00\x00', &(0x7f0000000180)=""/14}, 0x20) 4.779304597s ago: executing program 4 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="de1d2cac94e046f22d93feb4f3fda438c840fba36243e55f404de2379c59136d3be6f8fcefff475d9cb7cec9"]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@nouid32}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x4, 0x234, 0x0, 0x6, 0x3, 0x9, 'syz0\x00'}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 4.700640008s ago: executing program 1 (id=44): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00 \x00~\x00\x00\x00'], 0x14}}, 0x4000054) 4.670999019s ago: executing program 2 (id=46): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1100000000000000, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00 \x00~\x00\x00\x00'], 0x14}}, 0x4000054) 3.24483401s ago: executing program 0 (id=48): syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) r3 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000000)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010009000000000000000a00"], 0x24}}, 0x0) 3.24428507s ago: executing program 2 (id=49): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000000000000000040400000000"], 0x0, 0x37}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00 \x00~\x00\x00\x00'], 0x14}}, 0x4000054) 1.223273871s ago: executing program 1 (id=50): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac056302000500000001090224000100004800090400000103000000092100000001220180000000000000000004"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, 0x0, 0xffffff6a) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/89, 0x59}], 0x1, &(0x7f0000000700)=""/149, 0x95}, 0x6}], 0x1, 0x2020, &(0x7f0000000840)={r2, r3+10000000}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r9}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000040)={0x20, 0x3, 0x2, {0x2, 0x2}}, &(0x7f0000000140)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "1cc1ca13eec1d879d067b1e13ae14c8a47e413ea9de08e1e5051358073f9980e360429442b82051e3e31731bf50cca97f88e70581b36984180ef4b2323bc46e52bebc84d48e61fe76006433f6cd826d69861ff070ddfa95f534840951ff963a2df549ce7366529457a42b1e7922a7e75ed9646f75cfae7cbb264d7b51bb2bf3e8e51df3e2d80ec6f6af8fd3ef0b734c66531d8bcb058f2e7c0751cf5911f520b1d7f7ddf271eb535e3983827a16a3328b5c85b4dd17bf4390ef57e6cbeda9806f6b289543dd5dafa36aac894183f"}}, &(0x7f0000000280)={0x0, 0x22, 0x26, {[@main=@item_4={0x3, 0x0, 0xb, "1ca9d4c6"}, @local=@item_4={0x3, 0x2, 0x7, "57017a9e"}, @main=@item_4={0x3, 0x0, 0xb, "63b158a1"}, @local=@item_012={0x2, 0x2, 0x0, 'Br'}, @main=@item_012={0x1, 0x0, 0xc, "c4"}, @main=@item_012={0x1, 0x0, 0xc, ':'}, @main=@item_4={0x3, 0x0, 0x8, "1e86f981"}, @global=@item_4={0x3, 0x1, 0x3, "b3a3cadc"}, @local=@item_4={0x3, 0x2, 0x6, "80eb44c6"}, @global=@item_012={0x0, 0x1, 0xa}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x81, 0x1, {0x22, 0x6a4}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0x16, 0x76, "f111df74ad771b135a62a263f67804654daf0deb05978251b18bde9e611bea506e1d93440e3c5ad32df7cb90db46e41170b8972ba5948df9b5ed487edd3ff1902145de6d73e6090967346932b4c7a3cf73e11b0e1517e76dbb1cc980d88fac30b5980b2a9d5e0034d41debe3a807707a2670eea70da9"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xbd}, &(0x7f0000000440)={0x20, 0x1, 0xbc, "111ef19a112202eaaec4240ba0f4f87ff32c50a6a8a8ac7586d0d37c074d2f4a590b26c62f2d64564d059124822daafd4a90cee12180deb8fa8fb32b4a88c6198f90ad431975c81e184aa8863b333030cbe59f9cac0fd92120ec47d173378476253995fac93b4081ed8f1674c420cebce21ce0c3ebb4255cab3172d09ddf2346b768ea00284e246cb2fc3392cfc0d19ad7593f8e8d2b44c1eb853510142f44045b7787233f9e6929c9facd70dc85a45b5436d0d61f2dc27c493bb533"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0022050000e7b6b2e404a3f497f11ed0f1e6868e00c79adefb2f03b58febf3505312b182add296c5d3"], 0x0}, 0x0) 1.220739021s ago: executing program 4 (id=51): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac056302000500000001090224000100004800090400000103000000092100000001220180000000000000000004"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, 0x0, 0xffffff6a) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/89, 0x59}], 0x1, &(0x7f0000000700)=""/149, 0x95}, 0x6}], 0x1, 0x2020, &(0x7f0000000840)={r2, r3+10000000}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r9}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000040)={0x20, 0x3, 0x8c, {0x8c, 0x2, "2cbe141a7a360b4113df6c1ed8a3dd95646f52499114cd8667674257600ef66a880a812bc06c2c96a5930a1ecd8a050838ed94d20dff55da44d338b61571f5d0c3e090d8d9df3c3b36a88a4e2ee3d9e633127bfac2ef9967a891f4e00791e6f810a66ad524fd7c169b0db9ec13dc2b1744d8fc79a90206297302cff38144dd4a6b45ceaf44be8b4a2c81"}}, &(0x7f0000000140)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "1cc1ca13eec1d879d067b1e13ae14c8a47e413ea9de08e1e5051358073f9980e360429442b82051e3e31731bf50cca97f88e70581b36984180ef4b2323bc46e52bebc84d48e61fe76006433f6cd826d69861ff070ddfa95f534840951ff963a2df549ce7366529457a42b1e7922a7e75ed9646f75cfae7cbb264d7b51bb2bf3e8e51df3e2d80ec6f6af8fd3ef0b734c66531d8bcb058f2e7c0751cf5911f520b1d7f7ddf271eb535e3983827a16a3328b5c85b4dd17bf4390ef57e6cbeda9806f6b289543dd5dafa36aac894183f"}}, &(0x7f0000000280)={0x0, 0x22, 0x21, {[@main=@item_4={0x3, 0x0, 0xb, "1ca9d4c6"}, @local=@item_4={0x3, 0x2, 0x7, "57017a9e"}, @main=@item_4={0x3, 0x0, 0xb, "63b158a1"}, @local=@item_012={0x2, 0x2, 0x0, 'Br'}, @main=@item_012={0x1, 0x0, 0xc, "c4"}, @main=@item_012={0x1, 0x0, 0xc, ':'}, @main=@item_4={0x3, 0x0, 0x8, "1e86f981"}, @local=@item_4={0x3, 0x2, 0x6, "80eb44c6"}, @global=@item_012={0x0, 0x1, 0xa}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x81, 0x1, {0x22, 0x6a4}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0x16, 0x76, "f111df74ad771b135a62a263f67804654daf0deb05978251b18bde9e611bea506e1d93440e3c5ad32df7cb90db46e41170b8972ba5948df9b5ed487edd3ff1902145de6d73e6090967346932b4c7a3cf73e11b0e1517e76dbb1cc980d88fac30b5980b2a9d5e0034d41debe3a807707a2670eea70da9"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xbd}, &(0x7f0000000440)={0x20, 0x1, 0xbc, "111ef19a112202eaaec4240ba0f4f87ff32c50a6a8a8ac7586d0d37c074d2f4a590b26c62f2d64564d059124822daafd4a90cee12180deb8fa8fb32b4a88c6198f90ad431975c81e184aa8863b333030cbe59f9cac0fd92120ec47d173378476253995fac93b4081ed8f1674c420cebce21ce0c3ebb4255cab3172d09ddf2346b768ea00284e246cb2fc3392cfc0d19ad7593f8e8d2b44c1eb853510142f44045b7787233f9e6929c9facd70dc85a45b5436d0d61f2dc27c493bb533"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0022050000e7b6b2e404a3f497f11ed0f1e6868e00c79adefb2f03b58febf3505312b182add296c5d3"], 0x0}, 0x0) 1.211663821s ago: executing program 2 (id=52): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac056302000500000001090224000100004800090400000103000000092100000001220180000000000000000004"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, 0x0, 0xffffff6a) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/89, 0x59}], 0x1, &(0x7f0000000700)=""/149, 0x95}, 0x6}], 0x1, 0x2020, &(0x7f0000000840)={r2, r3+10000000}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r9}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000040)={0x20, 0x3, 0x8c, {0x8c, 0x2, "2cbe141a7a360b4113df6c1ed8a3dd95646f52499114cd8667674257600ef66a880a812bc06c2c96a5930a1ecd8a050838ed94d20dff55da44d338b61571f5d0c3e090d8d9df3c3b36a88a4e2ee3d9e633127bfac2ef9967a891f4e00791e6f810a66ad524fd7c169b0db9ec13dc2b1744d8fc79a90206297302cff38144dd4a6b45ceaf44be8b4a2c81"}}, &(0x7f0000000140)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "1cc1ca13eec1d879d067b1e13ae14c8a47e413ea9de08e1e5051358073f9980e360429442b82051e3e31731bf50cca97f88e70581b36984180ef4b2323bc46e52bebc84d48e61fe76006433f6cd826d69861ff070ddfa95f534840951ff963a2df549ce7366529457a42b1e7922a7e75ed9646f75cfae7cbb264d7b51bb2bf3e8e51df3e2d80ec6f6af8fd3ef0b734c66531d8bcb058f2e7c0751cf5911f520b1d7f7ddf271eb535e3983827a16a3328b5c85b4dd17bf4390ef57e6cbeda9806f6b289543dd5dafa36aac894183f"}}, &(0x7f0000000280)={0x0, 0x22, 0x21, {[@main=@item_4={0x3, 0x0, 0xb, "1ca9d4c6"}, @local=@item_4={0x3, 0x2, 0x7, "57017a9e"}, @main=@item_4={0x3, 0x0, 0xb, "63b158a1"}, @local=@item_012={0x2, 0x2, 0x0, 'Br'}, @main=@item_012={0x1, 0x0, 0xc, "c4"}, @main=@item_012={0x1, 0x0, 0xc, ':'}, @main=@item_4={0x3, 0x0, 0x8, "1e86f981"}, @local=@item_4={0x3, 0x2, 0x6, "80eb44c6"}, @global=@item_012={0x0, 0x1, 0xa}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x81, 0x1, {0x22, 0x6a4}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0x16, 0x76, "f111df74ad771b135a62a263f67804654daf0deb05978251b18bde9e611bea506e1d93440e3c5ad32df7cb90db46e41170b8972ba5948df9b5ed487edd3ff1902145de6d73e6090967346932b4c7a3cf73e11b0e1517e76dbb1cc980d88fac30b5980b2a9d5e0034d41debe3a807707a2670eea70da9"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xbd}, &(0x7f0000000440)={0x20, 0x1, 0xbc, "111ef19a112202eaaec4240ba0f4f87ff32c50a6a8a8ac7586d0d37c074d2f4a590b26c62f2d64564d059124822daafd4a90cee12180deb8fa8fb32b4a88c6198f90ad431975c81e184aa8863b333030cbe59f9cac0fd92120ec47d173378476253995fac93b4081ed8f1674c420cebce21ce0c3ebb4255cab3172d09ddf2346b768ea00284e246cb2fc3392cfc0d19ad7593f8e8d2b44c1eb853510142f44045b7787233f9e6929c9facd70dc85a45b5436d0d61f2dc27c493bb533"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0022050000e7b6b2e404a3f497f11ed0f1e6868e00c79adefb2f03b58febf3505312b182add296c5d3"], 0x0}, 0x0) 447.831933ms ago: executing program 3 (id=53): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0) 436.494473ms ago: executing program 3 (id=54): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) 332.742065ms ago: executing program 3 (id=55): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0xffffffac, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r2}, 0x10) set_robust_list(&(0x7f0000000400), 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000001900000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES8, @ANYRESOCT=r0], &(0x7f0000000780)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32, @ANYBLOB="37112ae747c18c31f04ca60e73138dd22312a2f9d414fe00daf3098fc046e551cc4cfe22bdcc8f3d0e404cc62b0b75ee5c55eaffedd8fbc2d0f7dff4a1095f0eff85c90ff8ff02419f2d50ad1901c68533c0636c340a0b4a703f9bf20efef667b708053097a2163bf1c1c86d6e060efcba1c6440aa8688a14f52e0b9921e7f08cf98c6d4a9a32d42a99a55794ca8c9f61cf86a521100"/165], 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 138.445488ms ago: executing program 3 (id=56): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$netlink(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000e00)={0x3c8, 0x37, 0x100, 0x70bd25, 0x25dfdbff, "", [@typed={0x14, 0x12e, 0x0, 0x0, @ipv6=@remote}, @generic="6d373c3c344c0fc9a166adcae4167ad1df4bd2acd2", @nested={0x89, 0x36, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @pid}, @nested={0x4, 0xf6}, @generic="852b06f24f1725317fda532a823af64ed7d774e5714b8c45e89766a2b6ef6476e2627e7b21d1ffb011e0dc1f2f5be112680496581fa6844d5140ef4d23d5e0d31384ff40e6c72457b303a640aa14a7ff792105dc31714fbd483ce29c74556faa0671b55a0de8347e57fd7943300cfb05bd", @typed={0x8, 0x3a, 0x0, 0x0, @uid}]}, @nested={0x2db, 0x12d, 0x0, 0x1, [@generic="b449966983c34ee9849d9f7557bacdf56e2228ae5555ad18cbf1fb80bd66f61822", @nested={0x4, 0x10e}, @generic="af51fd846aaf068924029ebc9f6e81ad30812319525cf0859585c1ae28411078345bb14a9dedb93dd8fc1a8127d9853ee4063f79eb97fb975db4eff538216e0c117e1aedcde7cf075680d023a4bd67aea1bc0ca55dac77495076829ca5064e6a6d4a49f0c1156e9387428c8ddd63ba7c80bb36daad890f060a2c0a7873b00f438457e03080c745a6d1456eec8a726f9297e608975614fc99b912689b232c0a028a97551f15295f5104693f16b85083f44de0f28264256d6f063e12d310ee12653e305d62ff770a50121f6c7d8c87e32766c1b0fd7e6194acb8c2227ceae9d4a5095ed4f0d279f747dcdcbc1d5b7ef5029ce32d28c5", @generic="4ce7c27020c1006be0603ac88413b3cfd265f1cefbfb9f85bf31e98a1431a454ac1a7c0b80d8d7dfbc821f375da307b1ffdd21fbf41077b1361b8819053669116c5121c35588061538b9b0854fccdbb58797278d6e00"/96, @nested={0x4, 0x131}, @generic="5b9e9e7cc22ed0fcd8629a7e541ad8b82b3be12eb75f35e3c4b4bc13cb2eff92e6417e0cfa2e8a49c4d9a970422d902761802027e5e76d9e9aed83c59e9d9a7443d8117fdfd1139abc8fb8881831834e9ac9bc662cbd84cb8732fade70593a2d28a91dad72772204b452126f80893bccee37b5d27412bc8bd66aab0cbfbf375d927b1ea92ee5968d4d0320c0aa3e3d38de67c01c1e09eb8abb", @nested={0xa4, 0x15, 0x0, 0x1, [@typed={0x9d, 0x2, 0x0, 0x0, @binary="6bf2e57519b375af2205570476a0f6637e85d44d7b4484277b19d15de3838cc066144210d825b4d2724e8ee903b5a0ce427619d564c07ce385823ffcd2acd7387145a84992f20741c288f51161e7880ca0d437c38616e4a9acdf2fbcea8250055bcd8a7f9c9c7a182ec5ecfea80ba2774a60ebe2c14ec7f1501c9fc0380e2c2e0dc6d9e366891563e039f02ea652b04f96d38fb3a1bfb42857"}]}, @nested={0x4, 0x35}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x140}]}, @nested={0x1c, 0x11a, 0x0, 0x1, [@nested={0x4, 0x41}, @typed={0x14, 0xf5, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @typed={0x8, 0xb, 0x0, 0x0, @ipv4=@private=0xa010101}]}, 0x3c8}, {&(0x7f0000000240)=ANY=[], 0x18}, {&(0x7f0000000400)={0x18, 0x39, 0x400, 0x70bd26, 0x25dfdbfb, "", [@typed={0x8, 0xd9, 0x0, 0x0, @uid}]}, 0x18}, {&(0x7f00000004c0)=ANY=[], 0x14}, {&(0x7f0000004940)={0xfcc, 0x27, 0x20, 0x70bd25, 0x25dfdbfe, "", [@nested={0x349, 0xb, 0x0, 0x1, [@nested={0x4, 0x14c}, @generic="ceb5752651c53882ca8f7e9498badba6f265658a54eeaa604418c6a28451bf5c3db4ddb5e02531d4dafe8f8367fea4e1604425448b96525e5b2f965ebe75c2e20636cf37d8dd9456801ff6b06a2cf5a0ed6336f87a2e65b66bd9bd562584c7ceaa026b79eff464e8708263371ddbf4e2f8dfa2852ec321e6cb52b70b0da878743cb5085634048b8b4f82b6", @generic="ac6c4b3f327b7571806e3061bf5b8b89cb851d3da68211e1fe48ffa82824c28bdff4ad29d16d72715a223857faaed3945a3b1411d27a1e48f0fa1f25e83f89ea4a3c76793a0b403675006fa0ecdfe12ad4e8e8fe5b16fcf93532b22a48402334e3cc7a476da27ffedf74312bf9f2521872a1269230c04d0372365a071d9b50a1ddf9f631ffafe2c7dd5c6fca2a096ac62824ee7fa1e5fedff11c3417e928f8ddef02e03d84ac773ca28ecd50efba1bdcd2cc6cd895c66dce3884fba1af92ae4ad897f7f2", @typed={0x8, 0x55, 0x0, 0x0, @u32=0x7}, @generic="cc1768dbb9bb696845702b860bb1ee41af2b1951e2b0dc211a3d142cf387a170963776f3a81b629e8dec3c07a93e55972f237aebb329a6c86243c78f33cab99e6d18ec13b203272dd8e7c47437d0a55df7e20eba03d648a8ac5cfcb4027ab79f1171f815ad44f1640b5b88587aa80718b1313375d97d61ad71b0c481ac7dfc8805579ea4468e3dc9ad230aa5719e79d0b40549570d030c7e247ce55fa1ad79539c6eb179d2d0c8c1a65178c2411f", @typed={0xf5, 0x70, 0x0, 0x0, @binary="adea164846947c374220c7d8bcd3f8bcdae4d4ffa046cb0c3774360a334fc312444eb38e66c8a283fe413248a990db7d0f2ddfd53c027fa9a0afbed5a64c6c1810d59528a3e0eeb7816f6d188dff3a1a8184c312112f2e7e3d0c29c58325083becd720168929a8d449af80027b8139717f1df4cff2670d526791248193220c3e811ce9edaf42719c1e569b6950a7fe87aef91f54d8f2aa69d887effb82ea30ee27c50945676472f121b13d8ba43c9e3a313dd885dcc3af21baed6ad8481091aeaeac92a301b4e9d787420d19bdf0f7fd21ee7df735b95d00d117084ecb61b12883807818b4ae717bd08fec72d2a5b6cc13"}, @nested={0x4, 0xb0}, @typed={0x8, 0xde, 0x0, 0x0, @u32=0x7f}, @nested={0x4, 0x119}, @typed={0x31, 0xd7, 0x0, 0x0, @binary="6b5703847abc6692422d27c091c295d616b3d36e3bc19bca13a0162f441f1bfa428db8cbd84c1cfbd8b3f2986e"}]}, @generic="76e046281956771afc2ba6c1a9b4b32879aee3da1963f026814d6f531700de4e5679ca9417a000b169bc7985e21c9b27f53a5dd22b262d8ff1363edfd494a05fc536bcb4ab65d241cc5f2709f5e2dc6974355eb84622ce43cc7b9fd12f", @typed={0x59, 0x116, 0x0, 0x0, @binary="154fb9d00446dcb61eed68137d4fa551e14c23c1b6bf5c96e3486c6028fef0f0133f9881cde0775a276fb248c4783b496e87a83083b32f456dea73f0190a707e8513ddf3447719974890ed678c56ebbf895b29d99a"}, @nested={0xbb1, 0xf3, 0x0, 0x1, [@typed={0x4, 0x6}, @nested={0x4, 0x13b}, @typed={0x8, 0xdf, 0x0, 0x0, @fd=r0}, @nested={0x22c, 0x3, 0x0, 0x1, [@nested={0x204, 0x26, 0x0, 0x1, [@nested={0x18, 0x150, 0x0, 0x1, [@typed={0x8, 0x1c, 0x0, 0x0, @pid}, @typed={0x8, 0x1b, 0x0, 0x0, @pid}, @nested={0x4, 0xe9}]}, @typed={0x14, 0x14f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @nested={0x1bd, 0x6f, 0x0, 0x1, [@generic="86ce5c005bc486222469265dc285b817c8b6a796e56bf7ff8de5e65c42526d8b68cb9f3065d2d8b3a57d3ebaa5a1f0524b92dca7ec720f6fb5c8421ac573396d1d1ba594dfb9a3b2aa706cb4ad501899b1499f6f183c20698673a24eb27ded8f51dd3c10f613a2dee568ec9a7cd098a3014208ea6f1b5da043c4e806cfc7929a1e61443be08e07eeb4802acc414e6f5d6ecae4fd2ebd5aa570d0f89c1244c08912068a31af072f75b0c1d58f86c609c308dc9a131a6d984fa1433dafe766c64f44d9b66a032f68467c960725f55648c9bf443523828fc145ff9e5f583848f595", @generic="0eb1d98fab01f648daae4f0876df2fffe59e39cdcecf3e7470a2cde1d4919fc32a31e2cc22366e2c0f1c8c99f42975b91ef2e015a71c92e361ee3a4d2909edf59b77f17fd14ee91f4dc3ca4c18698050d65f72ad446787fb3c7fab857e6b95c0d389dbfe400b98530599cb596160ea268b7f39a820593ed9f56016fc3656122536804ad206fb640b7584c4b3d42108a8595559215ba4ace374738ded5d51fe663d3f271dc67086fa41eeeab187f9e25eb87387b7074324fe8d1301bab88c5b53c41289a12c00cb3fab7ced61e751bbd733115fcf76", @nested={0x4, 0xf7}]}, @typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0xc, 0xa6, 0x0, 0x1, [@typed={0x8, 0x57, 0x0, 0x0, @ipv4=@empty}]}, @typed={0x8, 0x123, 0x0, 0x0, @u32=0x7}, @typed={0x4, 0x97}, @nested={0x4, 0x1c}, @typed={0x8, 0x61, 0x0, 0x0, @fd=r0}]}, @generic="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"]}]}, 0xfcc}], 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1ce6a400001200007c5e010000007d2a", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x20004005}, 0x48040) 123.718638ms ago: executing program 0 (id=57): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd(0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[], 0x138}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01080000000000002a00004001"]) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x44}}, 0x0) 102.605048ms ago: executing program 3 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x11, 0x3, 0x1000) close(r0) 40.101579ms ago: executing program 0 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xfff1}, {0x0, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_io_uring_setup(0x2a29, &(0x7f0000000000)={0x0, 0x57ae, 0x10, 0x2, 0x2bc}, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_enter(r8, 0x2df1, 0x4000, 0x4, 0x0, 0x54) madvise(&(0x7f00005c6000/0x3000)=nil, 0x3000, 0xb) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f00000001c0)={'lo\x00', {0x2, 0x0, @private=0xa010101}}) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 0s ago: executing program 3 (id=60): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1100000000000000, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00 \x00~\x00\x00\x00'], 0x14}}, 0x4000054) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.214' (ED25519) to the list of known hosts. [ 20.516065][ T28] audit: type=1400 audit(1750906650.057:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.517124][ T275] cgroup: Unknown subsys name 'net' [ 20.538814][ T28] audit: type=1400 audit(1750906650.057:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.566042][ T28] audit: type=1400 audit(1750906650.087:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.566202][ T275] cgroup: Unknown subsys name 'devices' [ 20.681219][ T275] cgroup: Unknown subsys name 'hugetlb' [ 20.686801][ T275] cgroup: Unknown subsys name 'rlimit' [ 20.818741][ T28] audit: type=1400 audit(1750906650.357:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.841939][ T28] audit: type=1400 audit(1750906650.357:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.847305][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.866811][ T28] audit: type=1400 audit(1750906650.357:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.898268][ T28] audit: type=1400 audit(1750906650.417:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.921071][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.923703][ T28] audit: type=1400 audit(1750906650.417:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.957778][ T28] audit: type=1400 audit(1750906650.467:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.983259][ T28] audit: type=1400 audit(1750906650.467:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.491670][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.498737][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.506173][ T283] device bridge_slave_0 entered promiscuous mode [ 22.530497][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.537527][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.544890][ T283] device bridge_slave_1 entered promiscuous mode [ 22.621337][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.628376][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.635750][ T285] device bridge_slave_0 entered promiscuous mode [ 22.642358][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.649394][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.656714][ T284] device bridge_slave_0 entered promiscuous mode [ 22.666585][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.673653][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.680993][ T286] device bridge_slave_0 entered promiscuous mode [ 22.691415][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.698432][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.705796][ T285] device bridge_slave_1 entered promiscuous mode [ 22.712329][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.719342][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.726602][ T284] device bridge_slave_1 entered promiscuous mode [ 22.736638][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.743691][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.750940][ T286] device bridge_slave_1 entered promiscuous mode [ 22.773214][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.780291][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.787682][ T287] device bridge_slave_0 entered promiscuous mode [ 22.809799][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.816822][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.824137][ T287] device bridge_slave_1 entered promiscuous mode [ 22.994408][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.001466][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.023150][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.030206][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.037448][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.044477][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.059413][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.066458][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.073721][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.080743][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.093952][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.100989][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.108237][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.115262][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.133926][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.141443][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.148588][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.156326][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.163469][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.170872][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.178003][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.186234][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.193598][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.207584][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.242249][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.250745][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.257747][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.265135][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.273319][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.280336][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.287622][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.295900][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.304026][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.311043][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.318312][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.326552][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.333578][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.357474][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.365118][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.373013][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.381270][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.388289][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.395754][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.403888][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.410906][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.418247][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.426149][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.434088][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.442207][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.449202][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.456628][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.464989][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.494330][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.514159][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.524056][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.531086][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.539896][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.547978][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.555007][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.562435][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.570570][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.577567][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.585007][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.592939][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.600920][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.608750][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.616698][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.624559][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.632877][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.641156][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.649326][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.657707][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.665595][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.673665][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.681147][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.699267][ T286] device veth0_vlan entered promiscuous mode [ 23.706733][ T283] device veth0_vlan entered promiscuous mode [ 23.714845][ T287] device veth0_vlan entered promiscuous mode [ 23.721454][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.729495][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.737858][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.746007][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.754002][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.762270][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.770502][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.778245][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.786261][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.794146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.801692][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.809013][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.816441][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.832084][ T286] device veth1_macvtap entered promiscuous mode [ 23.841036][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.849329][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.857576][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.866648][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.876384][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.884776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.896993][ T284] device veth0_vlan entered promiscuous mode [ 23.906521][ T283] device veth1_macvtap entered promiscuous mode [ 23.915962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.923867][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.931955][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.940249][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.948268][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.956010][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.964272][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.972703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.980241][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.993560][ T285] device veth0_vlan entered promiscuous mode [ 24.004382][ T287] device veth1_macvtap entered promiscuous mode [ 24.011414][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.020131][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.028283][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.036713][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.044662][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.052615][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.060152][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.072099][ T284] device veth1_macvtap entered promiscuous mode [ 24.088539][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.097059][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.105375][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.113667][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.122393][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.130769][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.138866][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.147143][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.155319][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.163751][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.172037][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.180838][ T285] device veth1_macvtap entered promiscuous mode [ 24.197927][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 24.205816][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.213611][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.222215][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.231178][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.239290][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.247790][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.256069][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.266254][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.274527][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.326426][ T314] fuse: Bad value for 'user_id' [ 24.350153][ T314] loop0: detected capacity change from 0 to 1024 [ 24.356793][ T314] ======================================================= [ 24.356793][ T314] WARNING: The mand mount option has been deprecated and [ 24.356793][ T314] and is ignored by this kernel. Remove the mand [ 24.356793][ T314] option from the mount to silence this warning. [ 24.356793][ T314] ======================================================= [ 24.393975][ T317] fuse: Bad value for 'user_id' [ 24.431303][ T314] EXT4-fs: Ignoring removed nobh option [ 24.449922][ T314] EXT4-fs: Ignoring removed bh option [ 24.471054][ T317] loop2: detected capacity change from 0 to 1024 [ 24.487891][ T317] EXT4-fs: Ignoring removed nobh option [ 24.493607][ T317] EXT4-fs: Ignoring removed bh option [ 24.503890][ T314] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.202106][ T317] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.443957][ T328] fuse: Bad value for 'user_id' [ 25.485722][ T314] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 25.508914][ T332] loop3: detected capacity change from 0 to 1024 [ 25.509712][ T317] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 25.516923][ T332] EXT4-fs: Ignoring removed nobh option [ 25.559944][ T332] EXT4-fs: Ignoring removed bh option [ 25.566118][ T332] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.652801][ T332] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 25.656977][ T340] fuse: Bad value for 'user_id' [ 26.398338][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 26.398355][ T28] audit: type=1400 audit(1750906655.307:112): avc: denied { prog_run } for pid=313 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.456396][ T28] audit: type=1400 audit(1750906655.307:113): avc: denied { create } for pid=313 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.475734][ T345] loop1: detected capacity change from 0 to 1024 [ 26.841110][ T285] EXT4-fs (loop0): unmounting filesystem. [ 26.852487][ T345] EXT4-fs: Ignoring removed nobh option [ 26.858054][ T345] EXT4-fs: Ignoring removed bh option [ 26.866437][ T287] EXT4-fs (loop2): unmounting filesystem. [ 26.885646][ T345] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 26.911981][ T345] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 26.923195][ T353] fuse: Bad value for 'user_id' [ 26.942264][ T355] fuse: Bad value for 'user_id' [ 26.953925][ T353] loop0: detected capacity change from 0 to 1024 [ 26.962012][ T353] EXT4-fs: Ignoring removed nobh option [ 26.967636][ T353] EXT4-fs: Ignoring removed bh option [ 26.989080][ T355] loop2: detected capacity change from 0 to 1024 [ 26.995803][ T353] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.020121][ T355] EXT4-fs: Ignoring removed nobh option [ 27.025694][ T355] EXT4-fs: Ignoring removed bh option [ 27.058338][ T355] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.085471][ T286] EXT4-fs (loop3): unmounting filesystem. [ 27.099177][ T353] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 27.108750][ T355] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.143852][ T363] capability: warning: `syz.4.12' uses deprecated v2 capabilities in a way that may be insecure [ 27.281926][ T28] audit: type=1400 audit(1750906656.827:114): avc: denied { read write } for pid=364 comm="syz.3.11" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.879793][ T28] audit: type=1400 audit(1750906657.417:115): avc: denied { open } for pid=364 comm="syz.3.11" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.205248][ T28] audit: type=1400 audit(1750906657.417:116): avc: denied { ioctl } for pid=364 comm="syz.3.11" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.259837][ T287] EXT4-fs (loop2): unmounting filesystem. [ 28.263849][ T373] binder: 356:373 ioctl c018620c 200000000140 returned -1 [ 28.268093][ T28] audit: type=1400 audit(1750906657.807:117): avc: denied { read } for pid=356 comm="syz.4.12" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.299694][ T28] audit: type=1400 audit(1750906657.807:118): avc: denied { open } for pid=356 comm="syz.4.12" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.353119][ T28] audit: type=1400 audit(1750906657.807:119): avc: denied { ioctl } for pid=356 comm="syz.4.12" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.384043][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.393488][ T285] EXT4-fs (loop0): unmounting filesystem. [ 28.396052][ T284] EXT4-fs (loop1): unmounting filesystem. [ 28.418742][ T375] fuse: Bad value for 'user_id' [ 28.425914][ T377] fuse: Bad value for 'user_id' [ 28.437887][ T375] loop2: detected capacity change from 0 to 1024 [ 28.437893][ T377] loop0: detected capacity change from 0 to 1024 [ 28.446531][ T377] EXT4-fs: Ignoring removed nobh option [ 28.453776][ T375] EXT4-fs: Ignoring removed nobh option [ 28.470831][ T377] EXT4-fs: Ignoring removed bh option [ 28.476446][ T377] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.488235][ T375] EXT4-fs: Ignoring removed bh option [ 28.494796][ T375] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.513883][ T377] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 28.553082][ T375] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 28.582593][ T24] usb 4-1: device descriptor read/64, error -71 [ 29.850724][ T285] EXT4-fs (loop0): unmounting filesystem. [ 29.861141][ T287] EXT4-fs (loop2): unmounting filesystem. [ 29.892073][ T392] fuse: Bad value for 'user_id' [ 29.901163][ T392] loop0: detected capacity change from 0 to 1024 [ 29.905042][ T28] audit: type=1400 audit(1750906659.447:120): avc: denied { read } for pid=393 comm="syz.2.17" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 29.907825][ T392] EXT4-fs: Ignoring removed nobh option [ 29.937491][ T392] EXT4-fs: Ignoring removed bh option [ 29.943132][ T28] audit: type=1400 audit(1750906659.477:121): avc: denied { open } for pid=393 comm="syz.2.17" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 29.943179][ T392] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.947522][ T394] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.966170][ T24] usb 4-1: device descriptor read/64, error -71 [ 30.018561][ T394] Zero length message leads to an empty skb [ 30.035868][ T392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.773082][ T412] overlayfs: failed to set xattr on upper [ 30.779053][ T412] overlayfs: failed to resolve './file0': -2 [ 31.385184][ T285] EXT4-fs (loop0): unmounting filesystem. [ 31.522501][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.655582][ T103] udevd[103]: worker [315] terminated by signal 33 (Unknown signal 33) [ 31.665092][ T103] udevd[103]: worker [315] failed while handling '/devices/virtual/block/loop3' [ 31.678120][ T418] syz.4.20 (418) used greatest stack depth: 20464 bytes left [ 31.747074][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 31.747088][ T28] audit: type=1400 audit(1750906661.277:132): avc: denied { create } for pid=429 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.775461][ T28] audit: type=1400 audit(1750906661.277:133): avc: denied { write } for pid=429 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.795101][ T305] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.149680][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.279629][ T305] usb 2-1: Using ep0 maxpacket: 16 [ 32.285732][ T305] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.295836][ T305] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.308716][ T305] usb 2-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 5.00 [ 32.317745][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.326558][ T305] usb 2-1: config 0 descriptor?? [ 32.332115][ T305] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 32.359627][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 32.365719][ T39] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.375861][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.388764][ T39] usb 1-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 5.00 [ 32.397812][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.406210][ T39] usb 1-1: config 0 descriptor?? [ 32.411751][ T39] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 32.489661][ T305] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 32.668332][ T28] audit: type=1400 audit(1750906662.207:134): avc: denied { block_suspend } for pid=446 comm="syz.3.35" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.689465][ T305] usb 5-1: Using ep0 maxpacket: 16 [ 32.695668][ T305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.705828][ T305] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.719097][ T305] usb 5-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 5.00 [ 32.728150][ T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.736580][ T305] usb 5-1: config 0 descriptor?? [ 32.742131][ T305] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 32.849645][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.030648][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.041573][ T39] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 33.050600][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.058994][ T39] usb 3-1: config 0 descriptor?? [ 33.437142][ T452] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22'. [ 33.465915][ T39] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 33.475213][ T39] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input4 [ 33.518172][ T454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.28'. [ 33.551934][ T39] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 33.794769][ T443] bridge0: port 3(veth0_to_bridge) entered blocking state [ 33.802313][ T443] bridge0: port 3(veth0_to_bridge) entered disabled state [ 33.812822][ T443] device veth0_to_bridge entered promiscuous mode [ 33.819881][ T443] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 33.832650][ T443] bridge0: port 3(veth0_to_bridge) entered blocking state [ 33.839788][ T443] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 33.870236][ T458] netlink: 40 bytes leftover after parsing attributes in process `syz.4.32'. [ 33.894314][ T460] loop2: detected capacity change from 0 to 1024 [ 33.911197][ T460] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 33.919857][ T460] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.982695][ T28] audit: type=1400 audit(1750906663.527:135): avc: denied { read } for pid=464 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 195) OK Stopping crond: stopped /usr/sbin/crond (pid 187) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 141) [ 34.252529][ T28] audit: type=1400 audit(1750906663.797:136): avc: denied { search } for pid=475 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 34.322046][ T369] usb 3-1: USB disconnect, device number 2 [ 34.322176][ C1] keytouch 0003:0926:3333.0001: usb_submit_urb(ctrl) failed: -19 [ 34.408606][ T28] audit: type=1400 audit(1750906663.947:137): avc: denied { write } for pid=142 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.430555][ T487] loop3: detected capacity change from 0 to 4096 [ 34.439344][ T487] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 34.447994][ T28] audit: type=1400 audit(1750906663.947:138): avc: denied { remove_name } for pid=142 comm="dhcpcd" name="sock" dev="tmpfs" ino=491 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.470322][ T28] audit: type=1400 audit(1750906663.947:139): avc: denied { unlink } for pid=142 comm="dhcpcd" name="sock" dev="tmpfs" ino=491 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 34.492448][ T28] audit: type=1400 audit(1750906663.947:140): avc: denied { unlink } for pid=142 comm="dhcpcd" name="pid" dev="tmpfs" ino=490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.493208][ T60] usb 2-1: USB disconnect, device number 2 [ 34.514281][ T28] audit: type=1400 audit(1750906663.997:141): avc: denied { mount } for pid=486 comm="syz.3.37" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.548464][ T492] fuse: Bad value for 'user_id' [ 34.561438][ T286] EXT4-fs (loop3): unmounting filesystem. [ 34.570265][ T492] loop1: detected capacity change from 0 to 1024 [ 34.576990][ T492] EXT4-fs: Ignoring removed nobh option [ 34.582675][ T492] EXT4-fs: Ignoring removed bh option OK [ 34.590665][ T492] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE Stopping iptables: OK Stopping system message bus: [ 34.641034][ T492] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.680218][ T369] usb 1-1: USB disconnect, device number 2 done [ 34.727481][ T503] fuse: Bad value for 'user_id' [ 34.736644][ T503] loop0: detected capacity change from 0 to 1024 [ 34.744361][ T503] EXT4-fs: Ignoring removed nobh option [ 34.750215][ T503] EXT4-fs: Ignoring removed bh option [ 35.613046][ T506] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 35.621834][ T506] overlayfs: missing 'lowerdir' [ 35.941990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.954093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.966173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.978211][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.990275][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 36.002270][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 36.014315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 36.026324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 36.038432][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 36.039183][ T19] usb 5-1: USB disconnect, device number 2 [ 36.050478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 36.060650][ T503] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.089510][ T287] EXT4-fs (loop2): unmounting filesystem. [ 36.109507][ T511] fuse: Bad value for 'user_id' [ 36.167839][ T511] loop4: detected capacity change from 0 to 1024 [ 36.177667][ T284] EXT4-fs (loop1): unmounting filesystem. [ 36.196123][ T503] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 36.220363][ T511] EXT4-fs: Ignoring removed nobh option [ 36.249213][ T511] EXT4-fs: Ignoring removed bh option [ 36.277744][ T511] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.329899][ T511] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. killall: udevd: no process killed Stopping klogd: OK [ 37.695261][ T285] EXT4-fs (loop0): unmounting filesystem. Stopping acpid: [ 39.664636][ T283] EXT4-fs (loop4): unmounting filesystem. [ 39.854071][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 39.854084][ T28] audit: type=1400 audit(1750906669.397:157): avc: denied { write } for pid=88 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.893354][ T28] audit: type=1400 audit(1750906669.427:158): avc: denied { remove_name } for pid=88 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.915633][ T28] audit: type=1400 audit(1750906669.427:159): avc: denied { unlink } for pid=88 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.946062][ T28] audit: type=1400 audit(1750906669.437:160): avc: denied { write } for pid=559 comm="syz.0.48" name="mcfilter" dev="proc" ino=4026532489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 40.009698][ T369] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 40.017248][ T19] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 40.128899][ T564] overlayfs: failed to set xattr on upper [ 40.135461][ T564] overlayfs: failed to resolve './file0': -2 [ 40.347903][ T28] audit: type=1400 audit(1750906669.667:161): avc: denied { unlink } for pid=559 comm="syz.0.48" name="#3" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.374668][ T28] audit: type=1400 audit(1750906669.727:162): avc: denied { create } for pid=559 comm="syz.0.48" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.395060][ T28] audit: type=1400 audit(1750906669.737:163): avc: denied { link } for pid=559 comm="syz.0.48" name="file1" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.417328][ T562] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 40.449696][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 40.454927][ T369] usb 3-1: Using ep0 maxpacket: 16 [ 40.461823][ T369] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.472009][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.482180][ T369] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.495466][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.508535][ T369] usb 3-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 5.00 [ 40.517615][ T19] usb 2-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 5.00 [ 40.526752][ T369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.534853][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.544067][ T369] usb 3-1: config 0 descriptor?? [ 40.549632][ T19] usb 2-1: config 0 descriptor?? [ 40.555490][ T369] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 40.563213][ T19] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 40.599668][ T562] usb 5-1: Using ep0 maxpacket: 16 [ 40.612062][ T562] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.631703][ T562] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.647321][ T571] loop3: detected capacity change from 0 to 4096 [ 40.654667][ T562] usb 5-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 5.00 [ 40.663842][ T562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.673297][ T562] usb 5-1: config 0 descriptor?? [ 40.679318][ T571] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 40.722178][ T562] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 40.741075][ T286] EXT4-fs (loop3): unmounting filesystem. OK Stopping syslogd: stopped /sbin/syslogd (pid 85) OK [ 40.954235][ C1] net_ratelimit: 15941 callbacks suppressed [ 40.960169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:07:96:bb:38:09, vlan:0) [ 40.972201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 40.984200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 40.996211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 41.008188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:07:96:bb:38:09, vlan:0) [ 41.020202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 41.032220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 41.044220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 41.056214][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:07:96:bb:38:09, vlan:0) [ 41.068236][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 41.108865][ T28] audit: type=1400 audit(1750906670.647:164): avc: denied { ioctl } for pid=554 comm="syz.2.52" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The sysSent SIGTERM to all processes Connection to 10.128.1.214 closed by remote host. [ 41.440992][ T28] audit: type=1400 audit(1750906670.937:165): avc: denied { write } for pid=275 comm="syz-executor" path="pipe:[15399]" dev="pipefs" ino=15399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 41.448299][ T19] usb 5-1: USB disconnect, device number 3 [ 41.871139][ T19] usb 3-1: USB disconnect, device number 3 [ 41.892577][ T369] usb 2-1: USB disconnect, device number 3 Sent SIGKILL to all processes Requesting system poweroff [ 43.547444][ T598] kvm: exiting hardware virtualization [ 43.553911][ T598] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 43.562492][ T598] ACPI: PM: Preparing to enter system sleep state S5 [ 43.569352][ T598] reboot: Power down serialport: VM disconnected.