last executing test programs:

15.106518289s ago: executing program 1 (id=69):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
gettid()
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r2 = open_tree(r1, 0x0, 0x9101)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8=r2, @ANYRES16=r2], 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140))
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno='])
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r0, &(0x7f0000000240)=0x8, r0, &(0x7f0000000280)=0xa5, 0xd84, 0x6)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0', [{0x20, '$&:}){[)+'}], 0xa, "b17e256ae8e9ea29df71bfdd134cc19c970b31bfc7f795b823a24ac40ddf211223061d276b04f91a2394b8449943ed24b55b1aaa89029b3bf1f11c3c8686081492027b9fe157e7f55e2c0eaf30ceb16508348e0b24646d1f57038937a498689fef49e51fde602690d5b6258ceb8b8afb690ada36a50e7180ae5410b10be794165ce1"}, 0x97)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}}, 0x4048010)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r5, 0x0, 0x0)
listen(r5, 0x5)
add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x239, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}}, 0x200040c0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x1000000, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102}, {@remote}, {@private=0xa010101}, {@private, 0x800}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0)
socket$inet(0x2, 0x3, 0x4)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, 'N!N '}}}}, 0x0)

13.417884083s ago: executing program 1 (id=74):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='user\x00', 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='100000', 0x6)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
r2 = userfaultfd(0x80001)
socket(0xa, 0x801, 0x0)
getsockopt(0xffffffffffffffff, 0x29, 0x7, 0x0, &(0x7f0000001ffc))
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f01"], 0x4)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000})
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x10000000000008a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000e5ff000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000500"/28], 0x50)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x4, "d30f388c52647600", 0x1, 0x5, 0x4000007, 0x7}, 0x3c)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r5, &(0x7f0000000280)='0', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40881}, 0x400c004)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test/cgroup.procs/file0\x00', 0x143042, 0x0)

13.068695124s ago: executing program 0 (id=75):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26)
r0 = socket$kcm(0x11, 0x3, 0x300)
socket$kcm(0xa, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000001280)={@empty, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010108, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x5, 0x0, 0x20}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
recvmsg$kcm(r0, 0x0, 0x2080)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x67})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000004060300000000000000000000000000050001000700000002be8484cbfdbf69111d38ab32a14b1a916c460fe1a106e7124b0c87b3baa1d5d80071d8"], 0x1c}}, 0x40000)
r6 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000000080))
read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)

11.349753814s ago: executing program 1 (id=81):
sendto(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x801, 0x0, 0x0)
syz_usb_connect$uac3(0x6, 0x104, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x84e, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$inet(r0, 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000140)=0x1e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000003700090022bd7008fddbdf2502000000080007000a010100"], 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x90)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090605000000000000100000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x20801, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4c840)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001080)=@deltfilter={0x6a8, 0x2d, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0x10, 0xfff1}, {0x6, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x46c, 0x2, [@TCA_BASIC_ACT={0x4}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x1}}, @TCA_BASIC_POLICE={0x450, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x4, 0x4f9, 0x9, 0x1, 0x3, 0x9, 0x8000, 0xaea, 0x3, 0x200, 0xfff, 0x2, 0x5, 0x3, 0x10000000, 0x9, 0x9c30, 0x80000001, 0x94d, 0x7, 0x2, 0x1800000, 0x6, 0x2, 0x0, 0x9a, 0x9, 0x4222, 0xa3f, 0x2, 0x6, 0x10001, 0x5c9de47b, 0x5b, 0x9, 0x6, 0x9, 0xa6, 0x7, 0xe7, 0x3, 0x4, 0x100, 0x9, 0x1ff, 0x3, 0x4, 0x3, 0xf, 0x3, 0x6, 0x2, 0x7, 0x9, 0x1, 0x4, 0xd, 0x7, 0x0, 0x1, 0x2, 0x7, 0x1, 0xbb7, 0x7, 0x9, 0x4, 0x6, 0x0, 0x3, 0x80, 0x6, 0x7ff, 0xb, 0x8, 0x7, 0x10001, 0x401, 0x0, 0x5, 0x101, 0x74be, 0x8, 0x5, 0x10000, 0x100, 0x2, 0xfffff9c8, 0xce4c, 0x100, 0x3, 0x8, 0x5, 0x7, 0x9, 0xff, 0x10, 0x8, 0x7fffffff, 0x8, 0x8, 0xa63, 0x8001, 0xe3, 0x5, 0x4, 0x3, 0x3e8, 0x5, 0x4, 0xb4, 0x2d6c, 0x3, 0xfffffffc, 0xe, 0x6, 0x8, 0x3, 0x3, 0x7, 0x40, 0x3b0, 0x2, 0xd7, 0xfffffffb, 0x8ea, 0x775, 0xe, 0x2, 0xc, 0x3, 0x9, 0xdda0, 0x5, 0xfffffd27, 0x0, 0xc78a, 0x6, 0x8, 0x6, 0x6, 0x3, 0x6, 0x7, 0x2, 0x0, 0x5a3, 0x6, 0x9, 0x200, 0x4800, 0x1, 0x80000000, 0x21e, 0x7f7, 0xe, 0x3, 0x5, 0x7d71, 0xf59f, 0x991, 0xfff, 0x2, 0x8, 0x8, 0x46ecaa85, 0x4, 0x1, 0x7, 0x5, 0x1, 0x9, 0x9, 0x2, 0x80000000, 0x6, 0x2, 0x1545, 0x7ff, 0x6, 0x81, 0x5, 0x7ff, 0x1, 0xb2, 0xfff, 0xf, 0x1, 0x80000001, 0x6, 0x12dc0, 0x4b1, 0xd, 0xfffffffb, 0x8, 0x200000, 0x100, 0x2, 0xe, 0x8, 0x1, 0x4, 0xffffffff, 0x4, 0x3, 0x9, 0x40, 0x8, 0x7f, 0x2, 0x9, 0x5, 0x5, 0xfffffff8, 0x4, 0x98, 0x4, 0x7, 0xb, 0x2, 0x3, 0x8, 0x8, 0xfffeffff, 0x9, 0x0, 0xa406, 0xfff, 0x5, 0x6, 0x9, 0x40, 0x7, 0x5, 0x5, 0x1ff, 0x1, 0x1, 0xfffffff0, 0x8, 0x4, 0x0, 0x4c, 0x1, 0x9, 0x8b18, 0xdb, 0x3ff, 0x401, 0x4, 0x1, 0x3, 0x0, 0x166, 0x7f]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x2, 0x1, 0xee07, 0xc1, {0x10, 0x1, 0x9d, 0x81, 0x4, 0x1}, {0x8, 0x2, 0xba1, 0xfff8, 0x0, 0x10}, 0x8, 0xa, 0x2c0}}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x200, 0x2, [@TCA_CGROUP_ACT={0x1f0, 0x1, [@m_csum={0xd4, 0xc, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x4, 0xf, 0x2, 0x2}, 0x1e}}]}, {0x89, 0x6, "200c05225c0372514641c26646102f0cfdc9c7dea6019f973d34aecb6217651dd0768d5b3874c81e37780dbeb896383c0b78de232adb1bb171cd0e3d69e5b860cfc3254e4672603884562cb3ab1f90a2a350b68a96f11486375d39e49aa6fc357c36707d1885ff319b15dc792359d975d0c574fa3f36f8e94ba17496001c2030526e240a29"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x118, 0x12, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xff, 0x2, 0x2, 0x8}}, @TCA_DEF_DATA={0xa, 0x3, 'icmp6\x00'}]}, {0xc6, 0x6, "5f99e124e827b0ca65ff21c46a4448bb1b9288303238e9f482303713b51e6242ef44c15e456e8815a5a4bcf4db81d77ea7c25e152017aa747355d126ca61183d52e01aa05028f38c38efc2f6891895a8525b9e9078a562ff62f963c3dcc193b50a1a9370a445488e2abbe03d4cff5028e76df34ebb150d6e1fac7d529278cb84ba075a01877c0dc506b21a0ac5cd32c8a2cc401ddd1e8ad858ebf30f1c4c72fdab8b74bda4b643baafe311069f0088d67079a0a2024726969436ea660a98bde475e5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}]}}]}, 0x6a8}, 0x1, 0x0, 0x0, 0x20041004}, 0x0)

11.248826239s ago: executing program 3 (id=82):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto$packet(r1, 0x0, 0x0, 0x4004004, &(0x7f0000000180)={0xc9, 0x4, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14)

10.411834187s ago: executing program 3 (id=83):
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x9, 0x3)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000080)={0x800100, 0x7, 0xfffffffe, 0x10000, 0x82, 0x80003})
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004b2000/0x400000)=nil)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="bb000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c018008000140ac1414aa050007008400000006000440462000000c00028008ab0140"], 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80)
uname(&(0x7f0000000300)=""/7)

10.284328406s ago: executing program 0 (id=85):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
gettid()
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r2 = open_tree(r1, 0x0, 0x9101)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8=r2, @ANYRES16=r2], 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140))
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno='])
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r0, &(0x7f0000000240)=0x8, r0, &(0x7f0000000280)=0xa5, 0xd84, 0x6)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0', [{0x20, '$&:}){[)+'}], 0xa, "b17e256ae8e9ea29df71bfdd134cc19c970b31bfc7f795b823a24ac40ddf211223061d276b04f91a2394b8449943ed24b55b1aaa89029b3bf1f11c3c8686081492027b9fe157e7f55e2c0eaf30ceb16508348e0b24646d1f57038937a498689fef49e51fde602690d5b6258ceb8b8afb690ada36a50e7180ae5410b10be794165ce1"}, 0x97)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}}, 0x4048010)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r5, 0x0, 0x0)
listen(r5, 0x5)
add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x239, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}}, 0x200040c0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x1000000, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102}, {@remote}, {@private=0xa010101}, {@private, 0x800}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0)
socket$inet(0x2, 0x3, 0x4)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, 'N!N '}}}}, 0x0)

9.681169596s ago: executing program 1 (id=86):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r1=>0x0})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r5, 0x3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000010)
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {0x0, 0xff}, 0x2}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x7fa955d80340)
socket(0x10, 0x3, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002540)=ANY=[@ANYBLOB="2c0000000203050b00000000001200000540000000000800010001000001"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
socket$nl_netfilter(0x10, 0x3, 0xc)

9.306938762s ago: executing program 3 (id=88):
syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
read$FUSE(0xffffffffffffffff, &(0x7f0000004040)={0x2020}, 0x2020)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x1005, 0xffff2d37, 0xffffff01, 0x6, 0x10000003, 0x5, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xb, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0x1000, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x5, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xffffffd3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2be, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x26, 0x3, 0xa7e, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000045, 0x5f31, 0x1000d, 0x4e0, 0x1, 0x4, 0x3, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0xe, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x80005, 0x8, 0x1ef, 0x22, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0xc, 0x2, 0x2, 0x3, 0x2000000b, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x6, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x4002, 0x3, 0x7fe, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x40000007, 0x20000b, 0x5, 0x938, 0xfffffbff, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x54, 0x5, 0x3, 0x101, 0x10000, 0x5, 0x7fff, 0xfffe, 0xa620, 0x1, 0x78b, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xab, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0xfffffffd, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
writev(r0, &(0x7f0000001a80)=[{&(0x7f0000000000)="dbc9f9eba15ec7418c55a8c2a847e8c4224808aa7b1fb0faff03e9e5e44cc6528058f10e5e0ac05c4f5966dc638ac88273a6bbffcb8da1017c0202dd650f48", 0x3f}, {&(0x7f0000000040)="abf92f6267cdd3a79d070668f13a81bef8f7e5d732e16f23ae539d519bfe2046de9cea2cb0db417b85f3153ca218070fede83059fa8e596240135ae83787d8d9980813bab3d2f8db74c1057739087d65b44c9ca62022", 0x56}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="875cf6447f7d3f2e6ccf66f15c4a2da1563cfac0396035bf2fb5ae5c420a", 0x1e}, {&(0x7f00000018c0)="77cfa10287d29ef2196692f26969e35b55162e713e6dc67aab7b3ef66a345386e3f134800ae3a7e6e2bba77bbc3944e65b359160434f43ade41e3ab5902c21838ddddee898308ec64a63fdde8d905fc3fe472e356a0427d4cc47dffddc9a48ab6bb2ed906d9a2a063cc9fe3cd6403682d11b642ac193fef423319fe6cc92e3412bc9b2d25ee0a0d1aa558053c3a7e446edc583d835", 0x95}, {&(0x7f0000001980)="025e44702490a1fc06a8b10da8e0d9c494020d52797a6db5469ed5beee333b9b52ae8fad9580c6d0418c319293159ce5a137e8235892b924", 0x38}, {&(0x7f00000019c0)="a3f56e4fe37dfaf342fab675dcc58bf2a4dc76515a0de28c7d94bda612c861105b425806ed2bdc908f96b65c58388637df1ea6110c99dc8c8e4ba87a9053a51fdf8739d1316e16362d93c379458642230efbba355e7bb812ae15cbf445fc99bde499af1e35b4c06d26db8d014cf6e49d6035012659f5c705402be31b84933d72d629f22fcbf5ba0a5f9726f035164b2c8372b5666ff1dc", 0x97}], 0x7)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

7.817463998s ago: executing program 2 (id=90):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x15)
ioctl(0xffffffffffffffff, 0x404c4701, &(0x7f00000001c0)="0100000000000000000000000100000001000000010000000000000020000000200000000100000001")
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0xf9)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000241)=0x3)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000242)=0x3f)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x1)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000244)=0x1c)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000245)=0xf9)

7.762714073s ago: executing program 1 (id=91):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='user\x00', 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='100000', 0x6)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
r2 = userfaultfd(0x80001)
socket(0xa, 0x801, 0x0)
getsockopt(0xffffffffffffffff, 0x29, 0x7, 0x0, &(0x7f0000001ffc))
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f01"], 0x4)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000})
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x10000000000008a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000e5ff000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000500"/28], 0x50)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x4, "d30f388c52647600", 0x1, 0x5, 0x4000007, 0x7}, 0x3c)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r5, &(0x7f0000000280)='0', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40881}, 0x400c004)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test/cgroup.procs/file0\x00', 0x143042, 0x0)

7.668445854s ago: executing program 2 (id=92):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b0000000000000000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000086fc000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000ae054f04a3a9cf000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000000a060300000000000000000007000000280808800c00078008000940000000000c00078074ccd1b0c060c60800064000000007003200"/67], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x8010)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, 0x0, 0x0)
sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000000a0a030000000000000000000500000809000100737930a0fdc974e811456d2a7c3e7d990a0f7a3000000000"], 0x20}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r8, &(0x7f0000000340)=ANY=[], 0x141)

6.724195196s ago: executing program 3 (id=94):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r1=>0x0})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r5, 0x3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01705c1b31ae11d35451a700000030a2b09f"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000010)
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {0x0, 0xff}, 0x2}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x7fa955d80340)
socket(0x10, 0x3, 0x0)
r8 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r8, &(0x7f0000000300)={0x0, &(0x7f00000000c0)=[@in_dx={0x69, 0x20, {0x3c5e, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x5cee5408, 0x0, 0x1}}, @out_dx={0x6a, 0x28, {0xa265, 0x3, 0x8}}, @nested_load_syzos={0x136, 0xc0, {0x3, 0x6, [@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x90, 0x0, 0x2, 0xe9c8}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @in_dx={0x69, 0x20, {0xc769, 0x5}}]}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @in_dx={0x69, 0x20, {0x5d51}}, @cpuid={0x64, 0x18, {0x50a, 0x2}}, @nested_amd_vmload={0x182, 0x18}, @nested_vmresume={0x130, 0x18}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @rdmsr={0x66, 0x18, {0x818}}, @nested_amd_vmsave={0x183, 0x18, 0x2}], 0x208})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002540)=ANY=[@ANYBLOB="2c0000000203050b00000000001200000540000000000800010001000001"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
socket$nl_netfilter(0x10, 0x3, 0xc)

6.199933646s ago: executing program 2 (id=96):
sendto(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x801, 0x0, 0x0)
syz_usb_connect$uac3(0x6, 0x104, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x84e, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$inet(r0, 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000140)=0x1e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000003700090022bd7008fddbdf2502000000080007000a010100"], 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x90)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090605000000000000100000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x20801, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4c840)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001080)=@deltfilter={0x6a8, 0x2d, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0x10, 0xfff1}, {0x6, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x46c, 0x2, [@TCA_BASIC_ACT={0x4}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x1}}, @TCA_BASIC_POLICE={0x450, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x4, 0x4f9, 0x9, 0x1, 0x3, 0x9, 0x8000, 0xaea, 0x3, 0x200, 0xfff, 0x2, 0x5, 0x3, 0x10000000, 0x9, 0x9c30, 0x80000001, 0x94d, 0x7, 0x2, 0x1800000, 0x6, 0x2, 0x0, 0x9a, 0x9, 0x4222, 0xa3f, 0x2, 0x6, 0x10001, 0x5c9de47b, 0x5b, 0x9, 0x6, 0x9, 0xa6, 0x7, 0xe7, 0x3, 0x4, 0x100, 0x9, 0x1ff, 0x3, 0x4, 0x3, 0xf, 0x3, 0x6, 0x2, 0x7, 0x9, 0x1, 0x4, 0xd, 0x7, 0x0, 0x1, 0x2, 0x7, 0x1, 0xbb7, 0x7, 0x9, 0x4, 0x6, 0x0, 0x3, 0x80, 0x6, 0x7ff, 0xb, 0x8, 0x7, 0x10001, 0x401, 0x0, 0x5, 0x101, 0x74be, 0x8, 0x5, 0x10000, 0x100, 0x2, 0xfffff9c8, 0xce4c, 0x100, 0x3, 0x8, 0x5, 0x7, 0x9, 0xff, 0x10, 0x8, 0x7fffffff, 0x8, 0x8, 0xa63, 0x8001, 0xe3, 0x5, 0x4, 0x3, 0x3e8, 0x5, 0x4, 0xb4, 0x2d6c, 0x3, 0xfffffffc, 0xe, 0x6, 0x8, 0x3, 0x3, 0x7, 0x40, 0x3b0, 0x2, 0xd7, 0xfffffffb, 0x8ea, 0x775, 0xe, 0x2, 0xc, 0x3, 0x9, 0xdda0, 0x5, 0xfffffd27, 0x0, 0xc78a, 0x6, 0x8, 0x6, 0x6, 0x3, 0x6, 0x7, 0x2, 0x0, 0x5a3, 0x6, 0x9, 0x200, 0x4800, 0x1, 0x80000000, 0x21e, 0x7f7, 0xe, 0x3, 0x5, 0x7d71, 0xf59f, 0x991, 0xfff, 0x2, 0x8, 0x8, 0x46ecaa85, 0x4, 0x1, 0x7, 0x5, 0x1, 0x9, 0x9, 0x2, 0x80000000, 0x6, 0x2, 0x1545, 0x7ff, 0x6, 0x81, 0x5, 0x7ff, 0x1, 0xb2, 0xfff, 0xf, 0x1, 0x80000001, 0x6, 0x12dc0, 0x4b1, 0xd, 0xfffffffb, 0x8, 0x200000, 0x100, 0x2, 0xe, 0x8, 0x1, 0x4, 0xffffffff, 0x4, 0x3, 0x9, 0x40, 0x8, 0x7f, 0x2, 0x9, 0x5, 0x5, 0xfffffff8, 0x4, 0x98, 0x4, 0x7, 0xb, 0x2, 0x3, 0x8, 0x8, 0xfffeffff, 0x9, 0x0, 0xa406, 0xfff, 0x5, 0x6, 0x9, 0x40, 0x7, 0x5, 0x5, 0x1ff, 0x1, 0x1, 0xfffffff0, 0x8, 0x4, 0x0, 0x4c, 0x1, 0x9, 0x8b18, 0xdb, 0x3ff, 0x401, 0x4, 0x1, 0x3, 0x0, 0x166, 0x7f]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x2, 0x1, 0xee07, 0xc1, {0x10, 0x1, 0x9d, 0x81, 0x4, 0x1}, {0x8, 0x2, 0xba1, 0xfff8, 0x0, 0x10}, 0x8, 0xa, 0x2c0}}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x200, 0x2, [@TCA_CGROUP_ACT={0x1f0, 0x1, [@m_csum={0xd4, 0xc, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x4, 0xf, 0x2, 0x2}, 0x1e}}]}, {0x89, 0x6, "200c05225c0372514641c26646102f0cfdc9c7dea6019f973d34aecb6217651dd0768d5b3874c81e37780dbeb896383c0b78de232adb1bb171cd0e3d69e5b860cfc3254e4672603884562cb3ab1f90a2a350b68a96f11486375d39e49aa6fc357c36707d1885ff319b15dc792359d975d0c574fa3f36f8e94ba17496001c2030526e240a29"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x118, 0x12, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xff, 0x2, 0x2, 0x8}}, @TCA_DEF_DATA={0xa, 0x3, 'icmp6\x00'}]}, {0xc6, 0x6, "5f99e124e827b0ca65ff21c46a4448bb1b9288303238e9f482303713b51e6242ef44c15e456e8815a5a4bcf4db81d77ea7c25e152017aa747355d126ca61183d52e01aa05028f38c38efc2f6891895a8525b9e9078a562ff62f963c3dcc193b50a1a9370a445488e2abbe03d4cff5028e76df34ebb150d6e1fac7d529278cb84ba075a01877c0dc506b21a0ac5cd32c8a2cc401ddd1e8ad858ebf30f1c4c72fdab8b74bda4b643baafe311069f0088d67079a0a2024726969436ea660a98bde475e5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}]}}]}, 0x6a8}, 0x1, 0x0, 0x0, 0x20041004}, 0x0)

5.656036096s ago: executing program 0 (id=97):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r1=>0x0})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r5, 0x3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01705c1b31ae11d35451a700000030a2b09fecb9abfab2"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000010)
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {0x0, 0xff}, 0x2}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x7fa955d80340)
socket(0x10, 0x3, 0x0)
r8 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r8, &(0x7f0000000300)={0x0, &(0x7f00000000c0)=[@in_dx={0x69, 0x20, {0x3c5e, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x5cee5408, 0x0, 0x1}}, @out_dx={0x6a, 0x28, {0xa265, 0x3, 0x8}}, @nested_load_syzos={0x136, 0xc0, {0x3, 0x6, [@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x90, 0x0, 0x2, 0xe9c8}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @in_dx={0x69, 0x20, {0xc769, 0x5}}]}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @in_dx={0x69, 0x20, {0x5d51}}, @cpuid={0x64, 0x18, {0x50a, 0x2}}, @nested_amd_vmload={0x182, 0x18}, @nested_vmresume={0x130, 0x18}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @rdmsr={0x66, 0x18, {0x818}}, @nested_amd_vmsave={0x183, 0x18, 0x2}], 0x208})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002540)=ANY=[@ANYBLOB="2c0000000203050b00000000001200000540000000000800010001000001"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
socket$nl_netfilter(0x10, 0x3, 0xc)

5.595071825s ago: executing program 3 (id=98):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xffbffffa, 0x3, 0x0, 'queue0\x00', 0xe})
r2 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)={0x0, 0x722})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000600)={0x2020}, 0x2020)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000400))

5.23171456s ago: executing program 4 (id=100):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='48:8f:5a:', 0x9)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)

4.058470957s ago: executing program 2 (id=101):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004800}, 0x0)

3.81710487s ago: executing program 4 (id=102):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x15)
ioctl(0xffffffffffffffff, 0x404c4701, &(0x7f00000001c0)="0100000000000000000000000100000001000000010000000000000020000000200000000100000001")
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0xf9)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000241)=0x3)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000242)=0x3f)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x1)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000244)=0x1c)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000245)=0xf9)

3.725682005s ago: executing program 0 (id=103):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x700, 0x0, 0x13}}}}}, 0x36)

3.64863758s ago: executing program 4 (id=104):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x802, 0x0)
utimes(0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(r2, 0x0, 0x890)
socket$netlink(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r4 = getpid()
sched_setscheduler(r4, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/usb/usbmon/0s\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)

3.580510164s ago: executing program 2 (id=105):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto$packet(r1, 0x0, 0x0, 0x4004004, &(0x7f0000000180)={0xc9, 0x4, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14)

3.419470188s ago: executing program 0 (id=106):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b0000000000000000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000086fc000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000ae054f04a3a9cf000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, 0x0, 0x0)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000000a060300000000000000000007000000280808800c00078008000940000000000c00078074ccd1b0c060c60800064000000007003200"/67], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x8010)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, 0x0, 0x0)
sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000000a0a030000000000000000000500000809000100737930a0fdc974e811456d2a7c3e7d990a0f7a3000000000"], 0x20}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r8, &(0x7f0000000340)=ANY=[], 0x141)

3.347527427s ago: executing program 1 (id=107):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26)
r0 = socket$kcm(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000001280)={@empty, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010108, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x5, 0x0, 0x20}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
recvmsg$kcm(r0, 0x0, 0x2080)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x67})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090603000000000000000000f90500004073797a3100000000080009400021000005000700ff0000000c00018008000140e00040000c00148008000140ffffffff000000000001c48e27423777"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000004060300000000000000000000000000050001000700000002be8484cbfdbf69111d38ab32a14b1a916c460fe1a106e7124b0c87b3baa1d5d80071d8"], 0x1c}}, 0x40000)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4}, &(0x7f0000000080))
read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0)

3.344671126s ago: executing program 2 (id=108):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
gettid()
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r2 = open_tree(r1, 0x0, 0x9101)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8=r2, @ANYRES16=r2], 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140))
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno='])
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r0, &(0x7f0000000240)=0x8, r0, &(0x7f0000000280)=0xa5, 0xd84, 0x6)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0', [{0x20, '$&:}){[)+'}], 0xa, "b17e256ae8e9ea29df71bfdd134cc19c970b31bfc7f795b823a24ac40ddf211223061d276b04f91a2394b8449943ed24b55b1aaa89029b3bf1f11c3c8686081492027b9fe157e7f55e2c0eaf30ceb16508348e0b24646d1f57038937a498689fef49e51fde602690d5b6258ceb8b8afb690ada36a50e7180ae5410b10be794165ce1"}, 0x97)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}}, 0x4048010)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r5, 0x0, 0x0)
listen(r5, 0x5)
add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x243, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}}, 0x200040c0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x1000000, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102}, {@remote}, {@private=0xa010101}, {@private, 0x800}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0)
socket$inet(0x2, 0x3, 0x4)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, 'N!N '}}}}, 0x0)

2.394973852s ago: executing program 0 (id=109):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x8010)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, 0x0, 0x0)
sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000000a0a030000000000000000000500000809000100737930a0fdc974e811456d2a"], 0x20}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x141)

2.299594783s ago: executing program 4 (id=110):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06000d08"], 0x9)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000040)="09000000010001", 0x7)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0xff8a, @mcast2={0xff, 0x5}}, r3}}, 0x48)
r5 = signalfd(r1, &(0x7f0000000140)={[0x5]}, 0x8)
quotactl_fd$Q_QUOTAOFF(r5, 0xffffffff80000301, 0x0, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000001040)={0x12, 0x10, 0xfa00, {&(0x7f0000000580), r3, r2}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0)

2.075264926s ago: executing program 3 (id=111):
sendto(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x801, 0x0, 0x0)
syz_usb_connect$uac3(0x6, 0x104, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x84e, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$inet(r0, 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000140)=0x1e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000003700090022bd7008fddbdf2502000000080007000a010100"], 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x90)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090605000000000000100000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x20801, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4c840)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001080)=@deltfilter={0x6a8, 0x2d, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0x10, 0xfff1}, {0x6, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x46c, 0x2, [@TCA_BASIC_ACT={0x4}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x1}}, @TCA_BASIC_POLICE={0x450, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x4, 0x4f9, 0x9, 0x1, 0x3, 0x9, 0x8000, 0xaea, 0x3, 0x200, 0xfff, 0x2, 0x5, 0x3, 0x10000000, 0x9, 0x9c30, 0x80000001, 0x94d, 0x7, 0x2, 0x1800000, 0x6, 0x2, 0x0, 0x9a, 0x9, 0x4222, 0xa3f, 0x2, 0x6, 0x10001, 0x5c9de47b, 0x5b, 0x9, 0x6, 0x9, 0xa6, 0x7, 0xe7, 0x3, 0x4, 0x100, 0x9, 0x1ff, 0x3, 0x4, 0x3, 0xf, 0x3, 0x6, 0x2, 0x7, 0x9, 0x1, 0x4, 0xd, 0x7, 0x0, 0x1, 0x2, 0x7, 0x1, 0xbb7, 0x7, 0x9, 0x4, 0x6, 0x0, 0x3, 0x80, 0x6, 0x7ff, 0xb, 0x8, 0x7, 0x10001, 0x401, 0x0, 0x5, 0x101, 0x74be, 0x8, 0x5, 0x10000, 0x100, 0x2, 0xfffff9c8, 0xce4c, 0x100, 0x3, 0x8, 0x5, 0x7, 0x9, 0xff, 0x10, 0x8, 0x7fffffff, 0x8, 0x8, 0xa63, 0x8001, 0xe3, 0x5, 0x4, 0x3, 0x3e8, 0x5, 0x4, 0xb4, 0x2d6c, 0x3, 0xfffffffc, 0xe, 0x6, 0x8, 0x3, 0x3, 0x7, 0x40, 0x3b0, 0x2, 0xd7, 0xfffffffb, 0x8ea, 0x775, 0xe, 0x2, 0xc, 0x3, 0x9, 0xdda0, 0x5, 0xfffffd27, 0x0, 0xc78a, 0x6, 0x8, 0x6, 0x6, 0x3, 0x6, 0x7, 0x2, 0x0, 0x5a3, 0x6, 0x9, 0x200, 0x4800, 0x1, 0x80000000, 0x21e, 0x7f7, 0xe, 0x3, 0x5, 0x7d71, 0xf59f, 0x991, 0xfff, 0x2, 0x8, 0x8, 0x46ecaa85, 0x4, 0x1, 0x7, 0x5, 0x1, 0x9, 0x9, 0x2, 0x80000000, 0x6, 0x2, 0x1545, 0x7ff, 0x6, 0x81, 0x5, 0x7ff, 0x1, 0xb2, 0xfff, 0xf, 0x1, 0x80000001, 0x6, 0x12dc0, 0x4b1, 0xd, 0xfffffffb, 0x8, 0x200000, 0x100, 0x2, 0xe, 0x8, 0x1, 0x4, 0xffffffff, 0x4, 0x3, 0x9, 0x40, 0x8, 0x7f, 0x2, 0x9, 0x5, 0x5, 0xfffffff8, 0x4, 0x98, 0x4, 0x7, 0xb, 0x2, 0x3, 0x8, 0x8, 0xfffeffff, 0x9, 0x0, 0xa406, 0xfff, 0x5, 0x6, 0x9, 0x40, 0x7, 0x5, 0x5, 0x1ff, 0x1, 0x1, 0xfffffff0, 0x8, 0x4, 0x0, 0x4c, 0x1, 0x9, 0x8b18, 0xdb, 0x3ff, 0x401, 0x4, 0x1, 0x3, 0x0, 0x166, 0x7f]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x2, 0x1, 0xee07, 0xc1, {0x10, 0x1, 0x9d, 0x81, 0x4, 0x1}, {0x8, 0x2, 0xba1, 0xfff8, 0x0, 0x10}, 0x8, 0xa, 0x2c0}}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x200, 0x2, [@TCA_CGROUP_ACT={0x1f0, 0x1, [@m_csum={0xd4, 0xc, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x4, 0xf, 0x2, 0x2}, 0x1e}}]}, {0x8b, 0x6, "200c05225c0372514641c26646102f0cfdc9c7dea6019f973d34aecb6217651dd0768d5b3874c81e37780dbeb896383c0b78de232adb1bb171cd0e3d69e5b860cfc3254e4672603884562cb3ab1f90a2a350b68a96f11486375d39e49aa6fc357c36707d1885ff319b15dc792359d975d0c574fa3f36f8e94ba17496001c2030526e240a29c674"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x118, 0x12, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xff, 0x2, 0x2, 0x8}}, @TCA_DEF_DATA={0xa, 0x3, 'icmp6\x00'}]}, {0xc6, 0x6, "5f99e124e827b0ca65ff21c46a4448bb1b9288303238e9f482303713b51e6242ef44c15e456e8815a5a4bcf4db81d77ea7c25e152017aa747355d126ca61183d52e01aa05028f38c38efc2f6891895a8525b9e9078a562ff62f963c3dcc193b50a1a9370a445488e2abbe03d4cff5028e76df34ebb150d6e1fac7d529278cb84ba075a01877c0dc506b21a0ac5cd32c8a2cc401ddd1e8ad858ebf30f1c4c72fdab8b74bda4b643baafe311069f0088d67079a0a2024726969436ea660a98bde475e5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}]}}]}, 0x6a8}, 0x1, 0x0, 0x0, 0x20041004}, 0x0)

1.75514979s ago: executing program 4 (id=112):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='48:8f:5a:', 0x9)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)

0s ago: executing program 4 (id=113):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000360, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
listen(r2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'pim6reg\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000140c00050000000000000000021800002823a82752fd962251d6b89efa95ba66ad714fdd2ccc4ceb58d8fef140d65898a70423df6182a705b7bbcbd47919afe11656ec52bbe249da", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xfe, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}}, 0x4048010)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={<r10=>r9})
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0xd, 0x6}, &(0x7f0000000580)=0x8)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0)
r12 = socket(0x10, 0x803, 0x0)
r13 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0xb, 0x8}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a2, 0xd5}}, @TCA_U32_CLASSID={0x8, 0x1, {0xe, 0x3}}]}}]}, 0x4c}}, 0x800)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x202, 0x10001, 0xef8})
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c0002800500230000000000080005"], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts.
[   65.038954][   T30] kauditd_printk_skb: 8 callbacks suppressed
[   65.038969][   T30] audit: type=1400 audit(1787059886.107:129): avc:  denied  { mounton } for  pid=5582 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   65.068721][   T30] audit: type=1400 audit(1787059886.137:130): avc:  denied  { mount } for  pid=5582 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   65.071443][ T5582] cgroup: Unknown subsys name 'net'
[   65.098674][   T30] audit: type=1400 audit(1787059886.177:131): avc:  denied  { unmount } for  pid=5582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   65.205910][ T5582] cgroup: Unknown subsys name 'cpuset'
[   65.213857][ T5582] cgroup: Unknown subsys name 'rlimit'
[   65.345580][   T30] audit: type=1400 audit(1787059886.417:132): avc:  denied  { setattr } for  pid=5582 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   65.369417][   T30] audit: type=1400 audit(1787059886.417:133): avc:  denied  { create } for  pid=5582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   65.394915][   T30] audit: type=1400 audit(1787059886.417:134): avc:  denied  { write } for  pid=5582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   65.417251][   T30] audit: type=1400 audit(1787059886.417:135): avc:  denied  { read } for  pid=5582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   65.450060][ T5584] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   65.459480][   T30] audit: type=1400 audit(1787059886.527:136): avc:  denied  { relabelto } for  pid=5584 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[   65.485438][   T30] audit: type=1400 audit(1787059886.527:137): avc:  denied  { write } for  pid=5584 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   65.523015][   T30] audit: type=1400 audit(1787059886.587:138): avc:  denied  { read } for  pid=5582 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   66.450324][ T5582] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.457965][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.467234][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.476464][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.484308][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.491788][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.494307][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   68.505303][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   68.507098][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.512938][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.514848][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.528264][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   68.535247][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   68.542711][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.548955][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   68.555499][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.563493][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   68.569931][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   68.577198][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   68.586180][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.597145][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.606193][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.606476][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   68.618917][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.622414][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   68.631574][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.903237][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.910867][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.918216][ T5595] bridge_slave_0: entered allmulticast mode
[   69.924889][ T5595] bridge_slave_0: entered promiscuous mode
[   69.953058][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.960642][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.967827][ T5595] bridge_slave_1: entered allmulticast mode
[   69.974530][ T5595] bridge_slave_1: entered promiscuous mode
[   69.997724][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.004920][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.012223][ T5601] bridge_slave_0: entered allmulticast mode
[   70.019057][ T5601] bridge_slave_0: entered promiscuous mode
[   70.041621][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.049022][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.056302][ T5594] bridge_slave_0: entered allmulticast mode
[   70.062952][ T5594] bridge_slave_0: entered promiscuous mode
[   70.069807][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.077159][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.084516][ T5601] bridge_slave_1: entered allmulticast mode
[   70.091118][ T5601] bridge_slave_1: entered promiscuous mode
[   70.109984][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.117104][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.124288][ T5593] bridge_slave_0: entered allmulticast mode
[   70.130953][ T5593] bridge_slave_0: entered promiscuous mode
[   70.138656][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.145851][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.152975][ T5594] bridge_slave_1: entered allmulticast mode
[   70.159885][ T5594] bridge_slave_1: entered promiscuous mode
[   70.174327][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.190289][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.197855][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.206102][ T5593] bridge_slave_1: entered allmulticast mode
[   70.212740][ T5593] bridge_slave_1: entered promiscuous mode
[   70.233563][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.242748][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.249943][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.257643][ T5596] bridge_slave_0: entered allmulticast mode
[   70.264939][ T5596] bridge_slave_0: entered promiscuous mode
[   70.286626][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.308491][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.315774][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.322960][ T5596] bridge_slave_1: entered allmulticast mode
[   70.330056][ T5596] bridge_slave_1: entered promiscuous mode
[   70.344921][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.355726][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.372033][ T5595] team0: Port device team_slave_0 added
[   70.385962][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.396497][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.419033][ T5595] team0: Port device team_slave_1 added
[   70.432415][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.455368][ T5601] team0: Port device team_slave_0 added
[   70.469490][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.487514][ T5594] team0: Port device team_slave_0 added
[   70.494573][ T5601] team0: Port device team_slave_1 added
[   70.508076][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.518375][ T5593] team0: Port device team_slave_0 added
[   70.525700][ T5594] team0: Port device team_slave_1 added
[   70.538157][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.545355][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.571384][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.590494][ T5593] team0: Port device team_slave_1 added
[   70.613710][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.620694][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.647165][ T5607] Bluetooth: hci4: command tx timeout
[   70.647320][ T5607] Bluetooth: hci0: command tx timeout
[   70.652612][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.682629][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.689813][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.716026][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.716169][ T5607] Bluetooth: hci1: command tx timeout
[   70.726819][ T5598] Bluetooth: hci3: command tx timeout
[   70.732521][ T5608] Bluetooth: hci2: command tx timeout
[   70.739769][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.750710][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.776910][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.803042][ T5596] team0: Port device team_slave_0 added
[   70.816281][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.823355][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.849327][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.861475][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.868475][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.894513][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.917172][ T5596] team0: Port device team_slave_1 added
[   70.923312][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.930280][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.956198][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.968218][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.975190][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.001320][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.021479][ T5595] hsr_slave_0: entered promiscuous mode
[   71.027630][ T5595] hsr_slave_1: entered promiscuous mode
[   71.035666][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[   71.042852][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[   71.068704][ T5601] hsr_slave_0: entered promiscuous mode
[   71.074770][ T5601] hsr_slave_1: entered promiscuous mode
[   71.080626][ T5601] debugfs: 'hsr0' already exists in 'hsr'
[   71.086878][ T5601] Cannot create hsr debugfs directory
[   71.129708][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.136788][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.162857][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.183708][ T5594] hsr_slave_0: entered promiscuous mode
[   71.189737][ T5594] hsr_slave_1: entered promiscuous mode
[   71.195760][ T5594] debugfs: 'hsr0' already exists in 'hsr'
[   71.201475][ T5594] Cannot create hsr debugfs directory
[   71.217538][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.224614][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.250708][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.275425][ T5593] hsr_slave_0: entered promiscuous mode
[   71.281488][ T5593] hsr_slave_1: entered promiscuous mode
[   71.287575][ T5593] debugfs: 'hsr0' already exists in 'hsr'
[   71.293543][ T5593] Cannot create hsr debugfs directory
[   71.392605][ T5596] hsr_slave_0: entered promiscuous mode
[   71.398907][ T5596] hsr_slave_1: entered promiscuous mode
[   71.404939][ T5596] debugfs: 'hsr0' already exists in 'hsr'
[   71.410673][ T5596] Cannot create hsr debugfs directory
[   71.653845][ T5595] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.664718][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.672555][ T5595] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.685167][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.693646][ T5595] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.702489][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.713953][ T5595] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.724380][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.774806][ T5601] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.786038][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.798300][ T5601] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.807371][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.815363][ T5601] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.825458][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.835705][ T5601] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.844746][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.921756][ T5594] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.931544][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.939672][ T5594] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.949078][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.957179][ T5594] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.965915][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.974564][ T5594] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.982958][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.063090][ T5596] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   72.074443][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.082409][ T5596] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   72.090814][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.102013][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.115098][ T5596] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   72.124544][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.132318][ T5596] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   72.141747][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.201759][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.210923][ T5595] 8021q: adding VLAN 0 to HW filter on device team0
[   72.242357][  T251] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.250036][  T251] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.263459][ T5593] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   72.272229][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.280303][ T5593] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   72.290548][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.298463][ T5593] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   72.307402][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.317410][ T5593] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   72.325712][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.345663][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.352774][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.370875][ T5601] 8021q: adding VLAN 0 to HW filter on device team0
[   72.401470][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.408658][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.419850][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.452532][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.459639][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.480815][ T5594] 8021q: adding VLAN 0 to HW filter on device team0
[   72.495961][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.503047][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.524279][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.531364][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.574333][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.648027][ T5596] 8021q: adding VLAN 0 to HW filter on device team0
[   72.671166][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.709352][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.713487][ T5608] Bluetooth: hci0: command tx timeout
[   72.716602][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.729319][ T5608] Bluetooth: hci4: command tx timeout
[   72.768330][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.775680][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.793600][ T5607] Bluetooth: hci1: command tx timeout
[   72.797560][ T5598] Bluetooth: hci3: command tx timeout
[   72.799527][ T5608] Bluetooth: hci2: command tx timeout
[   72.855271][ T5593] 8021q: adding VLAN 0 to HW filter on device team0
[   72.927987][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.935135][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.958645][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.965815][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.290347][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.417410][ T5595] veth0_vlan: entered promiscuous mode
[   73.458134][ T5595] veth1_vlan: entered promiscuous mode
[   73.521730][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.560736][ T5595] veth0_macvtap: entered promiscuous mode
[   73.591933][ T5595] veth1_macvtap: entered promiscuous mode
[   73.645639][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.680417][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.710236][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.766362][ T5601] veth0_vlan: entered promiscuous mode
[   73.778837][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.820832][ T5601] veth1_vlan: entered promiscuous mode
[   73.890129][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.936488][ T5594] veth0_vlan: entered promiscuous mode
[   73.973391][  T247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.991469][  T251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.001947][ T5594] veth1_vlan: entered promiscuous mode
[   74.009274][  T251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.023622][ T5601] veth0_macvtap: entered promiscuous mode
[   74.054472][ T5601] veth1_macvtap: entered promiscuous mode
[   74.070147][   T30] kauditd_printk_skb: 11 callbacks suppressed
[   74.070161][   T30] audit: type=1400 audit(1787059895.137:150): avc:  denied  { sys_module } for  pid=5596 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   74.079470][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.098763][  T251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.134676][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.151746][   T30] audit: type=1400 audit(1787059895.217:151): avc:  denied  { mounton } for  pid=5595 comm="syz-executor" path="/root/syzkaller.Eyl6cu/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   74.163371][   T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.184470][   T30] audit: type=1400 audit(1787059895.217:152): avc:  denied  { mount } for  pid=5595 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   74.218562][   T30] audit: type=1400 audit(1787059895.217:153): avc:  denied  { mounton } for  pid=5595 comm="syz-executor" path="/root/syzkaller.Eyl6cu/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   74.239371][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.246562][   T30] audit: type=1400 audit(1787059895.227:154): avc:  denied  { mount } for  pid=5595 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   74.274656][   T30] audit: type=1400 audit(1787059895.227:155): avc:  denied  { mounton } for  pid=5595 comm="syz-executor" path="/root/syzkaller.Eyl6cu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   74.304906][ T5593] veth0_vlan: entered promiscuous mode
[   74.308792][ T5595] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.315173][ T5594] veth0_macvtap: entered promiscuous mode
[   74.331155][   T30] audit: type=1400 audit(1787059895.227:156): avc:  denied  { mounton } for  pid=5595 comm="syz-executor" path="/root/syzkaller.Eyl6cu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   74.358853][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.362315][   T30] audit: type=1400 audit(1787059895.267:157): avc:  denied  { unmount } for  pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   74.384970][ T5593] veth1_vlan: entered promiscuous mode
[   74.398109][   T30] audit: type=1400 audit(1787059895.277:158): avc:  denied  { mounton } for  pid=5595 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   74.438368][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.438919][   T30] audit: type=1400 audit(1787059895.277:159): avc:  denied  { mount } for  pid=5595 comm="syz-executor" name="/" dev="gadgetfs" ino=6557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   74.469901][ T5596] veth0_vlan: entered promiscuous mode
[   74.485441][ T5594] veth1_macvtap: entered promiscuous mode
[   74.532205][ T5596] veth1_vlan: entered promiscuous mode
[   74.553747][   T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.610421][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.626431][ T5593] veth0_macvtap: entered promiscuous mode
[   74.635298][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.652064][ T5593] veth1_macvtap: entered promiscuous mode
[   74.666787][ T5596] veth0_macvtap: entered promiscuous mode
[   74.692280][ T5596] veth1_macvtap: entered promiscuous mode
[   74.729229][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.739036][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.752296][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.787212][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.794548][ T5598] Bluetooth: hci0: command tx timeout
[   74.795608][ T5608] Bluetooth: hci4: command tx timeout
[   74.801516][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.826479][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.835910][ T5719] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   74.844185][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.847483][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.859814][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.874365][ T5598] Bluetooth: hci1: command tx timeout
[   74.874632][ T5607] Bluetooth: hci3: command tx timeout
[   74.879840][ T5608] Bluetooth: hci2: command tx timeout
[   74.913871][   T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.950015][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.961069][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.003877][ T5719] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   75.042823][ T5719] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   75.059485][   T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.082979][ T5719] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   75.099170][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.103360][   T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.112602][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.125212][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   75.133962][ T5719] usb 2-1: SerialNumber: syz
[   75.163070][ T3252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.180988][ T3252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.286864][ T3252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.295394][  T251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.301956][ T3252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.315495][ T5603] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   75.666551][ T5603] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   75.682167][ T3252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.690210][  T251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.699134][ T3339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.709185][ T5603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.717348][ T3252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.727026][  T251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.739174][ T5719] usb 2-1: skipping empty audio interface (v1)
[   75.755265][ T5603] usb 3-1: config 0 descriptor??
[   75.823582][ T3252] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.864746][   T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.909594][ T5719] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[   75.938462][ T5792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'.
[   75.976295][ T5719] usb 2-1: USB disconnect, device number 2
[   76.034515][   T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.064701][   T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.092761][   T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.097266][ T5587] udevd[5587]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   76.294929][ T3339] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.343702][ T3339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.546611][   T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.557756][   T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.678484][ T5796] random: crng reseeded on system resumption
[   76.695137][ T5798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'.
[   76.847707][ T5807] jffs2: notice: (5807) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   76.874195][ T5608] Bluetooth: hci4: command tx timeout
[   76.880090][ T5608] Bluetooth: hci0: command tx timeout
[   76.954973][ T5607] Bluetooth: hci3: command tx timeout
[   76.965228][ T5598] Bluetooth: hci1: command tx timeout
[   76.970852][ T5608] Bluetooth: hci2: command tx timeout
[   77.606413][ T5603] usb 3-1: Cannot set autoneg
[   77.844871][ T5603] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61
[   78.521237][ T5789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'.
[   79.016208][ T5603] usb 3-1: USB disconnect, device number 2
[   79.097413][   T30] kauditd_printk_skb: 34 callbacks suppressed
[   79.097428][   T30] audit: type=1400 audit(1787059900.167:194): avc:  denied  { unmount } for  pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   79.378086][   T30] audit: type=1400 audit(1787059900.447:195): avc:  denied  { create } for  pid=5823 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   79.398616][   T30] audit: type=1400 audit(1787059900.447:196): avc:  denied  { bind } for  pid=5823 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   79.414700][ T5825] misc userio: Invalid payload size
[   79.418810][   T30] audit: type=1400 audit(1787059900.447:197): avc:  denied  { accept } for  pid=5823 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   79.560760][   T30] audit: type=1400 audit(1787059900.477:198): avc:  denied  { read } for  pid=5823 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   79.609702][ T5831] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12'.
[   79.790700][   T30] audit: type=1400 audit(1787059900.677:199): avc:  denied  { write } for  pid=5823 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   80.125951][   T30] audit: type=1400 audit(1787059900.957:200): avc:  denied  { bind } for  pid=5829 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   80.431930][   T30] audit: type=1400 audit(1787059901.497:201): avc:  denied  { bind } for  pid=5829 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   80.891982][ T5831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'.
[   80.991407][ T5831] netlink: 'syz.3.12': attribute type 21 has an invalid length.
[   81.407880][   T30] audit: type=1400 audit(1787059902.397:202): avc:  denied  { create } for  pid=5841 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   81.566668][ T5842] Bluetooth: MGMT ver 1.23
[   81.574064][   T30] audit: type=1400 audit(1787059902.607:203): avc:  denied  { setopt } for  pid=5841 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   81.887213][ T5839] random: crng reseeded on system resumption
[   82.402282][ T5839] jffs2: notice: (5839) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   82.755205][ T5839] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR
[   83.411256][ T5857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18'.
[   84.132512][   T30] kauditd_printk_skb: 7 callbacks suppressed
[   84.132529][   T30] audit: type=1400 audit(1787059905.197:211): avc:  denied  { mmap_zero } for  pid=5865 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   84.424117][ T5725] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   84.642865][ T5871] netlink: 'syz.2.23': attribute type 7 has an invalid length.
[   84.893464][ T5725] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   84.917106][ T5859] random: crng reseeded on system resumption
[   84.929921][ T5725] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.940257][ T5725] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   85.025097][   T30] audit: type=1400 audit(1787059905.547:212): avc:  denied  { setopt } for  pid=5867 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   85.046754][ T5869] jffs2: notice: (5869) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   85.222580][   T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   85.256717][   T30] audit: type=1400 audit(1787059905.837:213): avc:  denied  { mount } for  pid=5867 comm="syz.2.23" name="/" dev="configfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   85.396094][   T30] audit: type=1400 audit(1787059905.857:214): avc:  denied  { search } for  pid=5867 comm="syz.2.23" name="/" dev="configfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   85.419165][   T24] usb 3-1: device descriptor read/64, error -71
[   85.481373][   T30] audit: type=1400 audit(1787059905.857:215): avc:  denied  { search } for  pid=5867 comm="syz.2.23" name="usb_gadget" dev="configfs" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   85.570556][   T30] audit: type=1400 audit(1787059906.167:216): avc:  denied  { write } for  pid=5858 comm="syz.3.20" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   85.627430][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   85.636132][ T5725] usb 1-1: SerialNumber: syz
[   85.677548][ T5608] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   85.683336][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   85.686076][ T5608] Bluetooth: hci2: Injecting HCI hardware error event
[   85.703452][ T5608] Bluetooth: hci2: hardware error 0x00
[   85.704257][   T30] audit: type=1400 audit(1787059906.167:217): avc:  denied  { add_name } for  pid=5858 comm="syz.3.20" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   86.075532][ T5884] netlink: 'syz.3.25': attribute type 7 has an invalid length.
[   86.174546][ T5882] 9p: Bad value for 'rfdno'
[   86.547565][   T29] cfg80211: failed to load regulatory.db
[   86.561799][   T30] audit: type=1400 audit(1787059906.167:218): avc:  denied  { create } for  pid=5858 comm="syz.3.20" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   86.582498][   T30] audit: type=1400 audit(1787059906.177:219): avc:  denied  { read write open } for  pid=5858 comm="syz.3.20" path="/3/mnt/fillfile" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   86.606623][   T24] usb 3-1: device descriptor read/64, error -71
[   86.637514][   T30] audit: type=1400 audit(1787059906.537:220): avc:  denied  { write } for  pid=5875 comm="syz.4.24" name="001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   86.713995][   T24] usb usb3-port1: attempt power cycle
[   87.124203][   T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   87.187971][   T24] usb 3-1: device descriptor read/8, error -71
[   88.004480][ T5608] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   88.440248][ T5900] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[   88.473567][ T5900] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   88.569056][ T5897] random: crng reseeded on system resumption
[   88.701822][ T5907] jffs2: notice: (5907) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[   89.882838][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'.
[   89.997597][ T5725] usb 1-1: skipping empty audio interface (v1)
[   90.275247][ T5725] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[   90.315332][ T5725] usb 1-1: USB disconnect, device number 2
[   90.337985][   T30] kauditd_printk_skb: 10 callbacks suppressed
[   90.337996][   T30] audit: type=1400 audit(1787059911.407:231): avc:  denied  { read write } for  pid=5917 comm="syz.0.35" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   90.480069][   T30] audit: type=1400 audit(1787059911.437:232): avc:  denied  { open } for  pid=5917 comm="syz.0.35" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   90.809497][   T29] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   91.418085][   T29] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   91.468095][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.490080][ T5931] netlink: 'syz.1.39': attribute type 7 has an invalid length.
[   91.561067][   T29] usb 1-1: config 0 descriptor??
[   91.566566][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   91.723587][   T30] audit: type=1400 audit(1787059912.797:233): avc:  denied  { create } for  pid=5933 comm="syz.4.40" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   91.771251][   T30] audit: type=1400 audit(1787059912.817:234): avc:  denied  { ioctl } for  pid=5933 comm="syz.4.40" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8703 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   91.913303][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   92.063479][   T24] usb 2-1: device descriptor read/64, error -71
[   92.188444][ T5940] netlink: 'syz.2.41': attribute type 7 has an invalid length.
[   92.343377][   T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   92.543346][   T24] usb 2-1: device descriptor read/64, error -71
[   92.674553][   T24] usb usb2-port1: attempt power cycle
[   92.709334][   T29] usb 1-1: Cannot set autoneg
[   92.728714][   T29] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61
[   93.043434][   T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   93.095542][   T24] usb 2-1: device descriptor read/8, error -71
[   93.128915][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'.
[   93.312359][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'.
[   93.423404][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   93.514337][   T24] usb 2-1: device descriptor read/8, error -71
[   94.428626][   T29] usb 1-1: USB disconnect, device number 3
[   94.484300][   T24] usb usb2-port1: unable to enumerate USB device
[   94.655744][   T30] audit: type=1400 audit(1787059915.727:235): avc:  denied  { read } for  pid=5962 comm="syz.2.49" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   94.728939][ T5967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3092 sclass=netlink_route_socket pid=5967 comm=syz.2.49
[   94.890080][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'.
[   94.913547][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   95.146186][   T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   95.315404][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.462489][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   95.528070][   T30] audit: type=1400 audit(1787059915.727:236): avc:  denied  { open } for  pid=5962 comm="syz.2.49" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   95.583622][   T30] audit: type=1400 audit(1787059916.657:237): avc:  denied  { ioctl } for  pid=5962 comm="syz.2.49" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   95.594999][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   95.620823][ T5967] netlink: 'syz.2.49': attribute type 2 has an invalid length.
[   95.667638][ T5967] netlink: 48 bytes leftover after parsing attributes in process `syz.2.49'.
[   95.702326][   T24] usb 2-1: SerialNumber: syz
[   96.311799][ T5967] : entered promiscuous mode
[   96.907455][ T5981] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[   96.923010][ T5981] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   97.223599][ T5986] netlink: 'syz.0.53': attribute type 7 has an invalid length.
[   97.379292][ T5987] 9p: Bad value for 'rfdno'
[   97.507612][   T24] usb 2-1: skipping empty audio interface (v1)
[   97.654928][ T5995] netlink: 'syz.3.55': attribute type 7 has an invalid length.
[   97.881356][   T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[   97.917807][   T24] usb 2-1: USB disconnect, device number 7
[   97.955911][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   98.033378][ T5725] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   98.163280][ T5725] usb 4-1: device descriptor read/64, error -71
[   98.403860][ T5725] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   98.557613][ T5607] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[   98.575866][ T6006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.57'.
[   98.604146][ T5607] Bluetooth: hci4: Injecting HCI hardware error event
[   98.696240][ T5608] Bluetooth: hci4: hardware error 0x00
[   98.835119][ T5725] usb 4-1: device descriptor read/64, error -71
[   98.964897][ T5725] usb usb4-port1: attempt power cycle
[   98.972799][ T5607] Bluetooth: hci4: unexpected event for opcode 0x080d
[   99.127258][ T5607] Bluetooth: hci4: unexpected event for opcode 0x6247
[   99.323302][ T5725] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   99.499581][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'.
[   99.637905][ T5725] usb 4-1: device descriptor read/8, error -71
[  100.534369][ T1118] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  100.717090][ T5608] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  100.796760][ T1118] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  100.825385][ T6033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3092 sclass=netlink_route_socket pid=6033 comm=syz.0.66
[  100.869385][ T1118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.946642][ T6039] netlink: 'syz.3.67': attribute type 7 has an invalid length.
[  100.983542][ T1118] usb 3-1: config 0 descriptor??
[  101.223490][ T6043] Zero length message leads to an empty skb
[  101.270244][ T6033] netlink: 'syz.0.66': attribute type 2 has an invalid length.
[  101.315813][ T6033] netlink: 48 bytes leftover after parsing attributes in process `syz.0.66'.
[  101.354970][ T6033] : entered promiscuous mode
[  101.613355][   T29] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  101.774910][   T29] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  101.787721][   T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  101.799005][   T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  101.814123][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  101.823319][   T29] usb 2-1: SerialNumber: syz
[  102.071105][ T6045] 9p: Bad value for 'rfdno'
[  102.157277][   T29] usb 2-1: skipping empty audio interface (v1)
[  102.212944][ T1118] usb 3-1: Cannot set autoneg
[  102.223378][ T1118] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61
[  102.255949][   T29] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  102.267880][   T29] usb 2-1: USB disconnect, device number 8
[  102.273488][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  102.301819][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  102.443671][   T10] usb 4-1: Using ep0 maxpacket: 8
[  102.481073][   T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  102.483376][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'.
[  102.550526][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'.
[  102.574240][   T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  102.574274][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  102.574298][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  102.574321][   T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  102.574356][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.683622][ T6058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.73'.
[  102.897394][   T10] usb 4-1: usb_control_msg returned -71
[  102.903045][   T10] usbtmc 4-1:16.0: can't read capabilities
[  102.928137][   T10] usb 4-1: USB disconnect, device number 6
[  102.985757][   T29] usb 3-1: USB disconnect, device number 7
[  103.041572][   T30] audit: type=1400 audit(1787059924.107:238): avc:  denied  { mount } for  pid=6060 comm="syz.1.74" name="/" dev="rpc_pipefs" ino=9707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  103.146150][   T30] audit: type=1400 audit(1787059924.207:239): avc:  denied  { setopt } for  pid=6060 comm="syz.1.74" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  103.689947][ T6069] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  103.839501][ T6069] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  104.179414][ T6074] syz.2.78 uses obsolete (PF_INET,SOCK_PACKET)
[  104.451431][ T6079] netlink: 'syz.4.77': attribute type 7 has an invalid length.
[  104.843273][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  104.973285][   T10] usb 5-1: device descriptor read/64, error -71
[  105.049068][   T30] audit: type=1400 audit(1787059926.067:240): avc:  denied  { unmount } for  pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  105.884695][ T6090] netlink: 'syz.1.81': attribute type 7 has an invalid length.
[  106.113743][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  106.312106][ T6106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.84'.
[  106.493287][   T10] usb 5-1: device descriptor read/64, error -71
[  106.604515][   T10] usb usb5-port1: attempt power cycle
[  106.643276][ T5694] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  106.963665][ T6113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.86'.
[  106.970856][ T5694] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  107.024278][ T5694] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.051678][ T5694] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  107.064440][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  107.073009][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  107.106929][ T5694] usb 1-1: SerialNumber: syz
[  107.108249][   T10] usb 5-1: device descriptor read/8, error -71
[  107.267546][   T30] audit: type=1400 audit(1787059928.337:241): avc:  denied  { ioctl } for  pid=6120 comm="syz.4.89" path="socket:[9813]" dev="sockfs" ino=9813 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  108.295394][ T5603] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  108.305101][ T6123] 9p: Bad value for 'rfdno'
[  108.463260][ T5603] usb 4-1: Using ep0 maxpacket: 8
[  108.468927][ T5603] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  108.480898][ T5603] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  108.533444][ T5603] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  108.545342][ T5603] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  108.562494][ T5603] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  108.597464][ T5603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.452297][ T5603] usb 4-1: usb_control_msg returned -71
[  109.639058][ T5603] usbtmc 4-1:16.0: can't read capabilities
[  109.681608][ T5603] usb 4-1: USB disconnect, device number 7
[  109.911153][ T6144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.94'.
[  110.378899][ T6149] netlink: 'syz.2.96': attribute type 7 has an invalid length.
[  110.724483][ T5694] usb 1-1: invalid UAC_HEADER (v1)
[  110.971359][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.97'.
[  111.254146][ T5694] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  111.286404][ T5694] usb 1-1: USB disconnect, device number 4
[  111.364036][ T5603] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  112.277855][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  112.323860][ T5603] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[  112.334219][ T5603] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  112.344377][ T5603] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  112.369861][ T5603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.538497][ T5603] usb 4-1: probing VID:PID(0424:012C)   
[  112.607262][ T5603] usb 4-1: vub300 testing BULK IN EndPoint(0) 81
[  112.638071][ T5603] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02
[  112.658013][ T5603] usb 4-1: vub300 testing BULK IN EndPoint(2) 83
[  112.679008][ T5603] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04
[  112.686497][ T5603] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83
[  112.835529][ T6175] jffs2: notice: (6175) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  112.866975][   T30] audit: type=1400 audit(1787059933.937:242): avc:  denied  { write } for  pid=6174 comm="syz.4.104" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  112.892469][   T30] audit: type=1400 audit(1787059933.937:243): avc:  denied  { create } for  pid=6174 comm="syz.4.104" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[  112.915484][ T6177] netlink: 48 bytes leftover after parsing attributes in process `syz.2.105'.
[  112.938292][ T5603] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[  113.156349][ T5603] usb 4-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted
[  113.538047][   T30] audit: type=1400 audit(1787059934.597:244): avc:  denied  { write } for  pid=6174 comm="syz.4.104" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  113.560620][   T30] audit: type=1400 audit(1787059934.597:245): avc:  denied  { create } for  pid=6174 comm="syz.4.104" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  113.585913][   T30] audit: type=1400 audit(1787059934.597:246): avc:  denied  { create } for  pid=6174 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  113.763559][ T5725] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  113.793049][   T30] audit: type=1400 audit(1787059934.707:247): avc:  denied  { getopt } for  pid=6155 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  113.945654][ T5725] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  113.964854][ T5725] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.991681][ T5725] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  114.013118][ T6189] netlink: 64 bytes leftover after parsing attributes in process `syz.1.107'.
[  114.036106][ T5603] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71
[  114.068716][   T10] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71
[  114.625221][   T10] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71
[  114.779561][ T6200] netlink: 'syz.3.111': attribute type 7 has an invalid length.
[  115.152233][ T5608] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  115.166274][ T5608] Bluetooth: hci3: Injecting HCI hardware error event
[  115.179652][ T5608] Bluetooth: hci3: hardware error 0x00
[  116.113325][ T5603] usb 4-1: USB disconnect, device number 8
[  116.133241][   T10] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[  116.153095][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  116.162095][ T5725] usb 3-1: SerialNumber: syz
[  116.407148][ T5603] ------------[ cut here ]------------
[  116.412910][ T5603] ODEBUG: free active (active state 0) object: ffff88807cb89270 object type: timer_list hint: vub300_inactivity_timer_expired+0x0/0x550
[  116.427124][ T5603] WARNING: lib/debugobjects.c:629 at debug_print_object+0x198/0x2b0, CPU#0: kworker/0:3/5603
[  116.437527][ T5603] Modules linked in:
[  116.442303][ T5603] CPU: 0 UID: 0 PID: 5603 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) 
[  116.451905][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  116.462212][ T5603] Workqueue: usb_hub_wq hub_event
[  116.468558][ T5603] RIP: 0010:debug_print_object+0x1a5/0x2b0
[  116.474495][ T5603] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 68 ab 24 0c 41 56 48 8b 14 ed 40 2d 60 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 a2 ca 19 0c 01 48 83 c4 18 5b 5d 41 5c 41
[  116.494215][ T5603] RSP: 0000:ffffc9000302f3e8 EFLAGS: 00010246
[  116.500304][ T5603] RAX: dffffc0000000000 RBX: ffffc9000302f4d0 RCX: 0000000000000000
[  116.508310][ T5603] RDX: ffffffff8c602c80 RSI: ffffffff8c602820 RDI: ffffffff914cfb60
[  116.516304][ T5603] RBP: 0000000000000003 R08: ffff88807cb89270 R09: ffffffff8bf2f3e0
[  116.524315][ T5603] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c602820
[  116.532312][ T5603] R13: ffffffff8bf2f420 R14: ffffffff88b96270 R15: ffffc9000302f4e8
[  116.540299][ T5603] FS:  0000000000000000(0000) GS:ffff888123bdc000(0000) knlGS:0000000000000000
[  116.549255][ T5603] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.555862][ T5603] CR2: 00007f750e940eb8 CR3: 00000000365b4000 CR4: 00000000003526f0
[  116.563877][ T5603] Call Trace:
[  116.567708][ T5603]  <TASK>
[  116.570620][ T5603]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  116.577674][ T5603]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  116.583525][ T5603]  debug_check_no_obj_freed+0x4da/0x630
[  116.589078][ T5603]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  116.595164][ T5603]  ? ida_free+0x201/0x2f0
[  116.599504][ T5603]  ? wakeup_source_unregister.part.0+0x330/0x540
[  116.605852][ T5603]  ? device_release+0xd2/0x270
[  116.610604][ T5603]  ? device_release+0xb0/0x270
[  116.615404][ T5603]  kfree+0x3d8/0x6c0
[  116.619298][ T5603]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  116.625456][ T5603]  device_release+0xd2/0x270
[  116.630036][ T5603]  kobject_put+0x1f7/0x640
[  116.634464][ T5603]  put_device+0x1f/0x30
[  116.638626][ T5603]  kref_put.constprop.0.isra.0+0x159/0x1d0
[  116.644535][ T5603]  vub300_disconnect+0x136/0x170
[  116.649470][ T5603]  usb_unbind_interface+0x1dd/0x9e0
[  116.654686][ T5603]  ? __pfx_usb_unbind_interface+0x10/0x10
[  116.660398][ T5603]  device_remove+0x12a/0x180
[  116.664988][ T5603]  device_release_driver_internal+0x44e/0x620
[  116.671607][ T5603]  bus_remove_device+0x2bc/0x560
[  116.676918][ T5603]  ? __pfx_bus_remove_device+0x10/0x10
[  116.682377][ T5603]  ? __pfx_device_remove_attrs+0x10/0x10
[  116.688018][ T5603]  device_del+0x376/0x9b0
[  116.692428][ T5603]  ? __pfx_device_del+0x10/0x10
[  116.697283][ T5603]  ? kobject_put+0xb9/0x640
[  116.701782][ T5603]  usb_disable_device+0x367/0x810
[  116.706814][ T5603]  usb_disconnect+0x2e2/0x9a0
[  116.711485][ T5603]  hub_event+0x1bb1/0x4420
[  116.716117][ T5603]  ? __lock_acquire+0x49f/0x1a40
[  116.721135][ T5603]  ? do_raw_spin_unlock+0x145/0x1e0
[  116.726347][ T5603]  ? __pfx_hub_event+0x10/0x10
[  116.731115][ T5603]  ? debug_object_deactivate+0x2e4/0x3b0
[  116.736752][ T5603]  ? rcu_is_watching+0x12/0xc0
[  116.741510][ T5603]  process_one_work+0xa23/0x1940
[  116.746477][ T5603]  ? __pfx_process_one_work+0x10/0x10
[  116.751853][ T5603]  ? __pfx_hub_event+0x10/0x10
[  116.756626][ T5603]  worker_thread+0x5ef/0xe50
[  116.761215][ T5603]  ? __pfx_worker_thread+0x10/0x10
[  116.766325][ T5603]  ? kthread+0x13a/0x450
[  116.771109][ T5603]  ? __pfx_worker_thread+0x10/0x10
[  116.776601][ T5603]  kthread+0x370/0x450
[  116.780670][ T5603]  ? __pfx_kthread+0x10/0x10
[  116.785274][ T5603]  ret_from_fork+0x72b/0xd50
[  116.789885][ T5603]  ? __pfx_ret_from_fork+0x10/0x10
[  116.795037][ T5603]  ? __switch_to+0x800/0x10f0
[  116.799729][ T5603]  ? __pfx_kthread+0x10/0x10
[  116.804323][ T5603]  ret_from_fork_asm+0x1a/0x30
[  116.809092][ T5603]  </TASK>
[  116.812100][ T5603] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  116.819354][ T5603] CPU: 0 UID: 0 PID: 5603 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) 
[  116.828695][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  116.838731][ T5603] Workqueue: usb_hub_wq hub_event
[  116.843753][ T5603] Call Trace:
[  116.847016][ T5603]  <TASK>
[  116.849921][ T5603]  dump_stack_lvl+0x100/0x190
[  116.854751][ T5603]  vpanic+0x552/0x970
[  116.858706][ T5603]  ? __pfx_vpanic+0x10/0x10
[  116.863204][ T5603]  panic+0xd1/0xe0
[  116.866905][ T5603]  ? __pfx_panic+0x10/0x10
[  116.871298][ T5603]  check_panic_on_warn.cold+0x19/0x34
[  116.876910][ T5603]  ? debug_print_object+0x198/0x2b0
[  116.882087][ T5603]  __warn.cold+0x191/0x318
[  116.886486][ T5603]  __report_bug+0x30f/0x440
[  116.890964][ T5603]  ? debug_print_object+0x198/0x2b0
[  116.896149][ T5603]  ? __pfx___report_bug+0x10/0x10
[  116.901146][ T5603]  ? lockdep_hardirqs_on+0x78/0x100
[  116.906323][ T5603]  ? debug_print_object+0x1a5/0x2b0
[  116.911509][ T5603]  report_bug_entry+0xe1/0x290
[  116.916255][ T5603]  ? debug_print_object+0x1a5/0x2b0
[  116.921427][ T5603]  handle_bug+0x1cd/0x2a0
[  116.925741][ T5603]  exc_invalid_op+0x17/0x50
[  116.930221][ T5603]  asm_exc_invalid_op+0x1a/0x20
[  116.935056][ T5603] RIP: 0010:debug_print_object+0x1a5/0x2b0
[  116.940848][ T5603] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 68 ab 24 0c 41 56 48 8b 14 ed 40 2d 60 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 a2 ca 19 0c 01 48 83 c4 18 5b 5d 41 5c 41
[  116.960426][ T5603] RSP: 0000:ffffc9000302f3e8 EFLAGS: 00010246
[  116.966468][ T5603] RAX: dffffc0000000000 RBX: ffffc9000302f4d0 RCX: 0000000000000000
[  116.974427][ T5603] RDX: ffffffff8c602c80 RSI: ffffffff8c602820 RDI: ffffffff914cfb60
[  116.982386][ T5603] RBP: 0000000000000003 R08: ffff88807cb89270 R09: ffffffff8bf2f3e0
[  116.990332][ T5603] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c602820
[  116.998274][ T5603] R13: ffffffff8bf2f420 R14: ffffffff88b96270 R15: ffffc9000302f4e8
[  117.006225][ T5603]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  117.012895][ T5603]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[  117.019563][ T5603]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  117.025372][ T5603]  debug_check_no_obj_freed+0x4da/0x630
[  117.030915][ T5603]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  117.036962][ T5603]  ? ida_free+0x201/0x2f0
[  117.041308][ T5603]  ? wakeup_source_unregister.part.0+0x330/0x540
[  117.047634][ T5603]  ? device_release+0xd2/0x270
[  117.052393][ T5603]  ? device_release+0xb0/0x270
[  117.057131][ T5603]  kfree+0x3d8/0x6c0
[  117.061016][ T5603]  ? __pfx_mmc_host_classdev_release+0x10/0x10
[  117.067155][ T5603]  device_release+0xd2/0x270
[  117.071728][ T5603]  kobject_put+0x1f7/0x640
[  117.076136][ T5603]  put_device+0x1f/0x30
[  117.080282][ T5603]  kref_put.constprop.0.isra.0+0x159/0x1d0
[  117.086071][ T5603]  vub300_disconnect+0x136/0x170
[  117.090988][ T5603]  usb_unbind_interface+0x1dd/0x9e0
[  117.096170][ T5603]  ? __pfx_usb_unbind_interface+0x10/0x10
[  117.101883][ T5603]  device_remove+0x12a/0x180
[  117.106448][ T5603]  device_release_driver_internal+0x44e/0x620
[  117.112494][ T5603]  bus_remove_device+0x2bc/0x560
[  117.117418][ T5603]  ? __pfx_bus_remove_device+0x10/0x10
[  117.122861][ T5603]  ? __pfx_device_remove_attrs+0x10/0x10
[  117.128474][ T5603]  device_del+0x376/0x9b0
[  117.132784][ T5603]  ? __pfx_device_del+0x10/0x10
[  117.137622][ T5603]  ? kobject_put+0xb9/0x640
[  117.142108][ T5603]  usb_disable_device+0x367/0x810
[  117.147115][ T5603]  usb_disconnect+0x2e2/0x9a0
[  117.151770][ T5603]  hub_event+0x1bb1/0x4420
[  117.156187][ T5603]  ? __lock_acquire+0x49f/0x1a40
[  117.161098][ T5603]  ? do_raw_spin_unlock+0x145/0x1e0
[  117.166286][ T5603]  ? __pfx_hub_event+0x10/0x10
[  117.171088][ T5603]  ? debug_object_deactivate+0x2e4/0x3b0
[  117.176735][ T5603]  ? rcu_is_watching+0x12/0xc0
[  117.181498][ T5603]  process_one_work+0xa23/0x1940
[  117.186430][ T5603]  ? __pfx_process_one_work+0x10/0x10
[  117.191787][ T5603]  ? __pfx_hub_event+0x10/0x10
[  117.196548][ T5603]  worker_thread+0x5ef/0xe50
[  117.201156][ T5603]  ? __pfx_worker_thread+0x10/0x10
[  117.206248][ T5603]  ? kthread+0x13a/0x450
[  117.210464][ T5603]  ? __pfx_worker_thread+0x10/0x10
[  117.215558][ T5603]  kthread+0x370/0x450
[  117.219602][ T5603]  ? __pfx_kthread+0x10/0x10
[  117.224164][ T5603]  ret_from_fork+0x72b/0xd50
[  117.228745][ T5603]  ? __pfx_ret_from_fork+0x10/0x10
[  117.233859][ T5603]  ? __switch_to+0x800/0x10f0
[  117.238621][ T5603]  ? __pfx_kthread+0x10/0x10
[  117.243214][ T5603]  ret_from_fork_asm+0x1a/0x30
[  117.247992][ T5603]  </TASK>
[  117.251229][ T5603] Kernel Offset: disabled
[  117.255532][ T5603] Rebooting in 86400 seconds..