last executing test programs: 18m6.583382825s ago: executing program 32 (id=59): r0 = request_key(0x0, 0x0, &(0x7f0000000000)='\xc9\x8d\n$\x11J\x06t\x8e\xa6ZH\x88\x9967\xd1\xe6zy\xb1\xc7\xcbB-\xacbe\xad\xc4\xc4o\x1f\xae\x1d\x82v\xe6\x8e\x9eAT\xe49\x17\x85hfr\xca\x03\xcf\x00\x00\x00\x00\x00\x00', 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x7}]}}, 0x0}, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r0, 0x47, 0x64}, &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'hmac(sha256-ce)\x00'}}, &(0x7f0000000180)="7238c542a048c6ef156a987cca2d4faf2b2e37acde056e84afa6db674d89bf49bccd114bf72a3c1a17e8c3f6d6710efefbc06ba7e6c1a0b9dbb12c31fff5a6b925b3848f6fc8d5", &(0x7f0000000300)=""/100) syz_usb_ep_write(r1, 0x81, 0x9, &(0x7f00000002c0)="b9425b44651dd23241") 14m32.198688912s ago: executing program 33 (id=2911): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$unix(0x1, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000300), &(0x7f0000000340)=@udp6=r4, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f00000003c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}}}}}}, 0x0) 14m19.506338242s ago: executing program 34 (id=3079): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc", 0x9}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 14m16.933238798s ago: executing program 35 (id=3090): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x78, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x3c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x34, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc488}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 11m58.585731537s ago: executing program 36 (id=3829): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40082}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r2, @ANYBLOB="48002f8008000100030000000c0002000203aa8aaaaaaaaa3000038024000380060001000200000006000300a1aa0000060001000000e9ff0700020001000000080001"], 0x64}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r5) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}]}, 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0009"], 0x30}, 0x1, 0x0, 0x0, 0x4048010}, 0x44000) 10m58.174571212s ago: executing program 37 (id=4059): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0xc010) 10m44.184085542s ago: executing program 38 (id=4108): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0xbb, 0x200}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x8) sendto(r0, &(0x7f00000005c0)="1f", 0x1, 0x54, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x51142630, 0x5, "c29f401a79caae92b1f3dfdedc6711237d5ec806e3ece691d9411593b74bef50", 0x6, 0x5, 0xfffffff7, 0x8, 0x8}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2000004, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000040)=0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffed, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000140)={0x3, 0x9dc5, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 10m30.731183604s ago: executing program 39 (id=4161): r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r0, 0x1, 0x70bd28, 0x44, {0x5}}, 0x14}}, 0xc010) 10m28.112631007s ago: executing program 40 (id=4167): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) 10m19.306818206s ago: executing program 41 (id=4190): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000ffff2abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14200500212000001400128009000100b39805ffae3bf404a668954ccac0d53679cd7d7bbe9036766ff150", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8841}, 0x280048c6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x400, @private=0xa010102}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=r2], 0xfe06) syz_open_procfs(0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) r7 = dup(0xffffffffffffffff) inotify_rm_watch(r7, r6) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 10m14.506053681s ago: executing program 42 (id=4196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 9m27.570170639s ago: executing program 43 (id=4353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x80, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 9m19.568968287s ago: executing program 44 (id=4376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000020000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 9m7.980280711s ago: executing program 45 (id=4397): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @private}, &(0x7f0000000300)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)={0x14, 0x5e, 0xe25, 0x1, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@private=0xa010100, @loopback}, 0x10) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 9m7.953143899s ago: executing program 46 (id=4398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1000008, 0x0, 0x10000000, 0x8, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000020000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 9m0.955949511s ago: executing program 47 (id=4407): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, 0x0) 8m51.082431216s ago: executing program 48 (id=4429): socket(0x10, 0x2, 0x0) r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x7400}, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904"], 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) close(0x3) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) mq_notify(r0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$RTC_AIE_OFF(r5, 0x7002) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x10}}, 0x4000041) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, 0x0, 0x0) 8m40.148348351s ago: executing program 49 (id=4447): sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x58010}, 0x800) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x8014) r1 = socket(0x11, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x26, &(0x7f0000000640)={@random="eeca5472e5b0", @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@can={0xc, {{0x3}, 0x5, 0x3, 0x0, 0x0, "87fec05b53996cd2"}}}}, 0x0) sendto$inet6(r1, &(0x7f0000000240)="aefe9193226504984bf1f2", 0xb, 0x24044001, &(0x7f0000000280)={0xa, 0x4e24, 0x80, @remote, 0x5}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000480)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf8000000}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0x22, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0x400000, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000001b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000000840)={0x1c0, r9, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x79}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffe4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_ID={0x35, 0x3, "3d30d15c2350f3a263d74e2424374a42b99aafb51535d00fa24e3058f070f7ad9e96457dc6a350d5b25abf49b33e29e81f"}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4048015}, 0x4000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={r6, 0x5}, &(0x7f0000000140)=0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 8m36.432914907s ago: executing program 50 (id=4457): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000280), &(0x7f0000000500)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 8m19.474283238s ago: executing program 51 (id=4503): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0a86dd60006eaedc9f"], 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000008f00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000086000000bf090000000000005509010000000000950000000000e128ab0000bf91000000000000b702000002000000850000bf41402358caddcb0ece3ac7002a000000b7000000"], 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x28}, 0x94) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x0, r2, 0x1, 0xffffffff}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8992, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2717, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="b4010000190000022cbd7000fddbdf456ebf25ff0200006fd589bb8a925f37110c7cd0b7a2000000000000000000000001000000000000000000000000000000000001eeb6594a2f6c5e4d5aec6d3d8200040000e3e5be5a35385dea3029e1a5cfd5702391dd40aea58fe1c41144e413f787bf5a00f8b76739282704a5669e7fa7644499f91fb2c68aa2e51eda6a6b3cefa71700"/162, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0500000000000000050000000000000008000000000000000c000000000000000300000000000000f8ffffffffffffff00080000000000000000000000000000070000000000000001000000000000000f00000000000000050000000000000000100000b16b6e00010100020000000010000a0025bd700028bd70000300000008000c0006000000e4000600fe8000000000000000000000000000aa000000000000000000000000000000004e2080014e", @ANYRES32, @ANYRES32=r9, @ANYBLOB="fe800000000000000000000000000040000004d232000000ff0100000000000000000000000000010000000000000000ff00000000000000399e000000000000f9ffffffffffffff0700000000000000070000000000000001000000000000009a590000000000000b000000000000000900000000000000d500000000000000030000000000000002000000f5ffffff0300000027bd7000003500000a0001079c00000000000000"], 0x1b4}, 0x1, 0x0, 0x0, 0x40800}, 0x20000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private1, @in=@multicast1, 0x4e21, 0xfffb, 0x4e21, 0x1, 0x29794d2d6bc0dc8a, 0xa0, 0x0, 0x11, 0x0, r8}, {0x1, 0x7, 0x25e, 0x7fffffffffffffff, 0xffff, 0x27c, 0xb0, 0xffffffffffffff7f}, {0x74490c26, 0x101, 0x800, 0x80000001}, 0x4, 0x0, 0x2, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x4d4, 0x3c}, 0x2, @in=@broadcast, 0x3507, 0x4, 0x2, 0xd, 0x3, 0x6, 0x6}}, 0xe8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r6) 8m10.163429343s ago: executing program 52 (id=4523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x13, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x8e, &(0x7f00000003c0)=""/142, 0x0, 0xb, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x8, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000500)=[0x1, 0x1], &(0x7f0000000540)=[{0x1, 0x3, 0x6, 0x8}, {0x1, 0x4, 0x4, 0x6}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xf, 0x2}, {0x2, 0x3, 0x3, 0xa}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x34, 0x0, &(0x7f00000006c0)="5eb62788ecd1fe7f42e4aef38559af2d395eb652c9f8b99a2dd70318b3f673a0903c71503aae9e9e010d095dd94bf0f8891180ce", &(0x7f0000000700), 0xa0, 0x0, 0xab, 0x80, &(0x7f0000000740)="24f2319e8da38ac1031aa8085e7b1f73bc5e2b04052f2ac22afc13d8ba595fda24cd5ab55e73a13c964e2d5d896de90be54fb6255d25ee329a8e4b1607f29abd27b7adc2ed30bf69a3b0630fe2a39af9b74558c3311e55f8991854dc866615442574cad5dbff6ae003c970e14e58d1e1be7c61cba92a49d0110989a24ee4908c7ffd406faac66ace0a40a1a56d5c8c0acdf1931485671cae03467246f523393d92766c44ede51de998bb55", &(0x7f0000000800)="b2aa2f37526cd6fb8f82581b6f1d9d90f6dffb3a71c5781adec5960424401c6cd7f67e0e96a9db7a529d3c70d6edad4028d72b7681958e097e02a58681239115d826fa5129f5c4f79dff426b9bcd12a95faf94fc94080e6833be6f22d25977449b869abfd4f1d63ce8126f8af945ed213aac68413429bdc164877e914a95f41d", 0x3, 0x0, 0x8}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="8c"], 0x20) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), 0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c2000003aa2aaaaaaaaa86dd6080000000383afffe800eff0000000000000000000000bbff02000000000000000000000000000102009078000005dc608cb02b00002fff00000000040000000000000000000001fe8000000000000000000000000000aa1d000d7168000000"], 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0d0027bd7000fddbdf2526000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x15, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44004}, 0x44) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'gretap0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 8m4.874448654s ago: executing program 53 (id=4540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf2517000000440006803d0004"], 0x58}, 0x1, 0x0, 0x0, 0x806}, 0x0) 8m2.257824541s ago: executing program 54 (id=4545): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000280), &(0x7f0000000500)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) 7m53.29942261s ago: executing program 55 (id=4552): sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x58010}, 0x800) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x8014) r1 = socket(0x11, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x26, &(0x7f0000000640)={@random="eeca5472e5b0", @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@can={0xc, {{0x3}, 0x5, 0x3, 0x0, 0x0, "87fec05b53996cd2"}}}}, 0x0) sendto$inet6(r1, &(0x7f0000000240)="aefe9193226504984bf1f2", 0xb, 0x24044001, &(0x7f0000000280)={0xa, 0x4e24, 0x80, @remote, 0x5}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000480)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf8000000}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0x22, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0x400000, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000001b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000000840)={0x1c0, r9, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x79}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffe4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_ID={0x35, 0x3, "3d30d15c2350f3a263d74e2424374a42b99aafb51535d00fa24e3058f070f7ad9e96457dc6a350d5b25abf49b33e29e81f"}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4048015}, 0x4000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={r6, 0x5}, &(0x7f0000000140)=0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 7m36.329053097s ago: executing program 56 (id=4586): lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) tkill(r0, 0x18) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./cgroup.cpu/test/cgroup.procs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='1', 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) pipe(&(0x7f0000000040)) syz_usb_connect$cdc_ecm(0x0, 0x150, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023e010101000000090400000302060000052406bf000524000000b0240f"], 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f0000000240)={[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) 7m31.848990792s ago: executing program 57 (id=4598): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) setns(0xc9, 0x0) r3 = socket(0x2a, 0x2, 0x9) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) epoll_create1(0x0) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a9", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)='1', 0x1}], 0x1}}], 0x2, 0x2090) r4 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mon_addr\x00', &(0x7f0000000200)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000300)='source\x00', &(0x7f0000000400)='127.0.0.1:6789:/tmp\x00', 0x0) read$msr(r1, &(0x7f0000000040)=""/29, 0x1d) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f98", 0x28f) 6m39.910159768s ago: executing program 58 (id=4807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000ffff2abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14200500212000001400128009000100b39805ffae3b", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8841}, 0x280048c6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x400, @private=0xa010102}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=r2], 0xfe06) syz_open_procfs(0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) r8 = dup(0xffffffffffffffff) inotify_rm_watch(r8, r7) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r10 = socket(0x10, 0x2, 0x0) write(r10, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 6m11.511542121s ago: executing program 59 (id=4924): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x80, 0x10, 0x4, 0x0, {{0x8, 0x4, 0x1, 0x0, 0x20, 0x67, 0x0, 0x4, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x47, 0x3, 0x5, [{@multicast1, 0x6}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x260580e9}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x200400d1) 3m0.147477479s ago: executing program 6 (id=5560): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 2m58.067478931s ago: executing program 3 (id=5561): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000380)={@local, @broadcast, 0x0, "9f34af4c0933a054f00ffc9c5d1182d8c961ee9014929fc83ea1167b62a18578", 0x5, 0xfffffffd, 0x8000, 0x80000000}, 0x3c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmmsg(r3, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0) 2m57.677986055s ago: executing program 6 (id=5563): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000940)={0x0, &(0x7f00000005c0)=[@nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee8000, 0x5e26}}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0x8a, {0x0, 0x5, [@code={0xa, 0x6a, {"450f21c7654a0f6ea10000010066ba4200b800800000ef0f79930060000080ccb20f20c035000001000f22c00f20e035000010000f22e066baf80cb858982981ef66bafc0c66b879dc66ef66b8a9000f00d00fc7be3bbe890e"}}]}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control_nat=0x600a, 0x7fffffff, 0x9, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0xe4}}, @uexit={0x0, 0x18, 0xffff0000000}, @wr_drn={0x68, 0x20, {0x2, 0xffff}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x3, 0x6}}, @cpuid={0x64, 0x18, {0x6}}, @wrmsr={0x65, 0x20, {0xbea, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x86, 0x1, 0x2, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x6, 0xfffffffffffffffa}}, @wr_crn={0x67, 0x20, {0x2, 0x6}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_vmresume={0x130, 0x18}, @nested_vmresume={0x130, 0x18, 0x1}, @enable_nested={0x12c, 0x18}], 0x322}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000980)={[0x1ff, 0x7, 0x8, 0x1, 0x6, 0x6423, 0x6, 0x7, 0x4a5, 0xa, 0x3b, 0x81, 0xffff, 0x1, 0x400, 0x2], 0xffffffff, 0xa0052}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000900)={{0x1, 0x1, 0x18, r1}, './nfsd/versions\x00'}) connect$pppoe(r2, &(0x7f0000000b40)={0x18, 0x0, {0x0, @multicast, 'veth1_to_team\x00'}}, 0x1e) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000380), &(0x7f00000003c0)=0x4) write(r3, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n', 0x15) unshare(0x6020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00001ea000/0x400000)=nil) r4 = socket(0xa, 0x3, 0x3a) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e24, @local}, 0x63) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r5, 0x708, 0x2) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x5, &(0x7f0000000000)={0x17, "90f5000000f3c9f1bd0d00"}}) syz_usb_connect(0x0, 0x2be, &(0x7f0000000000)=ANY=[@ANYBLOB="12015100dad3be20b00d805595d1010203010902ac0202097a00070904d7"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) userfaultfd(0x800) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r3, 0x0, 0x89, 0xa6, &(0x7f0000000200)="4ef9787a5b5f2b25fcef74961ca36da1e8c0a610875eca966cd6f341eb11b1118dec0efa9f2bef891da2426d63d3f3e2b0bd3c824adb16e2516772252df05b2ea474af724918e7bb3e8a12843ff754b2cf0e99cbdfd978f2f90afab3e281eb9448575c6c5f9bfe8bc431e9b8e1922417b9a8d3388504930cef4409f654d1d0e4c4a42a47d694911a81", &(0x7f00000002c0)=""/166, 0xb, 0x0, 0xd1, 0x49, &(0x7f0000000440)="3f1170ddf35896ecb4fdcdcdf816aef0083fbc159b0bf49df2ea8a86ab822f3fd2068d26e341e9972d55ecf592bcb322af856c5dc0eef39c9a842ca0abe7248e04fd282d47dbfcee00b6754a5d95f70585e10a645a155067161eb53c763c2fa3e3d7c59bab20c4ed2f6f0c005aa486d8d898cef12a80a32f780ca5cd61b35cb4d3e326d81fa6f84c6452ec5ffe7c144f74bac3fa238b85cd6008f0d2716bc9835a4ba58b4b19c0c8efadecace0368a977a29e2d74dd30df5fa2cb602a94ff0d5d4c7efb908be2b9e167643c86d77c7d135", &(0x7f0000000a40)="42d1eae7ca06248b2d2237fcf6fff94c893933c938c508b330be386a1261f6175b13358348c551302930bc7314dedcdf57677a2789aa1e0fd73c18e669c4e0ec246b3e1b62e74e227e", 0x8, 0x0, 0x100}, 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newqdisc={0x38, 0x28, 0x100, 0x5000, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0xfff2, 0xfff1}, {0xfff3}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x0, 0x0, 0xe, 0x8000000000000001}) 2m56.144723811s ago: executing program 3 (id=5567): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) io_submit(0x0, 0x2, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xb406, 0xffffffffffffffff, &(0x7f0000000100)="1abdc14791afa0ff3a67315b755db10d09f91a6b16177d7415dcef5a1c", 0x1d, 0x62, 0x0, 0x3, r2}]) 2m55.885990897s ago: executing program 3 (id=5568): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0xe, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private0, @in=@broadcast}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_x_sec_ctx={0x1, 0x18, 0x2, 0x3f}]}, 0xa8}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x400000, 0x0, 0x0, 0x4, 0x1, 0x1}}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$midi(0x2, 0x56, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x8b, 0x70, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0x5, [], [{{0x9, 0x5, 0x5, 0xe, 0x8d026bda17bf10e8, 0x7f, 0xf7, 0x40, {0x5, 0x25, 0x1, 0x1, 'r'}}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0x7, 0x40, 0x5, {0x5, 0x25, 0x1, 0x1, "de"}}}, {{0x9, 0x5, 0x87, 0x52f828ab2ca3a53b, 0x20, 0x3, 0x9, 0x8, {0xd, 0x25, 0x1, 0x9, "186088c0c672e65b1f"}}}]}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 2m55.614817566s ago: executing program 5 (id=5570): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = fanotify_init(0x2, 0x400) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x100240, 0x140) fanotify_mark(r4, 0x4, 0x9, r5, &(0x7f0000000200)='./file0\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="29002cbd7000fddbdf255100000008000300", @ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) 2m54.400909065s ago: executing program 5 (id=5571): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000060000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 2m54.314525777s ago: executing program 6 (id=5572): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r1 = epoll_create1(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(r1, &(0x7f00000001c0)="72743137312340000000000000f491185265c54e887ce4d49508007b78449c00a19f4a844f0a98a7939a1cfbb04ffa426000000000", 0x35) write(r2, &(0x7f0000000400)='wusb3801 0x4', 0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x840, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d6664045d07546e853d0ebba50116e25ee42d13b56e4a228ea52e7770200e30090562465232efbf553931f817ba5f6a0a4436f77d90b7c3083f2fc0dfe2742f4cc13ebdcf69bba81da54c365a5ce6a4068a1d1a66ed55febf1f199b9592125370eac5677e09166cfa51873b69b87a15a80b01819ee4e532ee2d5345edfdfb4a04476cf50c5483d5b01549b2fb4a64a374b9da9bd1f40b69b83897c4fea43e7b31c349d1a6b196269637d2ab461264a9a6c919e23d0bbde3907f1bc5bf7b1aedcda0c97da38dbd8dff035f81", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',msize=0x0000000080000001,cache=loose,fsname=ecb(serpent)\x00,audit,\x00']) r3 = io_uring_setup(0x2ffa, &(0x7f0000000440)={0x0, 0x5fe4, 0x0, 0x1, 0x8}) mount(0x0, &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) 2m53.993964796s ago: executing program 5 (id=5573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000c4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94238000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f00000016c0)={0xa4281200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) rt_tgsigqueueinfo(r1, r1, 0x5, &(0x7f0000000280)={0x28, 0x8, 0xfffffb82}) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x470bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) unshare(0x68040200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x84, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x64, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_a, @initial, {0xa, 0x3}}, 0x8, @default, 0x2, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xa9}, @void, @val={0x6, 0x2, 0x7f}, @val={0x2d, 0x1a, {0xc, 0x0, 0x3, 0x0, {0x2, 0xc5, 0x0, 0x21a, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x1b6b, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x8}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x28, r7, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3c}, @void, @val={0xc, 0x99, {0x100, 0x73}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_open_dev$vim2m(0x0, 0x8, 0x2) r8 = socket(0x2, 0x3, 0xff) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000200)={'nat\x00', 0x0, [0x50, 0x1, 0xfffffffa, 0x64, 0x8]}, &(0x7f0000000000)=0x54) 2m53.747287608s ago: executing program 0 (id=5574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) semget$private(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x20, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000002c0), 0x4) pipe(&(0x7f0000000140)) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x48, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfffe, 0xfff3}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'wlan0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m52.366554598s ago: executing program 0 (id=5575): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, 0x0) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) 2m51.634087085s ago: executing program 8 (id=5576): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r0}, &(0x7f00000017c0)=ANY=[@ANYRES16=r0, @ANYBLOB="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", @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESDEC], 0x0, 0x0) 2m51.333101102s ago: executing program 5 (id=5577): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x504, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r1}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) 2m51.280501804s ago: executing program 3 (id=5578): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) io_submit(0x0, 0x2, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xb406, 0xffffffffffffffff, &(0x7f0000000100)="1abdc14791afa0ff3a67315b755db10d09f91a6b16177d7415dcef5a1c", 0x1d, 0x62, 0x0, 0x3, r2}]) 2m51.279239603s ago: executing program 0 (id=5579): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r0, 0x0, 0x6f) epoll_create(0x1) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) add_key$user(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7f83, 0x7}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setresuid(0x0, 0x0, 0xee01) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100000000009800000054000000080002"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e0067"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) 2m51.105781606s ago: executing program 8 (id=5580): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x21fd, 0xdd36, 0x80, 0x1df, 0x81}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04fd0506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x4804, 0x0, 0x0) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) setreuid(0xee01, 0xffffffffffffffff) ioprio_set$uid(0x3, 0xee01, 0x2007) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x3800) 2m51.088838419s ago: executing program 3 (id=5581): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x5) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000068001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x8801) timer_create(0x3, 0x0, 0x0) lseek(r2, 0x0, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/fs/bcache/register\x00', 0x1, 0x0) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000680)={0xa0, 0xfffffffffffffff5, 0x0, {{0x1, 0x1, 0x1ff, 0x10000000000000, 0x4248, 0x6, {0x6, 0x100000000000000, 0x6, 0x0, 0x5, 0x1680000000000000, 0x9a1, 0x0, 0x1, 0x4000, 0x5, 0x0, 0x0, 0x9, 0x5bcf}}, {0x0, 0x2}}}, 0xa0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r8, &(0x7f00000000c0)="af5bed313c71d7ef4af1ae313e4bdc8535a5e6989285d86ff19fd32a94869f6c49ea55428473e65c537f558379a612e91660be5e54899560dbd0befc4ecbf76d4c197b2aa7f12a67ade61f0e6a5b21548fcc85ea3fcf3f76256b532c0c76526e1afb9d43652c726ad4e419114ee9f46ef47a8bbcad199a8706b1e7aa5b4683a49b5f0ea0ae1f8ced929b4e9601e08d7abadd6803718c8db48e8c8c5534746dc5abb727f5fb668db0f2603cdf39b76bba8faff54e5c339f575f83ad28fde6e2b895ca66dfbc7d8829049e6fb48a4ae07fa1117d16781cfa9982c63b3ff7aeb6d84038d3d282063ae6b497274b838c3185ea088e35", &(0x7f00000001c0)=""/64}, 0x20) 2m51.01990621s ago: executing program 5 (id=5582): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x80000) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x40, 0x11, 0xcd, {0xcd, 0x6, "3344538b2e0a924759fd9d6436894c8450918a0bd22c49c3c286841048456192f1379291f446247a102bac47d6df007aebc3daaf557ae46e29fc348332fc71dbb8357cc5c0e3ad36549fb82b2274f43ba3fded213994602b96610d536bddf6ed7c1c750477beeda9d0940cab3a99a2f9df649063c9ca8bd54fecde545243ba6106a8eb28e4051674c6de0315dea60cf7c2340127a055dfea45a77e63a683302a3d88497e50317c7244f0f2a540655af72140db2975721f09b15851f44c66e435b89a8ad822f140a3e2fbba"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc11}}, &(0x7f0000000200)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xe, 0x4, 0x9}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xc, 0xf, 0x1}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0xc, 0xce, 0x3, "8db6c43c", "eb006040"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x60, 0x0, 0x5, 0xbf, 0xc2c6, 0x1}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x40, 0x17, 0x64, "0b07febac2a106d7555f6ea05cfa33b6a16f9b9c49a8ce2e5757afa3f4f32ab10d5ee6f4e273e9ebd4889ff1a761a4017fb88939cd800f3366955b321dd720063328266600ea86f6835f8017aad36b76952270a7415dfcaa72a5b59a2e4bce0a061c6512"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x60, 0x20, [0x0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000540)={0x40, 0xb, 0x2, "e8c9"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "8c79"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0xff}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xe8}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x81}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000980)={0x14, &(0x7f0000000840)={0x0, 0xb, 0xe9, {0xe9, 0x22, "eb4c97009194aeb6aaee8c21e1be552c53211ac200d45ef94616d92b0486638d5c66a8b302efec6b483363e1c1c4b8f9da9e2d8fa36fdfee8cbdb461d8509ce51f57ba9c638319d97e45786ce704d4aeec91b7d027587a1df35561bac72b81e704d7ca5d0d985088ec9a9a2f94ea2e91b71ddf4f3c282b329a6ae52f9e67c0a076c1edf200560b3b071728d5a1a8d3528133ab9cd3ef6ec61bbd55d152da3f8e76eee8fa50febcc772033ab72465ec42bdea285dab8f2e8a79e509934f1da6fc2be1342f2d9ebadf461307b98269cb593b795d730759c26f54d24bd98d449aba297edfc7f9e4ca"}}, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x1c, &(0x7f00000009c0)={0x20, 0x17, 0xb8, "74dc3e71fa9eb87386ad36d6774b9dbbed9902d1b122c9cab7a3b65d2aa08d542d1f7cb8753eeaf0dd3e09059a394b85de6215bd82f781e1ef86c4cd100fc26d1290234f332b1f57108a20fec76404dd480f944520c09f05f539cce15b69ef17d4da7c379594ef6716b99192254408dd8e148524f210235cce03d74673772758404ef1f78737e4d7631885e866c0d34367d93990805ec8a28753942816b39453a4588af49051f655b0dc39e7dd65c874f4f5a1ef412455bc"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x5}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0}) 2m50.766397393s ago: executing program 6 (id=5583): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r0, 0x0, 0x6f) r1 = epoll_create(0x1) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) add_key$user(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7f83, 0x7}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setresuid(0x0, 0x0, 0xee01) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0100000000009800000054000000080002"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e0067"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 2m49.725365616s ago: executing program 0 (id=5584): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x2404000c) 2m49.717782927s ago: executing program 8 (id=5585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0xe}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4c804) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x4, 0x5}, 0xc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r6 = memfd_create(&(0x7f00000000c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080)={0x4000001f}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000051401002bbd7000ffdbdf25080001"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 2m49.562656862s ago: executing program 8 (id=5586): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000c4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94238000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f00000016c0)={0xa4281200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) rt_tgsigqueueinfo(r1, r1, 0x5, &(0x7f0000000280)={0x28, 0x8, 0xfffffb82}) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x470bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) unshare(0x68040200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x84, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x64, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_a, @initial, {0xa, 0x3}}, 0x8, @default, 0x2, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xa9}, @void, @val={0x6, 0x2, 0x7f}, @val={0x2d, 0x1a, {0xc, 0x0, 0x3, 0x0, {0x2, 0xc5, 0x0, 0x21a, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x1b6b, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x8}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x28, r7, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3c}, @void, @val={0xc, 0x99, {0x100, 0x73}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4001) syz_open_dev$vim2m(0x0, 0x8, 0x2) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)={'nat\x00', 0x0, [0x50, 0x1, 0xfffffffa, 0x64, 0x8]}, &(0x7f0000000000)=0x54) 2m49.490066745s ago: executing program 0 (id=5587): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r1 = socket$inet(0x2, 0xa, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'vcan0\x00', 0x2}, 0x18) 2m47.22498147s ago: executing program 3 (id=5588): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000c4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94238000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f00000016c0)={0xa4281200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) rt_tgsigqueueinfo(r1, r1, 0x5, &(0x7f0000000280)={0x28, 0x8, 0xfffffb82}) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x470bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) unshare(0x68040200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x84, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x64, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_a, @initial, {0xa, 0x3}}, 0x8, @default, 0x2, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xa9}, @void, @val={0x6, 0x2, 0x7f}, @val={0x2d, 0x1a, {0xc, 0x0, 0x3, 0x0, {0x2, 0xc5, 0x0, 0x21a, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x1b6b, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x8}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x28, r7, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3c}, @void, @val={0xc, 0x99, {0x100, 0x73}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_open_dev$vim2m(0x0, 0x8, 0x2) socket(0x2, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) 2m47.209731556s ago: executing program 8 (id=5589): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x15a, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="17000000140081044e81f782db44b904021f0802190000", 0x17}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x98, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r9, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_ACT={0x64, 0x3, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb75}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xc}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x1, 0x3, 0x403}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xffffffff}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) ioctl$KVM_SET_XSAVE(r7, 0x5000aea5, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000001c0)={0x0, 0x80000, r2}) ioctl$TUNSETVNETLE(r10, 0x400454dc, &(0x7f00000004c0)) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r10, r11, 0x25, 0x1, @val=@kprobe_multi=@syms={0x1, 0x0, &(0x7f0000000500), 0x0, 0x1}}, 0x30) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a40)=@ipv6_getrule={0x1c, 0x22, 0x800, 0x70bd26, 0x25dfdbfc, {0xa, 0x80, 0x20, 0x3, 0x1, 0x0, 0x0, 0x4, 0x10009}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4841}, 0xc4001) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfffd}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x20004000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_open_dev$sndpcmc(0x0, 0x1, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) 2m45.221529156s ago: executing program 5 (id=5590): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r0, 0x0, 0x6f) r1 = epoll_create(0x1) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) add_key$user(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7f83, 0x7}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setresuid(0x0, 0x0, 0xee01) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100000000009800000054000000080002"], 0x1c}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e0067"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 2m45.14864516s ago: executing program 6 (id=5591): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) io_submit(0x0, 0x2, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xb406, 0xffffffffffffffff, &(0x7f0000000100)="1abdc14791afa0ff3a67315b755db10d09f91a6b16177d7415dcef5a1c", 0x1d, 0x62, 0x0, 0x3, r2}]) 2m45.094718958s ago: executing program 0 (id=5592): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 2m44.986333059s ago: executing program 6 (id=5593): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r1 = epoll_create1(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(r1, &(0x7f00000001c0)="72743137312340000000000000f491185265c54e887ce4d49508007b78449c00a19f4a844f0a98a7939a1cfbb04ffa426000000000", 0x35) write(r2, &(0x7f0000000400)='wusb3801 0x4', 0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x840, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d6664045d07546e853d0ebba50116e25ee42d13b56e4a228ea52e7770200e30090562465232efbf553931f817ba5f6a0a4436f77d90b7c3083f2fc0dfe2742f4cc13ebdcf69bba81da54c365a5ce6a4068a1d1a66ed55febf1f199b9592125370eac5677e09166cfa51873b69b87a15a80b01819ee4e532ee2d5345edfdfb4a04476cf50c5483d5b01549b2fb4a64a374b9da9bd1f40b69b83897c4fea43e7b31c349d1a6b196269637d2ab461264a9a6c919e23d0bbde3907f1bc5bf7b1aedcda0c97da38dbd8dff035f81", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',msize=0x0000000080000001,cache=loose,fsname=ecb(serpent)\x00,audit,\x00']) r3 = io_uring_setup(0x2ffa, &(0x7f0000000440)={0x0, 0x5fe4, 0x0, 0x1, 0x8}) mount(0x0, &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) 2m44.650389707s ago: executing program 8 (id=5594): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x7, 0x1ff, 0x0, 0x3}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r1}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x25, 0x4, @void}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@fallback=r2, r2, 0xf, 0x2030, 0x4, @void, @void, @value=r3}, 0x20) 2m29.459537171s ago: executing program 60 (id=5593): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r1 = epoll_create1(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(r1, &(0x7f00000001c0)="72743137312340000000000000f491185265c54e887ce4d49508007b78449c00a19f4a844f0a98a7939a1cfbb04ffa426000000000", 0x35) write(r2, &(0x7f0000000400)='wusb3801 0x4', 0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x840, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d6664045d07546e853d0ebba50116e25ee42d13b56e4a228ea52e7770200e30090562465232efbf553931f817ba5f6a0a4436f77d90b7c3083f2fc0dfe2742f4cc13ebdcf69bba81da54c365a5ce6a4068a1d1a66ed55febf1f199b9592125370eac5677e09166cfa51873b69b87a15a80b01819ee4e532ee2d5345edfdfb4a04476cf50c5483d5b01549b2fb4a64a374b9da9bd1f40b69b83897c4fea43e7b31c349d1a6b196269637d2ab461264a9a6c919e23d0bbde3907f1bc5bf7b1aedcda0c97da38dbd8dff035f81", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',msize=0x0000000080000001,cache=loose,fsname=ecb(serpent)\x00,audit,\x00']) r3 = io_uring_setup(0x2ffa, &(0x7f0000000440)={0x0, 0x5fe4, 0x0, 0x1, 0x8}) mount(0x0, &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) 2m29.396794741s ago: executing program 61 (id=5592): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 2m29.230854277s ago: executing program 62 (id=5594): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x7, 0x1ff, 0x0, 0x3}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r1}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x25, 0x4, @void}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@fallback=r2, r2, 0xf, 0x2030, 0x4, @void, @void, @value=r3}, 0x20) 2m29.013815333s ago: executing program 63 (id=5590): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r0, 0x0, 0x6f) r1 = epoll_create(0x1) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) add_key$user(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7f83, 0x7}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setresuid(0x0, 0x0, 0xee01) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100000000009800000054000000080002"], 0x1c}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e0067"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 2m28.758493348s ago: executing program 64 (id=5588): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000c4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94238000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f00000016c0)={0xa4281200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) rt_tgsigqueueinfo(r1, r1, 0x5, &(0x7f0000000280)={0x28, 0x8, 0xfffffb82}) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x470bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) unshare(0x68040200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x84, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x64, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_a, @initial, {0xa, 0x3}}, 0x8, @default, 0x2, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xa9}, @void, @val={0x6, 0x2, 0x7f}, @val={0x2d, 0x1a, {0xc, 0x0, 0x3, 0x0, {0x2, 0xc5, 0x0, 0x21a, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x1b6b, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x8}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x28, r7, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3c}, @void, @val={0xc, 0x99, {0x100, 0x73}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_open_dev$vim2m(0x0, 0x8, 0x2) socket(0x2, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) 9.817616068s ago: executing program 9 (id=5891): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/printer.usb0/pnp_string\x00', 0x0, 0x0) 9.664378012s ago: executing program 9 (id=5892): r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x144) fanotify_mark(r0, 0x1, 0x4800001a, r1, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x20, r1, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) r3 = openat(r2, &(0x7f0000000140)='./tracing/dynamic_events\x00', 0x0, 0x1b5) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xfffd, 0x47}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="53f0448354cfbcbda09ca583", 0xc}, {&(0x7f0000000240)="e3d1", 0x2}], 0x2}, 0x40880) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRES64=r1, @ANYBLOB='\x00'/20, @ANYRES64=r5, @ANYRES32, @ANYRESHEX=r4], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1fe) mount(0x0, 0x0, &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracing/dynamic_events\x00', &(0x7f0000000080)='tracefs\x00', 0x400, 0x0) r6 = gettid() ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000490780000fe06e2d4c3d9fe06e2d4c3d93e74a667855139abbf785529bbed359e9b0fc965"], 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000080)='net/dev_mcast\x00') r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x7818c4, 0x0) read$dsp(r8, &(0x7f0000003200)=""/4088, 0x57d) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000080)=0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000002ec0)={0x2020}, 0x2020) pread64(r7, &(0x7f000001a240)=""/102385, 0x18ff1, 0x2a) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a03209040000060000000007058e0240000007050e02400000070501024000000705030240000007058d0240000007050d0240"], 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 8.764088493s ago: executing program 4 (id=5896): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) get_mempolicy(0x0, 0x0, 0x4, &(0x7f00008eb000/0xf000)=nil, 0x8) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000004240)="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", 0x600) 8.692018859s ago: executing program 2 (id=5897): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f30fbd0d660f2a630066b8000000000f23d80f21f86635000000000f23f8b80d008ed82e667c75f364b646660fc735b800008ee866b9ff03000066b8c600000066ba000000000f3066b9bb0800000f32", 0x50}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x100, 0x0, 0x2080, {}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@arm64={0x1, 0x0, 0x4}) 7.637766297s ago: executing program 7 (id=5899): r0 = socket(0xfc78d95780c2c68b, 0x3, 0x100) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x2, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r5, r6, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r7, 0x0, 0x0) getdents64(r7, 0x0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x7, 0x7, 0x0, 0x0, 0x10}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xe, 0xb, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket(0x2a, 0x2, 0x9) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x8804, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x810\x8f\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) write(r1, &(0x7f0000000040)="c79c5e711cc15a5bb6210e1c66", 0xd) 7.223503451s ago: executing program 4 (id=5902): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=@ipv4_newroute={0x42c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x408, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x404, 0x1, {{}, [@dev, @loopback, @private0, @ipv4={'\x00', '\xff\xff', @private}, @local, @mcast2, @empty, @mcast2, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @local, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @remote, @loopback, @mcast2, @private0, @private2, @mcast2, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @loopback, @local, @loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @mcast1, @empty, @local, @private1, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @ipv4, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev]}}}]}, 0x42c}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x2) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) sendmsg$sock(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000040)="a48aa5c65a6504e83a59c6c944668a9ab844cd83bbdc8d", 0x17}, {&(0x7f0000000080)="0bc5ba14fa64ebef555e9bf79552fde2c635", 0x12}, {&(0x7f00000000c0)="03a97a21c333d457a43797d9d0729fca66566037df58a713a2770fd2cddf8470362b9cfbba29bdf9d20440f4d59d0119f2231c1dca00049d5d61ce7fb78f9f196f72f3bc5e476856dc0700b6047daca146cd2fc56ff289eaa98f37acbc39594c3f99a46f", 0x64}, {&(0x7f0000000600)="74f8ca33f967f65a40c23814da5be412d13278ac7cb399eb0ebe2971306d83c35bd6ec2caac96228f67f23df793b4710d2348780ce4ef7d78e73db4009dd2cb501898388ea8ecbd09c40807850f23f52306ec2f4cff2d1e04902bc045b1622cc32a86c9e768ee9684c64ae8901b35c5149d0a33a227ca325908d6256d3ecd912d305aad3c02e2871e113612f03196a86ce4f9774a299216b287a78f8c594", 0x9e}, {&(0x7f00000006c0)}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="f276e1bdd6ec293a77db343f254a3990daf63a5ea2401107cfe878de0b5a8acc25115e676b6c330208721398c909672e7cdac18ba23cb4a7434b603b81fe2ad82ef301049f14d0067e2c9c3d3c7b1494e6d95735e72a1a0d2dab2759b298b5049d6d9ac97b78fe07a7806a05d2411c38ec7ac92198529e84677423441f6be6ad47ed978258212b62f37fbe848d0723b811", 0x91}, {&(0x7f0000001800)="345a49d358e3305d7506b404913fb6747f4ec668ae86f9a9f06a1a13cda2f5d062b8196ec65a52dc5f02d9ca5e41cbc55849e6c4e49d11deb20cf85cae16cfe98ac33bc33552731e1582c6f1f515880fd085c5b1767b99525134a65f7e6985f2f9ce27aa2598dd0694fb5efcafe0b809df4e28fd26594ff40eb0794c50531ff5bcd62af52d56d92202ab84e208ffcee7897439cf53c4d372b247d68948d34e50a78412ac4d68d304bf14ca64a98f04a5b3886e553a2b34ec570527ef17b5d9bc4a17ea99a4549aafcf425faeaaa564b9ca", 0xd1}, {&(0x7f0000001900)="4460c13f3bc238e5262e55a2655a0dc9a58ca42198c1408d023628c52041d5d0c8ae63a4057f82f22ead81", 0x2b}], 0x9, &(0x7f0000001a00)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x28ac}}], 0x60}, 0x0) 5.922004324s ago: executing program 1 (id=5903): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000000c0)={0x3, 0x5}, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2801, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000040)=0x9) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001100050000000000feffffff07000000", @ANYRES32=r4, @ANYBLOB="0030001b0000000004001a80"], 0x24}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{&(0x7f0000000240)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/3, 0x3}, {&(0x7f0000000300)=""/191, 0xbf}, {&(0x7f0000000480)=""/249, 0xf9}, {&(0x7f0000000580)=""/198, 0xc6}], 0x4, &(0x7f00000006c0)=""/122, 0x7a}, 0x35}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000740)=""/53, 0x35}, {&(0x7f0000000780)=""/24, 0x18}, {&(0x7f0000000880)=""/76, 0x4c}, {&(0x7f0000000900)=""/138, 0x8a}], 0x4, &(0x7f0000000a00)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/145, 0x91}], 0x1, &(0x7f0000001b00)=""/233, 0xe9}, 0x8}], 0x3, 0x40012100, &(0x7f0000001cc0)={0x0, 0x3938700}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000440)=@add_del={0x2, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r6, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) landlock_restrict_self(r0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/printer.usb0/pnp_string\x00', 0x0, 0x0) 5.826715954s ago: executing program 9 (id=5904): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000002c0)={0x0, 0x0}) 5.77189841s ago: executing program 4 (id=5905): r0 = syz_open_dev$vcsu(0x0, 0x9, 0x400) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x6, 0x0, 0x4a, 0xfffffffffffffff7, 0xf22, 0xffffffffffffffff}) ptrace$getenv(0x4201, r1, 0x4, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r5, 0x100000000) 5.516259182s ago: executing program 7 (id=5906): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000980)={0x14, &(0x7f0000000840)={0x0, 0xb, 0xe9, {0xe9, 0x22, "eb4c97009194aeb6aaee8c21e1be552c53211ac200d45ef94616d92b0486638d5c66a8b302efec6b483363e1c1c4b8f9da9e2d8fa36fdfee8cbdb461d8509ce51f57ba9c638319d97e45786ce704d4aeec91b7d027587a1df35561bac72b81e704d7ca5d0d985088ec9a9a2f94ea2e91b71ddf4f3c282b329a6ae52f9e67c0a076c1edf200560b3b071728d5a1a8d3528133ab9cd3ef6ec61bbd55d152da3f8e76eee8fa50febcc772033ab72465ec42bdea285dab8f2e8a79e509934f1da6fc2be1342f2d9ebadf461307b98269cb593b795d730759c26f54d24bd98d449aba297edfc7f9e4ca"}}, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x1c, &(0x7f00000009c0)={0x20, 0x17, 0xb8, "74dc3e71fa9eb87386ad36d6774b9dbbed9902d1b122c9cab7a3b65d2aa08d542d1f7cb8753eeaf0dd3e09059a394b85de6215bd82f781e1ef86c4cd100fc26d1290234f332b1f57108a20fec76404dd480f944520c09f05f539cce15b69ef17d4da7c379594ef6716b99192254408dd8e148524f210235cce03d74673772758404ef1f78737e4d7631885e866c0d34367d93990805ec8a28753942816b39453a4588af49051f655b0dc39e7dd65c874f4f5a1ef412455bc"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x5}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0}) 5.156991119s ago: executing program 1 (id=5907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x24000084) syz_open_dev$sndctrl(0x0, 0x9ff, 0x400540) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc}}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x2000090, &(0x7f00000006c0)=ANY=[]) mount$fuse(0x0, 0x0, 0x0, 0x820810, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r4 = openat$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) openat(r4, &(0x7f0000000100)='./file0\x00', 0x101003, 0x153) r5 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') fsetxattr$security_capability(r5, &(0x7f0000000040), &(0x7f00000000c0)=@v3={0x3000000, [{0x7, 0x9}, {0x8, 0x19a}], 0xee00}, 0x18, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) 5.15631846s ago: executing program 9 (id=5908): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)='1', 0x1}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x38a) (fail_nth: 2) 4.680833197s ago: executing program 2 (id=5909): r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r2, &(0x7f0000000940)='naa.6', 0x5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x2e8, 0x40000, 0x198, 0x2e8, 0x198, 0x3b0, 0x358, 0x358, 0x3b0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x0, 'vcan0\x00', 'wg1\x00', {}, {}, 0x2f}, 0x0, 0x2c8, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x0, 'team_slave_1\x00', 'wlan0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6}, {0x2, 0x2, 0x2}, 0x2, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a8) 4.606591495s ago: executing program 4 (id=5910): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f30fbd0d660f2a630066b8000000000f23d80f21f86635000000000f23f8b80d008ed82e667c75f364b646660fc735b800008ee866b9ff03000066b8c600000066ba000000000f3066b9bb0800000f32", 0x50}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x100, 0x0, 0x2080, {}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@arm64={0x1, 0x0, 0x4}) 2.556590064s ago: executing program 9 (id=5911): mkdirat(0xffffffffffffff9c, 0x0, 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x5) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000068001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x8801) timer_create(0x3, 0x0, 0x0) lseek(r2, 0x0, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/fs/bcache/register\x00', 0x1, 0x0) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000680)={0xa0, 0xfffffffffffffff5, 0x0, {{0x1, 0x1, 0x1ff, 0x10000000000000, 0x4248, 0x6, {0x6, 0x100000000000000, 0x6, 0x0, 0x5, 0x1680000000000000, 0x9a1, 0x0, 0x1, 0x4000, 0x5, 0x0, 0x0, 0x9, 0x5bcf}}, {0x0, 0x2}}}, 0xa0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r8, &(0x7f00000000c0)="af5bed313c71d7ef4af1ae313e4bdc8535a5e6989285d86ff19fd32a94869f6c49ea55428473e65c537f558379a612e91660be5e54899560dbd0befc4ecbf76d4c197b2aa7f12a67ade61f0e6a5b21548fcc85ea3fcf3f76256b532c0c76526e1afb9d43652c726ad4e419114ee9f46ef47a8bbcad199a8706b1e7aa5b4683a49b5f0ea0ae1f8ced929b4e9601e08d7abadd6803718c8db48e8c8c5534746dc5abb727f5fb668db0f2603cdf39b76bba8faff54e5c339f575f83ad28fde6e2b895ca66dfbc7d8829049e6fb48a4ae07fa1117d16781cfa9982c63b3ff7aeb6d84038d3d282063ae6b497274b838c3185ea088e35", &(0x7f00000001c0)=""/64}, 0x20) 2.365011921s ago: executing program 1 (id=5912): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x2a, &(0x7f0000000f00)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x6}]}}}}}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r2, 0x1, 0x9, 0x3}) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x5}, 0x8) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="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", 0x4ec}], 0x3}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000300)={'wg2\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x89f2, &(0x7f0000000600)="4f48d732ae00634300eae94367625e86898ee87a59ac88ce27653ffb004c755e8f80d6f49b6e1d8c36625fb1827b95cd06d06c237b48f69451575f41a7280d9d282561389ed16430e557f3ef3b5dec00cb1f2f2aa330a0e2afa7052eac65dc16bfcb8d4f97d69e434bd452d6fa6c386a7e42187ca3284100b827379c7c5626ba526e98a08fbf7a2d5d878ce8") r8 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000c40)={0x9, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)=""/247, 0xf7}], &(0x7f0000000c00)=[0x5, 0x8000000000000000, 0x6], 0x1}, 0x20) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendto$packet(r7, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 2.134082753s ago: executing program 2 (id=5913): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) r0 = dup(0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000380)="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", 0x12b}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000a0000008000048013000100"], 0x94}}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001800)=[{{&(0x7f0000001840)=@qipcrtr, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/72, 0x48}, {&(0x7f0000001340)=""/132, 0x84}, {&(0x7f0000001400)=""/248, 0xf8}, {&(0x7f0000001500)=""/112, 0x70}, {&(0x7f0000001580)=""/29, 0x1d}, {&(0x7f00000015c0)=""/59, 0xffffffb0}, {&(0x7f0000001600)=""/160, 0xa0}], 0x9, &(0x7f0000001780)=""/65, 0x41}, 0x5}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000001980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14044054}, 0x4000) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0xaa182, 0x0) ioctl$BLKPG(r8, 0x1269, &(0x7f0000000040)={0x0, 0x0, 0x98, &(0x7f0000000140)={0x8000000, 0x1000, 0x1}}) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf1cf}, @in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x5, @remote, 0xc}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x68) close(0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x9, 0x8}}}}}}, 0x0) userfaultfd(0x80001) io_uring_enter(0xffffffffffffffff, 0x7c65, 0xa334, 0x1, 0x0, 0x0) sched_setparam(r1, &(0x7f0000000100)=0x80) shutdown(r7, 0x1) connect$bt_rfcomm(r7, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 2.071678876s ago: executing program 4 (id=5914): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x801) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r1, 0xffffffffffffffff, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x1, 0x7}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0xeffdfffffffffffe, 0x40000000000000}, 0x0, 0x0) write$binfmt_register(r0, 0x0, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x7) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc048aeca, &(0x7f0000000040)={0x6, 0x0, [{0x319, 0x0, 0x6}, {0x518, 0x0, 0x6}, {0x9c3, 0x0, 0x65f}, {0xbccd8db4f4a8a112, 0x0, 0x839}, {0x2eb, 0x0, 0x10000}, {0xb07, 0x0, 0x65d3a518}]}) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r8, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x114a, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000180), 0x1c, 0x240002) ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x7, 0x20000803c, 0x6}) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.983589705s ago: executing program 1 (id=5915): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x2a, &(0x7f0000000f00)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x6}]}}}}}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r2, 0x1, 0x9, 0x3}) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x5}, 0x8) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac37979d1e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a843b98a888c762d4a3988b2c6e163b86b6177a9c5e410956c2aa04e4473f0f1a045263255474f02e867aa9dc9f96a0f086adfeaaf73889bd4ebe94bd86fb9e57eaab53d875277d51a18a34dc1c3c3192c54e54c6137229a9f25b5390c13707155fc726f76622cd2f3887df9f886b2724a310e6cd2075613d8d1abac5f42a4d68a9f78f551b9d3c2f45f4f067b7e7a3e325fc2c1d4e3ac09041649097eb5a37117bfdd38e8fe630e545b9927f76f9741e6a35b031e3206ae09dfda84da4e54c2a28154fdad9db8612a40baf206643fdaca2c080a2a1163b1adc1f5850805a68e7288b0c7cc5f3fb64718e3453d7b8f2ea7df77357aa4b4f759178306751c6d4ff614ca2d6929ef1b469146dfb77d502681e1173759777da797b0e9b09fb1a86f743a39c827653a12968bf1281884222494480411218208756725f40fa8688348e6a9d99933c4f18cdede7565864b315de8a772d6bafd3756b0e172b1cf73642db36f109a2d0ca96aebcd2baf4999d499fb9f7735e8e044110cd522bda556fa6f262375f363551bcd226f693a43dff5ff3f248f841afbb968f5bceabb9ead0bc963a7797d0009ee64937b20fd84a6620dc31fae575ff62bce81455c4cba9f699cdfc4a8b0fafcdfe426b94ec1cb806ff797b5c8b7ade7d8e6847744acb4599c8ea38afa129c3d45f7fca9c920aa1148f0c688577f418227c1a47c8ce8210482186b6aeb19af00f5f870a604237d40bcf6b7a5e7f31b719e8b4b9b216e9619351fd8f11b0bf9ff56c43b9b9f7c29398046191f4fe56eee6a87d9138e9784b9c4cc366e608651f3cc77a230de597105594135c1a6d19fed8b95567d83e8010bb3d9a192320b53211a819039a449a3232bdf9f3b08d68e3d9215958c0b70233a8b84ef21c1cc8d37e33c78a772eca70f5602da061e2576ebf0f0a90bbb31aa0db57499e46216e692d0d38198fabc7f51c6281e48f3eaa432a48d9a48a43d10f527b7fa358f24c98cc92f56ff4f54c36d01b3ddee218ab84100b8b5d255ae047066fa9700bb1a7181badd45c38dc02b2e97deee765cdf0648365a0e35a337e65d8260a0a3c1406db4808c1d4d947447c85668cbb67df95ba5aeffc85b2aee71c2136f881ca39590c3d2c8dbf68d27c2c5e3ff4be10b352d5da104963120a781cfb7f2ded9e71c34ae94b1a0bc68bc1303d86cabbd93db2b06eb258f25475375ee554f560fff1ffb8ef8d226ad4d3b55512235cab8d98b82d0c8b24279ea43fb5b929019d903204bb840389196b423f4555f1fdce342f34e95bd5a626ca71b553a483caca3af41fa6878cfdf1e71317cdb5bae1c1ccb1d041df981c5045aca2fe38f89972ee310f74dad904ab5f7fdc6f58f2347717b68051d9dd60479bce4abcdcc37d753d184dfd41e23181f0ca97dfa6f962f2694c6162aeaa08a208f2c7d26e7f", 0x4ec}], 0x3}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000300)={'wg2\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x89f2, &(0x7f0000000600)="4f48d732ae00634300eae94367625e86898ee87a59ac88ce27653ffb004c755e8f80d6f49b6e1d8c36625fb1827b95cd06d06c237b48f69451575f41a7280d9d282561389ed16430e557f3ef3b5dec00cb1f2f2aa330a0e2afa7052eac65dc16bfcb8d4f97d69e434bd452d6fa6c386a7e42187ca3284100b827379c7c5626ba526e98a08fbf7a2d5d878ce8") r8 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000c40)={0x9, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)=""/247, 0xf7}], &(0x7f0000000c00)=[0x5, 0x8000000000000000, 0x6], 0x1}, 0x20) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendto$packet(r7, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c010000100001040000000000000000000000000001000000000000000000010000000000020000000000000000000112341234000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000"], 0x13c}}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 1.898075279s ago: executing program 7 (id=5916): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, 0x0, 0x0) 1.54640871s ago: executing program 2 (id=5917): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)=ANY=[], 0x2b) 1.523288241s ago: executing program 7 (id=5918): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)=ANY=[], 0x2b) 1.024692495s ago: executing program 7 (id=5919): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000b00), 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000f40)=ANY=[@ANYBLOB="080000007013d889d247f6a5e8f94063c6b6fc0e8662fe26d2f1ab86ee6b0eb2fcadec7ac2c0c601958965d6405bee37548e6c041d8ebe2191cb80584cb1e39472ff0e7d0547161caafb8ec0ae89ea4b7fbee4f1600c873c62b414", @ANYRES16=r2, @ANYBLOB="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"], 0x3cc}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r4, @ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0xfff3, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0xe8, 0x64, 0xf31, 0xfffffffb, 0x25dfdc03, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x1, 0xffff}, {0x1, 0x1b}}, [@TCA_RATE={0x6, 0x5, {0x81, 0xb}}, @filter_kind_options=@f_fw={{0x7}, {0x74, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x3, 0x1}}, @TCA_FW_INDEV={0x14, 0x3, 'macvtap0\x00'}, @TCA_FW_POLICE={0x48, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x35}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0xc05bdbe5f2e66f14, 0xff, 0x2, 0x2, {0x1, 0x1, 0xce29, 0x0, 0x400, 0x3ff}, {0x6, 0x2, 0xa243, 0x127e, 0x6, 0x6}, 0x4, 0x7, 0x5}}]}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'syzkaller0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0xd8de4580905797c6}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') 938.686535ms ago: executing program 2 (id=5920): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x48a99fbe, 0x101241) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8c53d9c17f0210ecc0d96072000001ea89de2b7fb0000e60080b8787b960001000000000000000005007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0xe, 0xa0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "b87d8897"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x3a, 0x6, 0x0, 0x6}, {0x6, 0x24, 0x1a, 0x6, 0x9}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x5, 0x3}, @country_functional={0x12, 0x24, 0x7, 0x2, 0xfff9, [0xbaf, 0x6, 0x5, 0x96, 0xf7d3, 0xc4]}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3, 0x8001}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x2, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xff, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xb, 0xf8, 0x1}}}}}}}]}}, &(0x7f0000002640)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x6, 0x2, 0x4, 0xff, 0x4}, 0x4a, &(0x7f0000002440)={0x5, 0xf, 0x4a, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "dabec27dcbca1b1f98d9369c3d5f1c5d"}, @ptm_cap={0x3}, @generic={0xe, 0x10, 0x4, "9a826dbe151b143b89510d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0x0, 0xab, 0x4, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x13, 0x8, 0x5, 0x40}, @wireless={0xb, 0x10, 0x1, 0x4, 0x30, 0x0, 0xfd, 0xffd7, 0x6}]}, 0x3, [{0x4, &(0x7f00000024c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0x809}}, {0xb0, &(0x7f0000002580)=@string={0xb0, 0x3, "472f4739c28fdfa92a65a3138ccb39eab269a5eee41ec81f6a1b55b71648045c1224ddb7a8021e41bbaa85d2a1e24a04c2137da69e2f8ee5a389adc3db795758226a4e692f689bc57b4169479a32f0ff945c0b06fbf69ca78de07eeaf06f065d08ddf14bc3fef39db970fe43300bb87174cea87bc6c6d08d74082bd3b225da3986eec069595435ff5dbc11e64b1c2161987bd592875699e2f04567f3835d65c3a1848f026f19979ea2f1a2495691"}}]}) ioprio_get$pid(0x2, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='1', 0x1) ioctl$MTDFILEMODE(r0, 0x4d13, 0x3) 180.318001ms ago: executing program 7 (id=5921): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_connect$uac1(0x5, 0x83, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x763, 0x1031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x8, 0xc0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2e, 0x4, 0xd, 0x5, "4850888dee4103d6e1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xf, 0xd, 0xd, {0x7, 0x25, 0x1, 0x0, 0x8, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xa, 0x8c, 0x5, {0x7, 0x25, 0x1, 0x0, 0x1, 0x80}}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x8, 0x5, 0x6, 0x8, 0xfe}, 0xaf, &(0x7f0000000280)={0x5, 0xf, 0xaf, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x0, 0xfa1f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x8, 0xb, 0xfff}, @generic={0x43, 0x10, 0x4, "541bfaa4c39ba7c3eef2dab309779d286f17aeacc67bab6041e97066e339e46f3b2ced9a0cc788cf1846561e52c87237bc10a6517beaf1eeeceb8856b917412e"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "36f392421d41f36554e9dda8ef60b7d3"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xe1, 0x6, 0x8, 0x4, 0x81}, @ssp_cap={0x0, 0x10, 0xa, 0x3, 0x0, 0x80, 0xf1e, 0xfff, [0xff00]}]}, 0x8, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x4c1e}}, {0x88, &(0x7f0000000440)=@string={0x88, 0x3, "2097db12b3d0e229eb4ef58defbbda943f4171e701d4a186a89e790fd5026e19d7d3943ab6b22a6dc9254f833a8c1f9bb003a6d3757d93ebfbfd8ac90369cd5e67805491c1ffcae88f15974c4b58a00e19412e42cacd28dfc1b8ad5553656d0566f2ebb669ffb08a5cda7ecdb9318fddf67af368a86a7149f72aa852d2e2466690bb46c84526"}}, {0x48, &(0x7f0000000c40)=ANY=[@ANYBLOB="4803ea5750270fa24058a1199bef24f7330de2f99dfc5c7f58983a26218384349c62779138f5130610fc16066b4297ed1317350288adcd60332d89bf4b01805428499be8b5449a8662e19bb5b26044093779a59283f26823814fa7068c45ad614e3487e6dcc5b2f34e8dce423791400f0c9b9390af4b8d2bd41408f23c1af05b18b549fad6adbea114011d0315e920ceca132cfda2783b8e71de95690026bb979d4820ead2cc5f3264c4540c0db74dcbd9d337b75c2a32140b471ff89f8a1717ef04efbd94f7970a1e9c4c1bfc76a41d839a64f1c95b0fc14a69e16334244322990114df"]}, {0xfffffffffffffff6, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40b}}, {0xba, &(0x7f00000005c0)=@string={0xba, 0x3, "9a131f30bd60cb569ef4dd8e2e8223741ba939553a759164a9630973c1f049d9d71cb7304dd4a5b5cac2cfad70504d1b776544ace5555e5d931d2b02a4d226f3a80cec83d01b57608a21465608ca86a79e365042ad3803010503f4e3c367a9d3f2a5c3d04cee2d341a5f7ef4ff31908a55fe40bc289e393a94d7d40f093126d9f042abf4743b3d333cf873b6a404e7fadb073260fbc00b85c7cfe9ae693c280412bb67da6521369f0ba581bd780dd16a7e6b366160357fe1"}}, {0x94, &(0x7f0000000680)=@string={0x94, 0x3, "6386fd8880c06abe4f07d34c79dcd8945e1646c769d9284a19645fc2f639cadb53ef2aeac8f506b9578ce708f5572e2044cc2e7731da50eedf9fc800fc81f41297468a8f4d0a2e782ff0239c397412bb18e7f2bbbc9b674b247ca5c67e63437c49444d24c39d46d1a069d83478ee7a0831ce526b45ff808db25aa766c2890ab608622223ea43f11c50192eef693d37b887bf"}}, {0xd, &(0x7f0000000740)=@string={0xd, 0x3, "e589627a5641a5f7e49781"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x447}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=r1}, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7, 0x0, 0x3f}, 0x20) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) 50.124079ms ago: executing program 9 (id=5922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x98}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xdc}}, 0x40000) 23.723043ms ago: executing program 1 (id=5923): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r5 = syz_open_pts(r4, 0x0) dup3(r5, r4, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000240), &(0x7f0000000640)=ANY=[@ANYRES64=r3], 0x7, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(r5, 0x103ffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0x4, 0x3}, 0x6) write(r0, &(0x7f0000000440)="05000000010001", 0x7) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffa, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x2005, 0x800000009, 0x4100000000200, 0x0, 0x2, 0x0, 0x10000000000f48, 0x8, 0x20000000}) 0s ago: executing program 4 (id=5924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f30fbd0d660f2a630066b8000000000f23d80f21f86635000000000f23f8b80d008ed82e667c75f364b646660fc735b800008ee866b9ff03000066b8c600000066ba000000000f3066b9bb0800000f32", 0x50}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x100, 0x0, 0x2080, {}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@arm64={0x1, 0x0, 0x4}) kernel console output (not intermixed with test programs): 72673][T27974] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1060.019932][ T30] audit: type=1400 audit(1786608769.149:4324): avc: denied { write } for pid=28380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1060.075002][T27974] usb 10-1: Detected FT232R [ 1060.173072][T27974] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1060.196032][T27974] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1060.222593][T27974] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1060.280338][T27974] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1060.362784][T27974] usb 10-1: USB disconnect, device number 18 [ 1060.416932][T27974] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1060.748035][T27974] ftdi_sio 10-1:0.0: device disconnected [ 1061.692744][ T30] audit: type=1400 audit(1786608770.829:4325): avc: denied { write } for pid=28408 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1062.204166][T28415] syzkaller0: entered promiscuous mode [ 1062.213926][T28415] syzkaller0: entered allmulticast mode [ 1063.492120][T27974] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1064.374049][T27974] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1065.434079][T27974] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.463944][T27974] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.637834][T28453] xfrm0 speed is unknown, defaulting to 1000 [ 1065.751341][T28453] lo speed is unknown, defaulting to 1000 [ 1066.207889][T27974] usb 10-1: config 0 descriptor?? [ 1066.213557][T27974] usb 10-1: can't set config #0, error -71 [ 1066.248499][T27974] usb 10-1: USB disconnect, device number 19 [ 1066.943938][ T30] audit: type=1400 audit(1786608776.049:4326): avc: denied { write } for pid=28439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1067.042309][T28477] sd 0:0:1:0: PR command failed: 1026 [ 1067.048306][T28477] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1067.055576][T28477] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1067.965748][T27974] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1068.218021][T27974] usb 10-1: Using ep0 maxpacket: 16 [ 1068.241184][ T30] audit: type=1400 audit(1786608777.379:4327): avc: denied { write } for pid=28488 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1068.291079][T27974] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1068.395770][T27974] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1068.425917][T27974] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.435532][T27974] usb 10-1: Product: syz [ 1068.446862][T27974] usb 10-1: Manufacturer: syz [ 1068.463912][T27974] usb 10-1: SerialNumber: syz [ 1068.470850][T27974] usb 10-1: config 0 descriptor?? [ 1068.526425][T27974] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1068.556352][T27974] usb 10-1: Detected FT232R [ 1068.708936][T28495] bridge0: port 3(vlan2) entered blocking state [ 1068.736898][T27974] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1068.759920][T28495] bridge0: port 3(vlan2) entered disabled state [ 1068.770525][T27974] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1068.797415][T27974] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1068.809317][T28495] vlan2: entered allmulticast mode [ 1068.827706][T27974] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1068.838864][T28495] geneve0: entered allmulticast mode [ 1068.877607][T28495] vlan2: entered promiscuous mode [ 1068.883141][T28495] geneve0: entered promiscuous mode [ 1068.921187][T27974] usb 10-1: USB disconnect, device number 20 [ 1070.302964][T27974] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1070.316809][T27974] ftdi_sio 10-1:0.0: device disconnected [ 1072.008099][ T30] audit: type=1400 audit(1786608781.149:4328): avc: denied { write } for pid=28501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1072.281134][ T30] audit: type=1400 audit(1786608781.419:4329): avc: denied { write } for pid=28534 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1072.424127][ T6948] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1072.522261][T28537] netlink: 'syz.1.5637': attribute type 10 has an invalid length. [ 1072.580445][T28537] team0: Port device dummy0 added [ 1072.604210][ T6948] usb 3-1: Using ep0 maxpacket: 16 [ 1072.626335][ T6948] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1072.652249][ T6948] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1072.684116][ T6948] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.719217][ T6948] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1072.767874][ T6948] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1072.815978][T28546] FAULT_INJECTION: forcing a failure. [ 1072.815978][T28546] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.844343][ T6948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.857815][ T6948] usb 3-1: Product: syz [ 1072.862102][T28546] CPU: 0 UID: 0 PID: 28546 Comm: syz.7.5646 Tainted: G L syzkaller #0 PREEMPT(full) [ 1072.862131][T28546] Tainted: [L]=SOFTLOCKUP [ 1072.862137][T28546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1072.862148][T28546] Call Trace: [ 1072.862154][T28546] [ 1072.862161][T28546] dump_stack_lvl+0x100/0x190 [ 1072.862189][T28546] should_fail_ex.cold+0x5/0xa [ 1072.862212][T28546] should_failslab+0xc2/0x120 [ 1072.862239][T28546] __kvmalloc_node_noprof+0x116/0x970 [ 1072.862260][T28546] ? __might_fault+0xc5/0x140 [ 1072.862280][T28546] ? xt_alloc_table_info+0x44/0xa0 [ 1072.862306][T28546] xt_alloc_table_info+0x44/0xa0 [ 1072.862327][T28546] do_ipt_set_ctl+0x611/0xcf0 [ 1072.862352][T28546] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1072.862375][T28546] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1072.862399][T28546] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1072.862423][T28546] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1072.862449][T28546] ? sockopt_release_sock+0x5c/0x70 [ 1072.862474][T28546] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1072.862507][T28546] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1072.862531][T28546] nf_setsockopt+0x8d/0xf0 [ 1072.862555][T28546] ip_setsockopt+0xcb/0xf0 [ 1072.862588][T28546] udp_setsockopt+0x64/0xb0 [ 1072.862609][T28546] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1072.862638][T28546] do_sock_setsockopt+0xf3/0x1d0 [ 1072.862666][T28546] __sys_setsockopt+0x195/0x220 [ 1072.862693][T28546] __x64_sys_setsockopt+0xbd/0x160 [ 1072.862714][T28546] ? do_syscall_64+0x90/0x870 [ 1072.862736][T28546] ? lockdep_hardirqs_on+0x78/0x100 [ 1072.862758][T28546] do_syscall_64+0x115/0x870 [ 1072.862779][T28546] ? clear_bhb_loop+0x70/0xc0 [ 1072.862802][T28546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.862820][T28546] RIP: 0033:0x7f9f40f9e0d9 [ 1072.862836][T28546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.862852][T28546] RSP: 002b:00007f9f3f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1072.862870][T28546] RAX: ffffffffffffffda RBX: 00007f9f41225fa0 RCX: 00007f9f40f9e0d9 [ 1072.862882][T28546] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1072.862892][T28546] RBP: 00007f9f3f1f6090 R08: 0000000000000420 R09: 0000000000000000 [ 1072.862903][T28546] R10: 0000200000000a80 R11: 0000000000000246 R12: 0000000000000001 [ 1072.862914][T28546] R13: 00007f9f41226038 R14: 00007f9f41225fa0 R15: 00007fffc1506228 [ 1072.862952][T28546] [ 1073.116708][ T6948] usb 3-1: Manufacturer: syz [ 1073.121352][ T6948] usb 3-1: SerialNumber: syz [ 1073.330371][T28551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1073.351715][T28551] tmpfs: Bad value for 'mpol' [ 1073.504004][T27974] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1073.520459][T28511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1073.529331][ T30] audit: type=1400 audit(1786608782.659:4330): avc: denied { write } for pid=28538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1073.656084][T27974] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1073.678831][T27974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.700474][T27974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.732292][T27974] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1073.753964][ T30] audit: type=1400 audit(1786608782.879:4331): avc: denied { write } for pid=28563 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1073.787250][T27974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.812088][T27974] usb 8-1: config 0 descriptor?? [ 1073.926049][ T6948] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1073.946838][ T6948] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1073.986815][ T6948] usb 3-1: 1:2 : does not exist [ 1074.110608][ T6948] usb 3-1: USB disconnect, device number 21 [ 1074.656882][T17354] udevd[17354]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such device [ 1074.693068][T27974] hid_parser_main: 30 callbacks suppressed [ 1074.693091][T27974] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1074.774492][T27974] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1074.813451][T27974] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1074.852525][T27974] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1074.887673][T27974] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1074.921153][T27974] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1074.941326][T27974] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1074.956492][T27974] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1074.970697][T27974] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1074.980348][T27974] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 1075.097648][T27974] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1075.134110][ T30] audit: type=1400 audit(1786608784.239:4332): avc: denied { write } for pid=28573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1075.330585][T27974] usb 8-1: USB disconnect, device number 13 [ 1075.401943][ T30] audit: type=1400 audit(1786608784.509:4333): avc: denied { write } for pid=28591 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1075.427135][ T6948] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1075.540973][T28599] x_tables: duplicate underflow at hook 1 [ 1075.634535][T28599] x_tables: duplicate underflow at hook 1 [ 1075.654063][ T30] audit: type=1400 audit(1786608784.779:4334): avc: denied { ioctl } for pid=28596 comm="syz.7.5656" path="socket:[126157]" dev="sockfs" ino=126157 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1076.116458][ T6948] usb 2-1: Using ep0 maxpacket: 16 [ 1076.979984][ T5708] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1076.997860][T20584] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1077.265344][ T6948] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1077.314933][ T6948] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1077.324870][T20584] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1077.341982][ T6948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.350202][ T5708] usb 10-1: Using ep0 maxpacket: 8 [ 1077.359514][ T5708] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1077.374531][T20584] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 1077.390267][ T6948] usb 2-1: Product: syz [ 1077.401694][ T6948] usb 2-1: Manufacturer: syz [ 1077.408175][ T5708] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1077.418657][T20584] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 1077.433885][ T6948] usb 2-1: SerialNumber: syz [ 1077.441789][ T5708] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.458828][ T6948] usb 2-1: config 0 descriptor?? [ 1077.465122][T20584] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1077.476218][ T5708] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1077.493003][ T6948] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1077.501390][T20584] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1077.527751][ T6948] usb 2-1: Detected FT232R [ 1077.532316][T20584] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 1077.543414][ T5708] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.557561][T20584] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 1077.585321][ T5708] usbtmc 10-1:16.0: bulk endpoints not found [ 1077.606735][T20584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1077.628010][T20584] usb 3-1: Product: syz [ 1077.647012][T20584] usb 3-1: Manufacturer: syz [ 1077.665905][T28594] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1077.680136][T28594] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1077.696663][ T6948] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1077.714862][ T6948] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1077.723275][T28594] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1077.738966][ T6948] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1077.754006][T28594] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1077.768429][ T6948] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1077.783038][T28594] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1077.815808][T28594] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1077.835740][ T6948] usb 2-1: USB disconnect, device number 27 [ 1077.879335][T20584] usb 3-1: USB2VGA dongle found at address 22 [ 1077.892247][ T6948] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1077.929399][T20584] usb 3-1: Allocated 8 output buffers [ 1077.955134][ T6948] ftdi_sio 2-1:0.0: device disconnected [ 1077.972316][T20584] usb 3-1: Failed to early initialize device [ 1078.085179][T20584] usb 3-1: USB disconnect, device number 22 [ 1078.283725][ T30] audit: type=1400 audit(1786608787.419:4335): avc: denied { append } for pid=28623 comm="syz.7.5660" name="uprobe_events" dev="tracefs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1078.477508][ T30] audit: type=1400 audit(1786608787.619:4336): avc: denied { write } for pid=28603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.564131][ T6948] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1078.641043][T28635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.728125][ T6948] usb 8-1: Using ep0 maxpacket: 8 [ 1078.737595][ T6948] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1078.793954][ T6948] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.857743][T28635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.881123][ T6948] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1078.962725][ T6948] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.983343][ T30] audit: type=1400 audit(1786608788.119:4337): avc: denied { ioctl } for pid=28640 comm="syz.2.5664" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1079.055157][ T6948] usb 8-1: Product: syz [ 1079.087599][ T6948] usb 8-1: Manufacturer: syz [ 1079.134030][ T6948] usb 8-1: SerialNumber: syz [ 1079.569632][ T30] audit: type=1400 audit(1786608788.709:4338): avc: denied { write } for pid=28647 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1079.679282][T28624] event trace: Could not enable event p [ 1079.680738][ T30] audit: type=1400 audit(1786608788.819:4339): avc: denied { create } for pid=28651 comm="syz.4.5667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1079.776299][ T6948] usb 8-1: 1:1 : bogus bTerminalLink 7 [ 1079.808779][ T6948] usb 8-1: 0:2 : does not exist [ 1079.831706][ T6948] usb 8-1: unit 119 not found! [ 1080.062539][ T6948] usb 8-1: USB disconnect, device number 14 [ 1080.308343][T17952] udevd[17952]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1080.481362][ T30] audit: type=1400 audit(1786608789.619:4340): avc: denied { write } for pid=28656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1080.600194][T28668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5669'. [ 1080.845670][ T30] audit: type=1400 audit(1786608789.989:4341): avc: denied { write } for pid=28675 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1080.993288][ T30] audit: type=1400 audit(1786608790.109:4342): avc: denied { write } for pid=28651 comm="syz.4.5667" name="strings" dev="configfs" ino=9606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1081.005574][T28683] bridge0: port 3(vlan2) entered blocking state [ 1081.090048][T28683] bridge0: port 3(vlan2) entered disabled state [ 1081.104604][ T30] audit: type=1400 audit(1786608790.129:4343): avc: denied { write } for pid=28651 comm="syz.4.5667" name="0x409" dev="configfs" ino=126286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1081.110790][T28683] vlan2: entered allmulticast mode [ 1081.145899][T28683] geneve0: entered allmulticast mode [ 1081.160724][T28683] vlan2: entered promiscuous mode [ 1081.168770][ T6948] usb 10-1: USB disconnect, device number 21 [ 1081.243064][ T30] audit: type=1400 audit(1786608790.129:4344): avc: denied { create } for pid=28651 comm="syz.4.5667" name="serialnumber" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 1081.281855][T28683] geneve0: entered promiscuous mode [ 1081.289555][ T6977] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1081.555531][T28674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1081.714406][ T6977] usb 3-1: Using ep0 maxpacket: 16 [ 1081.834986][ T6977] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1082.194947][ T6977] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1082.225885][ T6977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.247678][ T6977] usb 3-1: Product: syz [ 1082.275397][ T6977] usb 3-1: Manufacturer: syz [ 1082.294077][ T6977] usb 3-1: SerialNumber: syz [ 1082.471069][ T6977] usb 3-1: config 0 descriptor?? [ 1082.483366][ T6977] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1082.506467][ T6977] usb 3-1: Detected FT232R [ 1083.230777][ T6977] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1083.247720][ T6977] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1083.266164][T27974] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 1083.274987][ T6977] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1083.292123][ T6977] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1083.307590][ T6977] usb 3-1: USB disconnect, device number 23 [ 1083.323746][ T6977] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1083.343222][ T6977] ftdi_sio 3-1:0.0: device disconnected [ 1083.372320][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1083.372337][ T30] audit: type=1326 audit(1786608792.459:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28722 comm="syz.1.5678" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a44d9e0d9 code=0x7ffc0000 [ 1083.476061][T27974] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1083.507980][T27974] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 1083.541722][ T30] audit: type=1326 audit(1786608792.459:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28722 comm="syz.1.5678" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a44d9e0d9 code=0x7ffc0000 [ 1083.581816][T27974] usb 8-1: config 0 has no interface number 0 [ 1083.601339][T27974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.610602][ T30] audit: type=1326 audit(1786608792.459:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28722 comm="syz.1.5678" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a44d9e0d9 code=0x7ffc0000 [ 1083.612145][T27974] usb 8-1: Product: syz [ 1083.650182][T28729] bridge0: port 3(vlan2) entered blocking state [ 1083.665914][ T30] audit: type=1326 audit(1786608792.459:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28722 comm="syz.1.5678" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a44d9e0d9 code=0x7ffc0000 [ 1083.668273][T28729] bridge0: port 3(vlan2) entered disabled state [ 1083.692466][ T30] audit: type=1326 audit(1786608792.519:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28722 comm="syz.1.5678" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a44d9e0d9 code=0x7ffc0000 [ 1083.692511][ T30] audit: type=1326 audit(1786608792.519:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28722 comm="syz.1.5678" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a44d9e0d9 code=0x7ffc0000 [ 1083.692546][ T30] audit: type=1326 audit(1786608792.519:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28722 comm="syz.1.5678" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a44d9e0d9 code=0x7ffc0000 [ 1083.783330][T27974] usb 8-1: Manufacturer: syz [ 1083.783352][T27974] usb 8-1: SerialNumber: syz [ 1083.790915][T27974] usb 8-1: config 0 descriptor?? [ 1083.801543][T28707] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1083.816204][T28707] audit: audit_lost=257 audit_rate_limit=0 audit_backlog_limit=64 [ 1083.824097][T28707] audit: backlog limit exceeded [ 1083.981479][T28729] vlan2: entered allmulticast mode [ 1084.031388][T28743] FAULT_INJECTION: forcing a failure. [ 1084.031388][T28743] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.049622][T28743] CPU: 1 UID: 0 PID: 28743 Comm: syz.4.5680 Tainted: G L syzkaller #0 PREEMPT(full) [ 1084.049653][T28743] Tainted: [L]=SOFTLOCKUP [ 1084.049660][T28743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1084.049670][T28743] Call Trace: [ 1084.049676][T28743] [ 1084.049683][T28743] dump_stack_lvl+0x100/0x190 [ 1084.049712][T28743] should_fail_ex.cold+0x5/0xa [ 1084.049735][T28743] should_failslab+0xc2/0x120 [ 1084.049758][T28743] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1084.049780][T28743] ? __alloc_skb+0x5b7/0x710 [ 1084.049801][T28743] ? __alloc_skb+0x140/0x710 [ 1084.049825][T28743] __alloc_skb+0x140/0x710 [ 1084.049844][T28743] ? __alloc_skb+0x5b7/0x710 [ 1084.049863][T28743] ? __pfx___alloc_skb+0x10/0x10 [ 1084.049890][T28743] netlink_alloc_large_skb+0x69/0x150 [ 1084.049913][T28743] netlink_sendmsg+0x680/0xda0 [ 1084.049936][T28743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1084.049957][T28743] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1084.049987][T28743] ____sys_sendmsg+0xa4d/0xbe0 [ 1084.050013][T28743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1084.050034][T28743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1084.050078][T28743] ___sys_sendmsg+0x190/0x1e0 [ 1084.050098][T28743] ? __pfx____sys_sendmsg+0x10/0x10 [ 1084.050113][T28743] ? __lock_acquire+0x49f/0x1a40 [ 1084.050135][T28743] ? get_pid_task+0x106/0x250 [ 1084.050178][T28743] __sys_sendmsg+0x160/0x210 [ 1084.050202][T28743] ? __pfx___sys_sendmsg+0x10/0x10 [ 1084.050236][T28743] do_syscall_64+0x115/0x870 [ 1084.050259][T28743] ? clear_bhb_loop+0x70/0xc0 [ 1084.050281][T28743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.050299][T28743] RIP: 0033:0x7f60f979e0d9 [ 1084.050315][T28743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.050332][T28743] RSP: 002b:00007f60fa680028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1084.050350][T28743] RAX: ffffffffffffffda RBX: 00007f60f9a25fa0 RCX: 00007f60f979e0d9 [ 1084.050362][T28743] RDX: 00000000000080e0 RSI: 0000200000000100 RDI: 0000000000000003 [ 1084.050372][T28743] RBP: 00007f60fa680090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.050382][T28743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.050392][T28743] R13: 00007f60f9a26038 R14: 00007f60f9a25fa0 R15: 00007ffd38be71e8 [ 1084.050416][T28743] [ 1085.004143][T28729] geneve0: entered allmulticast mode [ 1085.091633][T28729] vlan2: entered promiscuous mode [ 1085.147992][T28729] geneve0: entered promiscuous mode [ 1085.332960][T27974] asix 8-1:0.251: probe with driver asix failed with error -71 [ 1085.358953][T27974] usb 8-1: USB disconnect, device number 15 [ 1085.435881][ T6977] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1085.645469][ T6977] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1085.693136][ T6977] usb 5-1: too many configurations: 186, using maximum allowed: 8 [ 1085.713005][ T6977] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.752156][ T6977] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.789150][ T6977] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.811935][ T6977] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.036002][ T6977] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.085785][ T6977] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.097088][ T6973] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 1086.109970][ T6977] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.124097][ T6977] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.139363][ T6977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.150752][ T6977] usb 5-1: Product: syz [ 1086.155547][ T6977] usb 5-1: Manufacturer: syz [ 1086.164125][ T6977] usb 5-1: SerialNumber: syz [ 1086.255238][ T6973] usb 10-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=c2.f3 [ 1086.277081][ T6973] usb 10-1: config 7 has an invalid interface number: 82 but max is 0 [ 1086.316042][ T6973] usb 10-1: config 7 has no interface number 0 [ 1086.341310][ T6973] usb 10-1: config 7 interface 82 altsetting 3 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1086.376019][ T6973] usb 10-1: config 7 interface 82 has no altsetting 0 [ 1086.669316][T28767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1086.894589][ T6973] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.916442][ T6973] usb 10-1: Product: syz [ 1086.921316][ T6973] usb 10-1: Manufacturer: syz [ 1086.926664][ T6973] usb 10-1: SerialNumber: syz [ 1086.940599][T28764] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1087.909342][T20578] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1088.427451][ T6948] usb 5-1: USB disconnect, device number 13 [ 1089.223333][ T30] kauditd_printk_skb: 407 callbacks suppressed [ 1089.223350][ T30] audit: type=1800 audit(1786608798.339:4761): pid=28823 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.5692" name="nexus" dev="configfs" ino=127492 res=0 errno=0 [ 1089.315555][T28824] netlink: 'syz.1.5691': attribute type 1 has an invalid length. [ 1089.323405][T28824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5691'. [ 1089.351613][T28823] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1089.577946][ T6973] usb 10-1: USB disconnect, device number 22 [ 1089.671752][ T30] audit: type=1400 audit(1786608798.809:4762): avc: denied { write } for pid=28827 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1089.705343][T28833] FAULT_INJECTION: forcing a failure. [ 1089.705343][T28833] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.719118][T28833] CPU: 1 UID: 0 PID: 28833 Comm: syz.7.5696 Tainted: G L syzkaller #0 PREEMPT(full) [ 1089.719145][T28833] Tainted: [L]=SOFTLOCKUP [ 1089.719151][T28833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1089.719162][T28833] Call Trace: [ 1089.719169][T28833] [ 1089.719176][T28833] dump_stack_lvl+0x100/0x190 [ 1089.719205][T28833] should_fail_ex.cold+0x5/0xa [ 1089.719226][T28833] should_failslab+0xc2/0x120 [ 1089.719250][T28833] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1089.719271][T28833] ? lock_is_held_type+0xf5/0x140 [ 1089.719293][T28833] ? do_getname+0x35/0x390 [ 1089.719320][T28833] do_getname+0x35/0x390 [ 1089.719345][T28833] do_utimes_path+0xc9/0x1b0 [ 1089.719370][T28833] ? __pfx_do_utimes_path+0x10/0x10 [ 1089.719393][T28833] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1089.719421][T28833] do_utimes+0x34/0x100 [ 1089.719444][T28833] do_futimesat+0x18b/0x200 [ 1089.719466][T28833] ? __pfx_do_futimesat+0x10/0x10 [ 1089.719493][T28833] ? ksys_write+0x1ac/0x250 [ 1089.719518][T28833] do_syscall_64+0x115/0x870 [ 1089.719540][T28833] ? clear_bhb_loop+0x70/0xc0 [ 1089.719562][T28833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.719580][T28833] RIP: 0033:0x7f9f40f9e0d9 [ 1089.719595][T28833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.719611][T28833] RSP: 002b:00007f9f3f1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 1089.719630][T28833] RAX: ffffffffffffffda RBX: 00007f9f41225fa0 RCX: 00007f9f40f9e0d9 [ 1089.719642][T28833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1089.719653][T28833] RBP: 00007f9f3f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1089.719664][T28833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1089.719674][T28833] R13: 00007f9f41226038 R14: 00007f9f41225fa0 R15: 00007fffc1506228 [ 1089.719698][T28833] [ 1089.729078][T28830] bridge0: port 3(vlan2) entered blocking state [ 1089.934328][T28830] bridge0: port 3(vlan2) entered disabled state [ 1089.940891][T28830] vlan2: entered allmulticast mode [ 1089.963908][T28830] geneve0: entered allmulticast mode [ 1089.970854][T28830] vlan2: entered promiscuous mode [ 1090.057453][T20578] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1090.064523][T20578] ath9k_htc: Failed to initialize the device [ 1090.074013][T28830] geneve0: entered promiscuous mode [ 1090.120970][ T6948] usb 5-1: ath9k_htc: USB layer deinitialized [ 1090.130193][ T30] audit: type=1400 audit(1786608799.239:4763): avc: denied { write } for pid=28840 comm="syz.2.5698" name="header" dev="configfs" ino=126290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1090.135384][T28842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5698'. [ 1090.184693][T28846] FAULT_INJECTION: forcing a failure. [ 1090.184693][T28846] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.215968][T28846] CPU: 1 UID: 0 PID: 28846 Comm: syz.7.5701 Tainted: G L syzkaller #0 PREEMPT(full) [ 1090.215998][T28846] Tainted: [L]=SOFTLOCKUP [ 1090.216004][T28846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1090.216014][T28846] Call Trace: [ 1090.216020][T28846] [ 1090.216026][T28846] dump_stack_lvl+0x100/0x190 [ 1090.216053][T28846] should_fail_ex.cold+0x5/0xa [ 1090.216075][T28846] should_failslab+0xc2/0x120 [ 1090.216099][T28846] __kmalloc_cache_noprof+0x91/0x6c0 [ 1090.216116][T28846] ? alloc_pipe_info+0x10e/0x590 [ 1090.216140][T28846] alloc_pipe_info+0x10e/0x590 [ 1090.216161][T28846] splice_direct_to_actor+0x78f/0xa30 [ 1090.216183][T28846] ? __pfx_direct_splice_actor+0x10/0x10 [ 1090.216207][T28846] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1090.216233][T28846] do_splice_direct+0x174/0x240 [ 1090.216254][T28846] ? __pfx_do_splice_direct+0x10/0x10 [ 1090.216272][T28846] ? avc_policy_seqno+0x9/0x20 [ 1090.216291][T28846] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1090.216314][T28846] ? rw_verify_area+0xce/0x6d0 [ 1090.216340][T28846] do_sendfile+0xadc/0xe20 [ 1090.216369][T28846] ? __pfx_do_sendfile+0x10/0x10 [ 1090.216402][T28846] __x64_sys_sendfile64+0x154/0x220 [ 1090.216422][T28846] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1090.216449][T28846] do_syscall_64+0x115/0x870 [ 1090.216470][T28846] ? clear_bhb_loop+0x70/0xc0 [ 1090.216491][T28846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.216508][T28846] RIP: 0033:0x7f9f40f9e0d9 [ 1090.216522][T28846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.216544][T28846] RSP: 002b:00007f9f3f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1090.216561][T28846] RAX: ffffffffffffffda RBX: 00007f9f41225fa0 RCX: 00007f9f40f9e0d9 [ 1090.216572][T28846] RDX: 0000200000002080 RSI: 0000000000000003 RDI: 0000000000000004 [ 1090.216582][T28846] RBP: 00007f9f3f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.216593][T28846] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 1090.216602][T28846] R13: 00007f9f41226038 R14: 00007f9f41225fa0 R15: 00007fffc1506228 [ 1090.216626][T28846] [ 1090.246805][ T30] audit: type=1400 audit(1786608799.359:4764): avc: denied { write } for pid=28840 comm="syz.2.5698" name="fs" dev="configfs" ino=126299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1090.481619][ T6974] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1090.502858][ T30] audit: type=1400 audit(1786608799.359:4765): avc: denied { create } for pid=28840 comm="syz.2.5698" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1090.536443][ T30] audit: type=1400 audit(1786608799.359:4766): avc: denied { write } for pid=28840 comm="syz.2.5698" name="fs" dev="configfs" ino=126299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1090.771370][ T30] audit: type=1400 audit(1786608799.909:4767): avc: denied { read write } for pid=28866 comm="syz.4.5704" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1091.014063][T28844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1091.457507][ T6974] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1091.469285][ T30] audit: type=1400 audit(1786608800.549:4768): avc: denied { open } for pid=28866 comm="syz.4.5704" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1091.513537][ T6974] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 1091.543587][ T6974] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 1091.558798][ T30] audit: type=1400 audit(1786608800.699:4769): avc: denied { write } for pid=28847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1091.586425][ T6974] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1091.638542][ T6974] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1091.648311][ T6974] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 1091.654419][T27974] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1091.670598][ T6974] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 1091.726839][ T30] audit: type=1400 audit(1786608800.849:4770): avc: denied { write } for pid=28878 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1091.865357][ T5708] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1091.873101][ T6948] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1092.875732][T27974] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1092.877519][ T6974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1092.912922][T27974] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1092.921299][ T6974] usb 2-1: Product: syz [ 1092.926003][ T6974] usb 2-1: Manufacturer: syz [ 1092.930648][T27974] usb 3-1: config 0 has no interface number 0 [ 1093.608665][T28839] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1093.618445][ T5708] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1093.628177][ T6948] usb 8-1: Using ep0 maxpacket: 8 [ 1093.634110][ T6948] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1093.646228][ T6948] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.654318][ T6948] usb 8-1: Product: syz [ 1093.658518][ T6948] usb 8-1: Manufacturer: syz [ 1093.663150][ T6948] usb 8-1: SerialNumber: syz [ 1094.014713][ T6948] usb 8-1: config 0 descriptor?? [ 1094.063255][ T6948] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1094.102132][ T6974] usb 2-1: can't set config #1, error -71 [ 1094.112632][ T5708] usb 5-1: unable to read config index 0 descriptor/all [ 1094.128883][T27974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.136966][ T6974] usb 2-1: USB disconnect, device number 28 [ 1094.167392][ T5708] usb 5-1: can't read configurations, error -71 [ 1094.217779][T27974] usb 3-1: config 0 descriptor?? [ 1094.238400][T27974] usb 3-1: can't set config #0, error -71 [ 1094.279929][T28873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.297575][T27974] usb 3-1: USB disconnect, device number 24 [ 1094.348604][T28873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.598120][T28907] FAULT_INJECTION: forcing a failure. [ 1094.598120][T28907] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.611962][T28907] CPU: 1 UID: 0 PID: 28907 Comm: syz.2.5710 Tainted: G L syzkaller #0 PREEMPT(full) [ 1094.611994][T28907] Tainted: [L]=SOFTLOCKUP [ 1094.612001][T28907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1094.612013][T28907] Call Trace: [ 1094.612021][T28907] [ 1094.612028][T28907] dump_stack_lvl+0x100/0x190 [ 1094.612063][T28907] should_fail_ex.cold+0x5/0xa [ 1094.612087][T28907] should_failslab+0xc2/0x120 [ 1094.612114][T28907] __kvmalloc_node_noprof+0x116/0x970 [ 1094.612139][T28907] ? __do_sys_add_key+0x244/0x460 [ 1094.612166][T28907] __do_sys_add_key+0x244/0x460 [ 1094.612189][T28907] ? __pfx___do_sys_add_key+0x10/0x10 [ 1094.612212][T28907] ? trace_hardirqs_off+0x70/0x170 [ 1094.612244][T28907] do_syscall_64+0x115/0x870 [ 1094.612267][T28907] ? clear_bhb_loop+0x70/0xc0 [ 1094.612290][T28907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.612309][T28907] RIP: 0033:0x7f6c8459e0d9 [ 1094.612325][T28907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.612342][T28907] RSP: 002b:00007f6c8546a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1094.612361][T28907] RAX: ffffffffffffffda RBX: 00007f6c84826180 RCX: 00007f6c8459e0d9 [ 1094.612373][T28907] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 1094.612385][T28907] RBP: 00007f6c8546a090 R08: 000000000c62170d R09: 0000000000000000 [ 1094.612397][T28907] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000001 [ 1094.612408][T28907] R13: 00007f6c84826218 R14: 00007f6c84826180 R15: 00007ffe2d488168 [ 1094.612433][T28907] [ 1095.028695][T28912] netlink: 'syz.9.5714': attribute type 12 has an invalid length. [ 1095.037096][T28912] netlink: 'syz.9.5714': attribute type 29 has an invalid length. [ 1095.045733][T28912] netlink: 148 bytes leftover after parsing attributes in process `syz.9.5714'. [ 1095.054928][T28912] netlink: 59 bytes leftover after parsing attributes in process `syz.9.5714'. [ 1095.528683][ T30] audit: type=1400 audit(1786608804.629:4771): avc: denied { write } for pid=28884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1095.739244][ T30] audit: type=1400 audit(1786608804.839:4772): avc: denied { write } for pid=28928 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1096.212405][ T6948] gspca_sonixj: reg_r err -32 [ 1096.217290][ T6948] sonixj 8-1:0.0: probe with driver sonixj failed with error -32 [ 1096.535975][ T5708] usb 8-1: USB disconnect, device number 16 [ 1096.856860][ T6977] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1096.910971][ T30] audit: type=1400 audit(1786608806.049:4773): avc: denied { write } for pid=28943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1096.958401][ T6974] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1097.027498][ T30] audit: type=1400 audit(1786608806.149:4774): avc: denied { write } for pid=28965 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1097.121875][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1097.277587][T20578] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1097.504797][ T6974] usb 2-1: Using ep0 maxpacket: 8 [ 1097.541563][ T6977] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1097.634136][T20578] usb 8-1: Using ep0 maxpacket: 16 [ 1097.655659][ T6974] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1097.769661][T20578] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1097.798078][ T6977] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 1097.808614][ T6974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.817597][ T6974] usb 2-1: Product: syz [ 1097.822198][T20578] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1097.837286][ T6977] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 1097.849901][ T6974] usb 2-1: Manufacturer: syz [ 1097.862112][ T6974] usb 2-1: SerialNumber: syz [ 1097.876318][ T6977] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1097.891310][T20578] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.903200][ T6974] usb 2-1: config 0 descriptor?? [ 1097.912919][T20578] usb 8-1: Product: syz [ 1097.918953][ T6977] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1097.932840][ T6974] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1097.939869][T20578] usb 8-1: Manufacturer: syz [ 1097.944878][T20578] usb 8-1: SerialNumber: syz [ 1097.949796][ T6977] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 1097.963029][ T6977] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 1097.979964][T20578] usb 8-1: config 0 descriptor?? [ 1097.992062][T20578] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1098.002915][ T6977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1098.012533][T20578] usb 8-1: Detected FT232R [ 1098.019387][ T6977] usb 3-1: Product: syz [ 1098.024806][ T6977] usb 3-1: Manufacturer: syz [ 1098.041107][T28942] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1098.064103][T28942] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1098.092602][T28942] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1098.127101][T28942] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1098.135850][T28942] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1098.152720][T28942] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1098.173552][T28950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.182923][T28950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.196852][T28986] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2 out of range (51000000..2150000000) [ 1098.231729][T20578] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1098.250980][ T6977] usb 3-1: USB2VGA dongle found at address 25 [ 1098.264184][T20578] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1098.281444][ T6977] usb 3-1: Allocated 8 output buffers [ 1098.301266][T20578] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 1098.309271][ T30] audit: type=1400 audit(1786608807.429:4775): avc: denied { write } for pid=28970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1098.337842][T20578] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1098.358560][ T6977] usb 3-1: Failed to early initialize device [ 1098.377784][T20578] usb 8-1: USB disconnect, device number 17 [ 1098.388672][ T6977] usb 3-1: USB disconnect, device number 25 [ 1098.448873][T20578] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1098.485530][T20584] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1098.727264][T20578] ftdi_sio 8-1:0.0: device disconnected [ 1098.805611][T20584] usb 5-1: Using ep0 maxpacket: 16 [ 1098.917272][ T6974] gspca_sonixj: reg_w1 err -110 [ 1098.955014][T20584] usb 5-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=60.cf [ 1098.957664][ T6974] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 1099.085894][T20584] usb 5-1: config 2 has an invalid interface number: 36 but max is 3 [ 1099.118568][T20584] usb 5-1: config 2 has an invalid interface number: 41 but max is 3 [ 1099.168888][T20584] usb 5-1: config 2 has an invalid interface number: 4 but max is 3 [ 1099.169426][ T30] audit: type=1400 audit(1786608808.309:4776): avc: denied { write } for pid=28995 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1099.249123][T20584] usb 5-1: config 2 has an invalid interface number: 233 but max is 3 [ 1099.290622][T20584] usb 5-1: config 2 has an invalid interface number: 63 but max is 3 [ 1099.325370][T20584] usb 5-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1099.342405][T29000] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5730'. [ 1099.343727][T20584] usb 5-1: config 2 has 5 interfaces, different from the descriptor's value: 4 [ 1099.383932][T20584] usb 5-1: config 2 has no interface number 0 [ 1099.391720][T29000] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5730'. [ 1099.396677][T20584] usb 5-1: config 2 has no interface number 1 [ 1099.417016][T20584] usb 5-1: config 2 has no interface number 2 [ 1099.423147][T20584] usb 5-1: config 2 has no interface number 3 [ 1099.429997][T20584] usb 5-1: config 2 interface 36 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1099.471388][T20584] usb 5-1: too many endpoints for config 2 interface 41 altsetting 12: 72, using maximum allowed: 30 [ 1099.501877][T20584] usb 5-1: config 2 interface 41 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 72 [ 1099.525107][T20584] usb 5-1: config 2 interface 4 altsetting 113 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1099.538029][T20584] usb 5-1: config 2 interface 4 altsetting 113 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1099.541836][T29002] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1099.553171][T20584] usb 5-1: config 2 interface 233 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1099.614464][T20584] usb 5-1: config 2 interface 233 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1099.635114][T20584] usb 5-1: config 2 interface 233 altsetting 8 endpoint 0xA has invalid wMaxPacketSize 0 [ 1099.706224][T20584] usb 5-1: config 2 interface 233 altsetting 8 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 1099.850522][T20584] usb 5-1: config 2 interface 233 altsetting 8 has a duplicate endpoint with address 0x8B, skipping [ 1099.937156][T20584] usb 5-1: config 2 interface 233 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 1100.004923][ T30] audit: type=1400 audit(1786608809.129:4777): avc: denied { setattr } for pid=29003 comm="syz.7.5732" name="PACKET" dev="sockfs" ino=127736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1100.065616][T20584] usb 5-1: config 2 interface 63 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1100.161814][T20584] usb 5-1: config 2 interface 63 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 1100.235857][T20584] usb 5-1: config 2 interface 63 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1100.306174][ T5708] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1100.329275][T20584] usb 5-1: config 2 interface 36 has no altsetting 0 [ 1100.381821][T20584] usb 5-1: config 2 interface 41 has no altsetting 0 [ 1100.453174][T20584] usb 5-1: config 2 interface 4 has no altsetting 0 [ 1100.521875][T20584] usb 5-1: config 2 interface 233 has no altsetting 0 [ 1100.557129][ T5708] usb 10-1: Using ep0 maxpacket: 8 [ 1100.569178][T20584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.588922][T27973] usb 2-1: USB disconnect, device number 29 [ 1100.595327][ T5708] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1100.623046][T20584] usb 5-1: Product: 중涄å¦è¿ [ 1100.650692][ T5708] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 1100.668520][T20584] usb 5-1: Manufacturer: ÑŒ [ 1100.694013][T20584] usb 5-1: SerialNumber: á Š [ 1100.705494][ T5708] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1100.758791][ T5708] usb 10-1: Product: syz [ 1100.776999][ T5708] usb 10-1: Manufacturer: syz [ 1100.806255][ T5708] usb 10-1: SerialNumber: syz [ 1100.821560][T29021] FAULT_INJECTION: forcing a failure. [ 1100.821560][T29021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1101.058767][T29021] CPU: 0 UID: 0 PID: 29021 Comm: syz.1.5735 Tainted: G L syzkaller #0 PREEMPT(full) [ 1101.058798][T29021] Tainted: [L]=SOFTLOCKUP [ 1101.058806][T29021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1101.058817][T29021] Call Trace: [ 1101.058823][T29021] [ 1101.058830][T29021] dump_stack_lvl+0x100/0x190 [ 1101.058858][T29021] should_fail_ex.cold+0x5/0xa [ 1101.058882][T29021] strncpy_from_user+0x3b/0x2d0 [ 1101.058906][T29021] do_getname+0x78/0x390 [ 1101.058932][T29021] do_sys_openat2+0xc7/0x1e0 [ 1101.058955][T29021] ? __pfx_do_sys_openat2+0x10/0x10 [ 1101.058977][T29021] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1101.059002][T29021] ? __fget_files+0x21f/0x3d0 [ 1101.059026][T29021] __x64_sys_openat+0x12d/0x210 [ 1101.059049][T29021] ? __pfx___x64_sys_openat+0x10/0x10 [ 1101.059069][T29021] ? ksys_write+0x1ac/0x250 [ 1101.059093][T29021] do_syscall_64+0x115/0x870 [ 1101.059115][T29021] ? clear_bhb_loop+0x70/0xc0 [ 1101.059135][T29021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.059152][T29021] RIP: 0033:0x7f0a44d9e0d9 [ 1101.059167][T29021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.059183][T29021] RSP: 002b:00007f0a45b9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1101.059201][T29021] RAX: ffffffffffffffda RBX: 00007f0a45026090 RCX: 00007f0a44d9e0d9 [ 1101.059212][T29021] RDX: 0000000000000042 RSI: 00002000000013c0 RDI: ffffffffffffff9c [ 1101.059222][T29021] RBP: 00007f0a45b9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.059232][T29021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.059242][T29021] R13: 00007f0a45026128 R14: 00007f0a45026090 R15: 00007ffdea0e2698 [ 1101.059264][T29021] [ 1101.468105][T29026] xfrm0 speed is unknown, defaulting to 1000 [ 1101.745358][T29026] lo speed is unknown, defaulting to 1000 [ 1102.087732][T20584] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 1102.597152][T20584] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1102.628322][T20584] dib0700: firmware download failed at 7 with -22 [ 1102.669249][T20584] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 1102.720802][T20584] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1102.752298][T20584] dib0700: firmware download failed at 7 with -22 [ 1102.766326][ T30] audit: type=1400 audit(1786608811.899:4778): avc: denied { write } for pid=29016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1102.844874][T20584] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 1102.908691][T20584] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1102.941201][T20584] dib0700: firmware download failed at 7 with -22 [ 1103.012686][T20584] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 1103.050867][T20584] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1103.077959][T20584] dib0700: firmware download failed at 7 with -22 [ 1103.112058][ T5708] usb 10-1: USB disconnect, device number 23 [ 1103.340680][T20584] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 1103.471043][T20584] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1103.511437][ T30] audit: type=1400 audit(1786608812.619:4779): avc: denied { write } for pid=29052 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1103.552301][T20584] dib0700: firmware download failed at 7 with -22 [ 1103.567979][T29058] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1103.616712][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1103.623579][T20584] usb 5-1: USB disconnect, device number 16 [ 1104.053945][T20584] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1104.237900][T20584] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1104.260411][T20584] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 1104.282918][T20584] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 1104.302937][T20584] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1104.343755][T20584] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1104.373386][T20584] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 1104.398653][ T5708] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1104.410944][T20584] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 1104.435301][T20584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1104.453516][T20584] usb 5-1: Product: syz [ 1104.459661][T20584] usb 5-1: Manufacturer: syz [ 1104.464662][T27973] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1104.475309][ T30] audit: type=1400 audit(1786608813.609:4780): avc: denied { write } for pid=29059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1104.502375][T29046] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1104.525750][T29046] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1104.554100][T29046] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1104.561483][T29046] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1104.578841][T29046] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1104.586089][T29046] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1104.605654][ T5708] usb 2-1: Using ep0 maxpacket: 8 [ 1104.612733][T20584] usb 5-1: USB2VGA dongle found at address 17 [ 1104.620614][ T5708] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1104.646055][T20584] usb 5-1: Allocated 8 output buffers [ 1104.657228][T20584] usb 5-1: Failed to early initialize device [ 1104.709041][T29084] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5749'. [ 1104.718460][T27973] usb 10-1: Using ep0 maxpacket: 8 [ 1104.736615][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.750594][ T5708] usb 2-1: Product: syz [ 1104.755777][T27973] usb 10-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1104.773891][ T5708] usb 2-1: Manufacturer: syz [ 1104.778906][ T5708] usb 2-1: SerialNumber: syz [ 1104.789716][T27973] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.803947][T27973] usb 10-1: Product: syz [ 1104.813932][T27973] usb 10-1: Manufacturer: syz [ 1104.824072][T27973] usb 10-1: SerialNumber: syz [ 1104.870695][ T30] audit: type=1400 audit(1786608814.009:4781): avc: denied { write } for pid=29087 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1104.870949][ T5708] usb 2-1: config 0 descriptor?? [ 1104.906880][T27973] usb 10-1: config 0 descriptor?? [ 1105.179914][ T30] audit: type=1400 audit(1786608814.109:4782): avc: denied { module_load } for pid=29085 comm="syz.7.5751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1105.241560][T27973] radio-usb-si4713 10-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1105.252284][ T5708] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1105.263298][ T6948] usb 5-1: USB disconnect, device number 17 [ 1105.308153][T29070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.334489][T29070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.653988][ T6977] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1105.662822][T27973] radio-usb-si4713 10-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1105.685834][T27973] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1105.708069][T27973] usb 10-1: USB disconnect, device number 24 [ 1105.764705][ T30] audit: type=1400 audit(1786608814.909:4783): avc: denied { write } for pid=29098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1105.835193][ T6977] usb 3-1: Using ep0 maxpacket: 8 [ 1105.842170][ T6977] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1105.862956][ T30] audit: type=1400 audit(1786608814.999:4784): avc: denied { write } for pid=29109 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1105.962678][ T5261] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1106.163656][ T5708] gspca_sonixj: reg_r err -32 [ 1106.173360][ T5708] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 1106.262864][ T30] audit: type=1400 audit(1786608815.349:4785): avc: denied { write } for pid=29115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1106.315462][ T6977] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 1106.390268][ T30] audit: type=1400 audit(1786608815.529:4786): avc: denied { write } for pid=29130 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1106.525655][ T5261] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1107.156079][T29128] ALSA: mixer_oss: invalid OSS volume '' [ 1107.394574][ T6977] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1107.441073][ T6977] usb 3-1: Product: syz [ 1107.467447][ T6977] usb 3-1: Manufacturer: syz [ 1107.484325][ T6977] usb 3-1: SerialNumber: syz [ 1107.558804][ T5708] usb 2-1: USB disconnect, device number 30 [ 1107.869146][T29148] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1108.049651][ T30] audit: type=1400 audit(1786608817.189:4787): avc: denied { write } for pid=29136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1108.528841][ T30] audit: type=1400 audit(1786608817.629:4788): avc: denied { write } for pid=29160 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1108.972884][T29174] xfrm0 speed is unknown, defaulting to 1000 [ 1109.206612][T29174] lo speed is unknown, defaulting to 1000 [ 1109.487053][T27974] usb 3-1: USB disconnect, device number 26 [ 1110.401488][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.417400][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.967081][T29186] xfrm0 speed is unknown, defaulting to 1000 [ 1111.103157][T29186] lo speed is unknown, defaulting to 1000 [ 1111.308436][ T30] audit: type=1400 audit(1786608820.409:4789): avc: denied { write } for pid=29166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1111.543734][ T30] audit: type=1400 audit(1786608820.689:4790): avc: denied { write } for pid=29195 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1112.602120][T29196] xfrm0 speed is unknown, defaulting to 1000 [ 1113.535154][T29217] netlink: 'syz.7.5772': attribute type 1 has an invalid length. [ 1113.555410][T29217] netlink: 200 bytes leftover after parsing attributes in process `syz.7.5772'. [ 1114.284100][ T6948] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1114.305621][ T30] audit: type=1400 audit(1786608823.379:4791): avc: denied { write } for pid=29204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1114.736701][ T6948] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1114.799584][ T6948] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.806066][ T30] audit: type=1400 audit(1786608823.949:4792): avc: denied { write } for pid=29231 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1114.898406][ T6948] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.948609][ T6948] usb 8-1: config 0 descriptor?? [ 1114.998894][ T6948] pwc: Askey VC010 type 2 USB webcam detected. [ 1115.150289][T29196] lo speed is unknown, defaulting to 1000 [ 1115.349074][T29243] FAULT_INJECTION: forcing a failure. [ 1115.349074][T29243] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.366271][T29243] CPU: 1 UID: 0 PID: 29243 Comm: syz.9.5777 Tainted: G L syzkaller #0 PREEMPT(full) [ 1115.366301][T29243] Tainted: [L]=SOFTLOCKUP [ 1115.366308][T29243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1115.366318][T29243] Call Trace: [ 1115.366323][T29243] [ 1115.366330][T29243] dump_stack_lvl+0x100/0x190 [ 1115.366357][T29243] should_fail_ex.cold+0x5/0xa [ 1115.366380][T29243] should_failslab+0xc2/0x120 [ 1115.366405][T29243] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1115.366427][T29243] ? __alloc_skb+0x5b7/0x710 [ 1115.366448][T29243] ? __alloc_skb+0x140/0x710 [ 1115.366472][T29243] __alloc_skb+0x140/0x710 [ 1115.366491][T29243] ? __alloc_skb+0x5b7/0x710 [ 1115.366511][T29243] ? __pfx___alloc_skb+0x10/0x10 [ 1115.366539][T29243] netlink_alloc_large_skb+0x69/0x150 [ 1115.366560][T29243] netlink_sendmsg+0x680/0xda0 [ 1115.366582][T29243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1115.366603][T29243] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1115.366632][T29243] ____sys_sendmsg+0xa4d/0xbe0 [ 1115.366657][T29243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1115.366679][T29243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1115.366718][T29243] ___sys_sendmsg+0x190/0x1e0 [ 1115.366737][T29243] ? __pfx____sys_sendmsg+0x10/0x10 [ 1115.366753][T29243] ? __lock_acquire+0x49f/0x1a40 [ 1115.366776][T29243] ? get_pid_task+0x106/0x250 [ 1115.366821][T29243] __sys_sendmsg+0x160/0x210 [ 1115.366845][T29243] ? __pfx___sys_sendmsg+0x10/0x10 [ 1115.366887][T29243] do_syscall_64+0x115/0x870 [ 1115.366910][T29243] ? clear_bhb_loop+0x70/0xc0 [ 1115.366932][T29243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.366948][T29243] RIP: 0033:0x7f350419e0d9 [ 1115.366964][T29243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.366980][T29243] RSP: 002b:00007f35050da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1115.366997][T29243] RAX: ffffffffffffffda RBX: 00007f3504425fa0 RCX: 00007f350419e0d9 [ 1115.367008][T29243] RDX: 0000000000000800 RSI: 0000200000000240 RDI: 0000000000000003 [ 1115.367019][T29243] RBP: 00007f35050da090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.367029][T29243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.367039][T29243] R13: 00007f3504426038 R14: 00007f3504425fa0 R15: 00007ffd2c149718 [ 1115.367061][T29243] [ 1115.632284][ T6948] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1115.656543][ T6948] pwc: recv_control_msg error -32 req 02 val 2700 [ 1115.674846][ T5708] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1115.731275][T29252] nvme_fabrics: unknown parameter or missing value '#! ' in ctrl creation request [ 1115.749693][ T6948] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1115.809476][ T6948] pwc: recv_control_msg error -32 req 04 val 1000 [ 1115.836155][T29222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.846070][T29222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.907037][ T5708] usb 5-1: Using ep0 maxpacket: 16 [ 1115.929153][ T5708] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1115.987385][ T5708] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1116.081432][ T6948] pwc: recv_control_msg error -32 req 04 val 1400 [ 1116.088277][ T5708] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.134125][ T6948] pwc: recv_control_msg error -32 req 02 val 2000 [ 1116.148210][ T5708] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1116.162627][ T6948] pwc: recv_control_msg error -32 req 02 val 2100 [ 1116.174233][ T5708] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1116.237023][ T6948] pwc: recv_control_msg error -32 req 04 val 1500 [ 1116.251393][ T6948] pwc: recv_control_msg error -32 req 02 val 2500 [ 1116.268901][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.356109][ T5708] usb 5-1: Product: syz [ 1116.372741][ T30] audit: type=1400 audit(1786608825.499:4793): avc: denied { write } for pid=29238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1116.377417][ T5708] usb 5-1: Manufacturer: syz [ 1116.453913][ T5708] usb 5-1: SerialNumber: syz [ 1116.525105][ T6948] pwc: recv_control_msg error -71 req 02 val 2600 [ 1116.542289][ T6948] pwc: recv_control_msg error -71 req 02 val 2900 [ 1116.561532][ T6948] pwc: recv_control_msg error -71 req 02 val 2800 [ 1116.561655][ T30] audit: type=1400 audit(1786608825.659:4794): avc: denied { write } for pid=29271 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1116.574874][T29273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1116.583266][ T6948] pwc: recv_control_msg error -71 req 04 val 1100 [ 1116.626414][T29273] tmpfs: Bad value for 'mpol' [ 1116.671536][ T6948] pwc: recv_control_msg error -71 req 04 val 1200 [ 1116.715517][ T6948] pwc: Registered as video103. [ 1116.744929][ T6948] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input29 [ 1116.792546][ T6948] usb 8-1: USB disconnect, device number 18 [ 1116.826118][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1116.897554][ T6973] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1117.026215][ T6974] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1117.247443][ T5708] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1117.256008][ T30] audit: type=1400 audit(1786608826.359:4795): avc: denied { write } for pid=29282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1117.269676][ T5708] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1117.332325][ T5708] usb 5-1: 1:2 : does not exist [ 1117.357393][ T30] audit: type=1400 audit(1786608826.469:4796): avc: denied { write } for pid=29278 comm="syz.2.5784" name="0x409" dev="configfs" ino=126286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1117.395297][ T30] audit: type=1800 audit(1786608826.469:4797): pid=29295 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.5784" name="serialnumber" dev="configfs" ino=128320 res=0 errno=0 [ 1117.445744][ T30] audit: type=1400 audit(1786608826.529:4798): avc: denied { write } for pid=29278 comm="syz.2.5784" name="uncompressed" dev="configfs" ino=126304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1117.469099][ T30] audit: type=1400 audit(1786608826.529:4799): avc: denied { write } for pid=29278 comm="syz.2.5784" name="yuyv" dev="configfs" ino=128321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1117.503066][ T5708] usb 5-1: USB disconnect, device number 18 [ 1117.564943][ T30] audit: type=1400 audit(1786608826.569:4800): avc: denied { write } for pid=29298 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1117.565147][ T6973] usb 2-1: Using ep0 maxpacket: 16 [ 1117.626634][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1117.647496][ T6974] usb 10-1: Using ep0 maxpacket: 8 [ 1118.113004][ T5608] Bluetooth: hci7: Malformed Event: 0x02 [ 1118.121423][T29319] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1118.231423][ T5261] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1118.331285][ T6973] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1118.340665][ T6973] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1118.358064][ T6973] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.370211][ T6973] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1118.397384][ T6973] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1119.058628][ T6973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.068695][ T6973] usb 2-1: Product: syz [ 1119.073339][ T6973] usb 2-1: Manufacturer: syz [ 1119.079104][ T6973] usb 2-1: SerialNumber: syz [ 1119.646735][ T6974] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1119.664312][ T6948] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1119.668547][ T6974] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 1119.731337][ T6974] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1119.760736][ T6974] usb 10-1: can't read configurations, error -71 [ 1119.963934][ T6948] usb 3-1: Using ep0 maxpacket: 16 [ 1119.972660][ T6948] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1119.986136][ T6948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1120.001697][ T6948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.001724][ T6948] usb 3-1: Product: syz [ 1120.001738][ T6948] usb 3-1: Manufacturer: syz [ 1120.001753][ T6948] usb 3-1: SerialNumber: syz [ 1120.064084][T29362] FAULT_INJECTION: forcing a failure. [ 1120.064084][T29362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1120.064214][T29362] CPU: 1 UID: 0 PID: 29362 Comm: syz.9.5793 Tainted: G L syzkaller #0 PREEMPT(full) [ 1120.064244][T29362] Tainted: [L]=SOFTLOCKUP [ 1120.064251][T29362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1120.064261][T29362] Call Trace: [ 1120.064268][T29362] [ 1120.064276][T29362] dump_stack_lvl+0x100/0x190 [ 1120.064303][T29362] should_fail_ex.cold+0x5/0xa [ 1120.064327][T29362] _copy_from_user+0x2e/0xd0 [ 1120.064352][T29362] copy_msghdr_from_user+0x9f/0x4c0 [ 1120.064372][T29362] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1120.064394][T29362] ? rcu_is_watching+0x12/0xc0 [ 1120.064420][T29362] ? ___sys_recvmsg+0x177/0x1a0 [ 1120.064436][T29362] ? kfree+0x1e5/0x6c0 [ 1120.064457][T29362] ___sys_recvmsg+0xdd/0x1a0 [ 1120.064475][T29362] ? __pfx____sys_recvmsg+0x10/0x10 [ 1120.064507][T29362] ? __pfx___might_resched+0x10/0x10 [ 1120.064534][T29362] do_recvmmsg+0x2f3/0x740 [ 1120.064556][T29362] ? __pfx_do_recvmmsg+0x10/0x10 [ 1120.064578][T29362] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1120.064609][T29362] ? __fget_files+0x21f/0x3d0 [ 1120.064634][T29362] __x64_sys_recvmmsg+0x22a/0x280 [ 1120.064660][T29362] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1120.064692][T29362] do_syscall_64+0x115/0x870 [ 1120.064714][T29362] ? clear_bhb_loop+0x70/0xc0 [ 1120.064736][T29362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.064754][T29362] RIP: 0033:0x7f350419e0d9 [ 1120.064770][T29362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.064787][T29362] RSP: 002b:00007f3505098028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1120.064806][T29362] RAX: ffffffffffffffda RBX: 00007f3504426180 RCX: 00007f350419e0d9 [ 1120.064818][T29362] RDX: 040000000000049e RSI: 0000200000000300 RDI: 0000000000000003 [ 1120.064829][T29362] RBP: 00007f3505098090 R08: 0000000000000000 R09: 0000000000000000 [ 1120.064846][T29362] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000001 [ 1120.064856][T29362] R13: 00007f3504426218 R14: 00007f3504426180 R15: 00007ffd2c149718 [ 1120.064880][T29362] [ 1120.297467][ T6948] usb 3-1: config 0 descriptor?? [ 1120.299893][ T6948] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1120.300801][ T6948] usb 3-1: Detected FT232R [ 1120.405900][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1120.405916][ T30] audit: type=1400 audit(1786608829.509:4803): avc: denied { write } for pid=29323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1120.679022][ T6948] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1120.694277][ T6948] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1120.717163][ T6948] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1120.732864][ T6948] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1120.831519][ T6948] usb 3-1: USB disconnect, device number 27 [ 1120.842711][ T6948] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1120.864694][ T6973] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1120.867590][ T6948] ftdi_sio 3-1:0.0: device disconnected [ 1120.928498][ T6973] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1120.971876][ T30] audit: type=1400 audit(1786608830.109:4804): avc: denied { write } for pid=29369 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1121.019720][ T6973] usb 2-1: 1:2 : does not exist [ 1121.035699][T29372] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5797'. [ 1121.279086][ T6973] usb 2-1: USB disconnect, device number 31 [ 1121.378973][ T5261] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1121.401227][T29380] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1121.784680][T29380] FAULT_INJECTION: forcing a failure. [ 1121.784680][T29380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1121.842905][ T30] audit: type=1800 audit(1786608830.969:4805): pid=29382 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.5799" name="nexus" dev="configfs" ino=129594 res=0 errno=0 [ 1121.865849][T29380] CPU: 0 UID: 0 PID: 29380 Comm: syz.4.5798 Tainted: G L syzkaller #0 PREEMPT(full) [ 1121.865879][T29380] Tainted: [L]=SOFTLOCKUP [ 1121.865886][T29380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1121.865896][T29380] Call Trace: [ 1121.865903][T29380] [ 1121.865912][T29380] dump_stack_lvl+0x100/0x190 [ 1121.865940][T29380] should_fail_ex.cold+0x5/0xa [ 1121.865963][T29380] _copy_to_user+0x32/0xd0 [ 1121.865991][T29380] simple_read_from_buffer+0xcb/0x170 [ 1121.866013][T29380] proc_fail_nth_read+0x1af/0x230 [ 1121.866043][T29380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1121.866073][T29380] ? rw_verify_area+0xce/0x6d0 [ 1121.866097][T29380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1121.866126][T29380] vfs_read+0x1e4/0xb40 [ 1121.866155][T29380] ? __pfx_vfs_read+0x10/0x10 [ 1121.866182][T29380] ? __fget_files+0x215/0x3d0 [ 1121.866206][T29380] ? __fget_files+0x21f/0x3d0 [ 1121.866232][T29380] ksys_read+0x12a/0x250 [ 1121.866248][T29380] ? __pfx_ksys_read+0x10/0x10 [ 1121.866276][T29380] do_syscall_64+0x115/0x870 [ 1121.866299][T29380] ? clear_bhb_loop+0x70/0xc0 [ 1121.866321][T29380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.866340][T29380] RIP: 0033:0x7f60f975e90e [ 1121.866355][T29380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1121.866371][T29380] RSP: 002b:00007f60fa67ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1121.866389][T29380] RAX: ffffffffffffffda RBX: 00007f60fa6806c0 RCX: 00007f60f975e90e [ 1121.866401][T29380] RDX: 000000000000000f RSI: 00007f60fa6800a0 RDI: 0000000000000004 [ 1121.866412][T29380] RBP: 00007f60fa680090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.866422][T29380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.866432][T29380] R13: 00007f60f9a26038 R14: 00007f60f9a25fa0 R15: 00007ffd38be71e8 [ 1121.866457][T29380] [ 1122.132851][T29382] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1122.314473][ T5608] Bluetooth: Frame is too long (len 16, expected len 5) [ 1122.382185][T29398] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5804'. [ 1122.663549][ T30] audit: type=1400 audit(1786608831.799:4806): avc: denied { write } for pid=29381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1122.858714][ T6977] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1123.027177][ T30] audit: type=1400 audit(1786608832.159:4807): avc: denied { write } for pid=29416 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1123.027244][ T6977] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1123.098686][T29418] netlink: 'syz.9.5806': attribute type 11 has an invalid length. [ 1123.174797][ T6977] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 1123.203639][ T6977] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 1123.256640][ T6977] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1123.266511][ T6977] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1123.276279][ T6977] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 1123.337253][ T6977] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 1123.432669][ T6977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1123.449406][ T6977] usb 2-1: Product: syz [ 1123.574016][T27973] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1123.615288][ T6977] usb 2-1: Manufacturer: syz [ 1124.124876][T29404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1124.162223][T29420] bridge0: port 3(vlan2) entered blocking state [ 1124.168812][T29420] bridge0: port 3(vlan2) entered forwarding state [ 1124.215399][T29404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1124.237782][T29404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1124.257853][T29404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1124.347758][T27973] usb 10-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1124.361810][T27973] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.373106][T29404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1124.399493][T29404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1124.408584][T27973] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.431585][ T6977] usb 2-1: USB2VGA dongle found at address 32 [ 1124.440245][T27973] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.452755][ T6977] usb 2-1: Allocated 8 output buffers [ 1124.491258][ T6977] usb 2-1: Failed to early initialize device [ 1124.522349][T27973] usb 10-1: config 0 descriptor?? [ 1124.856520][ T30] audit: type=1400 audit(1786608833.989:4808): avc: denied { write } for pid=29421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1124.951836][ T6977] usb 2-1: USB disconnect, device number 32 [ 1125.141507][T29418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.185503][T29418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.240314][T27973] hid_parser_main: 5 callbacks suppressed [ 1125.240335][T27973] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 1125.253713][ T30] audit: type=1400 audit(1786608834.389:4809): avc: denied { write } for pid=29444 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1125.292614][T27973] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 1125.314469][T27973] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 1125.322933][T27973] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 1125.335826][T27973] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 1125.343254][T27973] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 1125.361895][T27973] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 1125.401218][T27973] steelseries 0003:1038:12B6.0004: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.9-1/input0 [ 1125.739537][ T30] audit: type=1400 audit(1786608834.749:4810): avc: denied { write } for pid=29431 comm="syz.7.5807" name="0x409" dev="configfs" ino=126286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1125.866639][ T30] audit: type=1800 audit(1786608834.879:4811): pid=29450 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.5807" name="serialnumber" dev="configfs" ino=129701 res=0 errno=0 [ 1129.988913][ T30] audit: type=1400 audit(1786608838.589:4812): avc: denied { write } for pid=29449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1130.278912][ T30] audit: type=1400 audit(1786608839.409:4813): avc: denied { write } for pid=29486 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1130.333820][ T30] audit: type=1400 audit(1786608839.409:4814): avc: denied { mount } for pid=29481 comm="syz.1.5813" name="/" dev="ramfs" ino=128545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1130.361055][T29488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1130.664843][T29495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1131.176108][T18850] usb 10-1: USB disconnect, device number 27 [ 1131.431364][T29510] fuse: Unknown parameter 'u‚â)Òid' [ 1131.805388][ T5608] Bluetooth: Frame is too long (len 16, expected len 5) [ 1132.023341][ T30] audit: type=1400 audit(1786608841.159:4815): avc: denied { write } for pid=29496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.267451][ T30] audit: type=1400 audit(1786608842.409:4816): avc: denied { write } for pid=29527 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.589173][T29524] xfrm0 speed is unknown, defaulting to 1000 [ 1133.724681][T29524] lo speed is unknown, defaulting to 1000 [ 1136.062068][T29558] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1136.071501][T29558] overlayfs: overlapping lowerdir path [ 1137.327998][T29559] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1137.334359][T29559] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1137.388026][T29559] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1137.416014][T29559] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1137.422391][T29559] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1137.529486][T29559] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1137.585552][T29559] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1137.591875][T29559] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1137.630130][T29559] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1137.645271][T29559] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1137.651675][T29559] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1137.685825][T29559] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1137.720311][T29559] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1137.726833][T29559] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1137.755761][T29559] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1137.928028][ T30] audit: type=1400 audit(1786608847.069:4817): avc: denied { write } for pid=29540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1138.858296][ T30] audit: type=1400 audit(1786608847.999:4818): avc: denied { write } for pid=29572 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1139.015179][T20584] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1139.386810][ T5608] Bluetooth: hci5: command 0x0c1a tx timeout [ 1139.448745][ T5608] Bluetooth: hci6: command 0x0c1a tx timeout [ 1139.594061][ T5608] Bluetooth: hci7: command 0x0c1a tx timeout [ 1139.601053][T20584] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1139.626384][T20584] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.675431][ T5608] Bluetooth: hci8: command 0x0c1a tx timeout [ 1139.683162][T20584] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.731219][T20584] usb 8-1: config 0 descriptor?? [ 1139.773563][T20584] pwc: Askey VC010 type 2 USB webcam detected. [ 1139.794219][ T5608] Bluetooth: hci9: command 0x0c1a tx timeout [ 1140.190119][T20584] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1140.216969][T20584] pwc: recv_control_msg error -32 req 02 val 2700 [ 1140.217914][ T30] audit: type=1400 audit(1786608849.359:4819): avc: denied { write } for pid=29577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1140.419644][T20584] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1140.454520][T20584] pwc: recv_control_msg error -32 req 04 val 1000 [ 1140.476658][T29573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.504659][ T6972] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1140.558768][T29573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.619219][ T30] audit: type=1400 audit(1786608849.759:4820): avc: denied { write } for pid=29607 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1140.699533][ T6972] usb 10-1: Using ep0 maxpacket: 16 [ 1140.755366][ T6972] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1140.784919][ T6972] usb 10-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1140.817502][T20584] pwc: recv_control_msg error -32 req 04 val 1400 [ 1140.830242][ T6972] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.849682][T20584] pwc: recv_control_msg error -32 req 02 val 2000 [ 1140.867369][ T6972] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1140.889448][T20584] pwc: recv_control_msg error -32 req 02 val 2100 [ 1140.912361][ T6972] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1140.926591][T20584] pwc: recv_control_msg error -32 req 04 val 1500 [ 1140.959123][T20584] pwc: recv_control_msg error -32 req 02 val 2500 [ 1140.975804][ T30] audit: type=1400 audit(1786608850.109:4821): avc: denied { map } for pid=29611 comm="syz.2.5838" path="socket:[130097]" dev="sockfs" ino=130097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1141.025811][ T6972] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.037014][ T6972] usb 10-1: Product: syz [ 1141.043072][ T6972] usb 10-1: Manufacturer: syz [ 1141.049704][ T6972] usb 10-1: SerialNumber: syz [ 1141.341461][ T5608] Bluetooth: hci5: unexpected event for opcode 0x0022 [ 1141.408289][T29597] 9p: Bad value for 'rfdno' [ 1141.521632][T20584] pwc: recv_control_msg error -71 req 02 val 2600 [ 1141.523786][ T5608] Bluetooth: hci6: command 0x0c1a tx timeout [ 1141.573547][T20584] pwc: recv_control_msg error -71 req 02 val 2900 [ 1141.612560][T20584] pwc: recv_control_msg error -71 req 02 val 2800 [ 1141.716221][T20584] pwc: recv_control_msg error -71 req 04 val 1100 [ 1141.743824][ T5608] Bluetooth: hci7: command 0x0c1a tx timeout [ 1141.744832][T20584] pwc: recv_control_msg error -71 req 04 val 1200 [ 1141.807177][T29605] xfrm0 speed is unknown, defaulting to 1000 [ 1141.844878][ T5608] Bluetooth: hci8: command 0x0c1a tx timeout [ 1141.851829][ T5608] Bluetooth: hci9: command 0x0c1a tx timeout [ 1141.857573][T20584] pwc: Registered as video103. [ 1141.907091][T20584] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input30 [ 1142.061122][T20584] usb 8-1: USB disconnect, device number 19 [ 1142.076159][ T30] audit: type=1400 audit(1786608851.209:4822): avc: denied { write } for pid=29613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1142.304320][ T6972] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 1142.317272][ T6972] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1142.370478][ T6972] usb 10-1: 1:2 : does not exist [ 1143.002793][ T6972] usb 10-1: USB disconnect, device number 28 [ 1143.012294][ T30] audit: type=1400 audit(1786608852.149:4823): avc: denied { write } for pid=29635 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1143.103084][T17354] udevd[17354]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1143.207144][ T5608] Bluetooth: hci9: ACL packet for unknown connection handle 201 [ 1143.594332][ T5608] Bluetooth: hci6: command 0x0c1a tx timeout [ 1143.755561][ T5608] Bluetooth: hci7: command 0x0c1a tx timeout [ 1143.916228][T27792] Bluetooth: hci8: command 0x0c1a tx timeout [ 1143.922973][ T5608] Bluetooth: hci9: command 0x0c1a tx timeout [ 1144.817672][ T30] audit: type=1400 audit(1786608853.959:4824): avc: denied { write } for pid=29644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1144.908081][T29605] lo speed is unknown, defaulting to 1000 [ 1144.946440][T20584] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1145.105852][ T30] audit: type=1400 audit(1786608854.249:4825): avc: denied { write } for pid=29678 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1145.204950][T20584] usb 10-1: Using ep0 maxpacket: 32 [ 1145.220172][T20584] usb 10-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1145.253608][T20584] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.306400][T20584] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1145.326816][T20584] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1145.338680][T20584] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.384592][T20584] usb 10-1: config 0 descriptor?? [ 1145.464176][ T6974] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1145.655673][ T6974] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1145.700278][ T6974] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1145.748123][ T6974] usb 5-1: config 0 has no interface number 0 [ 1145.788087][ T6974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.813578][ T6974] usb 5-1: Product: syz [ 1145.817810][ T6974] usb 5-1: Manufacturer: syz [ 1145.822404][ T6974] usb 5-1: SerialNumber: syz [ 1145.878798][ T6974] usb 5-1: config 0 descriptor?? [ 1146.193081][T20584] usbhid 10-1:0.0: can't add hid device: -71 [ 1146.204207][T20584] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1147.711113][T20584] usb 10-1: USB disconnect, device number 29 [ 1148.573166][ T30] audit: type=1400 audit(1786608857.709:4826): avc: denied { write } for pid=29684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1149.738596][ T6974] asix 5-1:0.251: probe with driver asix failed with error -71 [ 1149.768046][ T30] audit: type=1400 audit(1786608858.899:4827): avc: denied { write } for pid=29711 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1149.815362][ T6974] usb 5-1: USB disconnect, device number 19 [ 1149.954887][T29704] xfrm0 speed is unknown, defaulting to 1000 [ 1150.089929][T29704] lo speed is unknown, defaulting to 1000 [ 1150.254238][T27973] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1150.305990][T27792] Bluetooth: hci8: unexpected event for opcode 0x0022 [ 1150.468713][T27973] usb 10-1: Using ep0 maxpacket: 16 [ 1150.508138][T27973] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1150.536235][T27973] usb 10-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1150.596966][T27973] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.625117][T18850] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1150.632634][T27973] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1150.698520][T27973] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1150.777112][T27973] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.817274][T18850] usb 5-1: Using ep0 maxpacket: 16 [ 1150.819999][T27973] usb 10-1: Product: syz [ 1150.855763][T27973] usb 10-1: Manufacturer: syz [ 1150.861064][T18850] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1150.870878][T27973] usb 10-1: SerialNumber: syz [ 1151.116577][ T30] audit: type=1400 audit(1786608860.229:4828): avc: denied { write } for pid=29718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1151.163073][T29713] 9p: Bad value for 'rfdno' [ 1151.222843][ T30] audit: type=1400 audit(1786608860.339:4829): avc: denied { write } for pid=29739 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1151.327626][T18850] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1151.593327][T27792] Bluetooth: hci9: command 0x0c1a tx timeout [ 1151.780552][T18850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.813564][T18850] usb 5-1: Product: syz [ 1151.880382][T18850] usb 5-1: Manufacturer: syz [ 1151.910556][T18850] usb 5-1: SerialNumber: syz [ 1151.945654][T18850] usb 5-1: config 0 descriptor?? [ 1151.950199][T18850] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1151.959471][T18850] usb 5-1: Detected FT232R [ 1151.966842][ T30] audit: type=1400 audit(1786608861.099:4830): avc: denied { write } for pid=29733 comm="syz.1.5857" name="0x409" dev="configfs" ino=126286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1151.983067][ T30] audit: type=1800 audit(1786608861.119:4831): pid=29750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5857" name="serialnumber" dev="configfs" ino=131289 res=0 errno=0 [ 1152.217679][T27973] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 1152.235537][T27973] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1152.264503][T18850] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1152.267146][T27973] usb 10-1: 1:2 : does not exist [ 1152.345650][ T30] audit: type=1400 audit(1786608861.459:4832): avc: denied { write } for pid=29746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1152.369397][T27973] usb 10-1: USB disconnect, device number 30 [ 1152.384710][T18850] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1152.485352][T18850] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 1152.497577][ T30] audit: type=1400 audit(1786608861.629:4833): avc: denied { write } for pid=29764 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1152.524423][T18850] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1152.534894][T18850] usb 5-1: USB disconnect, device number 20 [ 1152.545061][T18850] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1152.573873][T18850] ftdi_sio 5-1:0.0: device disconnected [ 1152.660866][T17306] udevd[17306]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1154.306567][T29779] xfrm0 speed is unknown, defaulting to 1000 [ 1154.414305][T29779] lo speed is unknown, defaulting to 1000 [ 1155.728940][ T5608] Bluetooth: hci5: unexpected event for opcode 0x0022 [ 1156.027122][T29781] syzkaller0: entered promiscuous mode [ 1156.165251][T29781] syzkaller0: entered allmulticast mode [ 1157.030276][ T5608] Bluetooth: hci9: ACL packet for unknown connection handle 201 [ 1158.032656][T29810] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1158.151896][T29808] input: syz1 as /devices/virtual/input/input31 [ 1160.536325][ T30] audit: type=1400 audit(1786608868.919:4834): avc: denied { write } for pid=29773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1161.244517][ T30] audit: type=1400 audit(1786608870.339:4835): avc: denied { write } for pid=29826 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1161.390703][T29833] FAULT_INJECTION: forcing a failure. [ 1161.390703][T29833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1161.403857][T29833] CPU: 1 UID: 0 PID: 29833 Comm: syz.1.5867 Tainted: G L syzkaller #0 PREEMPT(full) [ 1161.403885][T29833] Tainted: [L]=SOFTLOCKUP [ 1161.403891][T29833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1161.403900][T29833] Call Trace: [ 1161.403906][T29833] [ 1161.403912][T29833] dump_stack_lvl+0x100/0x190 [ 1161.403938][T29833] should_fail_ex.cold+0x5/0xa [ 1161.403960][T29833] _copy_to_user+0x32/0xd0 [ 1161.403984][T29833] simple_read_from_buffer+0xcb/0x170 [ 1161.404006][T29833] proc_fail_nth_read+0x1af/0x230 [ 1161.404036][T29833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1161.404065][T29833] ? rw_verify_area+0xce/0x6d0 [ 1161.404089][T29833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1161.404116][T29833] vfs_read+0x1e4/0xb40 [ 1161.404145][T29833] ? __pfx_vfs_read+0x10/0x10 [ 1161.404170][T29833] ? __fget_files+0x215/0x3d0 [ 1161.404194][T29833] ? __fget_files+0x21f/0x3d0 [ 1161.404220][T29833] ksys_read+0x12a/0x250 [ 1161.404236][T29833] ? __pfx_ksys_read+0x10/0x10 [ 1161.404259][T29833] do_syscall_64+0x115/0x870 [ 1161.404282][T29833] ? clear_bhb_loop+0x70/0xc0 [ 1161.404305][T29833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.404324][T29833] RIP: 0033:0x7f0a44d5e90e [ 1161.404340][T29833] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1161.404356][T29833] RSP: 002b:00007f0a45bbdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1161.404375][T29833] RAX: ffffffffffffffda RBX: 00007f0a45bbe6c0 RCX: 00007f0a44d5e90e [ 1161.404388][T29833] RDX: 000000000000000f RSI: 00007f0a45bbe0a0 RDI: 0000000000000008 [ 1161.404398][T29833] RBP: 00007f0a45bbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.404408][T29833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.404419][T29833] R13: 00007f0a45026038 R14: 00007f0a45025fa0 R15: 00007ffdea0e2698 [ 1161.404442][T29833] [ 1161.774128][ T5708] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1161.862060][T29846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5878'. [ 1161.890749][T29847] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5876'. [ 1161.999833][ T30] audit: type=1400 audit(1786608871.129:4836): avc: denied { write } for pid=29834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1162.034254][ T5708] usb 3-1: Using ep0 maxpacket: 16 [ 1162.059153][ T5708] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1162.067349][ T5708] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1162.085070][ T5708] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.103869][ T5708] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1162.136553][ T5708] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1162.168571][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.178958][ T5708] usb 3-1: Product: syz [ 1162.185783][ T5708] usb 3-1: Manufacturer: syz [ 1162.210376][ T5708] usb 3-1: SerialNumber: syz [ 1162.262967][ T30] audit: type=1400 audit(1786608871.399:4837): avc: denied { write } for pid=29860 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1162.441371][T29829] 9p: Bad value for 'rfdno' [ 1162.910770][ T5708] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1162.942729][ T5708] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1162.983986][T18850] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1162.987394][ T5708] usb 3-1: 1:2 : does not exist [ 1163.116671][ T5708] usb 3-1: USB disconnect, device number 28 [ 1163.133292][T29859] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1163.155004][T18850] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1163.189317][T18850] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.237229][T18850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.252101][T18850] usb 5-1: config 0 descriptor?? [ 1163.295729][ T30] audit: type=1400 audit(1786608872.399:4838): avc: denied { write } for pid=29866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1163.417600][T18850] pwc: Askey VC010 type 2 USB webcam detected. [ 1163.428878][ T30] audit: type=1400 audit(1786608872.559:4839): avc: denied { write } for pid=29885 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1163.452753][T29887] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5884'. [ 1163.474619][ T6948] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1163.604260][ T6948] usb 2-1: device descriptor read/64, error -71 [ 1163.687923][ T5608] Bluetooth: hci8: ACL packet for unknown connection handle 201 [ 1163.830968][T18850] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1163.856294][T18850] pwc: recv_control_msg error -32 req 02 val 2700 [ 1163.903993][ T6948] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1163.932248][T18850] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1163.947311][T18850] pwc: recv_control_msg error -32 req 04 val 1000 [ 1163.969830][T29903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.981401][T18850] pwc: recv_control_msg error -32 req 04 val 1300 [ 1164.014115][T29903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.064084][ T6948] usb 2-1: device descriptor read/64, error -71 [ 1164.114010][T20578] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1164.182868][ T30] audit: type=1400 audit(1786608873.319:4840): avc: denied { write } for pid=29891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1164.227751][ T6948] usb usb2-port1: attempt power cycle [ 1164.286118][ T30] audit: type=1400 audit(1786608873.419:4841): avc: denied { write } for pid=29913 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1164.443316][T18850] pwc: recv_control_msg error -32 req 02 val 2000 [ 1164.452326][T18850] pwc: recv_control_msg error -32 req 02 val 2100 [ 1164.460812][T20578] usb 8-1: Using ep0 maxpacket: 32 [ 1164.467931][T20578] usb 8-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=70.55 [ 1164.488528][T18850] pwc: recv_control_msg error -32 req 04 val 1500 [ 1164.499904][T18850] pwc: recv_control_msg error -32 req 02 val 2500 [ 1164.507834][T20578] usb 8-1: config 247 has an invalid interface number: 221 but max is 0 [ 1164.525370][T18850] pwc: recv_control_msg error -32 req 02 val 2400 [ 1164.533044][T20578] usb 8-1: config 247 has no interface number 0 [ 1164.555027][T20578] usb 8-1: config 247 interface 221 has no altsetting 0 [ 1164.577118][T20578] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.587536][T20578] usb 8-1: Product: syz [ 1164.606868][T20578] usb 8-1: Manufacturer: syz [ 1164.614010][T20578] usb 8-1: SerialNumber: syz [ 1164.614286][ T6948] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1164.651696][T20578] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:247.221/input/input32 [ 1164.705583][ T6948] usb 2-1: device descriptor read/8, error -71 [ 1164.813667][ T30] audit: type=1400 audit(1786608873.949:4842): avc: denied { write } for pid=29917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1164.971541][ T4951] bcm5974 8-1:247.221: could not read from device [ 1165.004698][ T6948] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1165.022351][ T4951] bcm5974 8-1:247.221: could not read from device [ 1165.022434][ T30] audit: type=1400 audit(1786608874.149:4843): avc: denied { write } for pid=29930 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1165.079426][ T6948] usb 2-1: device descriptor read/8, error -71 [ 1165.087844][T20578] usb 8-1: USB disconnect, device number 20 [ 1165.110703][ T4951] bcm5974 8-1:247.221: could not read from device [ 1165.196319][ T6948] usb usb2-port1: unable to enumerate USB device [ 1165.814069][ T6948] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1166.312195][T29951] FAULT_INJECTION: forcing a failure. [ 1166.312195][T29951] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.337629][T29951] CPU: 0 UID: 0 PID: 29951 Comm: syz.7.5895 Tainted: G L syzkaller #0 PREEMPT(full) [ 1166.337659][T29951] Tainted: [L]=SOFTLOCKUP [ 1166.337665][T29951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1166.337675][T29951] Call Trace: [ 1166.337682][T29951] [ 1166.337689][T29951] dump_stack_lvl+0x100/0x190 [ 1166.337718][T29951] should_fail_ex.cold+0x5/0xa [ 1166.337741][T29951] should_failslab+0xc2/0x120 [ 1166.337765][T29951] __kmalloc_noprof+0xfc/0x820 [ 1166.337784][T29951] ? is_bpf_text_address+0x8a/0x1a0 [ 1166.337809][T29951] ? bpf_test_init.isra.0+0x88/0x100 [ 1166.337839][T29951] bpf_test_init.isra.0+0x88/0x100 [ 1166.337869][T29951] bpf_prog_test_run_skb+0x497/0x3540 [ 1166.337893][T29951] ? find_held_lock+0x2b/0x80 [ 1166.337911][T29951] ? __fget_files+0x1d1/0x3d0 [ 1166.337936][T29951] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1166.337958][T29951] ? fput+0x79/0x100 [ 1166.337981][T29951] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1166.337999][T29951] __sys_bpf+0x2a12/0x4e80 [ 1166.338030][T29951] ? __pfx___sys_bpf+0x10/0x10 [ 1166.338048][T29951] ? find_held_lock+0x2b/0x80 [ 1166.338070][T29951] ? get_pid_task+0xfc/0x250 [ 1166.338086][T29951] ? get_pid_task+0xfc/0x250 [ 1166.338108][T29951] ? find_held_lock+0x2b/0x80 [ 1166.338129][T29951] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1166.338147][T29951] ? find_held_lock+0x2b/0x80 [ 1166.338162][T29951] ? ksys_write+0x190/0x250 [ 1166.338178][T29951] ? ksys_write+0x190/0x250 [ 1166.338211][T29951] ? fput+0x79/0x100 [ 1166.338236][T29951] ? __x64_sys_bpf+0xce/0x140 [ 1166.338254][T29951] __x64_sys_bpf+0xce/0x140 [ 1166.338272][T29951] ? do_syscall_64+0x90/0x870 [ 1166.338298][T29951] do_syscall_64+0x115/0x870 [ 1166.338319][T29951] ? clear_bhb_loop+0x70/0xc0 [ 1166.338340][T29951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.338358][T29951] RIP: 0033:0x7f9f40f9e0d9 [ 1166.338374][T29951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.338390][T29951] RSP: 002b:00007f9f3f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1166.338407][T29951] RAX: ffffffffffffffda RBX: 00007f9f41225fa0 RCX: 00007f9f40f9e0d9 [ 1166.338419][T29951] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a [ 1166.338429][T29951] RBP: 00007f9f3f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.338439][T29951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.338448][T29951] R13: 00007f9f41226038 R14: 00007f9f41225fa0 R15: 00007fffc1506228 [ 1166.338472][T29951] [ 1166.339944][T18850] pwc: recv_control_msg error -71 req 02 val 2900 [ 1166.342536][ T6948] usb 10-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1166.399597][T18850] pwc: recv_control_msg error -71 req 02 val 2800 [ 1166.601459][ T6948] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 1166.795605][T18850] pwc: recv_control_msg error -71 req 04 val 1100 [ 1166.800105][ T6948] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 1166.812697][ T6948] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1166.823385][ T6948] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1166.990693][T18850] pwc: recv_control_msg error -71 req 04 val 1200 [ 1167.151928][T18850] pwc: Registered as video103. [ 1167.251352][T18850] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input33 [ 1167.323623][ T6948] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 1167.333699][ T6948] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 1167.345146][ T6948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1167.353467][ T6948] usb 10-1: Product: syz [ 1167.357776][ T6948] usb 10-1: Manufacturer: syz [ 1167.381691][T18850] usb 5-1: USB disconnect, device number 21 [ 1167.431046][T29938] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1167.463032][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1167.463049][ T30] audit: type=1400 audit(1786608876.579:4845): avc: denied { write } for pid=29933 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1167.513986][T29938] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1167.541455][T29938] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1167.592800][T29938] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1167.620128][ T30] audit: type=1400 audit(1786608876.739:4846): avc: denied { write } for pid=29969 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1167.686548][T29938] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1167.723096][T29938] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1167.746630][ T6948] usb 10-1: USB2VGA dongle found at address 31 [ 1167.857947][ T6948] usb 10-1: Allocated 8 output buffers [ 1167.893060][ T6948] usb 10-1: Failed to early initialize device [ 1168.355382][ T30] audit: type=1400 audit(1786608877.359:4847): avc: denied { create } for pid=29976 comm="syz.2.5900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1168.511004][T29987] binder: 29976:29987 ioctl 40086602 200000000080 returned -22 [ 1169.120103][ T30] audit: type=1400 audit(1786608877.639:4848): avc: denied { setattr } for pid=29976 comm="syz.2.5900" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1169.120182][ T30] audit: type=1400 audit(1786608877.729:4849): avc: denied { map } for pid=29976 comm="syz.2.5900" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1169.170967][T20578] usb 10-1: USB disconnect, device number 31 [ 1169.467884][ T30] audit: type=1400 audit(1786608878.609:4850): avc: denied { write } for pid=29973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1169.589410][ T30] audit: type=1400 audit(1786608878.699:4851): avc: denied { write } for pid=30001 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1170.338813][ T5708] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1170.814038][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 1171.183282][T30013] FAULT_INJECTION: forcing a failure. [ 1171.183282][T30013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1171.445230][ T5708] usb 8-1: device descriptor read/64, error -32 [ 1171.960469][T30013] CPU: 1 UID: 0 PID: 30013 Comm: syz.9.5908 Tainted: G L syzkaller #0 PREEMPT(full) [ 1171.960501][T30013] Tainted: [L]=SOFTLOCKUP [ 1171.960508][T30013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1171.960518][T30013] Call Trace: [ 1171.960525][T30013] [ 1171.960533][T30013] dump_stack_lvl+0x100/0x190 [ 1171.960563][T30013] should_fail_ex.cold+0x5/0xa [ 1171.960588][T30013] _copy_from_user+0x2e/0xd0 [ 1171.960615][T30013] kstrtouint_from_user+0xd6/0x1d0 [ 1171.960636][T30013] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1171.960655][T30013] ? __lock_acquire+0x49f/0x1a40 [ 1171.960689][T30013] proc_fail_nth_write+0x83/0x220 [ 1171.960709][T30013] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1171.960735][T30013] vfs_write+0x2aa/0x1050 [ 1171.960754][T30013] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1171.960775][T30013] ? __pfx_vfs_write+0x10/0x10 [ 1171.960792][T30013] ? __fget_files+0x215/0x3d0 [ 1171.960817][T30013] ? __fget_files+0x21f/0x3d0 [ 1171.960843][T30013] ksys_write+0x12a/0x250 [ 1171.960861][T30013] ? __pfx_ksys_write+0x10/0x10 [ 1171.960885][T30013] do_syscall_64+0x115/0x870 [ 1171.960909][T30013] ? clear_bhb_loop+0x70/0xc0 [ 1171.960931][T30013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.960950][T30013] RIP: 0033:0x7f350415e90e [ 1171.960965][T30013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1171.960982][T30013] RSP: 002b:00007f35050d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1171.961005][T30013] RAX: ffffffffffffffda RBX: 00007f35050da6c0 RCX: 00007f350415e90e [ 1171.961017][T30013] RDX: 0000000000000001 RSI: 00007f35050da0a0 RDI: 0000000000000004 [ 1171.961028][T30013] RBP: 00007f35050da090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.961039][T30013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.961050][T30013] R13: 00007f3504426038 R14: 00007f3504425fa0 R15: 00007ffd2c149718 [ 1171.961075][T30013] [ 1172.492895][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1172.499301][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1172.654543][ T5708] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1172.666528][T30026] overlayfs: failed to resolve './file0': -2 [ 1172.805170][ T5708] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1172.903743][ T30] audit: type=1800 audit(1786608881.889:4852): pid=30020 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.5909" name="nexus" dev="configfs" ino=130859 res=0 errno=0 [ 1172.941075][ T5708] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.994221][ T5708] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.041081][ T5708] usb 8-1: config 0 descriptor?? [ 1173.147838][ T5708] usb 8-1: can't set config #0, error -71 [ 1173.189458][ T5708] usb 8-1: USB disconnect, device number 22 [ 1173.792193][T30050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5914'. [ 1173.995072][ T30] audit: type=1400 audit(1786608883.129:4853): avc: denied { write } for pid=30021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1174.035409][T30050] vlan2: left allmulticast mode [ 1174.068254][T30050] geneve0: left allmulticast mode [ 1174.085336][T30050] vlan2: left promiscuous mode [ 1174.113609][ T30] audit: type=1400 audit(1786608883.159:4854): avc: denied { execute } for pid=30053 comm="syz.7.5918" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1174.130097][T30050] geneve0: left promiscuous mode [ 1174.162019][T30050] bridge0: port 3(vlan2) entered disabled state [ 1174.226107][T30060] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5919'. [ 1174.251635][ T30] audit: type=1400 audit(1786608883.349:4855): avc: denied { write } for pid=30061 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1174.298336][T30050] bridge_slave_1: left allmulticast mode [ 1174.331232][T30050] bridge_slave_1: left promiscuous mode [ 1174.383189][T30050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.440022][T30050] bridge_slave_0: left allmulticast mode [ 1174.454458][T30050] bridge_slave_0: left promiscuous mode [ 1174.477400][T30050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.615102][ T6948] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1174.786028][ T6948] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1174.805548][ T6948] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1174.828116][ T6948] usb 3-1: config 0 has no interface number 0 [ 1174.852955][ T6948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.882589][ T6948] usb 3-1: Product: syz [ 1174.907404][ T6948] usb 3-1: Manufacturer: syz [ 1174.931595][ T6948] usb 3-1: SerialNumber: syz [ 1174.977187][ T6948] usb 3-1: config 0 descriptor?? [ 1280.699100][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1280.706517][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P30076/1:b..l [ 1280.715102][ C0] rcu: (detected by 0, t=10503 jiffies, g=205785, q=959 ncpus=2) [ 1280.722907][ C0] task:syz.9.5922 state:R running task stack:26264 pid:30076 tgid:30075 ppid:27779 task_flags:0x40054c flags:0x00080000 [ 1280.737272][ C0] Call Trace: [ 1280.740562][ C0] [ 1280.743489][ C0] __schedule+0x125c/0x6730 [ 1280.748009][ C0] ? __pfx___schedule+0x10/0x10 [ 1280.752852][ C0] ? page_table_check_clear+0x300/0x540 [ 1280.758395][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1280.763757][ C0] preempt_schedule_common+0x42/0xc0 [ 1280.769033][ C0] preempt_schedule_thunk+0x16/0x40 [ 1280.774227][ C0] _raw_spin_unlock+0x3e/0x50 [ 1280.778895][ C0] __zap_vma_range+0x16f5/0x4a40 [ 1280.783851][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 1280.789182][ C0] ? find_held_lock+0x2b/0x80 [ 1280.793882][ C0] unmap_vmas+0x299/0x5f0 [ 1280.798225][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1280.803077][ C0] ? mas_next_slot+0x10a3/0x1960 [ 1280.808030][ C0] exit_mmap+0x1ef/0xa00 [ 1280.812273][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1280.817037][ C0] ? rcu_is_watching+0x12/0xc0 [ 1280.821806][ C0] ? uprobe_clear_state+0x49/0x260 [ 1280.826918][ C0] ? find_held_lock+0x2b/0x80 [ 1280.831586][ C0] ? uprobe_clear_state+0x5f/0x260 [ 1280.836704][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1280.842345][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 1280.847987][ C0] __mmput+0x12a/0x410 [ 1280.852064][ C0] mmput+0x67/0x80 [ 1280.855812][ C0] do_exit+0x8b1/0x2ae0 [ 1280.859980][ C0] ? __pfx_do_exit+0x10/0x10 [ 1280.864567][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1280.869586][ C0] ? find_held_lock+0x2b/0x80 [ 1280.874253][ C0] ? get_signal+0x7e0/0x21e0 [ 1280.878847][ C0] do_group_exit+0xd5/0x2a0 [ 1280.883344][ C0] get_signal+0x1ec7/0x21e0 [ 1280.887856][ C0] ? __pfx_get_signal+0x10/0x10 [ 1280.892705][ C0] ? do_futex+0x190/0x440 [ 1280.897036][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 1280.902578][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1280.908738][ C0] exit_to_user_mode_loop+0x139/0x6f0 [ 1280.914109][ C0] ? rcu_is_watching+0x12/0xc0 [ 1280.918893][ C0] do_syscall_64+0x666/0x870 [ 1280.923485][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1280.928157][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.934056][ C0] RIP: 0033:0x7f350419e0d9 [ 1280.938460][ C0] RSP: 002b:00007f35050da0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1280.946866][ C0] RAX: fffffffffffffe00 RBX: 00007f3504425fa8 RCX: 00007f350419e0d9 [ 1280.954838][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3504425fa8 [ 1280.962799][ C0] RBP: 00007f3504425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1280.970759][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1280.978718][ C0] R13: 00007f3504426038 R14: 00007ffd2c149630 R15: 00007ffd2c149718 [ 1280.986693][ C0] [ 1280.989701][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10500 jiffies! g205785 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1281.002094][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=76768 [ 1281.010068][ C0] rcu: rcu_preempt kthread starved for 10501 jiffies! g205785 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1281.021521][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1281.031473][ C0] rcu: RCU grace-period kthread stack dump: [ 1281.037343][ C0] task:rcu_preempt state:I stack:28624 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1281.049256][ C0] Call Trace: [ 1281.052529][ C0] [ 1281.055452][ C0] __schedule+0x125c/0x6730 [ 1281.059967][ C0] ? __pfx___schedule+0x10/0x10 [ 1281.064810][ C0] ? find_held_lock+0x2b/0x80 [ 1281.069494][ C0] ? schedule+0x225/0x2c0 [ 1281.073820][ C0] schedule+0xdd/0x2c0 [ 1281.077884][ C0] schedule_timeout+0x127/0x280 [ 1281.082725][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1281.088089][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1281.093369][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1281.099171][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1281.104627][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1281.109383][ C0] ? irqentry_exit+0x24d/0xa00 [ 1281.114143][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1281.119435][ C0] rcu_gp_kthread+0x179/0x230 [ 1281.124104][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1281.129295][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1281.135096][ C0] ? __kthread_parkme+0x18c/0x230 [ 1281.140119][ C0] ? kthread+0x13a/0x450 [ 1281.144350][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1281.149541][ C0] kthread+0x370/0x450 [ 1281.153617][ C0] ? __pfx_kthread+0x10/0x10 [ 1281.158198][ C0] ret_from_fork+0x72b/0xd50 [ 1281.162801][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1281.167910][ C0] ? __switch_to+0x800/0x10f0 [ 1281.172580][ C0] ? __pfx_kthread+0x10/0x10 [ 1281.177161][ C0] ret_from_fork_asm+0x1a/0x30 [ 1281.181934][ C0] [ 1281.184942][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1281.191248][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1281.196445][ C1] NMI backtrace for cpu 1 [ 1281.196460][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1281.196478][ C1] Tainted: [L]=SOFTLOCKUP [ 1281.196483][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1281.196490][ C1] RIP: 0010:__lock_acquire+0x4dc/0x1a40 [ 1281.196508][ C1] Code: 11 4d 63 e4 4c 0f a3 25 32 1b 84 14 0f 83 69 0b 00 00 48 8b b5 90 0b 00 00 45 85 ed 0f 84 93 01 00 00 c7 44 24 48 00 00 00 00 <48> 89 33 8b 85 98 0b 00 00 85 c0 74 18 48 8b 3c 24 48 8d 04 80 0f [ 1281.196521][ C1] RSP: 0018:ffffc90000a08ca8 EFLAGS: 00000046 [ 1281.196532][ C1] RAX: 0000000000000001 RBX: ffff88801eac30e0 RCX: 0000000000000200 [ 1281.196541][ C1] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffff88801eac2540 [ 1281.196550][ C1] RBP: ffff88801eac2540 R08: 0000000000000000 R09: 0000000000000000 [ 1281.196558][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000007 [ 1281.196566][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 1281.196574][ C1] FS: 0000000000000000(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 1281.196589][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1281.196598][ C1] CR2: 0000200000020000 CR3: 0000000044e34000 CR4: 00000000003526f0 [ 1281.196607][ C1] DR0: 0000000000003706 DR1: 0000000000000000 DR2: 0000000000000000 [ 1281.196615][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1281.196623][ C1] Call Trace: [ 1281.196628][ C1] [ 1281.196633][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1281.196655][ C1] lock_acquire+0x1b9/0x370 [ 1281.196669][ C1] ? advance_sched+0x707/0xd20 [ 1281.196687][ C1] ? advance_sched+0x6a2/0xd20 [ 1281.196704][ C1] advance_sched+0x718/0xd20 [ 1281.196719][ C1] ? advance_sched+0x707/0xd20 [ 1281.196737][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1281.196755][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1281.196776][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1281.196799][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1281.196816][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1281.196837][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1281.196855][ C1] [ 1281.196859][ C1] [ 1281.196864][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1281.196879][ C1] RIP: 0010:tick_nohz_idle_enter+0x255/0x380 [ 1281.196897][ C1] Code: b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 22 01 00 00 48 83 0b 04 e8 45 c8 e7 ff e8 50 f5 17 00 fb 48 83 c4 08 <5b> 5d 41 5c c3 cc cc cc cc e8 fd a5 0f 00 65 8b 2d a2 b4 68 12 31 [ 1281.196909][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 00000282 [ 1281.196919][ C1] RAX: 0000000002ff265b RBX: ffff8880b8528e00 RCX: 0000000000000000 [ 1281.196928][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a9419 RDI: ffffffff8c400480 [ 1281.196937][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1281.196945][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1281.196953][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: 0000000000000000 [ 1281.196968][ C1] do_idle+0xac/0x5b0 [ 1281.196987][ C1] ? __pfx_do_idle+0x10/0x10 [ 1281.197004][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 1281.197026][ C1] cpu_startup_entry+0x4f/0x60 [ 1281.197045][ C1] start_secondary+0x21d/0x2d0 [ 1281.197062][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1281.197080][ C1] common_startup_64+0x13e/0x158 [ 1281.197097][ C1]