last executing test programs:

13.595133577s ago: executing program 4 (id=201):
exit(0x1f52b4ba)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0)
mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006"], 0xd0}}, 0x571f68543cec8180)
openat$nullb(0xffffffffffffff9c, 0x0, 0x7d5100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)

10.331763693s ago: executing program 4 (id=208):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44090}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100), 0x10)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r3, r3, &(0x7f0000000080), 0x7f03)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000010)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, &(0x7f0000000040)})
socket$l2tp6(0xa, 0x2, 0x73)

9.322648624s ago: executing program 0 (id=210):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0xf8, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

7.088884927s ago: executing program 3 (id=214):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x7000000, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8)

6.439048658s ago: executing program 3 (id=216):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x260640)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000480)=0x3b)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="000010c20800"})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f00000000c0)={0x9, 0x1, {0x0, 0x1, 0x4b, 0x3, 0x3}, 0x3})
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000240)={0x1, [{0x3, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0xa, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x483, 0x0}, {0x3, 0x0, 0x10002, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x101, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xde56b53, 0x0}, {0x3, 0x0, 0x80000100, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="0f78af050066b9580600000f32b80a008ee8baf80c66b84851fa8866efbafc0c66edf30f86f800bad10466ed3ef001393e3ef426660f3a1772bc000f20d86635200000000f22d8", 0x47}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.195639031s ago: executing program 4 (id=219):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xf5}]}}]}, 0x38}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120141014813442024040075ee690102030109021b0001000010000904"], 0x0)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000080)=0x400002, 0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3)
syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x501, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x40, 0xe9, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x1, 0xff, 0x1, {0x22, 0x2e2}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x7, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x81, 0x5, 0x37}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x8, 0x43, 0x40, 0x40, 0x5}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "84f9f98fc73ca6d3bf0c09faef8da48a"}]}, 0x7, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x455}}, {0x29, &(0x7f0000000180)=@string={0x29, 0x3, "47f0da985978616b6e8d864a5cfdc00814edc76166102d5bf841cdf700fbcdf9ce8d5fabe723ac"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x812}}, {0x3d, &(0x7f0000000200)=@string={0x3d, 0x3, "80d212e67830f8d1eb83a3dce988ed9b7088dfe3c4298b6c3691174888c34e9819161aa5c0a40697f8c7166ab962713462fc758f7010153698854e"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x409}}]})

5.790702693s ago: executing program 0 (id=221):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x11, 0x80, 0xfeff})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43b, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40)
sendmsg$NFT_BATCH(r7, 0x0, 0x40)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x47f6, 0x1000000, 0x2, 0x0, 0x0)

5.295657719s ago: executing program 3 (id=225):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000000)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[], [{@seclabel}]}})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20)
r1 = io_uring_setup(0x6004, &(0x7f0000000400)={0x0, 0xeec9, 0x1000, 0x2, 0x80001118})
close_range(r1, r1, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00')
exit(0xffff)
read$FUSE(r4, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x80000)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000000), 0x0)
socket$unix(0x1, 0x2, 0x0)
getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0x0, &(0x7f00000000c0))
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
recvfrom(r2, &(0x7f0000000300)=""/248, 0xf8, 0x10100, 0x0, 0x0)
write$binfmt_misc(r2, 0x0, 0x0)

5.204797243s ago: executing program 0 (id=226):
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xc2}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x241, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
open(&(0x7f0000000340)='./file0\x00', 0x180501, 0x120)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0))
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x20004000)
unshare(0x28000600)
r2 = gettid()
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040))
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

3.733363292s ago: executing program 0 (id=227):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
r2 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200, 0x40000002}, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x64})
io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)

3.63141843s ago: executing program 4 (id=228):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000300)={0x40, 0x22, 0x22, {0x22, 0x7, "3a4fcd5504144b71fd4c9c47503aa554b5c1a140c2168e06e5ce7620ed7e1c95"}}, &(0x7f0000000340)={0x0, 0x3, 0x51, @string={0x51, 0x3, "ca512f5d9331c1227ad9290ba8e4d2c8c9d596d640ac035646c99141ecae7911c3d99a87923a6f2d09607458f5788a373e21c831160760ca2514396bd31a8a175adf98b94bbe88aa9ef65286a08cb7"}}}, &(0x7f0000000440)={0x1c, &(0x7f00000007c0)={0x0, 0x13, 0x88, "b17cc04c68248d7e9cebb6047af69ee2625362c3e3a9764953f0eff9e5fad0237a37f14fd54ec2ddec31a4175a933f5acfcc4e67e6421bdd3683b3e6dac855129efbc324946d5af23ef62c60137d5f957b83202bfd8c8b67de5f7b0858ac90a08c4995e8a3302535c173cad205f1fbed6b30ee61f4a1dd6130c2118517ce958ecb05a972f6557906"}, &(0x7f0000000980)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000400)={0x21, 0x0, 0x1, "97"}})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0})

3.627696843s ago: executing program 0 (id=229):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00168a0ffa00"/17], &(0x7f0000000180)={0x0, 0xa, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x3}})
syz_usb_control_io(r0, 0x0, 0x0)

3.492405965s ago: executing program 3 (id=230):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0)
io_uring_setup(0x2dfd, 0x0)
io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x43b6, 0x1, 0x0, 0x28e})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.385756021s ago: executing program 1 (id=231):
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0xa, 0x7, 0xc, 0x40}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000004c0), 0xce, r1}, 0x38)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.092524356s ago: executing program 2 (id=233):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)
r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000180)={'b', ' *:* ', 'rwm\x00'}, 0xa)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfd000/0x400000)=nil)
r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x4000009c, 0x1}}], 0x20})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r5, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1})
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x3, 0x1, 0x31237648, 0x1, 0x6, 0x1}]})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=@ipv4_newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x10)

3.000664292s ago: executing program 1 (id=234):
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'})
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140), 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0x328, 0x328, 0x4d0, 0x238, 0x3c0, 0x5b8, 0x5b8, 0x5b8, 0x5b8, 0x5b8, 0x6, &(0x7f0000000240), {[{{@ip={@rand_addr=0x64010102, @private=0xa010102, 0xffffff00, 0xffffff00, 'ip6gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x5}, 0x0, 0x1d8, 0x238, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e22, 0x4e22], [0x4e20, 0x4e20], [0x3, 0x7, 0x9, 0x7, 0x6, 0x4, 0xe, 0x7, 0x8, 0x1, 0x5, 0x3, 0x2, 0x74c, 0x8, 0x7, 0x3, 0x9, 0xdc, 0x100, 0x8, 0x800, 0x80000001, 0x1, 0x1, 0x5, 0x400, 0x9eab, 0x8, 0x9, 0x7, 0x2, 0xf0000000, 0x2, 0x8, 0x7, 0x4, 0x7, 0x4, 0x2, 0x8001, 0x2, 0x4, 0x3, 0x449, 0x4, 0x2, 0x8000, 0x7, 0x5, 0x7, 0x7, 0x3, 0x800, 0x4, 0x100, 0x8, 0x2, 0x4, 0x6eaf9452, 0x4, 0xc0000000, 0x2, 0xfffffffc], 0x5, [{0x5, 0x5, 0x6}, {0xff, 0x1, 0x4}, {0x1, 0x4c, 0x1}, {0x1, 0xff, 0x2e}], 0x2, 0x0, 0x4}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x5, 0x2, 0x1, 0x0, 0x1], 0x6, 0x2}, {0x4, [0x0, 0x8, 0x1, 0x4], 0xfa, 0x2}}}}, {{@ip={@remote, @broadcast, 0xff000000, 0xffffff00, 'ip6_vti0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x2, 0x8}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1000, 0x3, @multicast1, 0x4e22}}}, {{@ip={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0xff, 'veth0_to_hsr\x00', 'pimreg0\x00', {0xff}, {}, 0x2f, 0x2, 0x1}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x56}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffff00, 0xffffff00, 'geneve0\x00', 'dvmrp0\x00', {0xff}, {0xff}, 0x4, 0x1}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x9}}}, {{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2f}, 0xff000000, 0xff, 'veth0_macvtap\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x1, 0x47}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5e8)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x4000000) (async)
sendmsg$nl_route(r2, 0x0, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
inotify_init() (async)
r3 = inotify_init()
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1})
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) (async)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil)
close_range(r3, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002040), &(0x7f0000002080)=ANY=[@ANYBLOB='enc=raw ha\a\x00=sha256-gene\x00'/36], 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCNXCL(r7, 0x540d)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
r8 = syz_open_procfs(0x0, 0x0)
pread64(r6, 0x0, 0x0, 0x1f8)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f00000000c0)={{0x2a, 0x7}, 0x0, 0x0, 0x4, {0x80, 0x8}, 0x10, 0x17}) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f00000000c0)={{0x2a, 0x7}, 0x0, 0x0, 0x4, {0x80, 0x8}, 0x10, 0x17})

2.879265836s ago: executing program 2 (id=235):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r0, &(0x7f0000000080)=0x4095, r0, &(0x7f00000000c0)=0x7fffffffffffffff, 0x6, 0xa)
r1 = syz_io_uring_setup(0x4a1, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r2=>0x0, &(0x7f0000000480)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file0\x00', 0x100, 0x800, 0x1})
io_uring_enter(r1, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006111920000000000851000000200000085000000c4000000950000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b0000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20008000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
mq_open(&(0x7f0000000100)='\x00', 0x80, 0x2, &(0x7f00000001c0)={0xfffffffffffff801, 0xfde, 0x0, 0x5})
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES64=r5], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x49)
close(0x3)
vmsplice(r5, &(0x7f0000000340)=[{&(0x7f0000000240)="c5ce23850fbd31faa7be7345db7fc58e43acb3c6e34b0597574bd444e42744e52255226435ee568ae35e9c21616bcaaa8bc5483a8be7fbd3869c9a95ad42f848247244832e259bf2b3857baa2756", 0x4e}, {&(0x7f0000000300)="417dcd0e8565a9419e28c00314108f8ca9fb82f4a9670583", 0x18}], 0x2, 0x4)

2.790735591s ago: executing program 1 (id=236):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x2}}, './file0\x00'})
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x8, r1, 0x0, 0x2, 0x1a3c51, 0x23, &(0x7f0000000080)="6e490eb86b3c1ba81376800aea7f6a4f6495d30df44650e9cfe82cb75826d2f40e3f70", 0x6})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000140)={0x48})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'})
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=<r2=>0x0)
capset(&(0x7f0000000240)={0x19980330, r2}, &(0x7f0000000280)={0xf76, 0x3807, 0x3, 0xbd, 0xa, 0x80000001})
sched_setscheduler(r2, 0x0, &(0x7f00000002c0)=0x12)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r3, {0x1}}, './file0\x00'})
flock(r3, 0x1)
r5 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000340), 0x801, 0x0)
ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x2)
sync_file_range(r4, 0x9, 0x6, 0x2)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000380))
getrandom(&(0x7f0000000400)=""/191, 0xbf, 0xb5ab3a6dafc266ce)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x4, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008101}, 0x4810)
accept4(r1, &(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000680)=0x80, 0x80000)
getrandom(&(0x7f00000006c0)=""/183, 0xb7, 0x1)
mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000780)=""/132)
sendmsg$NFT_BATCH(r4, &(0x7f0000004a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004a40)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x3f3c, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3f08, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x114, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY_END={0x100, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "7b37ddaf855372c70b114584ad1ff36e5604c1f1da31c07a6c74f206c5c0bfa7727908b9f08099798806102f8c9bbb257874d52b6b88b5d3b761ec6149cee1f325408d26a5c0f1d45f283a2855aef0f9227d247734000454d218465cfc5b28cd590b86aeec34eb517898b84ca31d37f1dc08fad97d314bb5c3f8514f7c9857069c4cd03ccfd01e0ea59aeb531abc0195ab76dedbab2889a10672b4d55b7d56393f6423705681559c28eea446b88d192b4ad32bf6ebcac185bb0c9776ef8113c941a676dff8bf14a2be1dcd8037643182f617763da1adb77d24a8ce01429bd0fb32943e8245c6b06195d71a6c695f87b4c843e72a02"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x2738, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xd2}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x24}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xc4}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x57}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x7c}]}}}, @NFTA_SET_ELEM_USERDATA={0xf4, 0x6, 0x1, 0x0, "58c8b9f65522ea536b4a44c04cc2471d3d4586201a1e843ace606d565532620230997f87f25bcb58da7ada67a3b7a4d7d0ccdaea8aa07ba2a85ebb038ff0a71ea535d56f2eecd5cd23bd77b2e9a67b4a5888c1a73b12207e9fc8769308ad38ed541adc306b453b3927321c8f147d6ed3dc60ce0b427655b796a991a1a2673017e49dfcdd3daa70af84cf0bdf0ef6db8ff8108e29581882735dbcdd6377bb53b601807f4ee75e13e52213ecc70d59fc972f4aee14cf8af4b93f3b05a0441e031d170277456beead905e74dd9f95b0ddc693dcff9535fd20b689e75f25a949284ccaf3387375de17c64c6640109d7e4532"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x118, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x108, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xdf, 0x3, "7c718bd7fc7577bb274c5ae3db2d9c0abf2cc1b44de3fe042d9293263d2a4ef9e6de5b42928ecb54a4006730f7c36230ae1f04a406219fadce10ca2da14869509062b72acf745326ce91ac114c0124c2cb8501ecd846b4b08e004698cf6ad3b3c80ca16584917251cd0d734014b6587ed2520ccfbe5074b7d5a88f47918766c89f463d538332a19f9289b4894b5aad58ace581aab1eb7566c869bd3cf3cade11798c6660996f8e99ab98ba8a09d0ecd4718319f07286b05db7567501d3b2fe50a75f61eb83557b33fa3c8365ea320b2b5ac33d7ede082facfac8c9"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_NAME={0xb, 0x1, 'NETMAP\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_KEY={0x2160, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xce, 0x1, "ab2aa6d4d031ff7fcf462e5e003bde5c97f0f568cf54e948ea358aa5318050e504f2f0fade32d6c16256a814cf6e83492f5ea3c0b549a4e481d5ffedc37bac5b2949f668f59ed944e440af5351340187ebca1a1adf470bd9356c1b052e8721e7fe7d1e440464bec6604dd5569c62fe9bc90671731b3a5c3869d5f52865292297a7b9f74978ecf5958c4d1009d9bebe8ac358923423f4227aafd2d6f01eb5e2caea045eb34c646fec22474acebfa21feb8cda9e4b1a657415d4b20795a0ffd76a4977ca1c254f7de00a95"}, @NFTA_DATA_VALUE={0x20, 0x1, "0f321fa1cc747292270031e3e975c34e0d1e0e83cfea471240d7f92a"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x190, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x80}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x10001}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x34, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x4a824ed23d382f33}]}}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x60, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x70}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x27eea92a6d17daa}, @NFTA_NAT_REG_PROTO_MAX={0x8}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xf}]}}}]}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY={0x1b8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xe, 0x1, "333664857801a9f31b32"}, @NFTA_DATA_VALUE={0xfc, 0x1, "2686fca50d9d1d169b8ac4b799672f9139e46a323241aa7cade9bb3d7e5d877acd65729629f56ca93af61734ff928c59a2e05afd833a03e0b3a90d591e3bb5beea82397c1c27eba41bf935b7222037757094dc52109a2aa90c19b11d653d00185964497988a96a7f10719ddbc3cba0dcf6c26b595d56406347b838831ce0c92a05c861d372d19b492673d885102e23749b234ee762ae52e43f2a27da46407ebb04eccb3c1b870af2f7d3c3766fc3a12ae6991dbcd541bbac4198aae906090bd635f7094a504eb7aeee7b96a8e782b86dee26c414576045cf3d0589b3dd32cfa8f334f94d75438f27cc2b36139b15f1b03d8a04b1ba56c963"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1a4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x27, 0x1, "f008f2fbf4d22593abc1851578d55f41da7b3a6d341f5c03cf076953c2cdb95a9834de"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xb0, 0x1, "dad613c9ca9343498b126ed68bfb745c3e9d2eb0f74cce4eec94a9c7f9f93dd98085c02946fb2166a07048289bfe697a14896ad8c9c02aabcedab47612c5d2067148aa359ab23b7cb67f69e979613e6f627177c424cbb8d1ff66564390c3b7fad352eb643f5bcc15f6026d97e7df5fa03705591f7c793909d8321ca0d20d29ea5092b9a25aa0f4a13c9e2baa9762cc8a059698a42146c56a5f342d6fad9e2c93b795c465c80329ab0cf11ae5"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x36, 0x1, "4ffa76d41cb97d6d994b53e8be2d9e7342052678b4029e6377d22662807d48db04e1244edd0fb281bee0b59bf36e133f0506"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x114c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x113c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x32, 0x1, "a8ed261a12501de5211dcb9980e111d26305644f5f9265bc9314f7655e139032619fd554497adf282c97022b91f6"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80}]}, {0x260, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x140, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xec, 0x1, "157d0bc09398371a111e9407a40d27afbd3469676725894a6d5443d3562c7d5f927e1849e0a7fb4e295fb98b40f99e8c1b489208c2fd5e828958d13751c77ea6068e3ed4cdedf2836f9256953bcd0393d7201eb4ef040598c96b0a6c1c01647f32ba3988a225f6672f199fe7e022c7cda3d4b9e52b0aa04c3d6cac727882dd813a7fe9d90f5fef95e0231321efbf5762ac9deef822d1c53c85b1d5dfdb42c12d2563b9235c363f424872d7b35c43185d6580dcc494dc1e0c0abb520ca784dfbf3f0de74323cf22d6fcba3875decbb70df46374409d2301654c1f1a093293db595ebd2d88ee868fa9"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tunnel={{0xb}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_SET_ELEM_DATA={0x80, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7a, 0x1, "b2dc9c8db5a2da424903a9dcf5854f6636b03f0fe0d134c49e692300b4cc56dd054e0dc39882729501748c38502ab5da4f76b4974faf14ebde789823b61f27a41f83458dcedcbab437b12982138faa49b6c882ebf209ede8fb0e5d35203fbb1dd8040e5facc8e05769d98ffcb66621e034116e90a76c"}]}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x9a, 0x6, 0x1, 0x0, "d5f43b137edb884ec5310b69821a58d0304997dee1ca85aece3c727c625a8b4fca7a2a15afaab984e569d3d4983231871ae2d9b002ead7bfea1638500c3c6e5b70c576c70d35b9d53837e6c220216dbaf9853872862e167ce7219426beaf20825e570b416283379c9a313a3713f546a41aa52fac315e619cb9889ce5e063ccf7d34701f3d63a1ad1eb6d4a0c01085e7edd219e8778bd"}, @NFTA_SET_ELEM_EXPR={0x7c, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_ELEM_KEY={0x14, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf, 0x1, "f10b722700e3975e9bc85c"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0xf4, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bridge\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c21f533}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'vcan0\x00'}]}, @NFTA_CHAIN_HOOK={0x88, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'netpci0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'gre0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1d2c59c4}]}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0xd4, 0x2, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x98, 0x6, "ed50f790d89e15cffa5c96aefc4c8bc877d6808127b7a5fc7325e83bdd4a3d7b9edceb341c8420e5e2cff2b36d4e824de519b841974a96d1bae25ced09349325105f37ba6823eba654b2ad2c0d4990d206add35bda00fbb9297c4ec330fd8f0f93f78df0f1c2deaf0594fb5847a2a944bbcb5b0eed4f1b56c1934bb59f343c6352009710507eab92ac325370d9a498f686cf1f0d"}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x41a8}, 0x1, 0x0, 0x0, 0x8040}, 0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000004ac0)='./binderfs2/custom0\x00', 0x2, 0x0)
close_range(r0, r5, 0x2)
mremap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000004b00)={'ip6erspan0\x00', @broadcast})
lstat(&(0x7f0000004b40)='.\x00', &(0x7f0000004b80))
openat$vsock(0xffffffffffffff9c, &(0x7f0000004c00), 0x2, 0x0)
prctl$PR_GET_NAME(0x10, &(0x7f0000004c40)=""/45)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000004c80), &(0x7f0000004cc0)=0x10)

2.665378249s ago: executing program 1 (id=237):
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xc2}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x241, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
open(&(0x7f0000000340)='./file0\x00', 0x180501, 0x120)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0))
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x20004000)
unshare(0x28000600)
r3 = gettid()
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040))
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.236866878s ago: executing program 3 (id=238):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xfeb1}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x23)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)

1.987139698s ago: executing program 3 (id=239):
openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) (async)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r0, 0x8800000) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x16) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc8003, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000007c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}], [{@permit_directio}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x36, 0x36, 0x34, 0x66, 0x34, 0x32, 0x37], 0x2d, [0x31, 0x30, 0x36, 0x62], 0x2d, [0x65, 0x30, 0x32, 0x64], 0x2d, [0x30, 0x34, 0x38, 0x31], 0x2d, [0x66, 0x33, 0x65, 0x63, 0x36, 0x65, 0x38, 0x38]}}}, {@euid_eq}, {@euid_lt}, {@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '\xae85+d\"\xdcR\x02\xf3\x00T\xe9C=f\xf2xC+\xdd\x86\x8a\xf7\xef\xfd\x85\x82\xe6\x9ecv\x00\x01\x04v=\a\xd9E\x8f\xff\x8c,<\x1f\x06\xcal\x1eE){\x9b\xf1Y\xc9C\x04\xdf\x8f\t4RYjQ\x00\x05\x15\xff`\x88\x9c\xb2\x0f\x8a\xc1\xb3\x00c@+.J,\x8b'}}]}}) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000020a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) (async)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2e9}, 0x1c)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "b15937", 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @local, {[], @dest_unreach={0x1, 0x1, 0x0, 0xb2, '\x00', {0x4, 0x6, "8b77d2", 0x7e9, 0x84, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xff, 0x0}}, @private1}}}}}}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x51) (async)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x4, 0x0, 0x3}, 0xc) (async)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.950199393s ago: executing program 2 (id=240):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
move_pages(0x0, 0x16, &(0x7f0000000000)=[&(0x7f0000ff4000/0x1000)=nil], &(0x7f0000000240), 0xffffffffffffffff, 0x2)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000001a700)={0x0, 0x0, &(0x7f0000019640), 0x1000, 0x0, &(0x7f0000019700)="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"})
bind$inet(0xffffffffffffffff, &(0x7f0000019340)={0x2, 0xffff, @rand_addr=0x64010100}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)=0x4, 0x4)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf1c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000300)=r0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000019380)={0xc, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000"], 0x9c}}, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) (fail_nth: 1)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x1d, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000005000000070000000000000095000000000000005bee1ea01c7814c00980e99a5df1f0614e1942612258708ff9dfaef11bd5504710e1d85587ee4727c9802ba8f5bd83e27c5585207b4e19cee40a9cab915f98"], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x14, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x40}, 0x10}, 0x94)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x4010, 0x3}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000280)={0x3, 0x2000003}, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

1.832475689s ago: executing program 2 (id=241):
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xc2}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x241, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
open(&(0x7f0000000340)='./file0\x00', 0x180501, 0x120)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0))
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x20004000)
unshare(0x28000600)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040))
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.725560713s ago: executing program 1 (id=242):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
mount$fuse(0x0, 0x0, 0x0, 0x10, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f00000002c0)='\\ S', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100), &(0x7f00000001c0))
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})

838.941046ms ago: executing program 2 (id=243):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockname$netrom(r0, 0x0, &(0x7f0000000140))

811.658997ms ago: executing program 1 (id=244):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00')
write$binfmt_format(r3, &(0x7f0000000300)='1\x00', 0x2)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'})
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=<r4=>0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x40)
socket(0xa, 0x3, 0x7)
socket$alg(0x26, 0x5, 0x0)

793.173642ms ago: executing program 2 (id=245):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0000180000000000000020000000200000000300000001000004003ee732c8b94ba1a7d8b71dd7a000000000200000000000000100000d0000"], &(0x7f00000001c0)=""/18, 0x3b, 0x12, 0x1, 0x16, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x2, 0x2, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000014a90c200090588df"], 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffff92d, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x5, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0xfe, 0x0}, 0x0, 0x1, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x7, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0xa, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in6=@loopback, 0x10, 0x5, 0x0, 0xb7}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

411.145503ms ago: executing program 4 (id=246):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x80}}, 0x0)
syz_emit_ethernet(0x28, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8864, 0x7}}, {@x25={0x805, {0x2, 0x9, 0xf7, "845eb2316273efcc10020b1ca716f4"}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f00000007c0)='blkio.bfq.io_merged\x00', 0x0, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = creat(&(0x7f00000001c0)='./file1\x00', 0x38)
preadv(r6, 0x0, 0x0, 0x0, 0x3f)
openat$cgroup_subtree(r6, &(0x7f0000000040), 0x2, 0x0)
sendmmsg$inet6(r5, &(0x7f0000001600)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x9, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@rthdr={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x2, 0x1, 0x0, [@private2]}}}], 0x28}}], 0x1, 0x20000000)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0)
connect$packet(r4, &(0x7f0000000000)={0x11, 0xf6, 0x0, 0x1, 0x9, 0x6, @broadcast}, 0x14)

132.24915ms ago: executing program 4 (id=247):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
fanotify_init(0x4, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181)
writev(r1, &(0x7f0000002e00)=[{&(0x7f0000000a40)="fdcb6e", 0x3}, {0x0}], 0x2)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$FUSE(r5, &(0x7f00000040c0)={0x2020}, 0x2020)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendto$inet6(r6, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c)
mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='omfs\x00', 0x446, &(0x7f0000000240)='\x00')
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5)
shutdown(r6, 0x1)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000400)=[@acquire], 0x0, 0x0, 0x0})
dup3(r7, r0, 0x0)

0s ago: executing program 0 (id=248):
syz_usb_connect$uac2(0x0, 0xffffffffffffff80, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x160, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0x5, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x0, 0x9, 0x14}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0xf, 0x24, {0x8, 0x25, 0x1, 0x82, 0xb797da50cb715720, 0xf9, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xd, 0x7, 0x7, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x1, 0x40}}}}}}}}]}}, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x100, 0x80)
setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000080), 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts.
[   56.042639][   T30] audit: type=1400 audit(1773872585.661:62): avc:  denied  { mounton } for  pid=5792 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   56.065964][   T30] audit: type=1400 audit(1773872585.691:63): avc:  denied  { mount } for  pid=5792 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   56.068478][ T5792] cgroup: Unknown subsys name 'net'
[   56.095446][   T30] audit: type=1400 audit(1773872585.721:64): avc:  denied  { unmount } for  pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   56.267311][ T5792] cgroup: Unknown subsys name 'cpuset'
[   56.274989][ T5792] cgroup: Unknown subsys name 'rlimit'
[   56.403812][   T30] audit: type=1400 audit(1773872586.021:65): avc:  denied  { setattr } for  pid=5792 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   56.436641][   T30] audit: type=1400 audit(1773872586.021:66): avc:  denied  { create } for  pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   56.457316][   T30] audit: type=1400 audit(1773872586.031:67): avc:  denied  { write } for  pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   56.478220][   T30] audit: type=1400 audit(1773872586.031:68): avc:  denied  { read } for  pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   56.522290][ T5794] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   56.524602][   T30] audit: type=1400 audit(1773872586.041:69): avc:  denied  { mounton } for  pid=5792 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   56.556094][   T30] audit: type=1400 audit(1773872586.041:70): avc:  denied  { mount } for  pid=5792 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   56.580450][   T30] audit: type=1400 audit(1773872586.151:71): avc:  denied  { relabelto } for  pid=5794 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   57.539165][ T5792] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.514923][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.515477][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.523175][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   59.535553][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.537043][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   59.544242][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.551296][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.558094][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   59.565868][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.571674][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.579127][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.592815][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.599166][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   59.601499][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.606789][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   59.614508][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.621791][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   59.629214][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.635604][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   59.643854][ T5130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.649174][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   59.656506][ T5130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.669740][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   59.677444][ T5130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.685072][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   60.054258][ T5811] chnl_net:caif_netlink_parms(): no params data found
[   60.159854][ T5809] chnl_net:caif_netlink_parms(): no params data found
[   60.218539][ T5806] chnl_net:caif_netlink_parms(): no params data found
[   60.229576][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.237304][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.244405][ T5811] bridge_slave_0: entered allmulticast mode
[   60.251188][ T5811] bridge_slave_0: entered promiscuous mode
[   60.259066][ T5805] chnl_net:caif_netlink_parms(): no params data found
[   60.294955][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.302044][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.310186][ T5811] bridge_slave_1: entered allmulticast mode
[   60.319331][ T5811] bridge_slave_1: entered promiscuous mode
[   60.392949][ T5804] chnl_net:caif_netlink_parms(): no params data found
[   60.407811][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.438603][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.472712][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.479927][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.487757][ T5806] bridge_slave_0: entered allmulticast mode
[   60.494359][ T5806] bridge_slave_0: entered promiscuous mode
[   60.507650][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.514943][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.522020][ T5809] bridge_slave_0: entered allmulticast mode
[   60.528985][ T5809] bridge_slave_0: entered promiscuous mode
[   60.545944][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.553022][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.560278][ T5806] bridge_slave_1: entered allmulticast mode
[   60.566971][ T5806] bridge_slave_1: entered promiscuous mode
[   60.580188][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.587310][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.594591][ T5809] bridge_slave_1: entered allmulticast mode
[   60.601209][ T5809] bridge_slave_1: entered promiscuous mode
[   60.630546][ T5811] team0: Port device team_slave_0 added
[   60.642627][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.649888][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.657514][ T5805] bridge_slave_0: entered allmulticast mode
[   60.664093][ T5805] bridge_slave_0: entered promiscuous mode
[   60.682120][ T5811] team0: Port device team_slave_1 added
[   60.694101][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.701377][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.708504][ T5805] bridge_slave_1: entered allmulticast mode
[   60.715481][ T5805] bridge_slave_1: entered promiscuous mode
[   60.727439][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.751145][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.769231][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.799504][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.832846][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.840064][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.847367][ T5804] bridge_slave_0: entered allmulticast mode
[   60.853996][ T5804] bridge_slave_0: entered promiscuous mode
[   60.861473][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.868595][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.894549][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.907522][ T5809] team0: Port device team_slave_0 added
[   60.913452][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.920445][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.946656][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.959271][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.969864][ T5806] team0: Port device team_slave_0 added
[   60.976933][ T5806] team0: Port device team_slave_1 added
[   60.988231][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.995535][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.002655][ T5804] bridge_slave_1: entered allmulticast mode
[   61.009555][ T5804] bridge_slave_1: entered promiscuous mode
[   61.017765][ T5809] team0: Port device team_slave_1 added
[   61.043831][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.083959][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.099920][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.107058][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.133037][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.145351][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.152280][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.178208][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.189554][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.196586][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.222729][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.237943][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.248167][ T5805] team0: Port device team_slave_0 added
[   61.272463][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.279608][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.306217][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.318947][ T5805] team0: Port device team_slave_1 added
[   61.350067][ T5804] team0: Port device team_slave_0 added
[   61.357320][ T5804] team0: Port device team_slave_1 added
[   61.379511][ T5811] hsr_slave_0: entered promiscuous mode
[   61.385809][ T5811] hsr_slave_1: entered promiscuous mode
[   61.429549][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.436551][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.462511][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.474117][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.481279][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.507245][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.521768][ T5806] hsr_slave_0: entered promiscuous mode
[   61.528004][ T5806] hsr_slave_1: entered promiscuous mode
[   61.533827][ T5806] debugfs: 'hsr0' already exists in 'hsr'
[   61.539655][ T5806] Cannot create hsr debugfs directory
[   61.555510][ T5809] hsr_slave_0: entered promiscuous mode
[   61.561548][ T5809] hsr_slave_1: entered promiscuous mode
[   61.567564][ T5809] debugfs: 'hsr0' already exists in 'hsr'
[   61.573267][ T5809] Cannot create hsr debugfs directory
[   61.580349][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.587485][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.613415][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.624776][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.631693][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.657766][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.705251][   T51] Bluetooth: hci4: command tx timeout
[   61.785041][   T51] Bluetooth: hci0: command tx timeout
[   61.790674][   T51] Bluetooth: hci3: command tx timeout
[   61.796450][ T5808] Bluetooth: hci2: command tx timeout
[   61.796466][ T5814] Bluetooth: hci1: command tx timeout
[   61.839393][ T5805] hsr_slave_0: entered promiscuous mode
[   61.845558][ T5805] hsr_slave_1: entered promiscuous mode
[   61.851372][ T5805] debugfs: 'hsr0' already exists in 'hsr'
[   61.857166][ T5805] Cannot create hsr debugfs directory
[   61.870068][ T5804] hsr_slave_0: entered promiscuous mode
[   61.876095][ T5804] hsr_slave_1: entered promiscuous mode
[   61.881933][ T5804] debugfs: 'hsr0' already exists in 'hsr'
[   61.887733][ T5804] Cannot create hsr debugfs directory
[   62.117655][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.128658][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.148288][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.167713][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.204167][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   62.233978][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   62.243465][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   62.260681][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   62.309286][ T5806] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.318229][ T5806] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.330476][ T5806] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.340356][ T5806] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.430302][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.465316][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.478590][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.496140][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.519157][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.549009][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.570854][ T5811] 8021q: adding VLAN 0 to HW filter on device team0
[   62.581130][ T5805] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   62.591928][ T5805] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   62.609824][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.618182][ T5805] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   62.628059][ T5805] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   62.650399][ T5806] 8021q: adding VLAN 0 to HW filter on device team0
[   62.660646][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.667850][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.678566][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.685637][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.710803][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.717903][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.731466][ T1061] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.738576][ T1061] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.759608][ T5809] 8021q: adding VLAN 0 to HW filter on device team0
[   62.776598][ T4537] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.783664][ T4537] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.840001][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.847115][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.919493][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.924902][   T30] kauditd_printk_skb: 13 callbacks suppressed
[   62.924914][   T30] audit: type=1400 audit(1773872592.551:85): avc:  denied  { sys_module } for  pid=5806 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   62.951234][ T5809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   62.975289][ T5809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.070670][ T5804] 8021q: adding VLAN 0 to HW filter on device team0
[   63.131551][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.138685][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.153631][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.160741][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.201806][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.229467][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.249058][ T5805] 8021q: adding VLAN 0 to HW filter on device team0
[   63.272960][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.280072][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.293747][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.328686][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.338644][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.345724][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.446804][ T5806] veth0_vlan: entered promiscuous mode
[   63.493843][ T5811] veth0_vlan: entered promiscuous mode
[   63.509539][ T5806] veth1_vlan: entered promiscuous mode
[   63.538586][ T5811] veth1_vlan: entered promiscuous mode
[   63.555930][ T5809] veth0_vlan: entered promiscuous mode
[   63.588526][ T5806] veth0_macvtap: entered promiscuous mode
[   63.603974][ T5809] veth1_vlan: entered promiscuous mode
[   63.613204][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.647058][ T5806] veth1_macvtap: entered promiscuous mode
[   63.690728][ T5811] veth0_macvtap: entered promiscuous mode
[   63.717359][ T5811] veth1_macvtap: entered promiscuous mode
[   63.737266][ T5809] veth0_macvtap: entered promiscuous mode
[   63.753646][ T5809] veth1_macvtap: entered promiscuous mode
[   63.775615][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.783502][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.790839][ T5814] Bluetooth: hci4: command tx timeout
[   63.807134][ T5804] veth0_vlan: entered promiscuous mode
[   63.835551][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.849680][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.859842][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.867234][ T5130] Bluetooth: hci2: command tx timeout
[   63.869977][   T51] Bluetooth: hci0: command tx timeout
[   63.872676][ T5814] Bluetooth: hci3: command tx timeout
[   63.878601][   T51] Bluetooth: hci1: command tx timeout
[   63.897901][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.907769][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.925671][ T5804] veth1_vlan: entered promiscuous mode
[   63.932226][ T3028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.942875][ T3028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.970510][ T3028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.980060][ T3028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.007751][ T3028] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.018130][ T3028] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.039883][ T3028] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.072237][ T3028] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.091340][ T3028] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.109956][   T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.119398][   T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.134769][   T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.201555][ T5804] veth0_macvtap: entered promiscuous mode
[   64.234218][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.243533][ T5804] veth1_macvtap: entered promiscuous mode
[   64.252560][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.266740][ T4537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.281299][ T4537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.287421][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.323144][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.362551][ T5805] veth0_vlan: entered promiscuous mode
[   64.376954][ T5805] veth1_vlan: entered promiscuous mode
[   64.382474][ T3028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.393857][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.400385][ T3028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.406907][ T4537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.426672][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.434933][ T4537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.442230][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.451897][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.469494][   T30] audit: type=1400 audit(1773872594.091:86): avc:  denied  { mounton } for  pid=5806 comm="syz-executor" path="/root/syzkaller.viWjXd/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   64.486938][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.506125][   T30] audit: type=1400 audit(1773872594.091:87): avc:  denied  { mount } for  pid=5806 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   64.521698][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.537326][   T30] audit: type=1400 audit(1773872594.091:88): avc:  denied  { mounton } for  pid=5806 comm="syz-executor" path="/root/syzkaller.viWjXd/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   64.570489][ T5806] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.583552][   T30] audit: type=1400 audit(1773872594.091:89): avc:  denied  { mount } for  pid=5806 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   64.622274][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.630264][   T30] audit: type=1400 audit(1773872594.091:90): avc:  denied  { mounton } for  pid=5806 comm="syz-executor" path="/root/syzkaller.viWjXd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   64.630311][   T30] audit: type=1400 audit(1773872594.091:91): avc:  denied  { mounton } for  pid=5806 comm="syz-executor" path="/root/syzkaller.viWjXd/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   64.630349][   T30] audit: type=1400 audit(1773872594.091:92): avc:  denied  { unmount } for  pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   64.630387][   T30] audit: type=1400 audit(1773872594.131:93): avc:  denied  { mounton } for  pid=5806 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   64.630424][   T30] audit: type=1400 audit(1773872594.131:94): avc:  denied  { mount } for  pid=5806 comm="syz-executor" name="/" dev="gadgetfs" ino=8037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   64.753538][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.761151][ T5805] veth0_macvtap: entered promiscuous mode
[   64.779943][ T5805] veth1_macvtap: entered promiscuous mode
[   64.888558][ T5919] FAULT_INJECTION: forcing a failure.
[   64.888558][ T5919] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   64.900029][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.906906][ T5919] CPU: 1 UID: 0 PID: 5919 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) 
[   64.906929][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   64.906938][ T5919] Call Trace:
[   64.906943][ T5919]  <TASK>
[   64.906948][ T5919]  dump_stack_lvl+0x100/0x190
[   64.906978][ T5919]  should_fail_ex.cold+0x5/0xa
[   64.906997][ T5919]  _copy_from_user+0x2e/0xd0
[   64.907013][ T5919]  vmemdup_user+0x6b/0xe0
[   64.907037][ T5919]  path_setxattrat+0x29e/0x3b0
[   64.907056][ T5919]  ? __pfx_path_setxattrat+0x10/0x10
[   64.907073][ T5919]  ? find_held_lock+0x2b/0x80
[   64.907093][ T5919]  ? ksys_write+0x190/0x250
[   64.907132][ T5919]  ? fput+0x79/0x100
[   64.907149][ T5919]  ? ksys_write+0x1ac/0x250
[   64.907170][ T5919]  ? __pfx_ksys_write+0x10/0x10
[   64.907195][ T5919]  __x64_sys_fsetxattr+0xc5/0x140
[   64.907212][ T5919]  ? do_syscall_64+0x95/0xf80
[   64.907230][ T5919]  ? lockdep_hardirqs_on+0x78/0x100
[   64.907249][ T5919]  do_syscall_64+0x106/0xf80
[   64.907266][ T5919]  ? clear_bhb_loop+0x40/0x90
[   64.907284][ T5919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.907300][ T5919] RIP: 0033:0x7f823bd9c799
[   64.907313][ T5919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   64.907326][ T5919] RSP: 002b:00007f823cbf1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[   64.907342][ T5919] RAX: ffffffffffffffda RBX: 00007f823c015fa0 RCX: 00007f823bd9c799
[   64.907351][ T5919] RDX: 0000200000000340 RSI: 0000200000000040 RDI: 0000000000000004
[   64.907360][ T5919] RBP: 00007f823cbf1090 R08: 0000000000000001 R09: 0000000000000000
[   64.907368][ T5919] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001
[   64.907377][ T5919] R13: 00007f823c016038 R14: 00007f823c015fa0 R15: 00007fffb03e9738
[   64.907396][ T5919]  </TASK>
[   65.139083][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.198805][ T3028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.218863][ T3028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.241007][   T78] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.261918][   T78] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.277228][   T78] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.300072][   T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.320583][   T78] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.333265][   T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.457544][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.482566][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.555777][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.567287][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.032585][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   66.218883][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[   66.226089][   T51] Bluetooth: hci4: command tx timeout
[   66.230480][ T5130] Bluetooth: hci0: command tx timeout
[   66.231943][   T51] Bluetooth: hci2: command tx timeout
[   66.236934][ T5814] Bluetooth: hci3: command tx timeout
[   66.243380][   T51] Bluetooth: hci1: command tx timeout
[   66.254161][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[   66.261971][ T5947] Zero length message leads to an empty skb
[   66.414925][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   66.544782][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[   66.553068][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[   66.650581][ T5953] vxcan1: entered promiscuous mode
[   66.677989][ T5953] team0: Device vxcan1 is of different type
[   66.749647][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   67.087225][ T5934] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   67.197088][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   67.244818][ T5934] usb 4-1: Using ep0 maxpacket: 8
[   67.254860][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   67.262928][ T5934] usb 4-1: config 238 has an invalid interface number: 2 but max is 0
[   67.282712][ T5934] usb 4-1: config 238 has no interface number 0
[   67.292894][ T5934] usb 4-1: config 238 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   67.312417][ T5934] usb 4-1: config 238 interface 2 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86
[   67.338282][ T5934] usb 4-1: config 238 interface 2 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[   67.364717][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[   67.657184][ T5934] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.bb
[   67.676977][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.695358][ T5934] usb 4-1: Product: syz
[   67.715408][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   67.757944][ T5934] usb 4-1: Manufacturer: syz
[   67.780262][ T5934] usb 4-1: SerialNumber: syz
[   67.875047][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   68.318829][   T51] Bluetooth: hci3: command tx timeout
[   68.318884][ T5130] Bluetooth: hci4: command tx timeout
[   68.324986][   T51] Bluetooth: hci1: command tx timeout
[   68.329811][ T5814] Bluetooth: hci2: command tx timeout
[   68.341152][ T5808] Bluetooth: hci0: command tx timeout
[   68.353615][   T30] kauditd_printk_skb: 46 callbacks suppressed
[   68.353631][   T30] audit: type=1400 audit(1773872597.971:141): avc:  denied  { bind } for  pid=5970 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   68.413133][   T30] audit: type=1400 audit(1773872597.971:142): avc:  denied  { name_bind } for  pid=5970 comm="syz.4.15" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   68.525893][   T30] audit: type=1400 audit(1773872597.971:143): avc:  denied  { node_bind } for  pid=5970 comm="syz.4.15" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   68.552118][ T5981] FAULT_INJECTION: forcing a failure.
[   68.552118][ T5981] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   68.594354][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.4.18 Not tainted syzkaller #0 PREEMPT(full) 
[   68.594380][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   68.594390][ T5981] Call Trace:
[   68.594395][ T5981]  <TASK>
[   68.594401][ T5981]  dump_stack_lvl+0x100/0x190
[   68.594434][ T5981]  should_fail_ex.cold+0x5/0xa
[   68.594460][ T5981]  _copy_from_user+0x2e/0xd0
[   68.594477][ T5981]  copy_msghdr_from_user+0x9f/0x4f0
[   68.594504][ T5981]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[   68.594542][ T5981]  ___sys_sendmsg+0x106/0x1e0
[   68.594570][ T5981]  ? __pfx____sys_sendmsg+0x10/0x10
[   68.594626][ T5981]  __sys_sendmsg+0x170/0x220
[   68.594650][ T5981]  ? __pfx___sys_sendmsg+0x10/0x10
[   68.594692][ T5981]  do_syscall_64+0x106/0xf80
[   68.594715][ T5981]  ? clear_bhb_loop+0x40/0x90
[   68.594736][ T5981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.594755][ T5981] RIP: 0033:0x7fc5b5b9c799
[   68.594770][ T5981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.594785][ T5981] RSP: 002b:00007fc5b6994028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   68.594803][ T5981] RAX: ffffffffffffffda RBX: 00007fc5b5e15fa0 RCX: 00007fc5b5b9c799
[   68.594813][ T5981] RDX: 0000000020000080 RSI: 00002000000000c0 RDI: 0000000000000003
[   68.594823][ T5981] RBP: 00007fc5b6994090 R08: 0000000000000000 R09: 0000000000000000
[   68.594833][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   68.594843][ T5981] R13: 00007fc5b5e16038 R14: 00007fc5b5e15fa0 R15: 00007ffd4de48f18
[   68.594866][ T5981]  </TASK>
[   68.763978][   T30] audit: type=1400 audit(1773872597.971:144): avc:  denied  { write } for  pid=5970 comm="syz.4.15" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   68.785395][   T30] audit: type=1400 audit(1773872598.061:145): avc:  denied  { create } for  pid=5974 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   68.805596][   T30] audit: type=1400 audit(1773872598.131:146): avc:  denied  { prog_run } for  pid=5978 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   68.836948][   T30] audit: type=1400 audit(1773872598.451:147): avc:  denied  { create } for  pid=5974 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   68.856557][   T30] audit: type=1400 audit(1773872598.451:148): avc:  denied  { ioctl } for  pid=5974 comm="syz.1.16" path="socket:[8591]" dev="sockfs" ino=8591 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   69.087393][   T30] audit: type=1400 audit(1773872598.551:149): avc:  denied  { getopt } for  pid=5978 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   69.344729][ T5990] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   69.702506][   T30] audit: type=1400 audit(1773872598.921:150): avc:  denied  { create } for  pid=5978 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   69.818361][ T6000] FAULT_INJECTION: forcing a failure.
[   69.818361][ T6000] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   69.832053][ T6000] CPU: 0 UID: 0 PID: 6000 Comm: syz.1.20 Not tainted syzkaller #0 PREEMPT(full) 
[   69.832077][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   69.832087][ T6000] Call Trace:
[   69.832093][ T6000]  <TASK>
[   69.832099][ T6000]  dump_stack_lvl+0x100/0x190
[   69.832129][ T6000]  should_fail_ex.cold+0x5/0xa
[   69.832149][ T6000]  _copy_from_user+0x2e/0xd0
[   69.832164][ T6000]  copy_msghdr_from_user+0x9f/0x4f0
[   69.832183][ T6000]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[   69.832207][ T6000]  ___sys_sendmsg+0x106/0x1e0
[   69.832230][ T6000]  ? __pfx____sys_sendmsg+0x10/0x10
[   69.832280][ T6000]  __sys_sendmsg+0x170/0x220
[   69.832299][ T6000]  ? __pfx___sys_sendmsg+0x10/0x10
[   69.832322][ T6000]  do_syscall_64+0x106/0xf80
[   69.832336][ T6000]  ? clear_bhb_loop+0x40/0x90
[   69.832349][ T6000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.832360][ T6000] RIP: 0033:0x7f0b85b9c799
[   69.832374][ T6000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.832389][ T6000] RSP: 002b:00007f0b869bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   69.832405][ T6000] RAX: ffffffffffffffda RBX: 00007f0b85e16090 RCX: 00007f0b85b9c799
[   69.832414][ T6000] RDX: 0000000020000080 RSI: 00002000000000c0 RDI: 0000000000000005
[   69.832423][ T6000] RBP: 00007f0b869bd090 R08: 0000000000000000 R09: 0000000000000000
[   69.832432][ T6000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.832440][ T6000] R13: 00007f0b85e16128 R14: 00007f0b85e16090 R15: 00007ffe378e1138
[   69.832460][ T6000]  </TASK>
[   70.867787][ T5934] hso 4-1:238.2: Failed to find INT IN ep
[   71.042013][ T5934] usb 4-1: USB disconnect, device number 2
[   71.937915][ T6028] tipc: Started in network mode
[   71.943521][ T6028] tipc: Node identity 320cba46d4c2, cluster identity 4711
[   71.953193][ T6028] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.394701][ T5812] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   72.625970][ T5808] Bluetooth: hci2: Unknown advertising packet type: 0x30
[   72.626017][ T5808] Bluetooth: hci2: adv larger than maximum supported
[   72.633756][ T5808] Bluetooth: hci2: Malformed LE Event: 0x0d
[   73.066577][ T5812] usb 4-1: device descriptor read/64, error -71
[   73.092185][ T5915] tipc: Node number set to 3872307782
[   73.101437][ T5850] IPVS: starting estimator thread 0...
[   73.167958][ T6041] FAULT_INJECTION: forcing a failure.
[   73.167958][ T6041] name failslab, interval 1, probability 0, space 0, times 1
[   73.190527][ T6041] CPU: 0 UID: 0 PID: 6041 Comm: syz.1.32 Not tainted syzkaller #0 PREEMPT(full) 
[   73.190550][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   73.190560][ T6041] Call Trace:
[   73.190566][ T6041]  <TASK>
[   73.190573][ T6041]  dump_stack_lvl+0x100/0x190
[   73.190604][ T6041]  should_fail_ex.cold+0x5/0xa
[   73.190626][ T6041]  ? bpf_test_init.isra.0+0x88/0x100
[   73.190646][ T6041]  should_failslab+0xc2/0x120
[   73.190664][ T6041]  __kmalloc_noprof+0xe0/0x850
[   73.190687][ T6041]  ? __lock_acquire+0x4a5/0x2630
[   73.190708][ T6041]  bpf_test_init.isra.0+0x88/0x100
[   73.190732][ T6041]  bpf_prog_test_run_xdp+0x57e/0x1670
[   73.190764][ T6041]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   73.190794][ T6041]  ? fput+0x79/0x100
[   73.190813][ T6041]  ? __bpf_prog_get+0x97/0x2a0
[   73.190836][ T6041]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   73.190859][ T6041]  __sys_bpf+0x1725/0x4b90
[   73.190881][ T6041]  ? __pfx___sys_bpf+0x10/0x10
[   73.190897][ T6041]  ? proc_fail_nth_write+0x9f/0x220
[   73.190920][ T6041]  ? find_held_lock+0x2b/0x80
[   73.190946][ T6041]  ? find_held_lock+0x2b/0x80
[   73.190967][ T6041]  ? ksys_write+0x190/0x250
[   73.190999][ T6041]  ? __mutex_unlock_slowpath+0x15c/0x790
[   73.191023][ T6041]  ? __fget_files+0x215/0x3d0
[   73.191054][ T6041]  ? fput+0x79/0x100
[   73.191073][ T6041]  ? ksys_write+0x1ac/0x250
[   73.191097][ T6041]  ? __pfx_ksys_write+0x10/0x10
[   73.191127][ T6041]  __x64_sys_bpf+0x7b/0xc0
[   73.191145][ T6041]  ? lockdep_hardirqs_on+0x78/0x100
[   73.191166][ T6041]  do_syscall_64+0x106/0xf80
[   73.191187][ T6041]  ? clear_bhb_loop+0x40/0x90
[   73.191209][ T6041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.191227][ T6041] RIP: 0033:0x7f0b85b9c799
[   73.191243][ T6041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   73.191258][ T6041] RSP: 002b:00007f0b869de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   73.191275][ T6041] RAX: ffffffffffffffda RBX: 00007f0b85e15fa0 RCX: 00007f0b85b9c799
[   73.191285][ T6041] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[   73.191295][ T6041] RBP: 00007f0b869de090 R08: 0000000000000000 R09: 0000000000000000
[   73.191304][ T6041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   73.191314][ T6041] R13: 00007f0b85e16038 R14: 00007f0b85e15fa0 R15: 00007ffe378e1138
[   73.191337][ T6041]  </TASK>
[   73.304570][ T5812] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   73.329658][ T6039] IPVS: using max 75 ests per chain, 180000 per kthread
[   73.637642][   T30] kauditd_printk_skb: 17 callbacks suppressed
[   73.638015][   T30] audit: type=1400 audit(1773872611.255:168): avc:  denied  { ioctl } for  pid=6042 comm="syz.2.33" path="socket:[9609]" dev="sockfs" ino=9609 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   73.815922][ T5812] usb 4-1: device descriptor read/64, error -71
[   73.914046][ T5808] Bluetooth: hci4: unexpected event 0x05 length: 11 > 4
[   74.016014][ T5812] usb usb4-port1: attempt power cycle
[   74.864665][ T5812] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[   74.937858][ T6025] tipc: Disabling bearer <eth:syzkaller0>
[   75.012782][   T30] audit: type=1400 audit(1773872612.625:169): avc:  denied  { create } for  pid=6061 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   75.083157][ T5812] usb 4-1: device not accepting address 5, error -71
[   75.304531][ T5850] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   75.864447][ T5850] usb 5-1: Using ep0 maxpacket: 8
[   75.875398][ T5850] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13
[   75.887191][ T5850] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[   75.899272][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.908427][ T5850] usb 5-1: Product: syz
[   75.912676][ T5850] usb 5-1: Manufacturer: syz
[   75.917615][ T5850] usb 5-1: SerialNumber: syz
[   75.927551][ T5850] usb 5-1: config 0 descriptor??
[   75.937967][ T5850] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[   76.081524][   T10] cfg80211: failed to load regulatory.db
[   76.459103][   T30] audit: type=1400 audit(1773872614.035:170): avc:  denied  { create } for  pid=6069 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   76.549566][   T30] audit: type=1400 audit(1773872614.035:171): avc:  denied  { execute } for  pid=6069 comm="syz.3.41" name="file0" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   76.773734][ T6060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.787707][ T6060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.022909][   T30] audit: type=1400 audit(1773872614.615:172): avc:  denied  { read } for  pid=6059 comm="syz.4.38" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   77.093666][ T5808] Bluetooth: hci2: Unknown advertising packet type: 0x30
[   77.093698][ T5808] Bluetooth: hci2: adv larger than maximum supported
[   77.101125][ T5808] Bluetooth: hci2: Malformed LE Event: 0x0d
[   77.117967][   T30] audit: type=1400 audit(1773872614.615:173): avc:  denied  { open } for  pid=6059 comm="syz.4.38" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   77.178721][   T30] audit: type=1400 audit(1773872614.625:174): avc:  denied  { ioctl } for  pid=6059 comm="syz.4.38" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   77.412870][ T5850] gspca_zc3xx: reg_w_i err -71
[   77.526521][   T30] audit: type=1400 audit(1773872615.145:175): avc:  denied  { read } for  pid=6082 comm="syz.0.45" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   77.567508][   T30] audit: type=1400 audit(1773872615.145:176): avc:  denied  { open } for  pid=6082 comm="syz.0.45" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   77.571453][ T6083] warning: `syz.0.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.687111][ T6085] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   77.713942][   T30] audit: type=1400 audit(1773872615.305:177): avc:  denied  { map } for  pid=6082 comm="syz.0.45" path="/dev/radio1" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   78.034994][ T5850] gspca_zc3xx: Unknown sensor - set to TAS5130C
[   78.047902][ T5850] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71
[   78.192562][ T5915] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   78.202483][ T5850] usb 5-1: USB disconnect, device number 2
[   78.364543][ T5915] usb 2-1: Using ep0 maxpacket: 8
[   78.373177][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short
[   78.381979][ T5915] usb 2-1: config 4 interface 0 has no altsetting 0
[   78.390436][ T5915] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[   78.399721][ T5915] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[   78.408672][ T5915] usb 2-1: Manufacturer: syz
[   78.413378][ T5915] usb 2-1: SerialNumber: syz
[   78.480964][ T6101] lo speed is unknown, defaulting to 1000
[   78.487309][ T6101] lo speed is unknown, defaulting to 1000
[   78.499745][ T6101] lo speed is unknown, defaulting to 1000
[   78.518954][ T6101] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   78.555844][ T6101] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   78.648919][   T30] kauditd_printk_skb: 5 callbacks suppressed
[   78.648947][   T30] audit: type=1400 audit(1773872616.095:183): avc:  denied  { create } for  pid=6098 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   78.880231][ T6101] lo speed is unknown, defaulting to 1000
[   78.887093][ T6101] lo speed is unknown, defaulting to 1000
[   78.893814][ T6101] lo speed is unknown, defaulting to 1000
[   78.901289][ T6101] lo speed is unknown, defaulting to 1000
[   78.908556][ T6101] lo speed is unknown, defaulting to 1000
[   78.943097][   T30] audit: type=1400 audit(1773872616.095:184): avc:  denied  { write } for  pid=6098 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   78.963040][   T30] audit: type=1400 audit(1773872616.265:185): avc:  denied  { accept } for  pid=6098 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   78.996686][   T30] audit: type=1400 audit(1773872616.615:186): avc:  denied  { block_suspend } for  pid=6103 comm="syz.4.52" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   79.082065][ T5915] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[   79.167320][   T30] audit: type=1400 audit(1773872616.775:187): avc:  denied  { create } for  pid=6105 comm="syz.4.53" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   79.172222][ T5915] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   79.199832][ T5915] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[   79.207208][ T5915] usb 2-1: media controller created
[   79.229585][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   79.260496][ T5915] zl10353_read_register: readreg error (reg=127, ret==0)
[   79.261300][   T30] audit: type=1400 audit(1773872616.815:188): avc:  denied  { write } for  pid=6105 comm="syz.4.53" name="file0" dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   79.405097][   T30] audit: type=1400 audit(1773872616.815:189): avc:  denied  { open } for  pid=6105 comm="syz.4.53" path="/11/file0" dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   79.439739][ T6116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.441922][   T30] audit: type=1400 audit(1773872616.815:190): avc:  denied  { ioctl } for  pid=6105 comm="syz.4.53" path="/11/file0" dev="tmpfs" ino=73 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   79.559612][   T30] audit: type=1400 audit(1773872616.955:191): avc:  denied  { unlink } for  pid=5805 comm="syz-executor" name="file0" dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   79.582449][   T30] audit: type=1400 audit(1773872617.055:192): avc:  denied  { create } for  pid=6117 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   79.669056][ T6121] =======================================================
[   79.669056][ T6121] WARNING: The mand mount option has been deprecated and
[   79.669056][ T6121]          and is ignored by this kernel. Remove the mand
[   79.669056][ T6121]          option from the mount to silence this warning.
[   79.669056][ T6121] =======================================================
[   79.971738][ T5915] usb 2-1: USB disconnect, device number 2
[   80.226893][ T6125] ieee802154 phy0 wpan0: encryption failed: -22
[   80.320120][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'.
[   80.320192][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.353701][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.573264][ T6140] batman_adv: batadv0: Adding interface: dummy0
[   81.579620][ T6140] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.622692][ T6140] batman_adv: batadv0: Interface activated: dummy0
[   81.744150][ T6141] batadv0: mtu less than device minimum
[   81.750969][ T6141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   81.761864][ T6141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   81.772688][ T6141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   81.783476][ T6141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   81.794267][ T6141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   81.805086][ T6141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   81.816386][ T6141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   81.827188][ T6141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   82.288786][ T6150] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.143156][ T5916] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   83.284570][ T5855] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   83.384545][ T5916] usb 2-1: Using ep0 maxpacket: 16
[   83.501378][ T6167] lo speed is unknown, defaulting to 1000
[   84.314617][ T5855] usb 1-1: Using ep0 maxpacket: 8
[   84.491526][ T5916] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.504335][ T5916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   84.513977][ T5855] usb 1-1: unable to get BOS descriptor or descriptor too short
[   84.529229][   T30] kauditd_printk_skb: 23 callbacks suppressed
[   84.529241][   T30] audit: type=1400 audit(1773872622.145:216): avc:  denied  { write } for  pid=6171 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   84.563292][ T6172] netlink: 44 bytes leftover after parsing attributes in process `syz.2.73'.
[   84.578738][ T5916] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[   84.597371][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   84.605512][ T6172] syz.2.73 uses obsolete (PF_INET,SOCK_PACKET)
[   84.614745][   T30] audit: type=1400 audit(1773872622.145:217): avc:  denied  { nlmsg_write } for  pid=6171 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   84.615387][ T5855] usb 1-1: config 4 interface 0 has no altsetting 0
[   84.637189][ T5916] usb 2-1: SerialNumber: syz
[   84.756107][ T5916] usb 2-1: 0:2 : does not exist
[   84.770540][   T30] audit: type=1400 audit(1773872622.215:218): avc:  denied  { mounton } for  pid=6171 comm="syz.2.73" path="/21/file0" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   84.796437][   T30] audit: type=1400 audit(1773872622.255:219): avc:  denied  { ioctl } for  pid=6171 comm="syz.2.73" path="socket:[9862]" dev="sockfs" ino=9862 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   84.881717][ T5855] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[   84.899795][ T5855] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[   84.936638][ T6153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.945095][ T5855] usb 1-1: Manufacturer: syz
[   84.955512][ T5855] usb 1-1: SerialNumber: syz
[   84.966600][ T6153] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.008982][ T5916] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   85.042244][ T5916] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[   85.186916][ T5916] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[   85.325803][   T30] audit: type=1400 audit(1773872622.825:220): avc:  denied  { unlink } for  pid=6179 comm="syz.4.74" name="#1" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   85.348936][   T30] audit: type=1400 audit(1773872622.845:221): avc:  denied  { mount } for  pid=6179 comm="syz.4.74" name="/" dev="overlay" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   85.349081][ T5916] usb 2-1: USB disconnect, device number 3
[   85.372882][ T5855] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[   85.435296][   T30] audit: type=1400 audit(1773872622.905:222): avc:  denied  { create } for  pid=6179 comm="syz.4.74" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   85.462278][ T5855] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   85.480061][ T5855] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[   85.500139][ T5855] usb 1-1: media controller created
[   85.515795][   T30] audit: type=1400 audit(1773872622.905:223): avc:  denied  { link } for  pid=6179 comm="syz.4.74" name="#3" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   85.565300][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   85.600417][   T30] audit: type=1400 audit(1773872622.905:224): avc:  denied  { rename } for  pid=6179 comm="syz.4.74" name="#4" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   85.656512][ T5855] zl10353_read_register: readreg error (reg=127, ret==0)
[   85.672511][ T5808] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[   85.682055][ T5808] CPU: 1 UID: 0 PID: 5808 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) 
[   85.682072][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   85.682080][ T5808] Workqueue: hci2 hci_rx_work
[   85.682095][ T5808] Call Trace:
[   85.682101][ T5808]  <TASK>
[   85.682106][ T5808]  dump_stack_lvl+0x100/0x190
[   85.682127][ T5808]  sysfs_warn_dup.cold+0x1c/0x28
[   85.682144][ T5808]  sysfs_create_dir_ns+0x24b/0x2b0
[   85.682164][ T5808]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   85.682179][ T5808]  ? find_held_lock+0x2b/0x80
[   85.682193][ T5808]  ? kobject_add_internal+0x25f/0x930
[   85.682225][ T5808]  ? kobject_add_internal+0x25f/0x930
[   85.682242][ T5808]  ? do_raw_spin_unlock+0x145/0x1e0
[   85.682255][ T5808]  kobject_add_internal+0x2c8/0x930
[   85.682274][ T5808]  kobject_add+0x16a/0x1e0
[   85.682289][ T5808]  ? __pfx_kobject_add+0x10/0x10
[   85.682304][ T5808]  ? class_to_subsys+0x10f/0x150
[   85.682318][ T5808]  ? kobject_put+0xb9/0x640
[   85.682332][ T5808]  ? _raw_spin_unlock+0x28/0x50
[   85.682352][ T5808]  device_add+0x294/0x1950
[   85.682364][ T5808]  ? __pfx_dev_set_name+0x10/0x10
[   85.682377][ T5808]  ? __pfx_device_add+0x10/0x10
[   85.682387][ T5808]  ? mgmt_send_event_skb+0x2fb/0x460
[   85.682402][ T5808]  hci_conn_add_sysfs+0x1a3/0x260
[   85.682417][ T5808]  le_conn_complete_evt+0x11cb/0x1f40
[   85.682441][ T5808]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   85.682466][ T5808]  hci_le_conn_complete_evt+0x23c/0x3a0
[   85.682487][ T5808]  ? skb_pull_data+0x15f/0x1e0
[   85.682508][ T5808]  hci_le_meta_evt+0x34a/0x5f0
[   85.682522][ T5808]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[   85.682536][ T5808]  hci_event_packet+0x682/0x11c0
[   85.682547][ T5808]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   85.682561][ T5808]  ? __pfx_hci_event_packet+0x10/0x10
[   85.682574][ T5808]  ? kcov_remote_start+0x374/0x660
[   85.682591][ T5808]  ? lockdep_hardirqs_on+0x78/0x100
[   85.682610][ T5808]  hci_rx_work+0x451/0xfc0
[   85.682624][ T5808]  process_one_work+0xa23/0x19a0
[   85.682642][ T5808]  ? __pfx_process_one_work+0x10/0x10
[   85.682658][ T5808]  ? __pfx_hci_rx_work+0x10/0x10
[   85.682670][ T5808]  worker_thread+0x5ef/0xe50
[   85.682687][ T5808]  ? kthread+0x13a/0x450
[   85.682697][ T5808]  ? __pfx_worker_thread+0x10/0x10
[   85.682707][ T5808]  kthread+0x370/0x450
[   85.682717][ T5808]  ? __pfx_kthread+0x10/0x10
[   85.682727][ T5808]  ret_from_fork+0x754/0xd80
[   85.682739][ T5808]  ? __pfx_ret_from_fork+0x10/0x10
[   85.682750][ T5808]  ? rcu_is_watching+0x12/0xc0
[   85.682763][ T5808]  ? __switch_to+0x7b4/0x1120
[   85.682777][ T5808]  ? __pfx_kthread+0x10/0x10
[   85.682787][ T5808]  ret_from_fork_asm+0x1a/0x30
[   85.682808][ T5808]  </TASK>
[   85.682831][ T5808] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   85.960227][ T5808] Bluetooth: hci2: failed to register connection device
[   86.037859][   T30] audit: type=1400 audit(1773872623.325:225): avc:  denied  { append } for  pid=6183 comm="syz.1.76" name="video9" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   86.118972][ T6195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.78'.
[   86.127887][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'.
[   86.141523][ T6192] overlayfs: failed to clone upperpath
[   86.152958][ T5855] usb 1-1: USB disconnect, device number 2
[   86.277017][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'.
[   86.516895][ T6190] nbd: socks must be embedded in a SOCK_ITEM attr
[   86.524000][ T5916] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   86.609799][ T5795] block nbd64: NBD_DISCONNECT
[   86.744759][ T5916] usb 2-1: Using ep0 maxpacket: 16
[   86.756665][ T5797] udevd[5797]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[   86.771868][ T5916] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[   86.851437][ T5855] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   87.157538][ T5916] usb 2-1: config 0 has no interface number 0
[   87.187138][ T5916] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[   87.202774][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.215497][ T5916] usb 2-1: Product: syz
[   87.219721][ T5916] usb 2-1: Manufacturer: syz
[   87.245984][ T5916] usb 2-1: SerialNumber: syz
[   87.287046][ T5916] usb 2-1: config 0 descriptor??
[   87.298328][ T5855] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[   87.307478][ T5855] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[   87.321093][ T5916] hub 2-1:0.132: bad descriptor, ignoring hub
[   87.328798][ T5855] usb 1-1: Product: syz
[   87.330124][ T5916] hub 2-1:0.132: probe with driver hub failed with error -5
[   87.351428][ T5916] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input5
[   87.352355][ T5855] usb 1-1: Manufacturer: syz
[   87.394669][ T5855] usb 1-1: SerialNumber: syz
[   87.410036][ T5855] usb 1-1: config 0 descriptor??
[   87.432205][ T5855] ch341 1-1:0.0: ch341-uart converter detected
[   88.505811][ T5855] usb 1-1: failed to receive control message: -110
[   88.518816][ T5855] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110
[   88.525361][   T29] usb 2-1: USB disconnect, device number 4
[   88.914584][   T29] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   89.074531][   T29] usb 4-1: device descriptor read/64, error -71
[   89.324555][   T29] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   89.455156][   T29] usb 4-1: device descriptor read/64, error -71
[   89.574729][ T5812] usb 1-1: USB disconnect, device number 3
[   89.581694][   T29] usb usb4-port1: attempt power cycle
[   89.591395][ T5812] ch341 1-1:0.0: device disconnected
[   89.923770][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   89.947641][   T29] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   90.111133][   T29] usb 4-1: device descriptor read/8, error -71
[   90.185819][   T10] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[   90.194201][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.221194][   T10] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   90.238321][   T10] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   90.249927][   T10] usb 5-1: Manufacturer: syz
[   90.257636][   T30] kauditd_printk_skb: 6 callbacks suppressed
[   90.257649][   T30] audit: type=1400 audit(1773872627.875:232): avc:  denied  { create } for  pid=6235 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   90.284997][   T10] usb 5-1: config 0 descriptor??
[   90.366620][   T10] rc_core: IR keymap rc-hauppauge not found
[   90.366666][   T29] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   90.374548][   T10] Registered IR keymap rc-empty
[   90.391631][   T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[   90.405467][   T29] usb 4-1: device descriptor read/8, error -71
[   90.407182][   T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6
[   90.444148][   T30] audit: type=1400 audit(1773872628.055:233): avc:  denied  { read } for  pid=6243 comm="syz.0.90" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   90.492328][   T30] audit: type=1400 audit(1773872628.055:234): avc:  denied  { open } for  pid=6243 comm="syz.0.90" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   90.586494][   T29] usb usb4-port1: unable to enumerate USB device
[   90.706489][   T30] audit: type=1400 audit(1773872628.165:235): avc:  denied  { ioctl } for  pid=6243 comm="syz.0.90" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=927 ioctlcmd=0x6f2c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[   90.887708][   T30] audit: type=1400 audit(1773872628.505:236): avc:  denied  { setopt } for  pid=6231 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   90.908904][    C0] igorplugusb 5-1:0.0: Error: urb status = -32
[   90.910038][   T30] audit: type=1400 audit(1773872628.525:237): avc:  denied  { write } for  pid=6231 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   90.942864][   T30] audit: type=1400 audit(1773872628.535:238): avc:  denied  { read } for  pid=6231 comm="syz.4.87" name="event4" dev="devtmpfs" ino=2832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   90.943807][ T5850] usb 5-1: USB disconnect, device number 3
[   90.980446][   T30] audit: type=1400 audit(1773872628.535:239): avc:  denied  { open } for  pid=6231 comm="syz.4.87" path="/dev/input/event4" dev="devtmpfs" ino=2832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   91.009544][   T30] audit: type=1400 audit(1773872628.535:240): avc:  denied  { ioctl } for  pid=6231 comm="syz.4.87" path="/dev/input/event4" dev="devtmpfs" ino=2832 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   91.107360][   T30] audit: type=1400 audit(1773872628.725:241): avc:  denied  { read write } for  pid=6249 comm="syz.1.91" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   92.474961][ T5850] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   92.740462][ T5850] usb 5-1: too many configurations: 72, using maximum allowed: 8
[   92.749301][ T5814] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   92.760102][ T5814] Bluetooth: hci2: Injecting HCI hardware error event
[   92.770536][ T5814] Bluetooth: hci2: hardware error 0x00
[   92.792105][ T5850] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[   92.813258][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.880482][ T5850] usb 5-1: config 0 descriptor??
[   93.159045][ T5850] usb 5-1: USB disconnect, device number 4
[   93.884662][ T6299] Cannot find add_set index 0 as target
[   94.877346][ T5814] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   95.784796][ T5814] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[   95.794305][ T5814] Bluetooth: hci3: Injecting HCI hardware error event
[   95.803159][ T5814] Bluetooth: hci3: hardware error 0x00
[   96.093680][   T30] kauditd_printk_skb: 14 callbacks suppressed
[   96.093691][   T30] audit: type=1400 audit(1773872633.705:256): avc:  denied  { wake_alarm } for  pid=6331 comm="syz.2.113" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   96.913542][   T30] audit: type=1400 audit(1773872634.525:257): avc:  denied  { create } for  pid=6343 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   96.954841][   T30] audit: type=1400 audit(1773872634.525:258): avc:  denied  { setopt } for  pid=6343 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   97.046357][   T30] audit: type=1800 audit(1773872634.525:259): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.116" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[   97.215575][ T6351] overlayfs: missing 'lowerdir'
[   97.588954][   T30] audit: type=1400 audit(1773872635.205:260): avc:  denied  { create } for  pid=6352 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   97.680704][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'.
[   97.848203][   T30] audit: type=1400 audit(1773872635.205:261): avc:  denied  { bind } for  pid=6352 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   97.884388][ T6359] nbd: socks must be embedded in a SOCK_ITEM attr
[   98.238727][ T5814] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   98.337646][   T30] audit: type=1400 audit(1773872635.205:262): avc:  denied  { listen } for  pid=6352 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   99.253716][   T30] audit: type=1400 audit(1773872636.865:263): avc:  denied  { read write } for  pid=6374 comm="syz.1.123" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   99.658216][ T6373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.122'.
[   99.976510][   T30] audit: type=1400 audit(1773872636.865:264): avc:  denied  { open } for  pid=6374 comm="syz.1.123" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  100.003500][ T5797] udevd[5797]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  100.067441][ T5797] udevd[5797]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  100.109922][   T30] audit: type=1400 audit(1773872637.725:265): avc:  denied  { ioctl } for  pid=6383 comm="syz.1.125" path="socket:[11279]" dev="sockfs" ino=11279 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  100.904760][ T6384] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  100.930904][ T6384] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  101.049852][ T6384] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  101.059579][ T6384] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  101.215743][ T6384] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  101.227460][ T6384] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  101.335254][ T6401] netlink: 666 bytes leftover after parsing attributes in process `syz.0.130'.
[  101.429522][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'.
[  101.475330][ T6404] nbd: socks must be embedded in a SOCK_ITEM attr
[  101.567489][   T29] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  102.264776][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout
[  102.564390][ T5797] udevd[5797]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  102.823863][ T6408] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  102.906733][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  102.906748][   T30] audit: type=1400 audit(1773872640.505:273): avc:  denied  { write } for  pid=6409 comm="syz.4.132" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  102.945252][ T6408] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  102.978835][   T29] usb 4-1: Using ep0 maxpacket: 32
[  103.104703][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout
[  103.124305][   T29] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  103.227885][   T29] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  103.261997][   T29] usb 4-1: config 0 interface 0 has no altsetting 0
[  103.389309][   T29] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  103.398590][   T30] audit: type=1400 audit(1773872640.995:274): avc:  denied  { name_bind } for  pid=6414 comm="syz.4.133" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  103.399044][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.429155][   T29] usb 4-1: Product: syz
[  103.433323][   T29] usb 4-1: Manufacturer: syz
[  103.439179][   T29] usb 4-1: SerialNumber: syz
[  103.446938][   T29] usb 4-1: config 0 descriptor??
[  103.782008][   T30] audit: type=1400 audit(1773872641.135:275): avc:  denied  { ioctl } for  pid=6420 comm="syz.0.135" path="socket:[10992]" dev="sockfs" ino=10992 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  103.826989][   T30] audit: type=1400 audit(1773872641.295:276): avc:  denied  { getopt } for  pid=6423 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  103.855856][   T30] audit: type=1400 audit(1773872641.445:277): avc:  denied  { sqpoll } for  pid=6420 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  104.128900][   T29] gs_usb 4-1:0.0: Configuring for 256 interfaces
[  104.157684][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.165197][   T29] gs_usb 4-1:0.0: Driver cannot handle more that 255 CAN interfaces
[  104.165227][   T29] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22
[  104.181511][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.210808][ T6435] overlayfs: failed to clone upperpath
[  104.345104][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout
[  104.818946][ T6432] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.004531][ T5855] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  105.017767][ T3028] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.035325][ T3028] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.054829][ T3028] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.194581][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout
[  105.306172][ T3028] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.535455][ T5855] usb 5-1: Using ep0 maxpacket: 32
[  105.542236][ T5855] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  105.550841][ T5855] usb 5-1: config 0 has no interface number 0
[  105.572860][ T5855] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  105.592386][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.611721][ T5855] usb 5-1: Product: syz
[  105.627627][ T5855] usb 5-1: Manufacturer: syz
[  105.639317][ T5855] usb 5-1: SerialNumber: syz
[  105.673537][ T5855] usb 5-1: config 0 descriptor??
[  105.691783][ T5855] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  105.900774][   T30] audit: type=1400 audit(1773872643.505:278): avc:  denied  { mounton } for  pid=6456 comm="syz.0.144" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  105.925703][ T6457] tmpfs: Bad value for 'mpol'
[  105.933312][ T6457] tmpfs: Bad value for 'mpol'
[  105.972115][ T5850] usb 4-1: USB disconnect, device number 11
[  106.048239][ T5855] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  106.099083][ T6462] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  106.121177][ T6462] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  106.194122][ T5855] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  106.375157][ T6470] netlink: 36 bytes leftover after parsing attributes in process `syz.2.148'.
[  106.385929][   T30] audit: type=1400 audit(1773872643.985:279): avc:  denied  { create } for  pid=6469 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  106.388471][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  106.413880][ T5855] usb 5-1: USB disconnect, device number 5
[  106.461356][ T5855] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  106.478523][ T6470] netlink: 36 bytes leftover after parsing attributes in process `syz.2.148'.
[  106.488298][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout
[  106.537793][   T30] audit: type=1400 audit(1773872644.065:280): avc:  denied  { node_bind } for  pid=6468 comm="syz.3.147" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  106.590341][   T30] audit: type=1400 audit(1773872644.145:281): avc:  denied  { create } for  pid=6469 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  106.610064][   T30] audit: type=1400 audit(1773872644.195:282): avc:  denied  { read } for  pid=5934 comm="kworker/1:6" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11360 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  106.610611][ T5855] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  106.654654][ T5855] quatech2 5-1:0.51: device disconnected
[  107.245639][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout
[  108.654863][ T6495] netlink: 36 bytes leftover after parsing attributes in process `syz.0.154'.
[  109.049173][ T6513] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  109.060316][ T6513] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  109.124901][ T5915] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  109.291365][ T5915] usb 2-1: too many configurations: 70, using maximum allowed: 8
[  109.302105][ T5915] usb 2-1: config index 0 descriptor too short (expected 65505, got 72)
[  109.311840][ T5808] Bluetooth: hci4: command 0x0c1a tx timeout
[  109.319010][ T5915] usb 2-1: config index 1 descriptor too short (expected 65505, got 72)
[  109.331299][ T5915] usb 2-1: config index 2 descriptor too short (expected 65505, got 72)
[  109.341202][ T5915] usb 2-1: config index 3 descriptor too short (expected 65505, got 72)
[  109.351531][ T5915] usb 2-1: config index 4 descriptor too short (expected 65505, got 72)
[  109.361485][ T5915] usb 2-1: config index 5 descriptor too short (expected 65505, got 72)
[  109.371061][ T5915] usb 2-1: config index 6 descriptor too short (expected 65505, got 72)
[  109.384835][ T5850] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  109.402668][ T5915] usb 2-1: config index 7 descriptor too short (expected 65505, got 72)
[  109.457061][ T5915] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  109.473964][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.493656][ T5915] usb 2-1: Product: syz
[  109.516714][ T5915] usb 2-1: Manufacturer: syz
[  109.521469][ T5915] usb 2-1: SerialNumber: syz
[  109.895399][ T5850] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  109.916285][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.928276][ T5850] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  109.942402][ T5915] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  109.960527][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  109.960542][   T30] audit: type=1400 audit(1773872647.575:288): avc:  denied  { firmware_load } for  pid=5855 comm="kworker/0:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  109.961138][ T5850] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  110.010571][ T5850] usb 5-1: Manufacturer: syz
[  110.032525][ T5855] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  110.049419][ T5850] usb 5-1: config 0 descriptor??
[  110.197948][ T6529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=6529 comm=syz.2.162
[  110.304944][ T5850] rc_core: IR keymap rc-hauppauge not found
[  110.310922][ T5850] Registered IR keymap rc-empty
[  110.335447][ T5850] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  110.361872][ T5850] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7
[  110.499379][   T29] usb 2-1: USB disconnect, device number 5
[  110.605759][    C0] igorplugusb 5-1:0.0: Error: urb status = -32
[  111.065298][ T5855] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  111.073637][ T5855] ath9k_htc: Failed to initialize the device
[  111.082113][   T29] usb 2-1: ath9k_htc: USB layer deinitialized
[  111.201635][ T6544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6544 comm=syz.0.166
[  111.284913][ T5850] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  111.492854][ T6548] geneve2: entered promiscuous mode
[  111.499303][ T6548] geneve2: entered allmulticast mode
[  111.571925][ T5850] usb 4-1: config 4 has an invalid interface number: 88 but max is 0
[  111.584876][   T30] audit: type=1400 audit(1773872649.065:289): avc:  denied  { write } for  pid=6543 comm="syz.0.166" name="sg0" dev="devtmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  111.719816][ T5850] usb 4-1: config 4 has no interface number 0
[  111.732136][ T5850] usb 4-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping
[  111.743798][ T5850] usb 4-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85
[  111.756579][ T5850] usb 4-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  111.770551][ T5850] usb 4-1: config 4 interface 88 has no altsetting 0
[  111.851828][ T5850] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7
[  111.861672][ T5850] usb 4-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3
[  111.881731][ T5850] usb 4-1: Manufacturer: syz
[  111.893741][ T5850] usb 4-1: SerialNumber: syz
[  111.913671][ T6542] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  112.099466][ T6557] xt_hashlimit: size too large, truncated to 1048576
[  112.106995][   T30] audit: type=1400 audit(1773872649.715:290): avc:  denied  { setopt } for  pid=6556 comm="syz.1.169" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  112.230837][   T29] usb 4-1: USB disconnect, device number 12
[  112.264923][ T5850] usb 5-1: USB disconnect, device number 6
[  112.852555][ T6572] process 'syz.1.173' launched './file1' with NULL argv: empty string added
[  113.016433][   T30] audit: type=1400 audit(1773872650.465:291): avc:  denied  { execute } for  pid=6567 comm="syz.1.173" name="file1" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  113.954668][   T30] audit: type=1400 audit(1773872650.485:292): avc:  denied  { execute_no_trans } for  pid=6567 comm="syz.1.173" path="/34/file1" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  113.985156][ T6574] netlink: 'syz.1.174': attribute type 1 has an invalid length.
[  114.018544][ T6574] 8021q: adding VLAN 0 to HW filter on device bond1
[  114.386215][   T30] audit: type=1400 audit(1773872652.005:293): avc:  denied  { bind } for  pid=6573 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  114.406222][ T6582] Unsupported ieee802154 address type: 0
[  114.424811][ T6574] bond1: (slave geneve2): making interface the new active one
[  114.439769][ T6574] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  114.448622][   T78] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  114.462546][   T78] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  114.480878][   T30] audit: type=1400 audit(1773872652.095:294): avc:  denied  { search } for  pid=5474 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  114.485327][   T78] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  114.514364][   T78] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  114.552361][   T30] audit: type=1400 audit(1773872652.095:295): avc:  denied  { search } for  pid=5474 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  114.597823][   T30] audit: type=1400 audit(1773872652.095:296): avc:  denied  { search } for  pid=5474 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  114.649384][   T30] audit: type=1400 audit(1773872652.095:297): avc:  denied  { read } for  pid=5474 comm="dhcpcd" name="n100" dev="tmpfs" ino=2638 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  115.280460][ T6586] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  115.301717][ T6586] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  115.308339][ T6586] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  115.316841][ T6586] vhci_hcd vhci_hcd.0: Device attached
[  115.328383][ T6596] vhci_hcd: connection closed
[  115.333010][   T49] vhci_hcd vhci_hcd.0: stop threads
[  115.368184][   T49] vhci_hcd vhci_hcd.0: release socket
[  115.373631][   T49] vhci_hcd vhci_hcd.0: disconnect device
[  115.895063][ T6617] capability: warning: `syz.2.184' uses 32-bit capabilities (legacy support in use)
[  116.176802][ T6621] overlayfs: failed to clone upperpath
[  116.225710][ T6624] netlink: 72 bytes leftover after parsing attributes in process `syz.1.185'.
[  117.019181][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  117.019206][   T30] audit: type=1400 audit(1773872654.635:300): avc:  denied  { getopt } for  pid=6632 comm="syz.3.189" lport=44963 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  117.019611][ T6634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.189'.
[  117.223372][ T6633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.189'.
[  117.483201][   T30] audit: type=1400 audit(1773872655.095:301): avc:  denied  { write } for  pid=6641 comm="syz.4.193" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  117.660826][   T30] audit: type=1400 audit(1773872655.135:302): avc:  denied  { map } for  pid=6641 comm="syz.4.193" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  117.936241][   T30] audit: type=1400 audit(1773872655.185:303): avc:  denied  { bind } for  pid=6646 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  118.188781][   T30] audit: type=1400 audit(1773872655.405:304): avc:  denied  { ioctl } for  pid=6650 comm="syz.0.196" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  118.236693][ T6659] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  118.396704][   T30] audit: type=1400 audit(1773872655.425:305): avc:  denied  { set_context_mgr } for  pid=6650 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  118.458397][   T30] audit: type=1400 audit(1773872655.855:306): avc:  denied  { ioctl } for  pid=6652 comm="syz.2.197" path="socket:[12378]" dev="sockfs" ino=12378 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  118.542883][   T30] audit: type=1400 audit(1773872655.855:307): avc:  denied  { create } for  pid=6652 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  119.684479][   T30] audit: type=1400 audit(1773872656.745:308): avc:  denied  { mount } for  pid=6673 comm="syz.0.202" name="/" dev="rpc_pipefs" ino=12397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  121.764328][ T6693] No source specified
[  122.673671][ T6694] syz.0.207 (6694) used greatest stack depth: 19656 bytes left
[  123.092808][ T1061] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  123.434584][ T6712] lo speed is unknown, defaulting to 1000
[  124.275059][ T6703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  124.928583][ T6718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36638 sclass=netlink_route_socket pid=6718 comm=syz.2.213
[  125.070813][   T30] audit: type=1400 audit(1773872662.675:309): avc:  denied  { map } for  pid=6717 comm="syz.2.213" path="pipe:[12178]" dev="pipefs" ino=12178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  125.646058][ T6722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.215'.
[  125.654853][   T30] audit: type=1400 audit(1773872662.775:310): avc:  denied  { ioctl } for  pid=6715 comm="syz.1.212" path="socket:[12193]" dev="sockfs" ino=12193 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  125.800406][   T30] audit: type=1400 audit(1773872662.785:311): avc:  denied  { write } for  pid=6715 comm="syz.1.212" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  126.502610][ T6748] binder: 6746:6748 ioctl 4018620d 0 returned -22
[  126.714953][ T5850] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  126.895047][ T5850] usb 5-1: Using ep0 maxpacket: 32
[  126.914225][ T5850] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.008122][ T5850] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  127.387901][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  127.394246][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  127.400636][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.468699][ T5850] usb 5-1: Product: syz
[  127.481687][ T5850] usb 5-1: Manufacturer: syz
[  127.497856][ T5850] usb 5-1: SerialNumber: syz
[  127.561451][ T5850] usb 5-1: config 0 descriptor??
[  127.589683][ T5850] smsc75xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  127.740843][ T5850] smsc75xx 5-1:0.0: probe with driver smsc75xx failed with error -22
[  127.789077][   T30] audit: type=1400 audit(1773872665.405:312): avc:  denied  { create } for  pid=6762 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  127.822429][ T5850] usb 5-1: USB disconnect, device number 7
[  127.869898][   T30] audit: type=1400 audit(1773872665.455:313): avc:  denied  { getopt } for  pid=6762 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  128.774548][ T5850] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  128.795710][ T5855] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  128.882651][   T30] audit: type=1400 audit(1773872666.495:314): avc:  denied  { mount } for  pid=6783 comm="syz.1.231" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  128.914550][ T5850] usb 5-1: device descriptor read/64, error -71
[  129.034544][ T5855] usb 1-1: Using ep0 maxpacket: 32
[  129.050065][   T30] audit: type=1400 audit(1773872666.525:315): avc:  denied  { ioctl } for  pid=6783 comm="syz.1.231" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  129.133695][ T5855] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  129.160263][ T5855] usb 1-1: config 0 has no interface number 0
[  129.181286][ T5855] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  129.195950][   T30] audit: type=1400 audit(1773872666.745:316): avc:  denied  { unmount } for  pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  129.262519][ T5855] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  129.275130][ T5850] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  129.290188][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.340592][ T5855] usb 1-1: Product: syz
[  129.374140][ T5855] usb 1-1: Manufacturer: syz
[  129.391455][ T5855] usb 1-1: SerialNumber: syz
[  129.403476][   T30] audit: type=1400 audit(1773872667.015:317): avc:  denied  { lock } for  pid=6796 comm="syz.1.236" path="socket:[13593]" dev="sockfs" ino=13593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  129.428315][ T5850] usb 5-1: device descriptor read/64, error -71
[  129.459051][ T5855] usb 1-1: config 0 descriptor??
[  129.474691][ T5855] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  129.512818][ T5855] em28xx 1-1:0.132: Video interface 132 found:
[  129.546059][ T5850] usb usb5-port1: attempt power cycle
[  129.935645][ T5850] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  129.966011][ T5850] usb 5-1: device descriptor read/8, error -71
[  130.088127][ T5855] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[  130.205472][ T5850] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  130.256807][ T5850] usb 5-1: device descriptor read/8, error -71
[  130.377332][ T5850] usb usb5-port1: unable to enumerate USB device
[  130.952835][ T5855] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0)
[  131.292366][ T5855] em28xx 1-1:0.132: board has no eeprom
[  131.376263][ T5855] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  131.384242][ T5855] em28xx 1-1:0.132: analog set to bulk mode.
[  131.394128][ T5850] em28xx 1-1:0.132: Registering V4L2 extension
[  131.471482][   T30] audit: type=1400 audit(1773872669.085:318): avc:  denied  { name_bind } for  pid=6825 comm="syz.2.245" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  131.536824][ T5850] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  131.551823][ T5855] usb 1-1: USB disconnect, device number 4
[  131.635693][ T5855] em28xx 1-1:0.132: Disconnecting em28xx
[  131.641982][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'.
[  131.817411][   T30] audit: type=1400 audit(1773872669.435:319): avc:  denied  { read } for  pid=6833 comm="syz.4.246" dev="sockfs" ino=13709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  131.843277][ T6834] 9p: Bad value for 'rfdno'
[  132.149681][ T5850] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  132.164561][ T5850] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  132.171698][ T5850] em28xx 1-1:0.132: No AC97 audio processor
[  132.612710][   T30] audit: type=1400 audit(1773872669.865:320): avc:  denied  { name_bind } for  pid=6835 comm="syz.4.247" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  132.682574][ T5850] usb 1-1: Decoder not found
[  132.725260][ T5850] em28xx 1-1:0.132: failed to create media graph
[  132.751555][ T5850] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  132.777457][ T6841] ==================================================================
[  132.785528][ T6841] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0
[  132.792969][ T6841] Read of size 8 at addr ffff888053920748 by task v4l_id/6841
[  132.800402][ T6841] 
[  132.802706][ T6841] CPU: 0 UID: 0 PID: 6841 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  132.802719][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  132.802726][ T6841] Call Trace:
[  132.802730][ T6841]  <TASK>
[  132.802734][ T6841]  dump_stack_lvl+0x100/0x190
[  132.802755][ T6841]  print_report+0x156/0x4c9
[  132.802771][ T6841]  ? __virt_addr_valid+0x81/0x620
[  132.802787][ T6841]  ? __phys_addr+0xe8/0x180
[  132.802802][ T6841]  ? v4l2_fh_init+0x27d/0x2c0
[  132.802816][ T6841]  kasan_report+0xdf/0x1e0
[  132.802827][ T6841]  ? v4l2_fh_init+0x27d/0x2c0
[  132.802841][ T6841]  v4l2_fh_init+0x27d/0x2c0
[  132.802855][ T6841]  v4l2_fh_open+0x64/0xa0
[  132.802869][ T6841]  em28xx_v4l2_open+0x11e/0x570
[  132.802883][ T6841]  v4l2_open+0x1d2/0x490
[  132.802898][ T6841]  ? __pfx_v4l2_open+0x10/0x10
[  132.802912][ T6841]  chrdev_open+0x234/0x6a0
[  132.802924][ T6841]  ? __pfx_chrdev_open+0x10/0x10
[  132.802935][ T6841]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  132.802949][ T6841]  do_dentry_open+0x6d8/0x1660
[  132.802967][ T6841]  ? __pfx_chrdev_open+0x10/0x10
[  132.802979][ T6841]  vfs_open+0x82/0x3f0
[  132.802991][ T6841]  path_openat+0x208c/0x31a0
[  132.803005][ T6841]  ? __pfx_path_openat+0x10/0x10
[  132.803018][ T6841]  do_file_open+0x20e/0x430
[  132.803029][ T6841]  ? __pfx_do_file_open+0x10/0x10
[  132.803045][ T6841]  ? alloc_fd+0x476/0x790
[  132.803056][ T6841]  ? do_getname+0x191/0x390
[  132.803070][ T6841]  do_sys_openat2+0x10d/0x1e0
[  132.803083][ T6841]  ? __pfx_do_sys_openat2+0x10/0x10
[  132.803098][ T6841]  __x64_sys_openat+0x12d/0x210
[  132.803119][ T6841]  ? __pfx___x64_sys_openat+0x10/0x10
[  132.803133][ T6841]  ? do_user_addr_fault+0x8d6/0x12f0
[  132.803146][ T6841]  do_syscall_64+0x106/0xf80
[  132.803161][ T6841]  ? clear_bhb_loop+0x40/0x90
[  132.803173][ T6841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.803184][ T6841] RIP: 0033:0x7faabd0a7407
[  132.803193][ T6841] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  132.803204][ T6841] RSP: 002b:00007ffe85b20120 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  132.803214][ T6841] RAX: ffffffffffffffda RBX: 00007faabd871880 RCX: 00007faabd0a7407
[  132.803221][ T6841] RDX: 0000000000000000 RSI: 00007ffe85b20f1b RDI: ffffffffffffff9c
[  132.803228][ T6841] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  132.803234][ T6841] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  132.803240][ T6841] R13: 00007ffe85b20370 R14: 00007faabd9d8000 R15: 0000557d460984d8
[  132.803250][ T6841]  </TASK>
[  132.803253][ T6841] 
[  133.057536][ T6841] Allocated by task 5850:
[  133.061841][ T6841]  kasan_save_stack+0x30/0x50
[  133.066507][ T6841]  kasan_save_track+0x14/0x30
[  133.071176][ T6841]  __kasan_kmalloc+0xaa/0xb0
[  133.075746][ T6841]  em28xx_v4l2_init.cold+0x94/0x3503
[  133.081016][ T6841]  em28xx_init_extension+0x13a/0x200
[  133.086279][ T6841]  request_module_async+0x61/0x80
[  133.091279][ T6841]  process_one_work+0xa23/0x19a0
[  133.096187][ T6841]  worker_thread+0x5ef/0xe50
[  133.100750][ T6841]  kthread+0x370/0x450
[  133.104802][ T6841]  ret_from_fork+0x754/0xd80
[  133.109386][ T6841]  ret_from_fork_asm+0x1a/0x30
[  133.114132][ T6841] 
[  133.116435][ T6841] Freed by task 5850:
[  133.120384][ T6841]  kasan_save_stack+0x30/0x50
[  133.125039][ T6841]  kasan_save_track+0x14/0x30
[  133.129694][ T6841]  kasan_save_free_info+0x3b/0x70
[  133.134705][ T6841]  __kasan_slab_free+0x5f/0x80
[  133.139442][ T6841]  kfree+0x1f6/0x6b0
[  133.143318][ T6841]  kref_put.isra.0+0x56/0x90
[  133.147882][ T6841]  em28xx_v4l2_init.cold+0x280/0x3503
[  133.153234][ T6841]  em28xx_init_extension+0x13a/0x200
[  133.158494][ T6841]  request_module_async+0x61/0x80
[  133.163493][ T6841]  process_one_work+0xa23/0x19a0
[  133.168400][ T6841]  worker_thread+0x5ef/0xe50
[  133.172959][ T6841]  kthread+0x370/0x450
[  133.177000][ T6841]  ret_from_fork+0x754/0xd80
[  133.181561][ T6841]  ret_from_fork_asm+0x1a/0x30
[  133.186298][ T6841] 
[  133.188604][ T6841] The buggy address belongs to the object at ffff888053920000
[  133.188604][ T6841]  which belongs to the cache kmalloc-8k of size 8192
[  133.202623][ T6841] The buggy address is located 1864 bytes inside of
[  133.202623][ T6841]  freed 8192-byte region [ffff888053920000, ffff888053922000)
[  133.216563][ T6841] 
[  133.218862][ T6841] The buggy address belongs to the physical page:
[  133.225247][ T6841] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53920
[  133.233975][ T6841] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  133.242456][ T6841] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  133.249970][ T6841] page_type: f5(slab)
[  133.253932][ T6841] raw: 00fff00000000040 ffff88813fe40280 dead000000000122 0000000000000000
[  133.262500][ T6841] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  133.271062][ T6841] head: 00fff00000000040 ffff88813fe40280 dead000000000122 0000000000000000
[  133.279716][ T6841] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  133.288359][ T6841] head: 00fff00000000003 ffffea00014e4801 00000000ffffffff 00000000ffffffff
[  133.297007][ T6841] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  133.305653][ T6841] page dumped because: kasan: bad access detected
[  133.312040][ T6841] page_owner tracks the page as allocated
[  133.317724][ T6841] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6724, tgid 6723 (syz.3.214), ts 125636275299, free_ts 124889837346
[  133.338804][ T6841]  post_alloc_hook+0x153/0x170
[  133.343551][ T6841]  get_page_from_freelist+0x111d/0x3140
[  133.349164][ T6841]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[  133.355033][ T6841]  new_slab+0xa6/0x6b0
[  133.359093][ T6841]  refill_objects+0x26b/0x400
[  133.363745][ T6841]  __pcs_replace_empty_main+0x1ab/0x660
[  133.369265][ T6841]  __kvmalloc_node_noprof+0x7da/0xa00
[  133.374611][ T6841]  pfifo_fast_init+0x177/0x3b0
[  133.379347][ T6841]  qdisc_create_dflt+0x124/0x4c0
[  133.384266][ T6841]  mqprio_init+0xec5/0x1ba0
[  133.388743][ T6841]  qdisc_create+0x47b/0x1090
[  133.393331][ T6841]  tc_modify_qdisc+0xdcf/0x2120
[  133.398156][ T6841]  rtnetlink_rcv_msg+0x3c9/0xe90
[  133.403068][ T6841]  netlink_rcv_skb+0x159/0x420
[  133.407906][ T6841]  netlink_unicast+0x5aa/0x870
[  133.413184][ T6841]  netlink_sendmsg+0x8b0/0xda0
[  133.417940][ T6841] page last free pid 5179 tgid 5179 stack trace:
[  133.424240][ T6841]  __free_frozen_pages+0x7e1/0x10d0
[  133.429419][ T6841]  qlist_free_all+0x47/0xe0
[  133.433906][ T6841]  kasan_quarantine_reduce+0x1a0/0x1f0
[  133.439360][ T6841]  __kasan_slab_alloc+0x69/0x90
[  133.444201][ T6841]  __kmalloc_cache_noprof+0x243/0x6f0
[  133.449545][ T6841]  kernfs_fop_open+0x23d/0xd50
[  133.454283][ T6841]  do_dentry_open+0x6d8/0x1660
[  133.459039][ T6841]  vfs_open+0x82/0x3f0
[  133.463079][ T6841]  path_openat+0x208c/0x31a0
[  133.467642][ T6841]  do_file_open+0x20e/0x430
[  133.472118][ T6841]  do_sys_openat2+0x10d/0x1e0
[  133.476784][ T6841]  __x64_sys_openat+0x12d/0x210
[  133.481607][ T6841]  do_syscall_64+0x106/0xf80
[  133.486179][ T6841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.492045][ T6841] 
[  133.494342][ T6841] Memory state around the buggy address:
[  133.499944][ T6841]  ffff888053920600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  133.507981][ T6841]  ffff888053920680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  133.516018][ T6841] >ffff888053920700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  133.524054][ T6841]                                               ^
[  133.530522][ T6841]  ffff888053920780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  133.538556][ T6841]  ffff888053920800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  133.546585][ T6841] ==================================================================
[  133.599005][ T5850] em28xx 1-1:0.132: Remote control support is not available for this card.
[  133.610136][ T5855] em28xx 1-1:0.132: Closing input extension
[  133.647012][ T6841] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  133.654239][ T6841] CPU: 0 UID: 0 PID: 6841 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  133.663179][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  133.673211][ T6841] Call Trace:
[  133.676475][ T6841]  <TASK>
[  133.679416][ T6841]  dump_stack_lvl+0x100/0x190
[  133.684085][ T6841]  vpanic+0x552/0x970
[  133.688044][ T6841]  ? __pfx_vpanic+0x10/0x10
[  133.692538][ T6841]  ? v4l2_fh_init+0x27d/0x2c0
[  133.697212][ T6841]  panic+0xd1/0xe0
[  133.700922][ T6841]  ? __pfx_panic+0x10/0x10
[  133.705322][ T6841]  ? v4l2_fh_init+0x27d/0x2c0
[  133.709987][ T6841]  ? preempt_schedule_common+0x42/0xc0
[  133.715431][ T6841]  ? check_panic_on_warn+0x1f/0x90
[  133.720521][ T6841]  check_panic_on_warn.cold+0x19/0x34
[  133.725875][ T6841]  end_report.part.0+0x3a/0x90
[  133.730630][ T6841]  kasan_report.cold+0xe/0x18
[  133.735307][ T6841]  ? v4l2_fh_init+0x27d/0x2c0
[  133.739986][ T6841]  v4l2_fh_init+0x27d/0x2c0
[  133.744482][ T6841]  v4l2_fh_open+0x64/0xa0
[  133.748809][ T6841]  em28xx_v4l2_open+0x11e/0x570
[  133.753645][ T6841]  v4l2_open+0x1d2/0x490
[  133.757892][ T6841]  ? __pfx_v4l2_open+0x10/0x10
[  133.762638][ T6841]  chrdev_open+0x234/0x6a0
[  133.767038][ T6841]  ? __pfx_chrdev_open+0x10/0x10
[  133.771959][ T6841]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  133.778270][ T6841]  do_dentry_open+0x6d8/0x1660
[  133.783018][ T6841]  ? __pfx_chrdev_open+0x10/0x10
[  133.787996][ T6841]  vfs_open+0x82/0x3f0
[  133.792052][ T6841]  path_openat+0x208c/0x31a0
[  133.796686][ T6841]  ? __pfx_path_openat+0x10/0x10
[  133.801636][ T6841]  do_file_open+0x20e/0x430
[  133.806137][ T6841]  ? __pfx_do_file_open+0x10/0x10
[  133.811155][ T6841]  ? alloc_fd+0x476/0x790
[  133.815467][ T6841]  ? do_getname+0x191/0x390
[  133.819954][ T6841]  do_sys_openat2+0x10d/0x1e0
[  133.824629][ T6841]  ? __pfx_do_sys_openat2+0x10/0x10
[  133.829815][ T6841]  __x64_sys_openat+0x12d/0x210
[  133.834647][ T6841]  ? __pfx___x64_sys_openat+0x10/0x10
[  133.840000][ T6841]  ? do_user_addr_fault+0x8d6/0x12f0
[  133.845266][ T6841]  do_syscall_64+0x106/0xf80
[  133.849839][ T6841]  ? clear_bhb_loop+0x40/0x90
[  133.854497][ T6841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.860370][ T6841] RIP: 0033:0x7faabd0a7407
[  133.864763][ T6841] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  133.884359][ T6841] RSP: 002b:00007ffe85b20120 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  133.892763][ T6841] RAX: ffffffffffffffda RBX: 00007faabd871880 RCX: 00007faabd0a7407
[  133.900713][ T6841] RDX: 0000000000000000 RSI: 00007ffe85b20f1b RDI: ffffffffffffff9c
[  133.908674][ T6841] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  133.916637][ T6841] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  133.924589][ T6841] R13: 00007ffe85b20370 R14: 00007faabd9d8000 R15: 0000557d460984d8
[  133.932554][ T6841]  </TASK>
[  133.935842][ T6841] Kernel Offset: disabled
[  133.940137][ T6841] Rebooting in 86400 seconds..