last executing test programs:

27m10.595617358s ago: executing program 2 (id=4696):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
lseek(r0, 0x289e0cb5, 0x0)
getpid()
socket(0x2c, 0x4, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)

27m9.228642779s ago: executing program 2 (id=4697):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
io_uring_setup(0x669, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000180)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
getdents(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
r3 = gettid()
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

27m8.192304777s ago: executing program 2 (id=4701):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x200000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x2, {0x6, 0x0, 0xffffffffffffffff, 0x200000000, 0x800, 0x0, {0x8, 0x1, 0x0, 0x0, 0x3, 0x7, 0xfffffffc, 0x4, 0x9, 0x1000, 0xfffffffd, r2, 0x0, 0xfcc00000, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f0000000000)='./file0/file0\x00', 0xa02, 0x1)

27m7.985975593s ago: executing program 2 (id=4704):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
listen(r1, 0x5)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x24040014, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

27m5.923687474s ago: executing program 2 (id=4708):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace(0x8, r4)
r5 = syz_pidfd_open(r4, 0x0)
process_mrelease(r5, 0x700000000000000)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@fd={0x7, 0x1, 0x4, 0x8, 0x6, {}, {0x1, 0x2, 0x9, 0x6, 0x9, 0xfd, 'yT=7'}, 0x0, 0x4, {}, 0x4})
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f046})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r6 = fsopen(&(0x7f0000000040)='binder\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
bind$netrom(r7, &(0x7f0000000140)={{0x3, @bcast}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r8 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001000000", @ANYRES32, @ANYBLOB="000000000a0002000080c20000000000070005"], 0x30}}, 0x0)

27m4.305760244s ago: executing program 2 (id=4710):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)

26m49.282331058s ago: executing program 32 (id=4710):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)

33.155098126s ago: executing program 5 (id=10803):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="85e3de50d5b66bd8f1ff08251a6c", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

31.000240544s ago: executing program 5 (id=10810):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x101080)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NFT_BATCH(r1, &(0x7f0000004e80)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004e40)={&(0x7f0000002b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x4, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWTABLE={0x138, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xfd, 0x6, "d517f5ae1839168e1281e1f0fe37e53692cce2cea81e0045f9dada572a475b7c5bb5b548de42f4fd2f28157a24071a68f4053e1d9a2bd27c6462bff4bbfc8894b11db1cfa93244d5e6ebc267d38d158543ea753dd44d983d38a2db3e433794315f4d9f847ed8ac332766e5e243d32afa66622d56dfb3aa364611b72a30bfa52455ef16fc504197601c9e2f62a9999e7443973537a72fb602f42cbd0537df9f61056791270080540fd5a59e26aa1be21fa9de9b6953e3cddf4fe72696e1bb3d1fa334b3fbe449c01d247f25094b8bdb723c859aa705ce27a8ca2b6f47c9fe21499c5c1dc0ca2d9d051b88789ed5292dcb05990a1c7f0b267eed"}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x124, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xd8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x66}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x124, 0x8, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xb8, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x3b}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6007}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_NEWRULE={0x1340, 0x6, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1324, 0x4, 0x0, 0x1, [{0x1320, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1310, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x78, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x158, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xad, 0x1, "086f692f17b8f9dbddb64335b30e12115eeb9333d4184d845cd4d1cccf8a62fe92a554d8b248c95b98bff4040fb700c5a6a4aacd384f03f4f9d36dadcf7b95f5ecc8985a10cffee17667e25d1ea3dcaa54b012bdf2665b4dcfe575ba7bf877c921906727f8a7e6f149f9104ea53a103f20fd5e41e332c9ff8afde4ff7b874e4eb3283023c6bf3e0b2cc8ab85ae28b03421681be364e2c143afcc8f12c6a66fe435a4ac3d5828c53b6c"}, @NFTA_DATA_VALUE={0xa3, 0x1, "7f7528e1502b03012eef303b93917cc1fd7325e2865825ea25c26d25c841060e9d2b3efed019b71ee16dc29dadeaa8e383b84cafe9ed0c112fe8482dc075e72ce62a026834451f8f187eabc0a8fdd48948cd75324817298dfb2150055053e3517ac375a8356d48c3bb7fe218a25986734d6a688e298953048b6d3756ad3da45e23d069ab147cf6c3c2c49083b8e9a43f82d96317fc2de20b041f769e72373c"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RANGE_FROM_DATA={0x111c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xaa, 0x1, "be9c526d74e3ac607ffae8cbbba0209f98e24493cd4308a1bde50cbf06b1ec8de63a91380798cd82f2dc8cd59c6055e6f41ecc6ea69e1f8cea59a89a74f453a3bae6443f9d094543552febeee4279f2d947c901afb99a3fae7eca9822671a486a8a750f38fe7767fb666d9bff319599a64b77e411dd4ba912a20e62ab360cf2edd6dec089af6bd317b7289c5ac7897e79bac406371ec8b327c84566ef2d7a581e365aa86aa9e"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}]}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_DELSETELEM={0xaa4, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x158, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xff}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_SREG={0x8}]}}}]}, {0x108, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x68, 0x1, "f9af57ea17bff824d3785d102898d6b696f5d5d70e16469160b94e4be8fa52ee07a749ab5d342ed3c61e5f44a27dca62568d395c160122372e1775290eb83f6ba7e384e4ee320d8fad8fc8a134880277bd3f3274ca02d49b7a20c116ddc35750a8f1209a"}, @NFTA_DATA_VALUE={0x17, 0x1, "a868d11db124f2798ffcf649d9f73748ad2e7f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8fc, 0x3, 0x0, 0x1, [{0x4b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf1, 0x6, 0x1, 0x0, "72d6667071098cde584497b3d2758feec42326047bcb931864923fad89d92d8d2ba4007714d285db48d0c3403b52f1ce29b23e09111866d85e498cf5b39bdc807d40f0789ccad1946c9343aa0451aa789e008966098f24b6a787719cffb3d669a3b98484bef6cc2573128aa40b58e31fb9673166eca15f925251d203697a4b451ce3b9cfe9ca467d6c558e75f005847912e9b09f78930bdc62dad57e1a598726ee8e221069d2fc4c4b6ad7888be7e3a6af5dc4bbf8a2dd946eb66172897b82843549859a3389215c979f00ebb7c2da65f34d6ec27e39360aba97808ecdeecad088ef1c241c397a2105969b48b0"}, @NFTA_SET_ELEM_EXPRESSIONS={0x330, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_DYNSET_EXPRESSIONS={0x10, 0xa, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}]}}}, {0x2e0, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2d0, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x40}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x2f}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x89}, @NFTA_INNER_EXPR={0x2ac, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x298, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x997}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_IMMEDIATE_DATA={0x248, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xba, 0x1, "467d177c29b1db47c1b086e17fb518cbaf62940d2a152a6ce68772c7b37d1b98bd7fde502a8eafe3c23b0bb0dc8732b732a153eace2a228d725dff92559d655b28fa06c15ab149dc7079e8d67d8b8fb24f7bfe627774e02baf56ea22fa92241f29f53ba096804f37f3eaba5f6bdd38c3569f2d3d7bd650c2a197592cb948de47857baf14c35fe4fdd5924498afa48406a40f31df44b6503d40411dae5c0d1b599d3c70e49279acf58fbb1a92da0c2cf9a262cc088aa7"}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "c1fc7f5b29f49d5112ebd56cb5a8200b5aaaaff291150c1d7f3d46ceeb66910547e9d10c27902e6dd062a9a041c1031f9bc0425da3f0024969b2a5b62b80453604f4ba83c8129c3cd426144a80db790d3dbbef36742dac9496f3de3ded52b38236e9acb3dd325e195df425c1b440c52f8aeca9b125e1dba8a24ac3fad4f8b8466678d50e1e9a21231c1f9a3f3715a2c88a436eca6628bbab85c1dcc0ab26640c4ac558bd236da23885880989a4c9d05fa57e6247122c451c40d0fa6069"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000001}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x18, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000002}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x440, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x178, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaa, 0x1, "9fcb335d9f1b12785bcfdc1d6feb2f5fbbb6a12076fc64a44e6773b4cb3ec64075f66d9c0351bf601abf103c533e26e77f0dd984086d8400fa63823bd6d55f284a19d1681f323c3ab2312b63d72809eb28cb31873f37ab6892da9830519a2bbd1c2b6efddc229689e283052d2e4d393e2f964a61053e97e68d0a525cd3702de9172040b1c4bdabc630a5d167c352eb5230d0bcf6117f0caf367844d089333fc6c469ce462a1c"}, @NFTA_DATA_VALUE={0xc7, 0x1, "a2dfe74d915034b25a825c812b744590b2ce7beae30d95bd8c900bcfb41360af04be7f80b10d489c171cd6129536192382ce215f39566340bc42d4c44bab2d3237746f22eab839d67e452313795ba2ee0691a70fe4ec86b3c0165abf4e98436da2f339b7cdb316b439182950334a05504b1c7fc55299f38f732a7f9b8dfa1b51e6295724359ab821ddc9804a4cc470361e2fe6c8324308ad7dc0b4ea78d071a0d6f8f97b47e458097ec1fbc67e20fc928c93d48ead058bdcada344f52dea98bc9ef4d2"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_KEY={0x140, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6e, 0x1, "7a0f2af6b3fbbf69950e7391396351709001f701321b75587277bf93e78cdd1f8a02ca705ce049b1a401a53c09b915adb63c75ef7bcdeb2fc904eb60ba964b7513f437d1fe4a9b21e74fe3c16435bb11b8888510033b879b195a308af07fafa34dab190b662d06fe92f3"}, @NFTA_DATA_VALUE={0x8e, 0x1, "a17384c748568fba617efc2fb77560615cd19d8b69c7230c7eb9ea7b88c4afc691cc81616601cecfeec3d4a8649a10b87093b422127ef002b076c5b7c7542b178e5aa8efa45df08c58bc98a0625339b266bdca56fa255582998f98d9ff94c4612e99ba82d9d1371a92ab1d5fc89cb99f99467a41f825903956955a3e6c7dbbf28f444e2602d81248925d"}, @NFTA_DATA_VALUE={0x39, 0x1, "47a7b3c3b964860d9cfb17821e56805be988e8aefe2180bf64f891af680fc279baa9d360206557af0aa4a2236a0f96c848553351af"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x48, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x7d, 0x6, 0x1, 0x0, "caf165a739ec71f8bfd2965daef2ac0650e6eb23a437f3ff7b2d564099aa9f613fedf60c9e83022484ac2219916a7ddb51392f540397e68fe83996768b51e5bee9abe732b5d803eacbd8d7c25b9c1ef6a1d4404969fbf53287e0903bd3451b1f6d42f02cf7682bee8a02bbd5706c4c5d2f7b104ee06da19bab"}, @NFTA_SET_ELEM_USERDATA={0x96, 0x6, 0x1, 0x0, "dd992c58add58c79f2858d52896ae260d5a082e4d15a606b4da14d3d498d2c90952cbed56a38346a318560093dc09f02dcdee1611e2e2ba034b0fee425754de110ff53d881df2d1755738276961af198bd39791fa07c5718227202714a99cf9ff29496a577912284dba2e645f2a620d9fc534a1858c48b5113252b62f4049d8ec4f16697deb7d94741aa05a2c265c3fbbd97"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2298}, 0x1, 0x0, 0x0, 0x10}, 0x4080)
splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0)
write(r3, &(0x7f0000000240)="94", 0x1)
tee(r2, r6, 0x8f5, 0x100000000000000)
r7 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc623, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x6, 0x9, 0x1, {0x22, 0x918}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x1, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ef, 0x9, 0x2, 0x5}}]}}}]}}]}}, &(0x7f0000002540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x6, 0xad, 0x3, 0x30, 0x4}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x10, 0x3, 0xb3, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x6, 0x8, 0x1}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x416}}, {0xa9, &(0x7f0000000280)=@string={0xa9, 0x3, "ad9872617b0e254d04a5d41e6e66bc9a8a0dbe2fea2947f157f3be81b1e64c1c2a3aec95925e03258dc71ef4b572125af78924081e383ddd3a01868ceec54f1906771ba746222d4b88f1345b9b722456bf3c5fa13aa4dcd6695aa018927e12aff7b6b39ebc526415da694ca65138f5ef059fcad14aef502c028c50940bc7bdd18e67fe927f5ae32eafa3dffc5d46704d16638929b7d372d5cd3257cb9c0aabb0eb21ee82eb6151"}}, {0x49, &(0x7f0000000340)=@string={0x49, 0x3, "e6b8333f659e28fc4b65b14ead9d2916a1fb1300179a642f7626a8e7060059d38f09caa9bd834a9747d5c55a231b5a569cc89307dc80146dd9e44147c3f6b2fe43512592f2a5ac"}}, {0xc9, &(0x7f0000002400)=@string={0xc9, 0x3, "235075c15215208a91e13fc10e39179744bfcfcc0f1d133c6423d89236d0028a42aedcd2de574f6897193dcef3c23699f4731749451b613beaec11c7f197aa3a9b3eb55d6877170f39f5536bfc31275d4ed28220a805b2e65a59e05b6da710e2608e608aff294111f23f9f00c9e82a993292f9648a2d898017dc9440fd225a557cbff0daa1c42dc2af8d7bf9fecc11082b4625c4c570ada1e2ffde1475cfef5927e4e23756b8ce7de37c539fa137c5192ca987a65a1c7fb52449c3778a7e73720b083b29c61c64"}}, {0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0x41f}}]})
syz_usb_control_io$hid(r7, &(0x7f00000027c0)={0x24, &(0x7f00000025c0)={0x40, 0xd, 0x4a, {0x4a, 0xd, "31bc6c617422db8cabc05d607d8b86420a9555632b89684dbc96508702ad20cd0f22efcd5407bc47d2c46f8126475d7d57bfa62f2f75fe899e93f4216f788d91d34bd5f67e05cc90"}}, &(0x7f0000002640)={0x0, 0x3, 0xce, @string={0xce, 0x3, "6e9ab9ae4a2c071b3e6cde666930833032cae5341e4f68d5dfccfa436cb9d6e434a36c21f3867724f720cd68c41137b443eda72cd52a2448da0998966ef508f152bde8b63630653335a86d8ffeab7d4c5e30b312728a8985b7e53b13d59c411781d690805d7a09860fce5637401da7169f011d044fe66647ab51b336fdbbe977f9bcbcf11ca4b0d61793f12af3d4a3b8b341dbdba2f0960427beed9b91641bff761547d0d788e57287cf185459437cc97e9addf7d05fa328344d2408563a86de20c7dc8514ea1b04531f38d3"}}, &(0x7f0000002740)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, &(0x7f0000002780)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0xfe8}}}}, &(0x7f0000002ac0)={0x2c, &(0x7f0000002800)={0x20, 0x18, 0xea, "35716d45b1989d0baf267ce2461bd3221d1fd55e5e82c1fa25f34444fb39760c4158faa650f9c27c043f7094faf157f71cd5fb91ce9a2823c073f8e40c38128cf7d52718e94b3f21664c06e5a2d2cbd34777fec1ad08091980ca1c9c3067ee86e6667035701313d1287a53226886efb0039a90569b45e4a1cc9e52ab053bd540d5021d3273a4819b6c750d34eafa8e55486db26ef85cfd986f9c4d9779c0144cfcdb04e6bf75c84bace522168567eda5fbc6eb55189a54f0b735adf9cc535a0beeb6b7986113653e7a584226f2c8f19fd5ba7cb10ab3326fa37f3b692a6bf1dc52c9f03cded73d2b13f5"}, &(0x7f0000002900)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000002940)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002980)={0x20, 0x1, 0xe8, "a61cc5f92bde3f96b8f354fb3b23c005d46c99d1c9bf98cbc1f4485eb86a1ad1154a364dd71af5e28f5685a6df3f51e49974747137ffabd44c1b15c986534f4f156713ffbde8e036c266db3d35e2d10a9fffff4ba5f0f36106ab481b162555859b6fbb819fc516b330d4a6e2ab753a735194c02788bcefab77a8e9b400bafdfea5786a438f8847718f9848ee02cd5702cfb8de3be343d0d3ae9a7fd2d435aede0097baa1e0ca691d0af3867a328d19cd17571e888f6b833df8acfd5e76e550fbcc895d31b8a1dbf981d5cd125710e1d4da5ed0e3e74b36e18a5a51145441191d48d82b1a87de3a66"}, &(0x7f0000002a80)={0x20, 0x3, 0x1, 0x1}})
read$FUSE(r5, &(0x7f00000003c0)={0x2020}, 0x2020)
write$UHID_CREATE(r1, 0x0, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x3})
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000002b00)=0x3)

27.383890828s ago: executing program 5 (id=10823):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000a80)={0x100000011, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x3, 0xb6bc, 0x5b}, 0x2c)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
getgroups(0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000580), 0x0, 0x2026, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0)
r3 = syz_clone(0x43a0300, 0x0, 0x5a, 0x0, 0x0, 0x0)
tkill(r3, 0x25)
ptrace(0x10, r3)
ptrace$setopts(0x4202, r3, 0xe96, 0x455b843fbdb64c65)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x7, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2})
flistxattr(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc)
fstat(r2, &(0x7f0000000280))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee00}}, './file0\x00'})
getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480))
getresgid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540))
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000640))

26.551914406s ago: executing program 5 (id=10826):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@any, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000300)={{@local, 0xd}, 0x1})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01040000000000000600000000000900020073797a32000000000900ed0073797a30000000000c0006400000000000000002140000001100010000000000000000000500000a"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x10, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES8=r3, @ANYRES8=r4, @ANYRES32=r0, @ANYRESHEX=r3, @ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x2000808c}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1f)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000040)=0x3)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x6, &(0x7f0000000200)=""/192)
syz_open_dev$usbfs(0x0, 0x77, 0x1501)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x3, 0x7})
ioctl$DRM_IOCTL_GET_UNIQUE(r7, 0xc0106401, &(0x7f0000000000)={0xfffffffffffffe55, 0x0})
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
lsm_list_modules(0x0, 0xffffffffffffffff, 0x0)

26.318230789s ago: executing program 5 (id=10828):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES64=r0], 0xc8}}, 0x4000000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f0000002200), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[], 0x144}}, 0x20000000)

25.187601304s ago: executing program 5 (id=10830):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000bb7f1a0034784dc8e9add0e6149264bdf1c600fe"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
mmap(&(0x7f0000220000/0x1000)=nil, 0x1000, 0x2, 0x100010, r0, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = dup(0xffffffffffffffff)
ioperm(0x0, 0x8, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000040)={0x972a, 0x9, {}, {0xee00}, 0x6, 0x6})
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
memfd_create(0x0, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x109)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xfe9d)
truncate(&(0x7f00000000c0)='./file0\x00', 0x4)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x80000003)
r6 = dup2(r5, r5)
read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020)
syz_usb_connect(0x1, 0x2d, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x310)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @void}, 0x10)

7.784342243s ago: executing program 1 (id=10890):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06<Z\x16\x94\x9a\xe6\x8d\x10Y-\xf9\xd1\x8a\x8e\xc8\x0f\x89<O>\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', 0x0, &(0x7f0000000480)='+.\x00']})

7.648918841s ago: executing program 1 (id=10891):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c5103, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x8, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b55d42675fb0285}, {@in6=@local, 0xffffffff, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@offload={0xc, 0x1c, {r1}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000d00), 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x40)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r6 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x2401, 0x0)
fstat(r6, &(0x7f0000000300))
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
time(&(0x7f0000000040))
umount2(&(0x7f00000000c0)='./file0\x00', 0x9)
unlink(&(0x7f0000000180)='./file0\x00')
mount(&(0x7f0000000900)=@loop={'/dev/loop', 0x0}, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='bfs\x00', 0x1000010, 0x0)

7.083058145s ago: executing program 4 (id=10893):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x101080)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$NFT_BATCH(r1, &(0x7f0000004e80)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004e40)={&(0x7f0000002b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x4, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWTABLE={0x138, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xfd, 0x6, "d517f5ae1839168e1281e1f0fe37e53692cce2cea81e0045f9dada572a475b7c5bb5b548de42f4fd2f28157a24071a68f4053e1d9a2bd27c6462bff4bbfc8894b11db1cfa93244d5e6ebc267d38d158543ea753dd44d983d38a2db3e433794315f4d9f847ed8ac332766e5e243d32afa66622d56dfb3aa364611b72a30bfa52455ef16fc504197601c9e2f62a9999e7443973537a72fb602f42cbd0537df9f61056791270080540fd5a59e26aa1be21fa9de9b6953e3cddf4fe72696e1bb3d1fa334b3fbe449c01d247f25094b8bdb723c859aa705ce27a8ca2b6f47c9fe21499c5c1dc0ca2d9d051b88789ed5292dcb05990a1c7f0b267eed"}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x124, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xd8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x66}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x124, 0x8, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xb8, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x3b}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6007}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_NEWRULE={0x1340, 0x6, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1324, 0x4, 0x0, 0x1, [{0x1320, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1310, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x78, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x158, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xad, 0x1, "086f692f17b8f9dbddb64335b30e12115eeb9333d4184d845cd4d1cccf8a62fe92a554d8b248c95b98bff4040fb700c5a6a4aacd384f03f4f9d36dadcf7b95f5ecc8985a10cffee17667e25d1ea3dcaa54b012bdf2665b4dcfe575ba7bf877c921906727f8a7e6f149f9104ea53a103f20fd5e41e332c9ff8afde4ff7b874e4eb3283023c6bf3e0b2cc8ab85ae28b03421681be364e2c143afcc8f12c6a66fe435a4ac3d5828c53b6c"}, @NFTA_DATA_VALUE={0xa3, 0x1, "7f7528e1502b03012eef303b93917cc1fd7325e2865825ea25c26d25c841060e9d2b3efed019b71ee16dc29dadeaa8e383b84cafe9ed0c112fe8482dc075e72ce62a026834451f8f187eabc0a8fdd48948cd75324817298dfb2150055053e3517ac375a8356d48c3bb7fe218a25986734d6a688e298953048b6d3756ad3da45e23d069ab147cf6c3c2c49083b8e9a43f82d96317fc2de20b041f769e72373c"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RANGE_FROM_DATA={0x111c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xaa, 0x1, "be9c526d74e3ac607ffae8cbbba0209f98e24493cd4308a1bde50cbf06b1ec8de63a91380798cd82f2dc8cd59c6055e6f41ecc6ea69e1f8cea59a89a74f453a3bae6443f9d094543552febeee4279f2d947c901afb99a3fae7eca9822671a486a8a750f38fe7767fb666d9bff319599a64b77e411dd4ba912a20e62ab360cf2edd6dec089af6bd317b7289c5ac7897e79bac406371ec8b327c84566ef2d7a581e365aa86aa9e"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}]}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_DELSETELEM={0xaa4, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x158, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xff}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_SREG={0x8}]}}}]}, {0x108, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x68, 0x1, "f9af57ea17bff824d3785d102898d6b696f5d5d70e16469160b94e4be8fa52ee07a749ab5d342ed3c61e5f44a27dca62568d395c160122372e1775290eb83f6ba7e384e4ee320d8fad8fc8a134880277bd3f3274ca02d49b7a20c116ddc35750a8f1209a"}, @NFTA_DATA_VALUE={0x17, 0x1, "a868d11db124f2798ffcf649d9f73748ad2e7f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8fc, 0x3, 0x0, 0x1, [{0x4b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf1, 0x6, 0x1, 0x0, "72d6667071098cde584497b3d2758feec42326047bcb931864923fad89d92d8d2ba4007714d285db48d0c3403b52f1ce29b23e09111866d85e498cf5b39bdc807d40f0789ccad1946c9343aa0451aa789e008966098f24b6a787719cffb3d669a3b98484bef6cc2573128aa40b58e31fb9673166eca15f925251d203697a4b451ce3b9cfe9ca467d6c558e75f005847912e9b09f78930bdc62dad57e1a598726ee8e221069d2fc4c4b6ad7888be7e3a6af5dc4bbf8a2dd946eb66172897b82843549859a3389215c979f00ebb7c2da65f34d6ec27e39360aba97808ecdeecad088ef1c241c397a2105969b48b0"}, @NFTA_SET_ELEM_EXPRESSIONS={0x330, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_DYNSET_EXPRESSIONS={0x10, 0xa, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}]}}}, {0x2e0, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2d0, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x40}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x2f}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x89}, @NFTA_INNER_EXPR={0x2ac, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x298, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x997}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_IMMEDIATE_DATA={0x248, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xba, 0x1, "467d177c29b1db47c1b086e17fb518cbaf62940d2a152a6ce68772c7b37d1b98bd7fde502a8eafe3c23b0bb0dc8732b732a153eace2a228d725dff92559d655b28fa06c15ab149dc7079e8d67d8b8fb24f7bfe627774e02baf56ea22fa92241f29f53ba096804f37f3eaba5f6bdd38c3569f2d3d7bd650c2a197592cb948de47857baf14c35fe4fdd5924498afa48406a40f31df44b6503d40411dae5c0d1b599d3c70e49279acf58fbb1a92da0c2cf9a262cc088aa7"}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "c1fc7f5b29f49d5112ebd56cb5a8200b5aaaaff291150c1d7f3d46ceeb66910547e9d10c27902e6dd062a9a041c1031f9bc0425da3f0024969b2a5b62b80453604f4ba83c8129c3cd426144a80db790d3dbbef36742dac9496f3de3ded52b38236e9acb3dd325e195df425c1b440c52f8aeca9b125e1dba8a24ac3fad4f8b8466678d50e1e9a21231c1f9a3f3715a2c88a436eca6628bbab85c1dcc0ab26640c4ac558bd236da23885880989a4c9d05fa57e6247122c451c40d0fa6069"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000001}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x18, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000002}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x440, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x178, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaa, 0x1, "9fcb335d9f1b12785bcfdc1d6feb2f5fbbb6a12076fc64a44e6773b4cb3ec64075f66d9c0351bf601abf103c533e26e77f0dd984086d8400fa63823bd6d55f284a19d1681f323c3ab2312b63d72809eb28cb31873f37ab6892da9830519a2bbd1c2b6efddc229689e283052d2e4d393e2f964a61053e97e68d0a525cd3702de9172040b1c4bdabc630a5d167c352eb5230d0bcf6117f0caf367844d089333fc6c469ce462a1c"}, @NFTA_DATA_VALUE={0xc7, 0x1, "a2dfe74d915034b25a825c812b744590b2ce7beae30d95bd8c900bcfb41360af04be7f80b10d489c171cd6129536192382ce215f39566340bc42d4c44bab2d3237746f22eab839d67e452313795ba2ee0691a70fe4ec86b3c0165abf4e98436da2f339b7cdb316b439182950334a05504b1c7fc55299f38f732a7f9b8dfa1b51e6295724359ab821ddc9804a4cc470361e2fe6c8324308ad7dc0b4ea78d071a0d6f8f97b47e458097ec1fbc67e20fc928c93d48ead058bdcada344f52dea98bc9ef4d2"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_KEY={0x140, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6e, 0x1, "7a0f2af6b3fbbf69950e7391396351709001f701321b75587277bf93e78cdd1f8a02ca705ce049b1a401a53c09b915adb63c75ef7bcdeb2fc904eb60ba964b7513f437d1fe4a9b21e74fe3c16435bb11b8888510033b879b195a308af07fafa34dab190b662d06fe92f3"}, @NFTA_DATA_VALUE={0x8e, 0x1, "a17384c748568fba617efc2fb77560615cd19d8b69c7230c7eb9ea7b88c4afc691cc81616601cecfeec3d4a8649a10b87093b422127ef002b076c5b7c7542b178e5aa8efa45df08c58bc98a0625339b266bdca56fa255582998f98d9ff94c4612e99ba82d9d1371a92ab1d5fc89cb99f99467a41f825903956955a3e6c7dbbf28f444e2602d81248925d"}, @NFTA_DATA_VALUE={0x39, 0x1, "47a7b3c3b964860d9cfb17821e56805be988e8aefe2180bf64f891af680fc279baa9d360206557af0aa4a2236a0f96c848553351af"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x48, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x7d, 0x6, 0x1, 0x0, "caf165a739ec71f8bfd2965daef2ac0650e6eb23a437f3ff7b2d564099aa9f613fedf60c9e83022484ac2219916a7ddb51392f540397e68fe83996768b51e5bee9abe732b5d803eacbd8d7c25b9c1ef6a1d4404969fbf53287e0903bd3451b1f6d42f02cf7682bee8a02bbd5706c4c5d2f7b104ee06da19bab"}, @NFTA_SET_ELEM_USERDATA={0x96, 0x6, 0x1, 0x0, "dd992c58add58c79f2858d52896ae260d5a082e4d15a606b4da14d3d498d2c90952cbed56a38346a318560093dc09f02dcdee1611e2e2ba034b0fee425754de110ff53d881df2d1755738276961af198bd39791fa07c5718227202714a99cf9ff29496a577912284dba2e645f2a620d9fc534a1858c48b5113252b62f4049d8ec4f16697deb7d94741aa05a2c265c3fbbd97"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2298}, 0x1, 0x0, 0x0, 0x10}, 0x4080)
splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0)
write(r3, &(0x7f0000000240)="94", 0x1)
tee(r2, r7, 0x8f5, 0x100000000000000)
r8 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc623, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x6, 0x9, 0x1, {0x22, 0x918}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x1, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ef, 0x9, 0x2, 0x5}}]}}}]}}]}}, &(0x7f0000002540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x6, 0xad, 0x3, 0x30, 0x4}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x10, 0x3, 0xb3, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x6, 0x8, 0x1}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x416}}, {0xa9, &(0x7f0000000280)=@string={0xa9, 0x3, "ad9872617b0e254d04a5d41e6e66bc9a8a0dbe2fea2947f157f3be81b1e64c1c2a3aec95925e03258dc71ef4b572125af78924081e383ddd3a01868ceec54f1906771ba746222d4b88f1345b9b722456bf3c5fa13aa4dcd6695aa018927e12aff7b6b39ebc526415da694ca65138f5ef059fcad14aef502c028c50940bc7bdd18e67fe927f5ae32eafa3dffc5d46704d16638929b7d372d5cd3257cb9c0aabb0eb21ee82eb6151"}}, {0x49, &(0x7f0000000340)=@string={0x49, 0x3, "e6b8333f659e28fc4b65b14ead9d2916a1fb1300179a642f7626a8e7060059d38f09caa9bd834a9747d5c55a231b5a569cc89307dc80146dd9e44147c3f6b2fe43512592f2a5ac"}}, {0xc9, &(0x7f0000002400)=@string={0xc9, 0x3, "235075c15215208a91e13fc10e39179744bfcfcc0f1d133c6423d89236d0028a42aedcd2de574f6897193dcef3c23699f4731749451b613beaec11c7f197aa3a9b3eb55d6877170f39f5536bfc31275d4ed28220a805b2e65a59e05b6da710e2608e608aff294111f23f9f00c9e82a993292f9648a2d898017dc9440fd225a557cbff0daa1c42dc2af8d7bf9fecc11082b4625c4c570ada1e2ffde1475cfef5927e4e23756b8ce7de37c539fa137c5192ca987a65a1c7fb52449c3778a7e73720b083b29c61c64"}}, {0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0x41f}}]})
syz_usb_control_io$hid(r8, &(0x7f00000027c0)={0x24, &(0x7f00000025c0)={0x40, 0xd, 0x4a, {0x4a, 0xd, "31bc6c617422db8cabc05d607d8b86420a9555632b89684dbc96508702ad20cd0f22efcd5407bc47d2c46f8126475d7d57bfa62f2f75fe899e93f4216f788d91d34bd5f67e05cc90"}}, &(0x7f0000002640)={0x0, 0x3, 0xce, @string={0xce, 0x3, "6e9ab9ae4a2c071b3e6cde666930833032cae5341e4f68d5dfccfa436cb9d6e434a36c21f3867724f720cd68c41137b443eda72cd52a2448da0998966ef508f152bde8b63630653335a86d8ffeab7d4c5e30b312728a8985b7e53b13d59c411781d690805d7a09860fce5637401da7169f011d044fe66647ab51b336fdbbe977f9bcbcf11ca4b0d61793f12af3d4a3b8b341dbdba2f0960427beed9b91641bff761547d0d788e57287cf185459437cc97e9addf7d05fa328344d2408563a86de20c7dc8514ea1b04531f38d3"}}, &(0x7f0000002740)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, &(0x7f0000002780)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0xfe8}}}}, &(0x7f0000002ac0)={0x2c, &(0x7f0000002800)={0x20, 0x18, 0xea, "35716d45b1989d0baf267ce2461bd3221d1fd55e5e82c1fa25f34444fb39760c4158faa650f9c27c043f7094faf157f71cd5fb91ce9a2823c073f8e40c38128cf7d52718e94b3f21664c06e5a2d2cbd34777fec1ad08091980ca1c9c3067ee86e6667035701313d1287a53226886efb0039a90569b45e4a1cc9e52ab053bd540d5021d3273a4819b6c750d34eafa8e55486db26ef85cfd986f9c4d9779c0144cfcdb04e6bf75c84bace522168567eda5fbc6eb55189a54f0b735adf9cc535a0beeb6b7986113653e7a584226f2c8f19fd5ba7cb10ab3326fa37f3b692a6bf1dc52c9f03cded73d2b13f5"}, &(0x7f0000002900)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000002940)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002980)={0x20, 0x1, 0xe8, "a61cc5f92bde3f96b8f354fb3b23c005d46c99d1c9bf98cbc1f4485eb86a1ad1154a364dd71af5e28f5685a6df3f51e49974747137ffabd44c1b15c986534f4f156713ffbde8e036c266db3d35e2d10a9fffff4ba5f0f36106ab481b162555859b6fbb819fc516b330d4a6e2ab753a735194c02788bcefab77a8e9b400bafdfea5786a438f8847718f9848ee02cd5702cfb8de3be343d0d3ae9a7fd2d435aede0097baa1e0ca691d0af3867a328d19cd17571e888f6b833df8acfd5e76e550fbcc895d31b8a1dbf981d5cd125710e1d4da5ed0e3e74b36e18a5a51145441191d48d82b1a87de3a66"}, &(0x7f0000002a80)={0x20, 0x3, 0x1, 0x1}})
read$FUSE(r6, &(0x7f00000003c0)={0x2020}, 0x2020)
write(r4, 0x0, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x3})

5.921781842s ago: executing program 0 (id=10897):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='ext2\x00', 0x200480, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x3}, 0x8)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x0, 0x3, 0x8b}, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0})
io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0)

5.877601037s ago: executing program 4 (id=10898):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0xf4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x2002)

5.769051784s ago: executing program 1 (id=10899):
r0 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002224e00000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

5.655611246s ago: executing program 4 (id=10901):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x198, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', <r1=>0x0})
futex(0xffffffffffffffff, 0x3, 0x80000000, 0x0, 0x0, 0x3)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
syz_usbip_server_init(0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="5773ffe76b04866bd16b"], 0xa)
chdir(0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r6, 0x80000001)
setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, 0x0, 0x0)
recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0)

5.553397858s ago: executing program 1 (id=10902):
socket(0x28, 0x5, 0x0)
socket(0x28, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
acct(&(0x7f00000001c0)='./file0\x00')

5.013304515s ago: executing program 0 (id=10903):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x101080)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$NFT_BATCH(r1, &(0x7f0000004e80)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004e40)={&(0x7f0000002b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x4, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWTABLE={0x138, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xfd, 0x6, "d517f5ae1839168e1281e1f0fe37e53692cce2cea81e0045f9dada572a475b7c5bb5b548de42f4fd2f28157a24071a68f4053e1d9a2bd27c6462bff4bbfc8894b11db1cfa93244d5e6ebc267d38d158543ea753dd44d983d38a2db3e433794315f4d9f847ed8ac332766e5e243d32afa66622d56dfb3aa364611b72a30bfa52455ef16fc504197601c9e2f62a9999e7443973537a72fb602f42cbd0537df9f61056791270080540fd5a59e26aa1be21fa9de9b6953e3cddf4fe72696e1bb3d1fa334b3fbe449c01d247f25094b8bdb723c859aa705ce27a8ca2b6f47c9fe21499c5c1dc0ca2d9d051b88789ed5292dcb05990a1c7f0b267eed"}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x124, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xd8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x66}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x124, 0x8, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xb8, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x3b}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6007}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_NEWRULE={0x1340, 0x6, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1324, 0x4, 0x0, 0x1, [{0x1320, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1310, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x78, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x158, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xad, 0x1, "086f692f17b8f9dbddb64335b30e12115eeb9333d4184d845cd4d1cccf8a62fe92a554d8b248c95b98bff4040fb700c5a6a4aacd384f03f4f9d36dadcf7b95f5ecc8985a10cffee17667e25d1ea3dcaa54b012bdf2665b4dcfe575ba7bf877c921906727f8a7e6f149f9104ea53a103f20fd5e41e332c9ff8afde4ff7b874e4eb3283023c6bf3e0b2cc8ab85ae28b03421681be364e2c143afcc8f12c6a66fe435a4ac3d5828c53b6c"}, @NFTA_DATA_VALUE={0xa3, 0x1, "7f7528e1502b03012eef303b93917cc1fd7325e2865825ea25c26d25c841060e9d2b3efed019b71ee16dc29dadeaa8e383b84cafe9ed0c112fe8482dc075e72ce62a026834451f8f187eabc0a8fdd48948cd75324817298dfb2150055053e3517ac375a8356d48c3bb7fe218a25986734d6a688e298953048b6d3756ad3da45e23d069ab147cf6c3c2c49083b8e9a43f82d96317fc2de20b041f769e72373c"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RANGE_FROM_DATA={0x111c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "2115bb8e596435744e62b0a276ee3e1c417454753ba8f81a426dce832029236f692b1d82c8e9ed350639b1a4d5e12468fcbbfd3f199f679edaea243f6b0b97f8b39486b30d84916f930caf497c1a79a4e2417d84952eedfeae4aa1840938783312bcf69236f6d9269c54f5c75aedb616b696565497ffabee780012f315925f709ff9af5ea985cc447ed01dc3c3746be777ba4c136f4e379b4b747fb71218ad2d8deefecbe2d9392d31c1696d1980ae5ce55078ff2fb3edd91e319bc214e56131fa3ef01206488d2574b1fed9658281e3b8cb3e150ecf410aa7a8ca698e4d770087159b41291b6eb69cb16d6c0af018807e95661e87e3de3906bb7d9e824a177cf1dc53d3937d7851e35814a178674303a4de0722eaa6331bea09dda81a4010ce83696cfb5b2cf1f22a901208945f4a21ceaa0e4f4bc773ea1905b439f324944d991f81bc7e24cc2f4a5f984df0a02cff1496f9697451335dfea6d256b8604f1d501f99a54ad09ba394b418222388ada01462e8f99364e50a622fe572885761dbf93def7c3fbcc1181340411901b3bd9d6f6f13677d8bf38fe22bbbc5a7462db89760a858259e377fc90cea67e4f842af96c2331e5bfa58e4eedabf3df6624d248f2d67a28d2bd53ede6f847e148fa9d6d930ab38d6c2c8703d160a854cb3ece971e155921a993c786055e66fc7b21ee1ac9c929204ecdffe3a549b12ab8dc97c987bc249298c0255d878f2baf744db25544be9c08202aef59daeab85c4708cda6ca29f52061f7d0f16c8352d8e75734cb87cc92cd153d49e50df9a3c797034114f9c2efe35b16081983cf20964a77c17909db51ebf6825c82548fb553c42324d15cf2552cdaac582bfaf494944f77c9192a495d44e43ebdd106338384c47f816cc32e5b0e3819aec4313d4ba53adc05d97f67d081ca65b9c033880ad2499ac7132f62321eb0efa879c917437e020ea10f914e53d87129de5c96a90f39f5d2c556b8c5469153521f539e3a2192bad7804bbe582ffa138194e3ef1629a1173ff48d0898e54bda30746405ad9cefab79a64a4bef5c4e1513587ece00df98775e0accfaa67746c3e1911c0a3c2b5925aeaafcc107bf1fd17652186733b07a05876d564445ef0090f2722a69c871008465345a6abb8ad21482925b8e131c47a0576fb6253bdf2473f0a7150be4ca52c92f1b3a6b6bbb6e114eb663d16db75547c236df4e370489c38ba08203ae974bd7f45d72c1cf10ff900c5af8b9d57638954c600fbfea0f0004035156d236ccd989669c6c1db823078566bb3f2f74dc7dfe8fa597d18b3fb2de9d6a5fb9b86714d5198c0072b5f98721f6cf82d6fe72d98303e3b3092ba300e22b5329ae28db47c4dfd41b85486e8cefa3f84251e552a718c897242aa62c1bc63512d8f7f0a644ecf116eb8e4f10be0b132e972fc208014276f32c44c171a6318d0fe94d647f1f2ca24766e03c9c36fc42307eb7fe0b917e07f79dc34b3081cd35544910af14f964a2f50050f7d34b2d17f6438b121d3c3f430c427fb3dd2475dc08a7b9f50f87699e72297f4e5c1de273e44c5ecd0f733f60e892e68ffe543e469c3de30d1d3b92fa278b9dda3f34b4a2d57b6cbc0aee44a59b279cb6ef82f7610dc77c1cae5d9fda17e7cc42b7144d4df85f50860e63dcca7b962f0d9b7e2d8d704f0e501b26f5cff8af63236726452b1fbedf7f1c2b3809fad902d7e2d4338a22ca877b82c2514c1d0e0c5660873f900c696d31bd9fb7464ca739d05696968e78398f9d9a9d831ea2068c0b27e6718ff5466102d2ffdfa404365dc05dd1ada38cf7ae73401a1ff386846aa899e2c00fe9a6824cae74e1e1f9003c36ddef891ba5ceb8d990c668fe53a5f5f34544135219335f3a503c3969200d994643bd8ba18c0bf117f1c8b5d59d4831cbf1e247ce5ad6a8898d86d5645b7cdff6951fff838ffe788a163521da5db9aaa5afdfca906ef361937712c2f0406bd17ceac03726cd3f33edcc8f4378fff5e32788f40599cc8bda88545eb50f803d139b773b14e452f4441ad8d782e7f4e6f1ea7bacbcd3e151bcb5a552e92caf36d677bd3aa1e5bd236d76caf41f957cbca813d772e09e72ec9ffda4280eb15bccf80b56648a80f6eea02a0b36f653a26a5f5cd7dc0d51bd97be5c1b891d28a67381cbbdf683ebdfbf0ec817a8195ba486fc47478fc86d3653e6215cc31df3b68fb01da98c1e233987df6d846344c60d7e489ab3bd93815df7a41b80a99ef0127e4c121f1b79263b0134057f3d2d4044be5cb9f44ec0ba38bbce0929344fa901d209a372237f57a7984b2798aa392cdb4ba97c2d81622ff247ec841b843d19782104db276d051ed97fa2869cebb5c7f0a163a4c817e82d6a48415119fbd24fcb7fb9c04c0ed01e317670ea1fbded37290f8b7fb959af0920b1c1439e08486b8aeb76f03ea9f34911c45ec9e1484d00b83d1115bc61dd775129ef68551f99bacd197397a6dee3ee55fef94e5b43f22699181faf2f93b282e05764ae8dd80171e9d177eadb05597da0bbf7c973014915c819a6f8e2032193aabf3e1af35fb20434b75edf2b7b09fb27bddf68e3ae1f2af1b2d610a4d91c2a9c96b98cfd4bb9916d374e9f315a3c0bbadd953ea903c830f6ae797408909b7e6c9c0406f54ee12186927eba8ba1e24da1e72f0e134927c63d6c8aa3963233590e39e4e99c8a9c222d0772875bb69d17febb118d5a748280cf6e245a2f3acf1e5238b9f2b2c644e5c599e7a75253b974296b603319cfd16f880d3babb293cd3ae4e9f00e70f52248a408f6109fb8ed3ef7a93bd778cfe29625258116c0093a523c7367d5dca4489d6c89b9fbe5e3989ab69507abf7a88899b0b030fc9bbc68a07a30874d9d00438263bcb386da4488058724724d7600c00668ebbbe39787d93acf5d719d1c6c3de85cae91542383e8deb70825f91f12e52ec0eccb36420c198cd7c7ab7380f25f6af7f9ce3c853f6a13093cc0b4b3f3af5bfbcc94267b3ebbf9a36939a0b7c63c7eb4887a377a8c7c7b3d6b641bbf0eaa95a872e9c63a540f28a188187bc1213cee45ed8a342fb4656cd0dd97795ce15099a075923634ef37fb0f92c6a226e964a50f1b803365a850fa2f864e293fd01699a42253ebf6130de22ff76499776978d34191a0adcf21eb74c3200198a8aa21fd845d75239201e8ef76e43d476bb5e95ac72a00a883d51813d1df09f4b1926c493ec02e8203de0102e2f7e62197c9e854096a708cfb7bcaaa16fb1aa70b8a477c91ef3c6ce0894da8c748781055be7c4ae1dfebfa9d8ad0eb0f2e1762d5696ce6257db44dc6010b49f8a6708b08b8ddb2483484720535fa6f7bc10606c78328f8730798fdc037b24a6a6deb4e9cc575993d63a77f2bc4bc5cb59b32bcb200dbf4886b815c3a9c20173a6b86577b6112ef4cf7421541444f36d670e0fc29e04c3e911c0e2f1d4bdef2039a5a94c50672cdd0ff04c39070fae2c894d16fb5ff1a6b53888f88c40116cd96338d337811019d3c22dcef8de860afd95f0577d2af2fb64fdc4546eff27ae9beb819ae2344cc4ef506d4c0da3f19d79a986187cbfe46a8b8fb742fe342e36a5c8bd1cccb068831e3267770d5cd423a6e533b0fe16939705145162320c8a6bf9416f98bac2dd2eb75980fcc25cdc83551f32ff0d03854917062f6bbf3d7ed1d6e76f3f4172df6d96fdf79aa215eabb1df0042682391429e628931202e6de6649ff30e93171b158cb5269e7332484d396eecbb515f5ccbde84f9573ef7050f8bba37384f18fff938a329cfb4e0237ae71f6064a56a508fe3dc182d94115ac126fe81f471fe794b44286f48835e776ed83ec45f1e9864627e8a751580024c7a9e5c02458935e26ddee3cdb00a15308c5438fa5f3c4222b6aa1025f917439d011227e1dad6991f8d75a3ca0074fb556f5bb74621668f73de6cb4973d19b0123a296a514a9861209345b4392ee9c8444d12f09ab511ace1a02c6437026d93d3af7231c2ecb2696a4c8b1201e2d5450c3d79df95bfa225ce2b5748fabba1de0ead4f198f4a9ba6b9832bcb711b7a811bebcefc787bb586836735a99e617d7832618eb9c521ea321bf54c08d3163c9bf9180d5fbaaa1a2d5e87a77be1937f0c7ff10471e6fd011fcba7adbe60f3e4c9d7f01ea9c19a1db885d61ea6676785b5fb6d638d9feb7d5e3812d828508a32ca1bca3ce7f488cc052771be5bc15d18cb00b1d9461a12ebd40dfdafd221e44144bea930398ebf079a11e6e63a6529fa964547b6bfbf41caad6511f3a1524b3a5b92c3d78318edf4b6e55e2e81a1f91db0ca4772e611eae67d0231bf6bc96acd8aab0502be3bc0f0878b8bf6ce43c1e2eaef01d3467dce3d22ae8eec4f31169056048388d1374acf5199108c575748d2d7cff5ec21f933d2e6f20d206e1dcb95e0e7d647e77b170689fd624c173fa10ecd7476384ace3546cc1ec54a6c210f374aca6ccfd1e4d513537b8c56811f0636f532a8ac1459464647f04a0d3f7bbdb94cc4a55307a1d7cd39746d1810b52ce7bcb6e55e859db5a13bbf6f45fe100188e451ad4c73c0080f1e90c685515970b8a0a0706a3ff697afd71aa426e4ea348f61084a20b5f17b62489fec82992960eb46543a536761ddd7f7834a8a0ffa1a0a2e012c67172454ac2b2d48ee0bdee65c951cb9b269879aec7df229868dda3547852fa286473520735aef70bc2471496d1a0549510503c506d2e55a7fb48e4de72367333acd95ba106fe9489f1238585a2d5716bb6aac0dd3eeef0ec45657cc3428471bbd32436fc346c56ec1b79b377ba81b014099221388372d331685361969430a8766c30fdfd2286c3b29716e9ea31aea3c9e92cea74e7d9ff6ae5873e45b4332ac8841c3fb7c0463578307fb2d8bb7ea03bee2423d8e86cc9028993c2fae039875d1d6f1434c2492f508d45f9d89bb45e0571195ba4a1b03eccf6877960ca1b8add014da10c4fe5ec22018886930ff620cbc07a3029b3df04d9ae38d1e3ab33662d424f17f865ddda1f0f1777fcff59b74a9f702a1b2e43e05614e9601b0685f5991b6f2439003efb08547daf2f05836f8e8a05a20f471588f52ee08c29e1bc33572efc40b6f18b9db84d4de88e42c7b2df2fa0f50577571dce9e15d72b3ecf13ea9d45890c4b93d0d90664f758d0e7fba01cf2d39dcd57874ca8b1268c226bd1dcf8c6a129b03c314016a4728f44844eddde4914d0280a7588a6a980ee4a79e731dd5dd8df8d79e2c4e05a156cc1b392ece718596d26e1193b5a0c3810e739e21fb39f958b77be918b7583a4afd2279d0c0a00c380f5ae9dd5129e396d8442815b24be6a90db5a76a7dee6eae9b4f5a64c2296b1058c5386c01abc631a60594b5045def704c1f9b186e501074cae19894e871eaa2ab45bd23900103006421a2d7f87a0f11c043bab366cabf4ea260e8b989984e922abab816a56f8c5a63f89267aeea2bbc79945ddb288c5ee408e25616ace4bd9c02f25343eb7eeee8b6f548d245275ebb7b84ce5fe8b8d7ba07c0a6a398216f351eb6e2b38b7aab96faaca0f5f146ef9084cc5634a94bd48f72c7700e12d35160f5805e32d89fa83e5c6b8b8fab63aeb1acebc9367ac2b2f23c3bbe49ddb9e3a16ce7e66272a5c1e57f0336f66111d148ed97ccd34b50d84f391984eecb1d4d719fd4bf0f9dfd71a38e07a9e0a3c08fee607b96135ecfc896a1c280c6a880e335269dbc55b2f1d2b9e1cdebe2a68614d724cc1cbb63fcc941f9901953a7568b6df718bfb3a1aa7"}, @NFTA_DATA_VALUE={0xaa, 0x1, "be9c526d74e3ac607ffae8cbbba0209f98e24493cd4308a1bde50cbf06b1ec8de63a91380798cd82f2dc8cd59c6055e6f41ecc6ea69e1f8cea59a89a74f453a3bae6443f9d094543552febeee4279f2d947c901afb99a3fae7eca9822671a486a8a750f38fe7767fb666d9bff319599a64b77e411dd4ba912a20e62ab360cf2edd6dec089af6bd317b7289c5ac7897e79bac406371ec8b327c84566ef2d7a581e365aa86aa9e"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}]}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_DELSETELEM={0xaa4, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x158, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xff}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_SREG={0x8}]}}}]}, {0x108, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x68, 0x1, "f9af57ea17bff824d3785d102898d6b696f5d5d70e16469160b94e4be8fa52ee07a749ab5d342ed3c61e5f44a27dca62568d395c160122372e1775290eb83f6ba7e384e4ee320d8fad8fc8a134880277bd3f3274ca02d49b7a20c116ddc35750a8f1209a"}, @NFTA_DATA_VALUE={0x17, 0x1, "a868d11db124f2798ffcf649d9f73748ad2e7f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8fc, 0x3, 0x0, 0x1, [{0x4b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf1, 0x6, 0x1, 0x0, "72d6667071098cde584497b3d2758feec42326047bcb931864923fad89d92d8d2ba4007714d285db48d0c3403b52f1ce29b23e09111866d85e498cf5b39bdc807d40f0789ccad1946c9343aa0451aa789e008966098f24b6a787719cffb3d669a3b98484bef6cc2573128aa40b58e31fb9673166eca15f925251d203697a4b451ce3b9cfe9ca467d6c558e75f005847912e9b09f78930bdc62dad57e1a598726ee8e221069d2fc4c4b6ad7888be7e3a6af5dc4bbf8a2dd946eb66172897b82843549859a3389215c979f00ebb7c2da65f34d6ec27e39360aba97808ecdeecad088ef1c241c397a2105969b48b0"}, @NFTA_SET_ELEM_EXPRESSIONS={0x330, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_DYNSET_EXPRESSIONS={0x10, 0xa, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}]}}}, {0x2e0, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2d0, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x40}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x2f}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x89}, @NFTA_INNER_EXPR={0x2ac, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x298, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x997}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_IMMEDIATE_DATA={0x248, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xba, 0x1, "467d177c29b1db47c1b086e17fb518cbaf62940d2a152a6ce68772c7b37d1b98bd7fde502a8eafe3c23b0bb0dc8732b732a153eace2a228d725dff92559d655b28fa06c15ab149dc7079e8d67d8b8fb24f7bfe627774e02baf56ea22fa92241f29f53ba096804f37f3eaba5f6bdd38c3569f2d3d7bd650c2a197592cb948de47857baf14c35fe4fdd5924498afa48406a40f31df44b6503d40411dae5c0d1b599d3c70e49279acf58fbb1a92da0c2cf9a262cc088aa7"}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "c1fc7f5b29f49d5112ebd56cb5a8200b5aaaaff291150c1d7f3d46ceeb66910547e9d10c27902e6dd062a9a041c1031f9bc0425da3f0024969b2a5b62b80453604f4ba83c8129c3cd426144a80db790d3dbbef36742dac9496f3de3ded52b38236e9acb3dd325e195df425c1b440c52f8aeca9b125e1dba8a24ac3fad4f8b8466678d50e1e9a21231c1f9a3f3715a2c88a436eca6628bbab85c1dcc0ab26640c4ac558bd236da23885880989a4c9d05fa57e6247122c451c40d0fa6069"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000001}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x18, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000002}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x440, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x178, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaa, 0x1, "9fcb335d9f1b12785bcfdc1d6feb2f5fbbb6a12076fc64a44e6773b4cb3ec64075f66d9c0351bf601abf103c533e26e77f0dd984086d8400fa63823bd6d55f284a19d1681f323c3ab2312b63d72809eb28cb31873f37ab6892da9830519a2bbd1c2b6efddc229689e283052d2e4d393e2f964a61053e97e68d0a525cd3702de9172040b1c4bdabc630a5d167c352eb5230d0bcf6117f0caf367844d089333fc6c469ce462a1c"}, @NFTA_DATA_VALUE={0xc7, 0x1, "a2dfe74d915034b25a825c812b744590b2ce7beae30d95bd8c900bcfb41360af04be7f80b10d489c171cd6129536192382ce215f39566340bc42d4c44bab2d3237746f22eab839d67e452313795ba2ee0691a70fe4ec86b3c0165abf4e98436da2f339b7cdb316b439182950334a05504b1c7fc55299f38f732a7f9b8dfa1b51e6295724359ab821ddc9804a4cc470361e2fe6c8324308ad7dc0b4ea78d071a0d6f8f97b47e458097ec1fbc67e20fc928c93d48ead058bdcada344f52dea98bc9ef4d2"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_KEY={0x140, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6e, 0x1, "7a0f2af6b3fbbf69950e7391396351709001f701321b75587277bf93e78cdd1f8a02ca705ce049b1a401a53c09b915adb63c75ef7bcdeb2fc904eb60ba964b7513f437d1fe4a9b21e74fe3c16435bb11b8888510033b879b195a308af07fafa34dab190b662d06fe92f3"}, @NFTA_DATA_VALUE={0x8e, 0x1, "a17384c748568fba617efc2fb77560615cd19d8b69c7230c7eb9ea7b88c4afc691cc81616601cecfeec3d4a8649a10b87093b422127ef002b076c5b7c7542b178e5aa8efa45df08c58bc98a0625339b266bdca56fa255582998f98d9ff94c4612e99ba82d9d1371a92ab1d5fc89cb99f99467a41f825903956955a3e6c7dbbf28f444e2602d81248925d"}, @NFTA_DATA_VALUE={0x39, 0x1, "47a7b3c3b964860d9cfb17821e56805be988e8aefe2180bf64f891af680fc279baa9d360206557af0aa4a2236a0f96c848553351af"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x48, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x7d, 0x6, 0x1, 0x0, "caf165a739ec71f8bfd2965daef2ac0650e6eb23a437f3ff7b2d564099aa9f613fedf60c9e83022484ac2219916a7ddb51392f540397e68fe83996768b51e5bee9abe732b5d803eacbd8d7c25b9c1ef6a1d4404969fbf53287e0903bd3451b1f6d42f02cf7682bee8a02bbd5706c4c5d2f7b104ee06da19bab"}, @NFTA_SET_ELEM_USERDATA={0x96, 0x6, 0x1, 0x0, "dd992c58add58c79f2858d52896ae260d5a082e4d15a606b4da14d3d498d2c90952cbed56a38346a318560093dc09f02dcdee1611e2e2ba034b0fee425754de110ff53d881df2d1755738276961af198bd39791fa07c5718227202714a99cf9ff29496a577912284dba2e645f2a620d9fc534a1858c48b5113252b62f4049d8ec4f16697deb7d94741aa05a2c265c3fbbd97"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2298}, 0x1, 0x0, 0x0, 0x10}, 0x4080)
splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0)
write(r3, &(0x7f0000000240)="94", 0x1)
tee(r2, r7, 0x8f5, 0x100000000000000)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc623, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x6, 0x9, 0x1, {0x22, 0x918}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x1, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ef, 0x9, 0x2, 0x5}}]}}}]}}]}}, &(0x7f0000002540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x6, 0xad, 0x3, 0x30, 0x4}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x10, 0x3, 0xb3, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x6, 0x8, 0x1}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x416}}, {0xa9, &(0x7f0000000280)=@string={0xa9, 0x3, "ad9872617b0e254d04a5d41e6e66bc9a8a0dbe2fea2947f157f3be81b1e64c1c2a3aec95925e03258dc71ef4b572125af78924081e383ddd3a01868ceec54f1906771ba746222d4b88f1345b9b722456bf3c5fa13aa4dcd6695aa018927e12aff7b6b39ebc526415da694ca65138f5ef059fcad14aef502c028c50940bc7bdd18e67fe927f5ae32eafa3dffc5d46704d16638929b7d372d5cd3257cb9c0aabb0eb21ee82eb6151"}}, {0x49, &(0x7f0000000340)=@string={0x49, 0x3, "e6b8333f659e28fc4b65b14ead9d2916a1fb1300179a642f7626a8e7060059d38f09caa9bd834a9747d5c55a231b5a569cc89307dc80146dd9e44147c3f6b2fe43512592f2a5ac"}}, {0xc9, &(0x7f0000002400)=@string={0xc9, 0x3, "235075c15215208a91e13fc10e39179744bfcfcc0f1d133c6423d89236d0028a42aedcd2de574f6897193dcef3c23699f4731749451b613beaec11c7f197aa3a9b3eb55d6877170f39f5536bfc31275d4ed28220a805b2e65a59e05b6da710e2608e608aff294111f23f9f00c9e82a993292f9648a2d898017dc9440fd225a557cbff0daa1c42dc2af8d7bf9fecc11082b4625c4c570ada1e2ffde1475cfef5927e4e23756b8ce7de37c539fa137c5192ca987a65a1c7fb52449c3778a7e73720b083b29c61c64"}}, {0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0x41f}}]})
read$FUSE(r6, &(0x7f00000003c0)={0x2020}, 0x2020)
write(r4, 0x0, 0x0)
write$UHID_CREATE(r1, 0x0, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x3})
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000002b00)=0x3)

4.355498497s ago: executing program 1 (id=10905):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x81082, 0x0)
io_uring_setup(0x2a2e, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x1})
setresgid(0xee00, 0xee01, 0x0)

4.191875098s ago: executing program 3 (id=10907):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffffffffffff5000007000000"}, @NFTA_MATCH_NAME={0x8, 0x1, 'mac\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x4048010)

4.111229134s ago: executing program 4 (id=10908):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
syz_open_dev$vivid(&(0x7f0000000280), 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000040))

4.061126467s ago: executing program 3 (id=10909):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000040)="b8b2cc1e00c1dba49d23bb", 0xb}], 0x1}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48040)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000300)=""/102376, 0x18fe8)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
close(r5)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x48, 0x9, 0x0, 0x3334}, {0x20, 0x1, 0x0, 0xbffff038}, {0x6, 0x6, 0x0, 0x5}]}, 0x10)
write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0x9ffc)

3.844596374s ago: executing program 3 (id=10910):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000040)="b8b2cc1e00c1dba49d23bb66cb3a66bb0280000788fb", 0x16}], 0x1}, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48040)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000300)=""/102376, 0x18fe8)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
close(r6)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x48, 0x9, 0x0, 0x3334}, {0x20, 0x1, 0x0, 0xbffff038}, {0x6, 0x6, 0x0, 0x5}]}, 0x10)
write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[], 0x9ffc)

3.338616602s ago: executing program 0 (id=10911):
r0 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100"], 0x64}}, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x258, 0x194, 0x194, 0x258, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350)
sendto$inet6(r0, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

3.289366737s ago: executing program 3 (id=10912):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0)
landlock_restrict_self(r3, 0x3f000000)
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000000)='./file0\x00', 0x1)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2)

3.078092786s ago: executing program 4 (id=10913):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000)
dup(r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
r4 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18)

2.264341034s ago: executing program 3 (id=10914):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r5 = io_uring_setup(0x2a2e, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x1})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
setresgid(0xee00, 0xee01, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
close_range(r5, 0xffffffffffffffff, 0x0)
chdir(0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x30000)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
pipe2$9p(&(0x7f0000001900), 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

1.724009095s ago: executing program 4 (id=10915):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf00e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
futex(&(0x7f0000002180), 0x3, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, &(0x7f0000000180)={0x20, 0x31, 0xac, {0xac, 0x23, "5470bab262fd3bbf3b336c991ed5d04030bda787ecf7fbb13f369dfe049b1a9d850395c6c7cd4301e8586a4b666c93b81ad1508ac78993bff47caf6e5cf5e3944192186253be37f89bb99b57d397b7a5bc15cf3219de792cbc91bd332ca8ddd30f1529e95ad12651eaf8eaade14e2a401d2c0b596e9c307bcf3535125c7647d26881ace982970787fff30755e3cdbf7c7efcc1d127551e80f06fb2bee749677db9488c8485818d9aa408"}}, &(0x7f00000002c0)={0x0, 0x3, 0x68, @string={0x68, 0x3, "579f240340b4b27adde1979cf6e4e843d5d665678cb00264146d61dfa414cf4880497a1d403b5d6b3bd2ce09bd9bba3933db95cd5f9fa5ad0667adede29b6f634986219e7baea6024d569838d25699213277bc3791882055582e0b1e62968826ef7922e8018e"}}, &(0x7f0000000100)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x4, "84652ab6"}, @local=@item_4={0x3, 0x2, 0x8, "20a5cd62"}, @local=@item_012={0x0, 0x2, 0x4}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x8, 0x1, {0x22, 0xdc8}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000380)={0x0, 0x5, 0x5d, "f89cf9268f852b38f2b7caf0825fa8f40963db78ce86e4f23f19c86c5c9f94e72623693fd838eb8daf1915a7461bad09f3577917cfd9dc6b776a4401a36561d819371ca862939428f5b0632aa2c25717362b21672f797b6b65ff5c3b67"}, &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xd8}, &(0x7f0000000480)={0x20, 0x1, 0x39, "fd3749f3bce8d6cf1799b2f435b91e4bb47eaae6e5edf99361ea34f9755531b8956d02538b7aa1be3dc5fa6ce8f8c1fa1c9545db1f480724b7"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0xff}})
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x23, 0x7, {0x7, 0x5, "0ab4697b0c"}}, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@delneigh={0x30, 0x11, 0x1, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x0, r3, 0x4, 0xb2, 0x5}, [@NDA_DST_IPV6={0x14, 0x1, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4044004)
ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000040)={0xfffffeff, 0x4, 0x35a, 0x2, 0xf884})

1.680755618s ago: executing program 0 (id=10916):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0)

1.019471179s ago: executing program 3 (id=10917):
socket$inet_tcp(0x2, 0x1, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000098, 0x0, 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={r3, @in={{0x2, 0x4e22, @private=0xa010100}}}, &(0x7f0000000000)=0x84)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x234}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xad6}]}]}], {0x14, 0x10}}, 0x94}}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x32, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}]}, 0x38}, 0x1, 0x7}, 0xc810)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)
ioperm(0x0, 0x8, 0x8000000000004)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
pipe2$watch_queue(0x0, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r5}, 0x8)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r7}, 0x10)
syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xfe, 0xfffffffd}, 0x0, 0x0)

975.549583ms ago: executing program 0 (id=10918):
syz_open_dev$cec(0x0, 0x0, 0x81)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$RTC_AIE_ON(r3, 0x7001)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01ff22010000bfa90d2c0826364f08"], 0x1c}}, 0x0)
r6 = socket$inet6(0xa, 0x3, 0xa)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r6, &(0x7f0000000280)={0xa, 0x4e20, 0x380000, @loopback}, 0x1c)
sendmmsg(r6, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000084008dbc334de7f973645a3c8d9e7f035a00000000"], 0x10}}], 0x1, 0x400c0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x10848, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x230)
umount2(&(0x7f00000001c0)='./file0\x00', 0x2)

206.086165ms ago: executing program 1 (id=10919):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000040)="b8b2cc1e00c1dba49d23bb", 0xb}], 0x1}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48040)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000300)=""/102376, 0x18fe8)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
close(r5)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x48, 0x9, 0x0, 0x3334}, {0x20, 0x1, 0x0, 0xbffff038}, {0x6, 0x6, 0x0, 0x5}]}, 0x10)
write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0x9ffc)

0s ago: executing program 0 (id=10920):
syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000280)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = fanotify_init(0xf00, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x3, 0x8}, {0x5, 0x0, 0x3ff, 0x401}}}}, 0x15)
syz_emit_vhci(0x0, 0x0)
r3 = syz_open_dev$vivid(&(0x7f0000000a80), 0x3, 0x2)
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0x5411, 0x1000000000000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x2, 0x10, r8, 0x7000)
chdir(&(0x7f00000000c0)='./file0\x00')
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x901, 0x70bd28, 0x100, {0x2, 0x18, 0x20, 0xed, 0xff, 0x4, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
write$FUSE_STATFS(r6, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x9, 0x5, 0x5, 0x2, 0x400069a, 0xae, 0x2400000, 0x800}}}, 0xfffffec2)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500225e0d008ad0406034ed50102030109021b0001040010037ce85a8001ea0c27f209050d000800040ff9"], 0x0)

kernel console output (not intermixed with test programs):

01] veth1_to_bond: left promiscuous mode
[ 2675.009246][ T6401] veth1_to_bond: left allmulticast mode
[ 2675.022321][T32594] usb 5-1: config 0 descriptor??
[ 2675.053718][T32594] pwc: Askey VC010 type 2 USB webcam detected.
[ 2675.204167][ T6408] veth1_to_bond: entered allmulticast mode
[ 2675.302735][ T6408] veth1_to_bond: entered promiscuous mode
[ 2675.744945][T32594] pwc: recv_control_msg error -32 req 02 val 2b00
[ 2675.787240][ T6408] veth1_to_bond: left promiscuous mode
[ 2675.847800][T32594] pwc: recv_control_msg error -32 req 02 val 2700
[ 2675.856421][ T6408] veth1_to_bond: left allmulticast mode
[ 2676.090195][ T6413] libceph: resolve '400' (ret=-3): failed
[ 2676.107263][T32594] pwc: recv_control_msg error -32 req 02 val 2c00
[ 2676.356819][T32594] pwc: recv_control_msg error -32 req 04 val 1300
[ 2677.191689][T32594] pwc: recv_control_msg error -71 req 04 val 1400
[ 2677.212888][T32594] pwc: recv_control_msg error -71 req 02 val 2000
[ 2677.308141][T32594] pwc: recv_control_msg error -71 req 02 val 2100
[ 2677.393365][ T6429] IPVS: set_ctl: invalid protocol: 135 172.20.20.36:20000
[ 2677.403799][T32594] pwc: recv_control_msg error -71 req 04 val 1500
[ 2677.422129][ T6430] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2677.435684][T32594] pwc: recv_control_msg error -71 req 02 val 2500
[ 2677.468915][T32594] pwc: recv_control_msg error -71 req 02 val 2400
[ 2677.496540][T32594] pwc: recv_control_msg error -71 req 02 val 2600
[ 2677.529636][T32594] pwc: recv_control_msg error -71 req 02 val 2900
[ 2677.549566][T32594] pwc: recv_control_msg error -71 req 02 val 2800
[ 2677.558311][T32594] pwc: recv_control_msg error -71 req 04 val 1100
[ 2677.583115][T32594] pwc: recv_control_msg error -71 req 04 val 1200
[ 2677.675304][T32594] pwc: Registered as video103.
[ 2677.713225][T32594] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input83
[ 2678.184121][T32594] usb 5-1: USB disconnect, device number 107
[ 2678.216618][   T30] audit: type=1400 audit(2000000281.640:7627): avc:  denied  { read } for  pid=5177 comm="acpid" name="event4" dev="devtmpfs" ino=3776 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 2678.691678][   T30] audit: type=1400 audit(2000000281.640:7628): avc:  denied  { open } for  pid=5177 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3776 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 2678.715287][   T30] audit: type=1400 audit(2000000281.640:7629): avc:  denied  { ioctl } for  pid=5177 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3776 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 2679.039985][T32594] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 2679.831793][T32594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2680.000423][T32594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2680.037923][T32594] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 2680.070059][T32594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2680.125233][T32594] usb 5-1: config 0 descriptor??
[ 2681.029130][T32594] pyra 0003:1E7D:2CF6.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0
[ 2681.803638][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9645'.
[ 2681.816167][ T6479] veth1_macvtap: left promiscuous mode
[ 2681.974633][ T6479] veth0_vlan: entered allmulticast mode
[ 2682.409280][ T6479] lo speed is unknown, defaulting to 1000
[ 2683.071898][ T6447] netlink: 'syz.4.9638': attribute type 21 has an invalid length.
[ 2683.518775][ T6447] netlink: 'syz.4.9638': attribute type 2 has an invalid length.
[ 2683.526791][ T6447] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9638'.
[ 2683.597200][T32594] pyra 0003:1E7D:2CF6.0017: couldn't init struct pyra_device
[ 2683.626056][T32594] pyra 0003:1E7D:2CF6.0017: couldn't install mouse
[ 2683.676064][T32594] pyra 0003:1E7D:2CF6.0017: probe with driver pyra failed with error -71
[ 2683.774694][   T30] audit: type=1400 audit(2000000287.330:7630): avc:  denied  { read } for  pid=6482 comm="syz.1.9647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 2683.777872][T32594] usb 5-1: USB disconnect, device number 108
[ 2683.888203][ T6493] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2683.888269][ T6493] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2684.051544][ T6495] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2685.006829][ T6506] tc_dump_action: action bad kind
[ 2685.045115][ T6507] erspan1: entered allmulticast mode
[ 2685.072902][   T30] audit: type=1400 audit(2000000288.630:7631): avc:  denied  { create } for  pid=6504 comm="syz.5.9654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 2685.621985][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9655'.
[ 2686.545237][ T6522] netlink: 'syz.4.9657': attribute type 10 has an invalid length.
[ 2686.565198][ T6522] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9657'.
[ 2686.597130][ T6522] snd_dummy snd_dummy.0: control 3:0:0:syz1:0 is already present
[ 2686.928818][   T30] audit: type=1400 audit(2000000290.460:7632): avc:  denied  { create } for  pid=6521 comm="syz.4.9657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 2687.063987][ T6535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9660'.
[ 2688.377460][ T6550] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6550 comm=syz.4.9665
[ 2688.570306][ T6557] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9667'.
[ 2688.736484][ T6562] libceph: resolve '400' (ret=-3): failed
[ 2688.841123][ T5885] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 2689.201432][ T5885] usb 5-1: Using ep0 maxpacket: 32
[ 2689.223274][ T5885] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2689.251276][ T5885] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 2689.263558][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2689.299038][ T5885] usb 5-1: Product: syz
[ 2689.315064][ T5885] usb 5-1: Manufacturer: syz
[ 2689.327397][ T5885] usb 5-1: SerialNumber: syz
[ 2689.345225][ T5885] usb 5-1: config 0 descriptor??
[ 2689.360060][ T6569] syz.5.9671: attempt to access beyond end of device
[ 2689.360060][ T6569] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2689.387566][ T6569] efs: cannot read volume header
[ 2689.557054][ T6576] openvswitch: netlink: VXLAN extension 5 out of range max 1
[ 2689.645513][ T6579] overlayfs: failed to clone upperpath
[ 2690.184629][ T5885] gs_usb 5-1:0.0: Couldn't get device config: (err=-71)
[ 2690.214506][ T5885] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[ 2690.236284][ T5885] usb 5-1: USB disconnect, device number 109
[ 2690.291911][ T6586] sp0: Synchronizing with TNC
[ 2690.473680][ T6595] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6595 comm=syz.1.9677
[ 2691.051279][ T5885] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 2691.072244][ T6602] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2691.078748][ T6602] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2691.190804][ T6604] libceph: resolve '400' (ret=-3): failed
[ 2691.221373][ T5885] usb 5-1: Using ep0 maxpacket: 16
[ 2691.264708][ T5885] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 2691.286288][ T5885] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2691.407521][ T5885] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2691.427242][ T5885] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2691.457527][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2691.699718][ T5885] usb 5-1: Product: syz
[ 2691.727414][   T30] audit: type=1400 audit(2000000295.290:7633): avc:  denied  { name_bind } for  pid=6609 comm="syz.5.9684" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 2691.759054][ T5885] usb 5-1: Manufacturer: syz
[ 2691.799914][ T5885] usb 5-1: SerialNumber: syz
[ 2692.315450][   T30] audit: type=1400 audit(2000000295.830:7634): avc:  denied  { shutdown } for  pid=6617 comm="syz.1.9685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 2692.335209][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2692.470021][ T6598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2692.531647][ T6598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2692.697024][ T6626] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9688'.
[ 2692.864043][ T6598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2692.886471][ T6598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2693.600415][ T5885] usb 5-1: 0:2 : does not exist
[ 2693.916695][ T6647] libceph: resolve '400' (ret=-3): failed
[ 2694.231256][ T6653] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2694.490312][ T5885] usb 5-1: 1:0: failed to get current value for ch 0 (-22)
[ 2694.692258][ T5885] usb 5-1: USB disconnect, device number 110
[ 2694.846663][ T6659] veth1_to_bond: entered allmulticast mode
[ 2694.859041][ T6658] veth1_to_bond: entered promiscuous mode
[ 2694.867293][ T6658] veth1_to_bond: left promiscuous mode
[ 2694.873512][ T6658] veth1_to_bond: left allmulticast mode
[ 2695.163183][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9700'.
[ 2695.258177][ T6666] lo speed is unknown, defaulting to 1000
[ 2695.284690][ T4577] Bluetooth: hci2: SCO packet for unknown connection handle 0
[ 2695.616704][   T30] audit: type=1400 audit(2000000299.180:7635): avc:  denied  { ioctl } for  pid=6674 comm="syz.1.9703" path="socket:[150805]" dev="sockfs" ino=150805 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 2695.762179][T32594] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 2695.990706][T32594] usb 4-1: Using ep0 maxpacket: 16
[ 2696.462236][T32594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2696.488114][T32594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2696.509902][T32594] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[ 2696.532936][T32594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2696.563916][T32594] usb 4-1: config 0 descriptor??
[ 2697.043817][T32594] hid (null): unknown global tag 0xe
[ 2697.174213][ T6696] overlayfs: failed to clone lowerpath
[ 2697.310356][T32594] macally 0003:060B:0001.0018: unknown main item tag 0x1
[ 2697.310410][T32594] macally 0003:060B:0001.0018: unknown global tag 0xe
[ 2697.310431][T32594] macally 0003:060B:0001.0018: item 0 0 1 14 parsing failed
[ 2697.316215][T32594] macally 0003:060B:0001.0018: probe with driver macally failed with error -22
[ 2697.344707][T32594] usb 4-1: USB disconnect, device number 123
[ 2698.246104][ T6707] netlink: 'syz.5.9712': attribute type 3 has an invalid length.
[ 2698.576165][   T30] audit: type=1400 audit(2000000302.040:7636): avc:  denied  { read write } for  pid=6706 comm="syz.5.9712" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 2698.657345][   T30] audit: type=1400 audit(2000000302.040:7637): avc:  denied  { open } for  pid=6706 comm="syz.5.9712" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 2698.735434][   T30] audit: type=1400 audit(2000000302.040:7638): avc:  denied  { ioctl } for  pid=6706 comm="syz.5.9712" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 2699.921236][T32594] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 2700.206473][T32594] usb 5-1: config 0 has an invalid interface number: 109 but max is 0
[ 2700.216444][T32594] usb 5-1: config 0 has no interface number 0
[ 2700.225347][T32594] usb 5-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[ 2700.237965][T32594] usb 5-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1
[ 2700.726288][T32594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2700.749396][T32594] usb 5-1: config 0 descriptor??
[ 2700.804158][T32594] cxacru 5-1:0.109: cxacru_bind: interface has incorrect endpoints
[ 2700.830055][ T6735] FAULT_INJECTION: forcing a failure.
[ 2700.830055][ T6735] name failslab, interval 1, probability 0, space 0, times 0
[ 2700.846812][ T6735] CPU: 1 UID: 0 PID: 6735 Comm: syz.3.9721 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[ 2700.846841][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2700.846853][ T6735] Call Trace:
[ 2700.846861][ T6735]  <TASK>
[ 2700.846869][ T6735]  dump_stack_lvl+0x16c/0x1f0
[ 2700.846910][ T6735]  should_fail_ex+0x512/0x640
[ 2700.846936][ T6735]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[ 2700.846966][ T6735]  should_failslab+0xc2/0x120
[ 2700.846995][ T6735]  kmem_cache_alloc_noprof+0x6d/0x3b0
[ 2700.847018][ T6735]  ? ptlock_alloc+0x1f/0x70
[ 2700.847043][ T6735]  ptlock_alloc+0x1f/0x70
[ 2700.847063][ T6735]  pte_alloc_one+0x82/0x3a0
[ 2700.847082][ T6735]  __pte_alloc+0x6d/0x3c0
[ 2700.847110][ T6735]  ? __pfx___pte_alloc+0x10/0x10
[ 2700.847143][ T6735]  ? mm_alloc_pmd+0x2c2/0x470
[ 2700.847172][ T6735]  mfill_atomic_copy+0xee1/0x1cd0
[ 2700.847208][ T6735]  ? find_held_lock+0x2b/0x80
[ 2700.847230][ T6735]  ? __might_fault+0xe3/0x190
[ 2700.847252][ T6735]  ? __pfx_mfill_atomic_copy+0x10/0x10
[ 2700.847290][ T6735]  userfaultfd_ioctl+0x236c/0x38e0
[ 2700.847317][ T6735]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[ 2700.847337][ T6735]  ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540
[ 2700.847364][ T6735]  ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540
[ 2700.847395][ T6735]  ? rcu_is_watching+0x12/0xc0
[ 2700.847430][ T6735]  ? selinux_file_ioctl+0x180/0x270
[ 2700.847454][ T6735]  ? selinux_file_ioctl+0xb4/0x270
[ 2700.847478][ T6735]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[ 2700.847501][ T6735]  ? __x64_sys_ioctl+0x18e/0x210
[ 2700.847521][ T6735]  __x64_sys_ioctl+0x18e/0x210
[ 2700.847544][ T6735]  do_syscall_64+0xcd/0x4c0
[ 2700.847575][ T6735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2700.847594][ T6735] RIP: 0033:0x7f4b9f38e929
[ 2700.847611][ T6735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2700.847630][ T6735] RSP: 002b:00007f4ba01c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2700.847648][ T6735] RAX: ffffffffffffffda RBX: 00007f4b9f5b6080 RCX: 00007f4b9f38e929
[ 2700.847661][ T6735] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003
[ 2700.847672][ T6735] RBP: 00007f4ba01c7090 R08: 0000000000000000 R09: 0000000000000000
[ 2700.847683][ T6735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2700.847695][ T6735] R13: 0000000000000000 R14: 00007f4b9f5b6080 R15: 00007fffaa47df68
[ 2700.847720][ T6735]  </TASK>
[ 2701.087816][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2701.247831][T32594] cxacru 5-1:0.109: usbatm_usb_probe: bind failed: -19!
[ 2701.277000][T28139] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 2701.403841][ T6739] overlayfs: failed to clone lowerpath
[ 2701.471752][T28139] usb 6-1: Using ep0 maxpacket: 16
[ 2701.488590][T28139] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[ 2701.553358][T28139] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[ 2701.559309][ T6742] ipvlan2: entered promiscuous mode
[ 2701.790844][T28139] usb 6-1: Manufacturer: syz
[ 2701.813389][T28139] usb 6-1: config 0 descriptor??
[ 2701.910153][   T30] audit: type=1400 audit(2000000305.470:7639): avc:  denied  { append } for  pid=6751 comm="syz.3.9726" name="sg0" dev="devtmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 2701.959885][   T30] audit: type=1400 audit(2000000305.530:7640): avc:  denied  { read write } for  pid=6751 comm="syz.3.9726" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 2701.987877][   T30] audit: type=1400 audit(2000000305.530:7641): avc:  denied  { open } for  pid=6751 comm="syz.3.9726" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[ 2702.039616][T28139] usb 6-1: Cannot retrieve CPort count: 0
[ 2702.046248][T28139] usb 6-1: Cannot retrieve CPort count: -5
[ 2702.058046][T28139] es2_ap_driver 6-1:0.0: probe with driver es2_ap_driver failed with error -5
[ 2702.696459][ T5885] usb 6-1: USB disconnect, device number 41
[ 2703.042814][ T5885] usb 5-1: USB disconnect, device number 111
[ 2703.749619][ T6768] sp0: Synchronizing with TNC
[ 2703.765022][ T6771] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2703.771590][ T6771] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2704.006299][ T6778] ipvlan5: entered promiscuous mode
[ 2704.022584][ T6519] Bluetooth: (null): Too short H5 packet
[ 2704.137454][ T6519] Bluetooth: (null): Invalid header checksum
[ 2704.151346][ T6519] Bluetooth: (null): Invalid header checksum
[ 2704.189526][ T6519] Bluetooth: (null): Invalid header checksum
[ 2704.243696][ T6519] Bluetooth: (null): Invalid header checksum
[ 2704.253856][ T5885] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 2704.353026][T27774] Bluetooth: (null): Invalid header checksum
[ 2704.431148][ T5885] usb 4-1: Using ep0 maxpacket: 8
[ 2704.437869][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 2704.461367][   T49] Bluetooth: (null): Invalid header checksum
[ 2704.470697][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2704.488317][ T5885] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2704.498749][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[ 2704.513454][ T5885] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 2704.523806][ T5885] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 2704.537127][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2704.548374][ T5885] usb 4-1: config 0 descriptor??
[ 2704.556489][ T6783] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2704.586102][T18869] Bluetooth: (null): Invalid header checksum
[ 2704.819193][   T30] audit: type=1400 audit(2000000308.380:7642): avc:  denied  { ioctl } for  pid=6794 comm="syz.4.9743" path="socket:[151135]" dev="sockfs" ino=151135 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 2705.042318][ T5885] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 2705.297446][ T5885] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 2705.378402][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2705.580496][ T5885] usb 6-1: config 0 descriptor??
[ 2705.793338][ T6808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2705.837881][ T6808] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2705.932068][ T6811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9747'.
[ 2706.011817][ T6813] sp0: Synchronizing with TNC
[ 2706.014882][ T6815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6815 comm=syz.0.9747
[ 2706.157232][   T30] audit: type=1400 audit(2000000309.720:7643): avc:  denied  { create } for  pid=6792 comm="syz.5.9742" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 2706.197325][ T6793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2706.247079][ T6793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2706.357498][   T30] audit: type=1400 audit(2000000309.880:7644): avc:  denied  { write } for  pid=6792 comm="syz.5.9742" name="file0" dev="tmpfs" ino=2033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 2706.417863][ T6819] ipvlan2: entered promiscuous mode
[ 2706.439933][   T30] audit: type=1400 audit(2000000309.880:7645): avc:  denied  { open } for  pid=6792 comm="syz.5.9742" path="/373/file0" dev="tmpfs" ino=2033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 2706.510205][   T30] audit: type=1400 audit(2000000309.880:7646): avc:  denied  { ioctl } for  pid=6792 comm="syz.5.9742" path="/373/file0" dev="tmpfs" ino=2033 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 2706.651554][ T4577] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[ 2706.773231][ T5885] usb 6-1: Cannot set MAC address
[ 2706.778500][ T5885] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 2706.792979][ T5885] usb 6-1: USB disconnect, device number 42
[ 2707.051623][T32594] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 2707.143633][T28139] usb 4-1: USB disconnect, device number 124
[ 2707.169604][   T49] Bluetooth: (null): Too short H5 packet
[ 2707.186870][   T49] Bluetooth: (null): Invalid header checksum
[ 2707.208905][   T49] Bluetooth: (null): Invalid header checksum
[ 2707.212406][T32594] usb 5-1: Using ep0 maxpacket: 16
[ 2707.223902][T32594] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[ 2707.265336][T32594] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[ 2707.274414][T27774] Bluetooth: (null): Invalid header checksum
[ 2707.310084][T32594] usb 5-1: Manufacturer: syz
[ 2707.318996][T32594] usb 5-1: config 0 descriptor??
[ 2707.337151][   T30] audit: type=1400 audit(2000000310.890:7647): avc:  denied  { unlink } for  pid=31712 comm="syz-executor" name="file0" dev="tmpfs" ino=2033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 2707.383862][T27774] Bluetooth: (null): Invalid header checksum
[ 2707.496800][   T49] Bluetooth: (null): Invalid header checksum
[ 2707.536068][T32594] usb 5-1: Cannot retrieve CPort count: 0
[ 2707.546767][T32594] usb 5-1: Cannot retrieve CPort count: -5
[ 2707.556322][T32594] es2_ap_driver 5-1:0.0: probe with driver es2_ap_driver failed with error -5
[ 2707.602033][  T452] Bluetooth: (null): Invalid header checksum
[ 2707.700531][ T6840] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2707.707151][ T6840] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2707.714736][T18869] Bluetooth: (null): Invalid header checksum
[ 2707.822168][T28139] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 2707.861641][ T6841] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2707.982055][T28139] usb 6-1: Using ep0 maxpacket: 16
[ 2708.199425][T28139] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[ 2708.221854][T28139] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[ 2708.230221][T28139] usb 6-1: Manufacturer: syz
[ 2708.257230][T28139] usb 6-1: config 0 descriptor??
[ 2708.567449][T28139] usb 6-1: Cannot retrieve CPort count: 0
[ 2708.592947][T32622] usb 5-1: USB disconnect, device number 112
[ 2708.600279][T28139] usb 6-1: Cannot retrieve CPort count: -5
[ 2708.603585][   T30] audit: type=1400 audit(2000000312.160:7648): avc:  denied  { write } for  pid=6844 comm="syz.0.9758" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 2708.619290][T28139] es2_ap_driver 6-1:0.0: probe with driver es2_ap_driver failed with error -5
[ 2708.859613][ T6850] xt_bpf: check failed: parse error
[ 2709.218587][   T30] audit: type=1400 audit(2000000312.420:7649): avc:  denied  { name_bind } for  pid=6844 comm="syz.0.9758" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[ 2709.580504][T32622] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 2709.598832][T32594] usb 6-1: USB disconnect, device number 43
[ 2709.756184][T32622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2709.778766][T32622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2709.789467][T32622] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2709.801972][T32622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2709.829362][T32622] usb 4-1: config 0 descriptor??
[ 2709.871472][ T6863] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2709.877977][ T6863] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2709.977023][ T6864] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2710.402500][ T6866] libceph: resolve '400' (ret=-3): failed
[ 2710.589768][T32622] usb 4-1: language id specifier not provided by device, defaulting to English
[ 2710.751378][ T6876] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2711.120349][T32622] uclogic 0003:256C:006D.0019: interface is invalid, ignoring
[ 2711.230421][ T6883] xt_bpf: check failed: parse error
[ 2711.539700][ T6884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2711.628438][ T6886] syz.5.9771: attempt to access beyond end of device
[ 2711.628438][ T6886] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2711.641434][ T6886] efs: cannot read volume header
[ 2711.675193][ T6884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2711.763170][T28139] usb 4-1: USB disconnect, device number 125
[ 2712.634266][ T6904] xt_bpf: check failed: parse error
[ 2713.026085][ T6910] xt_bpf: check failed: parse error
[ 2713.063204][ T6909] libceph: resolve '400' (ret=-3): failed
[ 2713.282130][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2713.288617][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2714.032892][ T6918] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2714.039371][ T6918] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2714.052131][ T6920] veth1_to_bond: entered allmulticast mode
[ 2714.079696][ T6920] veth1_to_bond: entered promiscuous mode
[ 2714.115885][ T6923] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2714.143502][ T6920] veth1_to_bond: left promiscuous mode
[ 2714.155536][ T6920] veth1_to_bond: left allmulticast mode
[ 2714.489582][ T6938] libceph: resolve '400' (ret=-3): failed
[ 2714.518636][ T6940] overlayfs: overlapping lowerdir path
[ 2714.711456][ T5885] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 2714.791871][T32594] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 2714.871275][ T5885] usb 6-1: Using ep0 maxpacket: 8
[ 2714.877741][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2714.888178][ T5885] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 2714.899758][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2714.909572][ T5885] usb 6-1: config 0 descriptor??
[ 2714.917694][ T5885] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 2714.953390][T32594] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[ 2714.965245][T32594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2714.976426][T32594] usb 5-1: config 0 descriptor??
[ 2714.984795][T32594] gspca_main: sunplus-2.14.0 probing 055f:c420
[ 2715.097573][ T6948] syz_tun: entered allmulticast mode
[ 2715.107016][ T6947] syz_tun: left allmulticast mode
[ 2715.341580][ T6958] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2715.348065][ T6958] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2715.501415][   T30] audit: type=1400 audit(2000000319.040:7650): avc:  denied  { bind } for  pid=6933 comm="syz.5.9788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2715.852878][T32594] gspca_sunplus: reg_w_riv err -71
[ 2715.858147][T32594] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[ 2715.868999][T32594] usb 5-1: USB disconnect, device number 113
[ 2715.898238][   T30] audit: type=1400 audit(2000000319.460:7651): avc:  denied  { setopt } for  pid=6961 comm="syz.3.9798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2716.801263][ T5885] gspca_vc032x: reg_r err -32
[ 2716.807669][ T5885] vc032x 6-1:0.0: probe with driver vc032x failed with error -32
[ 2716.868576][ T6968] ipvlan3: entered promiscuous mode
[ 2717.259125][ T6975] libceph: resolve '400' (ret=-3): failed
[ 2717.950166][ T6983] syz.0.9804: attempt to access beyond end of device
[ 2717.950166][ T6983] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2717.963956][ T6983] efs: cannot read volume header
[ 2718.181493][T32594] usb 6-1: USB disconnect, device number 44
[ 2718.214991][ T6986] input: syz1 as /devices/virtual/input/input85
[ 2718.261089][ T4577] Bluetooth: hci2: ACL packet for unknown connection handle 201
[ 2718.362450][ T6992] erspan1: entered allmulticast mode
[ 2718.661800][T32594] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 2718.689364][T32628] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 2718.872768][ T5932] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 2718.896521][T32594] usb 6-1: Using ep0 maxpacket: 8
[ 2719.028791][T32594] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 2719.054166][T32594] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 2719.063046][T32594] usb 6-1: can't read configurations, error -71
[ 2719.107727][ T5932] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2719.157111][ T5932] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 2719.167172][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 2719.175982][ T5932] usb 4-1: Product: syz
[ 2719.180379][ T5932] usb 4-1: Manufacturer: syz
[ 2719.185767][ T5932] usb 4-1: SerialNumber: syz
[ 2719.341208][T32628] usb 5-1: Using ep0 maxpacket: 8
[ 2719.431288][ T7012] xt_bpf: check failed: parse error
[ 2719.884887][ T5932] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 126 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 2720.727912][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2720.737405][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2720.791834][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9818'.
[ 2721.254131][T32628] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2721.271666][T32628] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 2721.280513][T32628] usb 5-1: can't read configurations, error -71
[ 2721.335258][   T30] audit: type=1400 audit(2000000324.900:7652): avc:  denied  { connect } for  pid=7036 comm="syz.4.9823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 2721.342232][ T7037] autofs: Unknown parameter ''
[ 2721.354896][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2721.825730][ T5885] usb 4-1: USB disconnect, device number 126
[ 2721.855307][ T5885] usblp0: removed
[ 2721.962307][ T7044] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9825'.
[ 2723.114997][T32628] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 2723.194722][ T7070] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2723.201253][ T7070] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2723.372819][T32628] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2723.384329][T32628] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 2723.394812][T32628] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2723.404085][T32628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2723.415467][ T7063] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 2723.431566][T32628] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 2724.256735][T32628] usb 5-1: USB disconnect, device number 116
[ 2724.282150][ T7086] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2724.354796][   T30] audit: type=1400 audit(2000000327.920:7653): avc:  denied  { unmount } for  pid=2973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 2724.501699][T32594] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 2724.645170][T32628] IPVS: starting estimator thread 0...
[ 2724.762431][ T7097] IPVS: using max 50 ests per chain, 120000 per kthread
[ 2724.783613][T32594] usb 6-1: config 0 has an invalid interface number: 109 but max is 0
[ 2724.799649][T32594] usb 6-1: config 0 has no interface number 0
[ 2724.806681][T32594] usb 6-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[ 2724.822938][T32594] usb 6-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1
[ 2724.833185][T32594] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2724.844879][T32594] usb 6-1: config 0 descriptor??
[ 2724.863225][T32594] cxacru 6-1:0.109: cxacru_bind: interface has incorrect endpoints
[ 2724.891865][T32594] cxacru 6-1:0.109: usbatm_usb_probe: bind failed: -19!
[ 2724.971480][ T7102] ipvlan4: entered promiscuous mode
[ 2725.639199][ T7110] syz_tun: entered allmulticast mode
[ 2725.755896][ T7109] syz_tun: left allmulticast mode
[ 2725.877673][ T7116] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2725.878005][ T7117] overlayfs: failed to clone lowerpath
[ 2726.637758][T32594] usb 6-1: USB disconnect, device number 47
[ 2728.432807][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9854'.
[ 2728.459391][ T7148] ipvlan6: entered promiscuous mode
[ 2728.474621][ T7146] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7146 comm=syz.3.9854
[ 2729.480101][ T7166] syz.3.9861: attempt to access beyond end of device
[ 2729.480101][ T7166] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2729.493880][ T7166] efs: cannot read volume header
[ 2729.769725][ T7171] overlayfs: overlapping lowerdir path
[ 2730.941426][ T5932] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 2731.118883][ T5932] usb 4-1: Using ep0 maxpacket: 8
[ 2731.219483][ T5932] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2731.305818][ T5932] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 2731.394251][ T5932] usb 4-1: can't read configurations, error -71
[ 2732.700501][ T7213] xt_bpf: check failed: parse error
[ 2734.101416][ T7224] syz.3.9875: attempt to access beyond end of device
[ 2734.101416][ T7224] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2734.115724][ T7224] efs: cannot read volume header
[ 2736.428658][ T7249] syz.0.9882: attempt to access beyond end of device
[ 2736.428658][ T7249] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2736.441927][ T7249] efs: cannot read volume header
[ 2736.863675][ T7256] netlink: 'syz.3.9884': attribute type 1 has an invalid length.
[ 2736.889194][ T7253] lo speed is unknown, defaulting to 1000
[ 2737.144333][ T7259] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2737.151006][ T7259] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2737.158827][ T7263] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2737.762091][T32628] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[ 2738.032294][T32628] usb 4-1: LPM exit latency is zeroed, disabling LPM.
[ 2738.416749][T32628] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt
[ 2738.438327][T32628] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt
[ 2738.464744][T32628] usb 4-1: config 1 interface 0 has no altsetting 0
[ 2738.483755][T32628] usb 4-1: string descriptor 0 read error: -22
[ 2738.497845][T32628] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2738.536100][T32628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2738.589276][ T7256] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2738.619584][ T7256] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2738.654381][T32628] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[ 2739.058144][ T7281] syz.5.9890: attempt to access beyond end of device
[ 2739.058144][ T7281] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2739.073443][ T7281] efs: cannot read volume header
[ 2739.120830][T32594] usb 4-1: USB disconnect, device number 3
[ 2741.098953][ T7310] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9899'.
[ 2741.119760][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9895'.
[ 2741.141890][ T7296] openvswitch: netlink: nsh attr 0 has unexpected len 32764 expected 0
[ 2741.150394][ T7296] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2741.172356][ T7308] IPVS: ip_vs_add_dest(): server weight less than zero
[ 2741.541084][ T7316] syz.0.9900: attempt to access beyond end of device
[ 2741.541084][ T7316] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2741.554216][ T7316] efs: cannot read volume header
[ 2742.220802][ T7327] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2742.227282][ T7327] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2742.514968][ T7329] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2742.739911][ T7333] sp0: Synchronizing with TNC
[ 2742.855455][ T7337] veth1_to_bond: entered allmulticast mode
[ 2742.879883][ T7337] veth1_to_bond: left allmulticast mode
[ 2742.935398][ T7339] gfs2: gfs2 mount does not exist
[ 2743.095407][ T7346] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9911'.
[ 2743.758179][ T7352] xt_bpf: check failed: parse error
[ 2743.770618][ T7357] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2743.944370][ T7361] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9915'.
[ 2745.498389][ T7381] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2745.505070][ T7381] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2745.868149][ T7386] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2746.096325][ T7372] syz.4.9919: attempt to access beyond end of device
[ 2746.096325][ T7372] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2746.109977][ T7372] efs: cannot read volume header
[ 2746.266084][ T7391] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9923'.
[ 2746.298277][ T7384] syz.5.9920: attempt to access beyond end of device
[ 2746.298277][ T7384] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2746.311554][ T7384] efs: cannot read volume header
[ 2746.423556][ T7394] veth1_to_bond: entered allmulticast mode
[ 2746.460193][ T7394] veth1_to_bond: left allmulticast mode
[ 2746.609280][ T7402] syz.0.9925: attempt to access beyond end of device
[ 2746.609280][ T7402] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2746.622518][ T7402] efs: cannot read volume header
[ 2746.742186][ T7399] sp0: Synchronizing with TNC
[ 2747.602917][   T30] audit: type=1400 audit(2000000351.170:7654): avc:  denied  { listen } for  pid=7417 comm="syz.0.9931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 2748.067720][ T7430] syz.0.9935: attempt to access beyond end of device
[ 2748.067720][ T7430] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2748.080861][ T7430] efs: cannot read volume header
[ 2748.268471][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9934'.
[ 2748.359126][ T7435] fuse: Bad value for 'rootmode'
[ 2748.619675][ T7438] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9936'.
[ 2748.791896][   T30] audit: type=1400 audit(2000000352.350:7655): avc:  denied  { getopt } for  pid=7440 comm="syz.3.9937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 2749.133204][T32594] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 2749.441847][T32594] usb 4-1: Using ep0 maxpacket: 16
[ 2750.562350][T32594] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 2750.586155][T32594] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 2750.622401][T32594] usb 4-1: Product: syz
[ 2750.633560][T32594] usb 4-1: Manufacturer: syz
[ 2750.663885][T32594] usb 4-1: SerialNumber: syz
[ 2750.678128][T32594] usb 4-1: config 0 descriptor??
[ 2751.947180][ T7464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9944'.
[ 2752.091830][T32628] usb 4-1: USB disconnect, device number 4
[ 2753.052703][ T7473] libceph: resolve '400' (ret=-3): failed
[ 2753.092248][ T7476] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9947'.
[ 2753.434227][ T7484] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2754.382307][ T7490] fuse: Bad value for 'fd'
[ 2754.492252][   T30] audit: type=1400 audit(2000000358.060:7656): avc:  denied  { write } for  pid=7488 comm="syz.0.9952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 2754.674101][ T7498] libceph: resolve '400' (ret=-3): failed
[ 2754.743900][ T7500] mkiss: ax0: crc mode is auto.
[ 2754.948428][ T7505] kernel profiling enabled (shift: 17)
[ 2757.751905][ T7535] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2760.296207][  T996] Bluetooth: (null): Invalid header checksum
[ 2760.611691][  T996] Bluetooth: (null): Invalid header checksum
[ 2760.641939][  T996] Bluetooth: (null): Invalid header checksum
[ 2760.648084][  T996] Bluetooth: (null): Invalid header checksum
[ 2762.047386][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9978'.
[ 2762.057508][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9978'.
[ 2762.884053][ T7595] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9980'.
[ 2763.887450][ T7606] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2763.893918][ T7606] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2764.897837][   T30] audit: type=1400 audit(2000000368.460:7657): avc:  denied  { write } for  pid=7617 comm="syz.0.9989" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[ 2764.969321][ T7618] netlink: 'syz.0.9989': attribute type 21 has an invalid length.
[ 2764.981966][   T30] audit: type=1400 audit(2000000368.530:7658): avc:  denied  { create } for  pid=7617 comm="syz.0.9989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 2765.041348][ T7618] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9989'.
[ 2765.050634][ T7618] netlink: 'syz.0.9989': attribute type 5 has an invalid length.
[ 2765.246896][   T30] audit: type=1400 audit(2000000368.530:7659): avc:  denied  { write } for  pid=7617 comm="syz.0.9989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 2765.247335][ T7618] netlink: 'syz.0.9989': attribute type 6 has an invalid length.
[ 2765.396860][   T30] audit: type=1400 audit(2000000368.700:7660): avc:  denied  { shutdown } for  pid=7617 comm="syz.0.9989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 2765.447217][   T30] audit: type=1400 audit(2000000368.730:7661): avc:  denied  { bind } for  pid=7617 comm="syz.0.9989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 2765.493860][ T7618] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9989'.
[ 2765.524865][   T30] audit: type=1400 audit(2000000368.740:7662): avc:  denied  { connect } for  pid=7617 comm="syz.0.9989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 2766.010891][ T7634] tmpfs: Bad value for 'huge'
[ 2766.210847][ T7630] lo speed is unknown, defaulting to 1000
[ 2766.227036][ T7634] syz_tun: entered allmulticast mode
[ 2766.235472][ T7633] syz_tun: left allmulticast mode
[ 2766.303518][ T7636] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9995'.
[ 2767.094905][ T7648] erspan1: entered allmulticast mode
[ 2767.117494][ T7655] sch_tbf: burst 0 is lower than device ip6_vti0 mtu (1332) !
[ 2767.160746][   T30] audit: type=1400 audit(2000000370.720:7663): avc:  denied  { read } for  pid=7649 comm="syz.1.10000" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 2767.702250][ T7664] syz.0.10002: attempt to access beyond end of device
[ 2767.702250][ T7664] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2767.715742][ T7664] efs: cannot read volume header
[ 2768.043606][ T7669] libceph: resolve '400' (ret=-3): failed
[ 2768.186501][ T7671] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2768.193028][ T7671] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2768.394857][ T7673] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2770.421027][ T7693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10010'.
[ 2771.103698][ T7699] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10012'.
[ 2771.490365][ T7700] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[ 2771.817940][ T7709] sp0: Synchronizing with TNC
[ 2773.404223][ T7732] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2774.211384][T32628] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 2774.561936][T32628] usb 4-1: too many configurations: 9, using maximum allowed: 8
[ 2774.658724][T32628] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2774.670111][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2774.678443][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2774.695754][T32628] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2774.870978][ T7755] syz.4.10026: attempt to access beyond end of device
[ 2774.870978][ T7755] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2774.887585][ T7755] efs: cannot read volume header
[ 2774.972243][T32628] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2775.039928][T32628] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2775.048958][T32628] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2775.080166][T32628] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2775.114109][T32628] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2775.140042][T32628] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2775.154798][T32628] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2775.163563][T32628] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2775.173144][T32628] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2775.184423][T32628] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2775.192936][T32628] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2775.204494][T32628] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2775.221218][ T7760] mkiss: ax0: crc mode is auto.
[ 2775.231467][T32628] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2775.334778][T32628] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2775.344023][T32628] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2775.355237][T32628] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2775.364673][T32628] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2775.374569][T32628] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2775.406442][T32628] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2775.929591][T32628] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2775.939141][T32628] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2775.950820][T32628] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2775.960212][T32628] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 2775.969655][T32628] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 2775.985809][T32628] usb 4-1: Product: syz
[ 2775.990536][T32628] usb 4-1: Manufacturer: syz
[ 2775.996314][T32628] usb 4-1: SerialNumber: syz
[ 2776.093480][T32628] usb 4-1: config 0 descriptor??
[ 2776.106271][T32628] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[ 2776.482787][   T30] audit: type=1400 audit(2000000380.000:7664): avc:  denied  { read } for  pid=7774 comm="syz.0.10033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 2777.427908][T32628] usb 4-1: USB disconnect, device number 5
[ 2777.435121][T32628] yurex 4-1:0.0: USB YUREX #0 now disconnected
[ 2777.521812][ T7788] erspan1: entered allmulticast mode
[ 2778.486604][   T30] audit: type=1400 audit(2000000382.050:7665): avc:  denied  { lock } for  pid=7801 comm="syz.0.10040" path="socket:[155672]" dev="sockfs" ino=155672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[ 2778.562454][ T7804] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2778.568985][ T7804] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2778.801140][ T7811] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2779.269786][ T7822] xt_bpf: check failed: parse error
[ 2780.005034][ T7829] xt_bpf: check failed: parse error
[ 2780.499391][ T7833] SELinux:  Context system_u: is not valid (left unmapped).
[ 2780.502583][ T7831] overlay: Unknown parameter '/'
[ 2780.513897][   T30] audit: type=1400 audit(2000000384.070:7666): avc:  denied  { mounton } for  pid=7830 comm="syz.0.10049" path="/241/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[ 2781.338580][ T7857] overlayfs: failed to clone lowerpath
[ 2781.495705][T28139] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 2782.203625][T28139] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2782.231656][T28139] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2782.245253][T28139] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2782.255191][T28139] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[ 2782.265585][T28139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2782.280425][T28139] usb 4-1: config 0 descriptor??
[ 2783.097000][   T30] audit: type=1400 audit(2000000386.500:7667): avc:  denied  { create } for  pid=7832 comm="syz.3.10050" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:"
[ 2783.290493][   T30] audit: type=1400 audit(2000000386.510:7668): avc:  denied  { associate } for  pid=7832 comm="syz.3.10050" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:"
[ 2783.450897][ T7833] afs: Unknown parameter '9&«›Ae0'
[ 2783.466153][   T30] audit: type=1400 audit(2000000386.650:7669): avc:  denied  { mounton } for  pid=7832 comm="syz.3.10050" path="/104/file0" dev="tmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:"
[ 2783.522488][T28139] usbhid 4-1:0.0: can't add hid device: -71
[ 2783.528688][T28139] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 2783.548372][ T7884] FAULT_INJECTION: forcing a failure.
[ 2783.548372][ T7884] name failslab, interval 1, probability 0, space 0, times 0
[ 2783.561808][ T7884] CPU: 0 UID: 0 PID: 7884 Comm: syz.4.10067 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[ 2783.561838][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2783.561849][ T7884] Call Trace:
[ 2783.561856][ T7884]  <TASK>
[ 2783.561863][ T7884]  dump_stack_lvl+0x16c/0x1f0
[ 2783.561900][ T7884]  should_fail_ex+0x512/0x640
[ 2783.561926][ T7884]  ? fs_reclaim_acquire+0xae/0x150
[ 2783.561950][ T7884]  ? tomoyo_encode2+0x100/0x3e0
[ 2783.561974][ T7884]  should_failslab+0xc2/0x120
[ 2783.562001][ T7884]  __kmalloc_noprof+0xd2/0x510
[ 2783.562026][ T7884]  ? d_absolute_path+0x136/0x1a0
[ 2783.562051][ T7884]  tomoyo_encode2+0x100/0x3e0
[ 2783.562079][ T7884]  tomoyo_encode+0x29/0x50
[ 2783.562102][ T7884]  tomoyo_realpath_from_path+0x18f/0x6e0
[ 2783.562136][ T7884]  tomoyo_path_number_perm+0x245/0x580
[ 2783.562158][ T7884]  ? tomoyo_path_number_perm+0x237/0x580
[ 2783.562183][ T7884]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2783.562206][ T7884]  ? __pfx__kstrtoull+0x10/0x10
[ 2783.562229][ T7884]  ? find_held_lock+0x2b/0x80
[ 2783.562368][ T7884]  ? from_kuid+0x8d/0xd0
[ 2783.562390][ T7884]  ? __pfx_from_kuid+0x10/0x10
[ 2783.562417][ T7884]  tomoyo_path_chown+0x173/0x1b0
[ 2783.562456][ T7884]  ? __pfx_tomoyo_path_chown+0x10/0x10
[ 2783.562475][ T7884]  ? from_vfsuid+0xea/0x140
[ 2783.562494][ T7884]  ? __pfx_from_vfsuid+0x10/0x10
[ 2783.562514][ T7884]  security_path_chown+0x12a/0x2e0
[ 2783.562538][ T7884]  chown_common+0x3d3/0x680
[ 2783.562570][ T7884]  ? __pfx_chown_common+0x10/0x10
[ 2783.562615][ T7884]  ksys_fchown+0x11a/0x190
[ 2783.562646][ T7884]  __x64_sys_fchown+0x72/0xb0
[ 2783.562672][ T7884]  ? lockdep_hardirqs_on+0x7c/0x110
[ 2783.562700][ T7884]  do_syscall_64+0xcd/0x4c0
[ 2783.562730][ T7884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2783.562750][ T7884] RIP: 0033:0x7faf63d8e929
[ 2783.562766][ T7884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2783.562784][ T7884] RSP: 002b:00007faf64ce4038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d
[ 2783.562803][ T7884] RAX: ffffffffffffffda RBX: 00007faf63fb5fa0 RCX: 00007faf63d8e929
[ 2783.562816][ T7884] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000003
[ 2783.562829][ T7884] RBP: 00007faf64ce4090 R08: 0000000000000000 R09: 0000000000000000
[ 2783.562841][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2783.562852][ T7884] R13: 0000000000000000 R14: 00007faf63fb5fa0 R15: 00007ffdfdd917a8
[ 2783.562879][ T7884]  </TASK>
[ 2783.562905][ T7884] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2783.587459][T28139] usb 4-1: USB disconnect, device number 6
[ 2784.515345][ T7899] netlink: 324 bytes leftover after parsing attributes in process `syz.0.10072'.
[ 2784.524784][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10072'.
[ 2784.536053][ T7899] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10072'.
[ 2784.547018][   T30] audit: type=1400 audit(2000000388.110:7670): avc:  denied  { accept } for  pid=7898 comm="syz.0.10072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 2784.607233][   T30] audit: type=1326 audit(2000000388.170:7671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.10070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf63d8e929 code=0x7fc00000
[ 2784.636721][   T30] audit: type=1326 audit(2000000388.170:7672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.10070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf63d8e929 code=0x7fc00000
[ 2784.813664][   T30] audit: type=1326 audit(2000000388.170:7673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.10070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf63d8e929 code=0x7fc00000
[ 2784.838138][   T30] audit: type=1326 audit(2000000388.170:7674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.10070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf63d8e929 code=0x7fc00000
[ 2784.864177][   T30] audit: type=1326 audit(2000000388.170:7675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.10070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf63d8e929 code=0x7fc00000
[ 2784.899291][ T7904] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2784.905911][ T7904] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2785.018232][   T30] audit: type=1326 audit(2000000388.170:7676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.10070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf63d8e929 code=0x7fc00000
[ 2785.166324][ T7907] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2785.591350][ T7926] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2787.394018][ T7934] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10085'.
[ 2790.217836][ T7944] netlink: 68 bytes leftover after parsing attributes in process `syz.5.10089'.
[ 2791.136412][ T7748] Bluetooth: (null): Too short H5 packet
[ 2791.179050][ T7959] overlayfs: failed to clone lowerpath
[ 2791.184890][ T7748] Bluetooth: (null): Invalid header checksum
[ 2791.184959][ T7748] Bluetooth: (null): Invalid header checksum
[ 2791.185048][ T7748] Bluetooth: (null): Invalid header checksum
[ 2791.185099][ T7748] Bluetooth: (null): Invalid header checksum
[ 2791.185198][ T7748] Bluetooth: (null): Invalid header checksum
[ 2791.469424][ T7966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10094'.
[ 2791.509574][ T7966] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7966 comm=syz.1.10094
[ 2791.700763][ T7970] mkiss: ax0: crc mode is auto.
[ 2792.233898][ T7983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10100'.
[ 2792.246865][ T7983] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7983 comm=syz.3.10100
[ 2792.508322][ T7987] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2792.949437][ T7991] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10103'.
[ 2793.005159][ T7993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10104'.
[ 2793.056570][ T7995] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2793.067442][ T7995] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2793.080480][ T7995] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2793.094109][ T7995] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2793.109787][ T7995] geneve2: entered promiscuous mode
[ 2793.117034][ T7995] geneve2: entered allmulticast mode
[ 2793.385673][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10106'.
[ 2793.415614][ T7997] lo speed is unknown, defaulting to 1000
[ 2794.232905][ T8013] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10110'.
[ 2794.274428][ T8015] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10111'.
[ 2794.299816][   T30] kauditd_printk_skb: 106 callbacks suppressed
[ 2794.299833][   T30] audit: type=1400 audit(2000000397.860:7783): avc:  denied  { accept } for  pid=8012 comm="syz.4.10110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 2794.370400][ T8015] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8015 comm=syz.5.10111
[ 2795.480419][ T8037] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10117'.
[ 2795.744312][ T8035] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8035 comm=syz.5.10117
[ 2796.098368][ T8049] veth1_to_bond: entered allmulticast mode
[ 2796.175239][ T8051] veth1_to_bond: entered promiscuous mode
[ 2796.219953][ T8049] veth1_to_bond: left promiscuous mode
[ 2796.292415][ T8049] veth1_to_bond: left allmulticast mode
[ 2796.787404][ T8060] can: request_module (can-proto-3) failed.
[ 2798.706590][ T8092] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10134'.
[ 2799.336374][ T8098] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10135'.
[ 2802.362376][ T8123] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2802.368923][ T8123] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2802.914772][ T8129] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10147'.
[ 2802.985377][ T8132] netlink: 'syz.0.10145': attribute type 12 has an invalid length.
[ 2803.001102][ T8132] netlink: 'syz.0.10145': attribute type 29 has an invalid length.
[ 2803.009125][ T8132] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10145'.
[ 2803.154919][ T8132] netlink: 'syz.0.10145': attribute type 1 has an invalid length.
[ 2803.162924][ T8132] netlink: 47 bytes leftover after parsing attributes in process `syz.0.10145'.
[ 2803.602735][ T8150] syz.0.10151: attempt to access beyond end of device
[ 2803.602735][ T8150] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2803.617379][ T8150] efs: cannot read volume header
[ 2804.309435][ T8152] syz.0.10153: attempt to access beyond end of device
[ 2804.309435][ T8152] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2804.323210][ T8152] efs: cannot read volume header
[ 2804.493634][ T8166] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2804.500161][ T8166] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2804.676742][ T8170] bridge_slave_0: left allmulticast mode
[ 2804.714013][ T8172] fuse: Bad value for 'fd'
[ 2804.717189][ T8170] bridge_slave_0: left promiscuous mode
[ 2804.744215][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10159'.
[ 2804.744578][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2804.858337][ T8175] overlayfs: failed to clone upperpath
[ 2804.987162][ T8170] bridge_slave_1: left allmulticast mode
[ 2805.012774][ T8170] bridge_slave_1: left promiscuous mode
[ 2805.021431][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2805.528484][ T8170] bond0: (slave bond_slave_0): Releasing backup interface
[ 2805.703726][ T8170] bond0: (slave bond_slave_1): Releasing backup interface
[ 2805.826937][ T8170] team0: Port device team_slave_0 removed
[ 2805.896665][ T8170] team0: Port device team_slave_1 removed
[ 2805.925411][ T8170] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2805.949004][ T8170] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2805.983913][ T8170] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2806.218406][ T8170] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2806.255298][ T8175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10158'.
[ 2806.387821][   T30] audit: type=1400 audit(2000000409.940:7784): avc:  denied  { setopt } for  pid=8188 comm="syz.4.10163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 2806.656630][ T8202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10167'.
[ 2806.716853][ T8205] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8205 comm=syz.4.10167
[ 2806.902327][ T8209] veth7: entered promiscuous mode
[ 2808.062498][ T8227] tipc: Resetting bearer <eth:team0>
[ 2809.010163][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10177'.
[ 2809.347488][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10175'.
[ 2809.476655][ T8227] team0: Port device vlan0 removed
[ 2809.899350][ T8248] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10179'.
[ 2810.508797][ T8257] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2810.515313][ T8257] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2812.512757][ T8291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10196'.
[ 2812.607848][ T8292] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8292 comm=syz.5.10196
[ 2814.088487][   T30] audit: type=1400 audit(2000000417.180:7785): avc:  denied  { create } for  pid=8308 comm="syz.4.10202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 2814.108278][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2814.134068][ T8311] netlink: 'syz.4.10202': attribute type 4 has an invalid length.
[ 2814.142291][   T30] audit: type=1326 audit(2000000417.690:7786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.4.10202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf63d8e929 code=0x7ffc0000
[ 2814.166256][ T8311] netlink: 17 bytes leftover after parsing attributes in process `syz.4.10202'.
[ 2814.200029][   T30] audit: type=1326 audit(2000000417.690:7787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.4.10202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf63d8e929 code=0x7ffc0000
[ 2814.269927][   T30] audit: type=1326 audit(2000000417.690:7788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.4.10202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7faf63d8e929 code=0x7ffc0000
[ 2814.293473][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2814.702393][   T30] audit: type=1326 audit(2000000417.690:7789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.4.10202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf63d8e929 code=0x7ffc0000
[ 2814.726009][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2815.902147][   T30] audit: type=1326 audit(2000000417.690:7790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.4.10202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf63d8e929 code=0x7ffc0000
[ 2815.925752][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2815.932259][   T30] audit: type=1326 audit(2000000417.690:7791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.4.10202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7faf63d8e929 code=0x7ffc0000
[ 2816.020856][   T30] audit: type=1326 audit(2000000417.690:7792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.4.10202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf63d8e929 code=0x7ffc0000
[ 2816.044652][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2816.130324][   T30] audit: type=1326 audit(2000000417.690:7793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.4.10202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf63d8e929 code=0x7ffc0000
[ 2816.308943][   T30] audit: type=1326 audit(2000000417.700:7794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8308 comm="syz.4.10202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf63d8e929 code=0x7ffc0000
[ 2816.858475][ T8336] overlayfs: failed to clone upperpath
[ 2818.429162][ T8351] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2821.087044][ T8387] veth1_to_bond: entered allmulticast mode
[ 2821.124004][ T8387] veth1_to_bond: entered promiscuous mode
[ 2821.174478][ T8387] veth1_to_bond: left promiscuous mode
[ 2821.183480][ T8387] veth1_to_bond: left allmulticast mode
[ 2821.468807][ T8396] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2821.475439][ T8396] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2822.205447][ T8407] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2822.212046][ T8407] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2823.182823][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10233'.
[ 2823.832497][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10233'.
[ 2824.342351][ T8435] lo speed is unknown, defaulting to 1000
[ 2824.350052][ T8437] netlink: 68 bytes leftover after parsing attributes in process `syz.5.10240'.
[ 2824.363454][   T30] kauditd_printk_skb: 58 callbacks suppressed
[ 2824.363472][   T30] audit: type=1400 audit(2000000427.930:7853): avc:  denied  { name_connect } for  pid=8436 comm="syz.5.10240" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[ 2825.399605][ T8447] geneve2: entered allmulticast mode
[ 2825.565032][   T30] audit: type=1326 audit(2000000429.130:7854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.5.10244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2825.675240][   T30] audit: type=1326 audit(2000000429.130:7855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.5.10244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2825.703861][   T30] audit: type=1326 audit(2000000429.210:7856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.5.10244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2825.744053][ T8458] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2825.750640][ T8458] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2825.768530][   T30] audit: type=1326 audit(2000000429.210:7857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.5.10244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2825.815457][   T30] audit: type=1326 audit(2000000429.210:7858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.5.10244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2825.841727][   T30] audit: type=1326 audit(2000000429.220:7859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.5.10244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2825.883963][   T30] audit: type=1326 audit(2000000429.220:7860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.5.10244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2825.920185][ T8461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10247'.
[ 2825.934824][   T30] audit: type=1326 audit(2000000429.220:7861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.5.10244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2825.962159][   T30] audit: type=1326 audit(2000000429.230:7862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.5.10244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2829.308134][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10258'.
[ 2829.317957][ T8502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10258'.
[ 2829.419975][   T30] kauditd_printk_skb: 21 callbacks suppressed
[ 2829.419993][   T30] audit: type=1400 audit(2000000432.980:7884): avc:  denied  { read } for  pid=8506 comm="syz.3.10261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 2829.528710][   T30] audit: type=1400 audit(2000000433.080:7885): avc:  denied  { setopt } for  pid=8506 comm="syz.3.10261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 2829.675344][ T8517] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun!
[ 2831.440142][ T8549] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10275'.
[ 2831.687500][ T8503] Process accounting resumed
[ 2832.342137][ T8572] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2832.348716][ T8572] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2833.379180][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10288'.
[ 2833.416477][ T8592] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10289'.
[ 2833.506359][ T8592] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8592 comm=syz.5.10289
[ 2833.826718][ T8603] afs: Unknown parameter ''
[ 2834.232618][ T8603] block nbd0: shutting down sockets
[ 2836.104810][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2836.111504][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2837.939469][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10305'.
[ 2838.875861][ T8655] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10309'.
[ 2842.213404][ T8705] overlayfs: failed to clone upperpath
[ 2842.224745][ T8705] overlayfs: failed to clone lowerpath
[ 2842.874611][ T4577] Bluetooth: hci2: ACL packet for unknown connection handle 201
[ 2843.403079][ T8728] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 2843.537772][ T8732] autofs: Unknown parameter '¹tN×ùšíâ¾!ÌýÄéO†„³¤óTÚšy^–3N }ÿpñ˜€7²í:¯W\ˆØñFh@xAmYýîS%’‰tÑ-­™ÚÄL?'
[ 2844.348769][ T8752] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2844.355334][ T8752] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2847.267945][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10352'.
[ 2847.429111][ T8791] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8791 comm=syz.5.10352
[ 2847.430601][ T8789] tipc: Started in network mode
[ 2847.447833][ T8789] tipc: Node identity 4, cluster identity 4711
[ 2847.477017][ T8789] tipc: Node number set to 4
[ 2847.749275][   T30] audit: type=1400 audit(2000000451.270:7886): avc:  denied  { relabelfrom } for  pid=8784 comm="syz.4.10351" name="" dev="pipefs" ino=159770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 2847.916946][ T8799] lo speed is unknown, defaulting to 1000
[ 2850.512385][ T8829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10363'.
[ 2850.638521][ T8835] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8835 comm=syz.1.10363
[ 2850.956549][ T8838] libceph: resolve '400' (ret=-3): failed
[ 2851.664272][ T8851] libceph: resolve '400' (ret=-3): failed
[ 2853.136753][ T8880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10377'.
[ 2853.250868][ T8882] libceph: resolve '400' (ret=-3): failed
[ 2853.251703][ T8880] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8880 comm=syz.1.10377
[ 2853.293477][ T8891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10383'.
[ 2854.256698][ T8902] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2854.263293][ T8902] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2854.568889][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10392'.
[ 2855.301573][ T8927] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2855.315018][ T8929] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10395'.
[ 2855.411913][ T8929] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8929 comm=syz.5.10395
[ 2857.846919][ T8967] overlayfs: failed to resolve './file0': -2
[ 2858.483942][ T8970] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=8970 comm=syz.3.10404
[ 2858.943540][ T8976] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2858.950060][ T8976] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2860.022385][   T30] audit: type=1400 audit(2000000463.590:7887): avc:  denied  { getopt } for  pid=8991 comm="syz.4.10414" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 2861.211066][   T30] audit: type=1400 audit(2000000464.760:7888): avc:  denied  { bind } for  pid=9012 comm="syz.5.10422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2861.757199][ T9025] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2861.763841][ T9025] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2862.865943][ T9037] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2862.872516][ T9037] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2863.714323][ T9048] 8021q: VLANs not supported on ipvlan1
[ 2866.126233][T29163] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2866.142873][T29163] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2866.154722][T29163] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2866.175103][T29163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2866.182852][T29163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2866.198659][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10447'.
[ 2866.258755][ T9084] lo speed is unknown, defaulting to 1000
[ 2866.539608][ T8693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2866.567037][ T9095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10450'.
[ 2867.173394][ T8693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2867.195831][   T30] audit: type=1400 audit(2000000470.760:7889): avc:  denied  { listen } for  pid=9096 comm="syz.0.10451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2867.245743][   T30] audit: type=1400 audit(2000000470.790:7890): avc:  denied  { accept } for  pid=9096 comm="syz.0.10451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 2868.261875][T29163] Bluetooth: hci3: command tx timeout
[ 2868.298397][ T8693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2868.556276][ T8693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2870.597719][T29163] Bluetooth: hci3: command tx timeout
[ 2872.555027][ T9159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10468'.
[ 2872.701149][T29163] Bluetooth: hci3: command tx timeout
[ 2873.367815][ T9168] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2873.374484][ T9168] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2874.003169][ T8693] bond0 (unregistering): left promiscuous mode
[ 2874.026919][ T8693] bond0 (unregistering): Released all slaves
[ 2874.243733][ T8693] bond1 (unregistering): Released all slaves
[ 2874.265186][ T9084] chnl_net:caif_netlink_parms(): no params data found
[ 2874.642284][ T9084] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2874.649727][ T9084] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2874.660091][ T9084] bridge_slave_0: entered allmulticast mode
[ 2874.677645][ T9084] bridge_slave_0: entered promiscuous mode
[ 2874.690337][ T8693] tipc: Disabling bearer <eth:team0>
[ 2874.718116][ T8693] tipc: Left network mode
[ 2874.748488][T29163] Bluetooth: hci3: command tx timeout
[ 2874.882803][ T9084] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2874.911597][ T9084] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2874.940247][ T9084] bridge_slave_1: entered allmulticast mode
[ 2874.964867][ T9084] bridge_slave_1: entered promiscuous mode
[ 2875.074874][ T9084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2875.117772][ T9084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2875.165613][ T9084] team0: Port device team_slave_0 added
[ 2875.183481][ T9084] team0: Port device team_slave_1 added
[ 2875.286282][ T9084] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2875.346841][ T9084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2875.702220][ T9084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2875.745914][ T9084] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2875.764299][ T9084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2875.813012][ T9084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2875.999459][ T9198] libceph: resolve '400' (ret=-3): failed
[ 2876.464516][ T9084] hsr_slave_0: entered promiscuous mode
[ 2876.484039][ T9084] hsr_slave_1: entered promiscuous mode
[ 2876.498703][ T9084] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2876.508315][ T9084] Cannot create hsr debugfs directory
[ 2876.886485][ T9208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10479'.
[ 2877.031898][ T9219] overlayfs: failed to clone upperpath
[ 2877.335681][ T9216] mkiss: ax0: crc mode is auto.
[ 2877.473007][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10483'.
[ 2878.200617][   T30] audit: type=1400 audit(2000000481.760:7891): avc:  denied  { create } for  pid=9251 comm="syz.3.10492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 2878.443496][ T9256] overlayfs: failed to clone upperpath
[ 2878.841737][ T7747] Bluetooth: (null): Too short H5 packet
[ 2878.925112][ T7747] Bluetooth: (null): Invalid header checksum
[ 2879.005002][ T7747] Bluetooth: (null): Invalid header checksum
[ 2879.027991][ T7747] Bluetooth: (null): Invalid header checksum
[ 2879.230253][ T9084] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2879.247830][   T30] audit: type=1400 audit(2000000482.630:7892): avc:  denied  { override_creds } for  pid=9249 comm="syz.4.10490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 2879.337200][ T9084] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2879.458650][ T8693] hsr_slave_0: left promiscuous mode
[ 2879.524763][ T8693] hsr_slave_1: left promiscuous mode
[ 2879.598311][ T8693] veth0_macvtap: left promiscuous mode
[ 2879.618717][ T8693] veth1_vlan: left promiscuous mode
[ 2880.242662][ T9289] nfs4: Unknown parameter 'rdI–¢'
[ 2882.490603][ T9084] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2882.505272][ T9271] netlink: 'syz.0.10497': attribute type 12 has an invalid length.
[ 2882.520498][ T9271] netlink: 'syz.0.10497': attribute type 29 has an invalid length.
[ 2882.528567][ T9271] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10497'.
[ 2882.541468][ T9271] netlink: 'syz.0.10497': attribute type 1 has an invalid length.
[ 2882.549442][ T9271] netlink: 47 bytes leftover after parsing attributes in process `syz.0.10497'.
[ 2882.651610][ T9084] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2883.326059][ T9084] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2883.380789][ T9084] 8021q: adding VLAN 0 to HW filter on device team0
[ 2883.858225][ T7747] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2883.865499][ T7747] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2883.877822][   T30] audit: type=1400 audit(2000000487.440:7893): avc:  denied  { write } for  pid=9324 comm="syz.0.10510" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 2883.913232][  T452] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2883.920510][  T452] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2884.076744][ T8693] IPVS: stop unused estimator thread 0...
[ 2884.287748][   T30] audit: type=1400 audit(2000000487.850:7894): avc:  denied  { open } for  pid=9328 comm="syz.0.10511" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 2884.392541][   T30] audit: type=1400 audit(2000000487.850:7895): avc:  denied  { ioctl } for  pid=9328 comm="syz.0.10511" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x542c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 2884.455279][ T9340] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=13 sclass=netlink_tcpdiag_socket pid=9340 comm=syz.5.10515
[ 2884.649776][ T9084] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2884.709974][ T9084] veth0_vlan: entered promiscuous mode
[ 2884.724506][ T9084] veth1_vlan: entered promiscuous mode
[ 2884.754502][ T9084] veth0_macvtap: entered promiscuous mode
[ 2884.764839][ T9084] veth1_macvtap: entered promiscuous mode
[ 2884.780701][ T9084] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2884.797323][ T9084] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2884.813600][ T9084] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2884.823959][ T9084] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2884.833873][ T9084] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2884.843843][ T9084] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2884.952653][  T452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2884.970232][  T452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2885.028445][ T8693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2885.046737][ T8693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2885.264037][ T9360] lo speed is unknown, defaulting to 1000
[ 2885.779843][   T30] audit: type=1326 audit(2000000489.340:7896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9369 comm="syz.5.10523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2886.127040][   T30] audit: type=1326 audit(2000000489.340:7897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9369 comm="syz.5.10523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2886.383562][   T30] audit: type=1326 audit(2000000489.370:7898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9369 comm="syz.5.10523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2886.416609][   T30] audit: type=1326 audit(2000000489.370:7899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9369 comm="syz.5.10523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2886.492864][   T30] audit: type=1326 audit(2000000489.370:7900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9369 comm="syz.5.10523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2886.582764][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10526'.
[ 2886.594450][ T9386] veth1_macvtap: left promiscuous mode
[ 2886.643959][ T9387] veth0_vlan: entered allmulticast mode
[ 2886.946456][ T9386] lo speed is unknown, defaulting to 1000
[ 2887.307430][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10529'.
[ 2889.486207][ T9420] veth1_to_bond: entered allmulticast mode
[ 2889.528385][ T9420] veth1_to_bond: entered promiscuous mode
[ 2889.612214][ T9420] veth1_to_bond: left promiscuous mode
[ 2889.617962][ T9420] veth1_to_bond: left allmulticast mode
[ 2889.948201][   T30] audit: type=1400 audit(2000000493.500:7901): avc:  denied  { getopt } for  pid=9423 comm="syz.1.10536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 2890.679243][ T9435] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10541'.
[ 2890.851506][   T30] audit: type=1400 audit(2000000494.410:7902): avc:  denied  { read } for  pid=9436 comm="syz.1.10539" dev="sockfs" ino=163377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 2890.904167][ T9440] gtp0: entered promiscuous mode
[ 2890.919241][ T9442] geneve2: entered promiscuous mode
[ 2890.922082][ T9437] netlink: 'syz.1.10539': attribute type 10 has an invalid length.
[ 2890.928294][ T9442] geneve2: entered allmulticast mode
[ 2890.938905][   T30] audit: type=1400 audit(2000000494.450:7903): avc:  denied  { mount } for  pid=9436 comm="syz.1.10539" name="/" dev="hugetlbfs" ino=162411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[ 2890.968862][   T30] audit: type=1400 audit(2000000494.460:7904): avc:  denied  { create } for  pid=9434 comm="syz.5.10541" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 2890.990427][ T9437] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2891.012184][ T9437] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2891.019699][   T30] audit: type=1400 audit(2000000494.460:7905): avc:  denied  { create } for  pid=9436 comm="syz.1.10539" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1
[ 2891.058821][ T9437] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[ 2891.234515][ T9454] netlink: 'syz.5.10545': attribute type 1 has an invalid length.
[ 2891.276855][ T9450] mac80211_hwsim hwsim219 wlan1: entered allmulticast mode
[ 2892.150115][   T30] audit: type=1400 audit(2000000495.710:7906): avc:  denied  { unmount } for  pid=9084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[ 2892.207694][ T9454] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 2892.577232][ T9469] veth1_to_bond: entered allmulticast mode
[ 2892.633272][ T9473] netlink: 'syz.3.10552': attribute type 1 has an invalid length.
[ 2892.790486][ T9482] veth1_to_bond: entered promiscuous mode
[ 2892.845524][ T9479] veth1_to_bond: entered allmulticast mode
[ 2892.867987][ T9481] veth1_to_bond: entered promiscuous mode
[ 2892.888480][ T9474] veth1_to_bond: left promiscuous mode
[ 2892.894539][ T9474] veth1_to_bond: left allmulticast mode
[ 2892.919829][ T9468] veth1_to_bond: left promiscuous mode
[ 2892.925968][ T9468] veth1_to_bond: left allmulticast mode
[ 2893.267473][ T9494] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2894.955580][ T9506] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10561'.
[ 2895.566946][ T9513] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2895.573564][ T9513] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2895.588056][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10566'.
[ 2895.599339][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10566'.
[ 2896.825058][ T9518] Process accounting resumed
[ 2897.380470][ T9541] overlayfs: failed to resolve './file0': -2
[ 2897.569572][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2897.576843][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2900.043564][ T9578] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2900.050173][ T9578] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2900.094613][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10580'.
[ 2900.281122][ T9583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10582'.
[ 2900.344690][ T9586] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9586 comm=syz.0.10582
[ 2900.562141][ T9590] veth1_to_bond: entered allmulticast mode
[ 2900.610090][ T9590] veth1_to_bond: entered promiscuous mode
[ 2900.645428][ T9590] veth1_to_bond: left promiscuous mode
[ 2900.676085][ T9590] veth1_to_bond: left allmulticast mode
[ 2903.079196][ T6872] bridge_slave_1: left allmulticast mode
[ 2903.086153][ T6872] bridge_slave_1: left promiscuous mode
[ 2903.094083][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2903.102427][ T9621] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2903.108883][ T9621] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2904.599806][ T9650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10603'.
[ 2904.652997][   T30] audit: type=1400 audit(2000000508.220:7907): avc:  denied  { write } for  pid=9647 comm="syz.4.10602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 2904.692198][ T5885] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 2904.871445][ T5885] usb 2-1: Using ep0 maxpacket: 8
[ 2905.263515][ T5885] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40
[ 2905.272999][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2905.281421][ T5885] usb 2-1: Product: syz
[ 2905.285737][ T5885] usb 2-1: Manufacturer: syz
[ 2905.290372][ T5885] usb 2-1: SerialNumber: syz
[ 2905.297060][ T5885] usb 2-1: config 0 descriptor??
[ 2905.550686][ T5885] usb 2-1: USB disconnect, device number 117
[ 2905.742382][ T6872] team0: Port device bridge15 removed
[ 2906.129329][ T9661] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2906.135888][ T9661] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2906.801868][ T6872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2906.814068][ T6872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2906.824196][ T6872] bond0 (unregistering): (slave team0): Releasing backup interface
[ 2906.833928][ T6872] bond0 (unregistering): Released all slaves
[ 2906.848072][ T6872] bond1 (unregistering): Released all slaves
[ 2906.862962][ T6872] bond2 (unregistering): Released all slaves
[ 2907.079637][ T6872] bond3 (unregistering): Released all slaves
[ 2907.276667][ T6872] bond4 (unregistering): (slave veth3): Releasing backup interface
[ 2907.285475][ T6872] bond4 (unregistering): Released all slaves
[ 2907.298738][ T6872] bond5 (unregistering): Released all slaves
[ 2907.309985][ T6872] bond6 (unregistering): Released all slaves
[ 2907.338242][ T9655] netlink: 'syz.5.10604': attribute type 12 has an invalid length.
[ 2907.360187][ T9655] netlink: 'syz.5.10604': attribute type 29 has an invalid length.
[ 2907.389730][ T9655] netlink: 148 bytes leftover after parsing attributes in process `syz.5.10604'.
[ 2907.421385][ T9655] netlink: 59 bytes leftover after parsing attributes in process `syz.5.10604'.
[ 2908.444806][ T9682] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.10611'.
[ 2908.499743][ T9684] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10613'.
[ 2908.650793][ T9687] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2909.610589][ T9704] overlayfs: failed to clone upperpath
[ 2909.800818][ T9707] overlayfs: failed to clone upperpath
[ 2910.855444][T22178] usb 2-1: new full-speed USB device number 118 using dummy_hcd
[ 2911.032696][T22178] usb 2-1: config 17 has an invalid interface number: 44 but max is 0
[ 2911.041569][T22178] usb 2-1: config 17 has no interface number 0
[ 2911.049762][T22178] usb 2-1: config 17 interface 44 has no altsetting 0
[ 2911.058874][T22178] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice= 8.85
[ 2911.068454][T22178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2911.097659][T22178] usb 2-1: Product: syz
[ 2911.102416][T22178] usb 2-1: Manufacturer: syz
[ 2911.107210][T22178] usb 2-1: SerialNumber: syz
[ 2911.349210][T22178]  (null): radio-mr800 - initialization failed
[ 2911.367397][T22178] radio-mr800 2-1:17.44: probe with driver radio-mr800 failed with error -22
[ 2911.411372][T22178] usbhid 2-1:17.44: couldn't find an input interrupt endpoint
[ 2911.479249][T22178] usb 2-1: USB disconnect, device number 118
[ 2911.820081][   T30] audit: type=1400 audit(2000000515.380:7908): avc:  denied  { bind } for  pid=9739 comm="syz.3.10633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 2911.964745][   T30] audit: type=1400 audit(2000000515.490:7909): avc:  denied  { watch_sb watch_reads } for  pid=9739 comm="syz.3.10633" path="/224/file0" dev="tmpfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 2913.468094][ T6872] hsr_slave_0: left promiscuous mode
[ 2913.484365][ T6872] hsr_slave_1: left promiscuous mode
[ 2913.497599][ T6872] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2913.506155][ T6872] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2913.881338][T22178] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 2914.051163][T22178] usb 2-1: Using ep0 maxpacket: 8
[ 2914.058450][T22178] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 2914.088690][T22178] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2914.099419][T22178] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2914.138488][T22178] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[ 2914.154464][T22178] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 2914.219254][T22178] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 2914.229578][T22178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2914.262900][T22178] usb 2-1: config 0 descriptor??
[ 2914.638656][ T9767] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2915.025779][   T30] audit: type=1400 audit(2000000518.590:7910): avc:  denied  { create } for  pid=9781 comm="syz.4.10646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[ 2915.167538][ T9787] cgroup: Name too long
[ 2915.202060][ T9792] fuse: Bad value for 'fd'
[ 2915.489294][ T9799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2915.510051][ T6872] team0 (unregistering): Port device team_slave_1 removed
[ 2915.548942][ T9799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2915.669405][T32617] usb 2-1: USB disconnect, device number 119
[ 2915.671946][T29163] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[ 2915.757164][ T6872] team0 (unregistering): Port device team_slave_0 removed
[ 2916.782563][ T9775] syz_tun: entered allmulticast mode
[ 2916.788439][ T9775] syz_tun: left allmulticast mode
[ 2916.856890][ T9809] lo speed is unknown, defaulting to 1000
[ 2917.550349][T32617] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 2917.635925][ T9818] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10656'.
[ 2917.731046][T32617] usb 2-1: device descriptor read/64, error -71
[ 2918.041523][T32617] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 2918.910514][ T6872] IPVS: stop unused estimator thread 0...
[ 2918.941126][T32617] usb 2-1: device descriptor read/64, error -71
[ 2919.066687][T32617] usb usb2-port1: attempt power cycle
[ 2919.096979][ T9829] lo speed is unknown, defaulting to 1000
[ 2919.167522][ T9838] veth1_to_bond: entered allmulticast mode
[ 2919.175504][ T9838] veth1_to_bond: entered promiscuous mode
[ 2919.183665][ T9838] veth1_to_bond: left promiscuous mode
[ 2919.189441][ T9838] veth1_to_bond: left allmulticast mode
[ 2919.284872][ T9842] ipvlan3: entered promiscuous mode
[ 2919.322514][ T9844] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10664'.
[ 2919.461666][T32617] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 2919.525359][T32617] usb 2-1: device descriptor read/8, error -71
[ 2919.741594][ T9849] ptrace attach of "./syz-executor exec"[9851] was attempted by "./syz-executor exec"[9849]
[ 2920.001156][T32617] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 2920.056643][ T9854] fuse: Unknown parameter 'grmup_id'
[ 2920.068522][ T9854] 9pnet_fd: Insufficient options for proto=fd
[ 2920.202280][   T30] audit: type=1400 audit(2000000523.760:7911): avc:  denied  { create } for  pid=9857 comm="syz.3.10668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 2920.241164][T32617] usb 2-1: device not accepting address 123, error -71
[ 2920.338909][T32617] usb usb2-port1: unable to enumerate USB device
[ 2920.412843][   T30] audit: type=1400 audit(2000000523.810:7912): avc:  denied  { ioctl } for  pid=9857 comm="syz.3.10668" path="socket:[165104]" dev="sockfs" ino=165104 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 2920.560527][   T30] audit: type=1400 audit(2000000523.810:7913): avc:  denied  { write } for  pid=9857 comm="syz.3.10668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 2920.930515][ T9874] lo speed is unknown, defaulting to 1000
[ 2922.231486][ T9885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10674'.
[ 2922.279539][ T9885] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9885 comm=syz.3.10674
[ 2922.584000][ T9891] overlayfs: failed to clone upperpath
[ 2922.597648][ T9892] overlayfs: failed to clone upperpath
[ 2923.153974][   T30] audit: type=1400 audit(2000000526.720:7914): avc:  denied  { create } for  pid=9908 comm="syz.5.10684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[ 2923.258924][   T30] audit: type=1400 audit(2000000526.770:7915): avc:  denied  { block_suspend } for  pid=9908 comm="syz.5.10684" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 2923.925494][   T30] audit: type=1400 audit(2000000527.490:7916): avc:  denied  { watch watch_reads } for  pid=9920 comm="syz.4.10687" path="pipe:[164348]" dev="pipefs" ino=164348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 2924.177395][ T9923] netlink: 'syz.5.10688': attribute type 12 has an invalid length.
[ 2924.209138][ T9923] netlink: 'syz.5.10688': attribute type 29 has an invalid length.
[ 2924.282610][ T9923] netlink: 148 bytes leftover after parsing attributes in process `syz.5.10688'.
[ 2924.332341][ T9923] netlink: 59 bytes leftover after parsing attributes in process `syz.5.10688'.
[ 2924.359885][ T9928] veth1_to_bond: entered allmulticast mode
[ 2924.372034][ T9931] veth1_to_bond: entered promiscuous mode
[ 2924.511162][ T9928] veth1_to_bond: left promiscuous mode
[ 2924.533445][ T9928] veth1_to_bond: left allmulticast mode
[ 2925.111806][ T9937] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2925.118379][ T9937] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2926.299413][ T9960] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10700'.
[ 2926.689324][ T9946] Process accounting resumed
[ 2927.207844][ T9957] Process accounting resumed
[ 2928.321712][ T9976] syz.1.10704: attempt to access beyond end of device
[ 2928.321712][ T9976] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2928.334962][ T9976] efs: cannot read volume header
[ 2928.552122][ T9981] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2928.558633][ T9981] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2929.463827][ T9995] erspan1: entered allmulticast mode
[ 2930.560053][   T30] audit: type=1400 audit(2000000534.120:7917): avc:  denied  { ioctl } for  pid=10004 comm="syz.1.10712" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 2931.150853][   T30] audit: type=1400 audit(2000000534.710:7918): avc:  denied  { append } for  pid=10004 comm="syz.1.10712" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[ 2931.866219][   T30] audit: type=1400 audit(2000000535.430:7919): avc:  denied  { getopt } for  pid=10019 comm="syz.1.10717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 2932.328390][T10032] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10718'.
[ 2933.608216][T28139] usb 2-1: new full-speed USB device number 124 using dummy_hcd
[ 2933.617314][   T30] audit: type=1400 audit(2000000536.950:7920): avc:  denied  { connect } for  pid=10044 comm="syz.4.10723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 2933.709066][   T30] audit: type=1400 audit(2000000537.160:7921): avc:  denied  { mount } for  pid=10044 comm="syz.4.10723" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[ 2933.831863][T28139] usb 2-1: too many configurations: 18, using maximum allowed: 8
[ 2933.845928][T28139] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 2933.855047][T28139] usb 2-1: can't read configurations, error -61
[ 2933.868509][T10015] Process accounting resumed
[ 2934.071109][T28139] usb 2-1: new full-speed USB device number 125 using dummy_hcd
[ 2934.156415][T10060] netlink: 'syz.4.10727': attribute type 10 has an invalid length.
[ 2934.206026][T10060] 8021q: adding VLAN 0 to HW filter on device team0
[ 2934.235476][T10060] bond0: (slave team0): Enslaving as an active interface with an up link
[ 2934.255467][T28139] usb 2-1: too many configurations: 18, using maximum allowed: 8
[ 2934.450846][T16212] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28
[ 2934.496238][T28139] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 2934.512638][T28139] usb 2-1: can't read configurations, error -61
[ 2934.548923][T28139] usb usb2-port1: attempt power cycle
[ 2934.598848][T10071] libceph: resolve '400' (ret=-3): failed
[ 2934.779642][T10076] netlink: 'syz.0.10731': attribute type 12 has an invalid length.
[ 2934.804697][T10076] netlink: 'syz.0.10731': attribute type 29 has an invalid length.
[ 2934.820945][T10076] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10731'.
[ 2934.843740][T10076] netlink: 59 bytes leftover after parsing attributes in process `syz.0.10731'.
[ 2934.903709][T28139] usb 2-1: new full-speed USB device number 126 using dummy_hcd
[ 2934.933426][T28139] usb 2-1: too many configurations: 18, using maximum allowed: 8
[ 2934.947974][T28139] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 2934.962017][T28139] usb 2-1: can't read configurations, error -61
[ 2935.142123][T28139] usb 2-1: new full-speed USB device number 127 using dummy_hcd
[ 2935.248154][T28139] usb 2-1: too many configurations: 18, using maximum allowed: 8
[ 2935.419941][T28139] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 2935.516782][T28139] usb 2-1: can't read configurations, error -61
[ 2935.566811][T28139] usb usb2-port1: unable to enumerate USB device
[ 2937.053212][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10745'.
[ 2937.158071][   T30] audit: type=1326 audit(2000000540.720:7922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2937.237144][   T30] audit: type=1326 audit(2000000540.720:7923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2937.316842][   T30] audit: type=1326 audit(2000000540.720:7924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2937.350319][T10096] Process accounting resumed
[ 2937.655768][   T30] audit: type=1326 audit(2000000540.720:7925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2937.809024][   T30] audit: type=1326 audit(2000000540.720:7926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2937.858574][   T30] audit: type=1326 audit(2000000540.720:7927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe409b8e52b code=0x7ffc0000
[ 2937.939236][T10128] lo speed is unknown, defaulting to 1000
[ 2938.075916][   T30] audit: type=1326 audit(2000000540.720:7928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2938.100209][   T30] audit: type=1326 audit(2000000540.720:7929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2938.125130][   T30] audit: type=1326 audit(2000000540.770:7930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe409b8e52b code=0x7ffc0000
[ 2938.330561][T10135] overlayfs: missing 'workdir'
[ 2938.674868][   T30] audit: type=1326 audit(2000000540.770:7931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.5.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe409b8e929 code=0x7ffc0000
[ 2939.395750][T10169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10761'.
[ 2939.881303][T10176] 9pnet_fd: Insufficient options for proto=fd
[ 2940.055232][T10176] ceph: No mds server is up or the cluster is laggy
[ 2941.670814][T10219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10776'.
[ 2942.185168][   T30] kauditd_printk_skb: 8 callbacks suppressed
[ 2942.185195][   T30] audit: type=1400 audit(2000000545.720:7940): avc:  denied  { listen } for  pid=10218 comm="syz.3.10776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 2942.223755][ T9390] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 2942.280849][   T30] audit: type=1400 audit(2000000545.720:7941): avc:  denied  { accept } for  pid=10218 comm="syz.3.10776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 2942.329578][T10222] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2942.336033][T10222] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2942.464639][ T9390] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 2942.480980][ T9390] usb 2-1: config 0 has no interface number 0
[ 2942.490101][ T9390] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2942.503331][ T9390] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2942.513988][ T9390] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 2942.541586][ T9390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2942.559779][ T9390] usb 2-1: config 0 descriptor??
[ 2942.983571][ T9390] prodikeys 0003:041E:2801.001A: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1
[ 2942.999562][ T9390] hid_prodikeys: hid-prodikeys: failed to find output report
[ 2942.999562][ T9390] 
[ 2943.198811][T10214] netlink: 6 bytes leftover after parsing attributes in process `syz.1.10774'.
[ 2943.213817][T10214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2943.260626][   T30] audit: type=1400 audit(2000000546.820:7942): avc:  denied  { remount } for  pid=10213 comm="syz.1.10774" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[ 2943.286267][ T9390] usb 2-1: USB disconnect, device number 2
[ 2944.463938][T10267] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2944.470429][T10267] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2944.673160][T10276] geneve2: entered promiscuous mode
[ 2944.685067][T10276] geneve2: entered allmulticast mode
[ 2946.117284][T10292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10800'.
[ 2946.124427][T10291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10801'.
[ 2946.143611][   T30] audit: type=1400 audit(2000000549.690:7943): avc:  denied  { read } for  pid=10289 comm="syz.1.10801" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 2946.211887][T10291] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2946.219642][T10291] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2946.227125][   T30] audit: type=1400 audit(2000000549.690:7944): avc:  denied  { open } for  pid=10289 comm="syz.1.10801" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 2946.257061][   T30] audit: type=1400 audit(2000000549.690:7945): avc:  denied  { ioctl } for  pid=10289 comm="syz.1.10801" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 2946.291960][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10800'.
[ 2946.320453][T10292] lo speed is unknown, defaulting to 1000
[ 2947.859594][T10319] veth0_vlan: left promiscuous mode
[ 2947.866625][T10319] veth0_vlan: entered promiscuous mode
[ 2947.889394][T10320] lo speed is unknown, defaulting to 1000
[ 2948.922671][T10336] lo speed is unknown, defaulting to 1000
[ 2951.267656][T10362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10819'.
[ 2951.581525][T10369] overlayfs: missing 'lowerdir'
[ 2952.007164][   T30] audit: type=1400 audit(2000000555.130:7946): avc:  denied  { mount } for  pid=10364 comm="syz.1.10820" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 2952.030798][   T30] audit: type=1400 audit(2000000555.150:7947): avc:  denied  { mounton } for  pid=10364 comm="syz.1.10820" path="/52/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[ 2952.056421][T10367] netlink: 'syz.3.10821': attribute type 2 has an invalid length.
[ 2952.087981][T10362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2952.097893][T10362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2952.246013][T10363] lo speed is unknown, defaulting to 1000
[ 2952.267689][   T30] audit: type=1400 audit(2000000555.250:7948): avc:  denied  { bind } for  pid=10364 comm="syz.1.10820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 2952.453947][T10373] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available
[ 2952.462870][   T30] audit: type=1400 audit(2000000555.260:7949): avc:  denied  { name_bind } for  pid=10364 comm="syz.1.10820" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[ 2952.495871][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10824'.
[ 2952.603214][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10822'.
[ 2952.982469][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10824'.
[ 2953.018705][   T30] audit: type=1400 audit(2000000555.260:7950): avc:  denied  { node_bind } for  pid=10364 comm="syz.1.10820" saddr=172.30.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[ 2953.173348][   T30] audit: type=1400 audit(2000000555.790:7951): avc:  denied  { unmount } for  pid=9084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 2953.188948][T10385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10824'.
[ 2954.917587][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10832'.
[ 2954.929066][T10409] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 2955.923766][T10419] overlayfs: missing 'lowerdir'
[ 2956.018378][T10420] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10831'.
[ 2956.418788][T10424] fuse: Unknown parameter 'ƒ'
[ 2958.019400][T29163] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2958.032762][T29163] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2958.055449][T29163] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2958.084624][T29163] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2958.486374][T29163] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2958.522318][   T30] audit: type=1400 audit(2000000562.090:7952): avc:  denied  { create } for  pid=10454 comm="syz.0.10843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[ 2958.744791][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10845'.
[ 2958.802638][   T30] audit: type=1400 audit(2000000562.360:7953): avc:  denied  { unmount } for  pid=9084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 2958.810475][T10456] lo speed is unknown, defaulting to 1000
[ 2958.833526][T10472] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 2958.985715][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2958.995325][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2959.428736][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10848'.
[ 2959.438706][T10480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10848'.
[ 2959.749624][T16212] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2960.425471][T16212] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2960.436888][   T30] audit: type=1326 audit(2000000563.990:7954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf63d8e929 code=0x7ffc0000
[ 2960.472865][   T30] audit: type=1326 audit(2000000563.990:7955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf63d8e929 code=0x7ffc0000
[ 2960.571042][T29163] Bluetooth: hci2: command tx timeout
[ 2961.392967][   T30] audit: type=1326 audit(2000000563.990:7956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7faf63d8e929 code=0x7ffc0000
[ 2961.417357][   T30] audit: type=1326 audit(2000000563.990:7957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf63d8e929 code=0x7ffc0000
[ 2961.443333][   T30] audit: type=1326 audit(2000000563.990:7958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf63d8e929 code=0x7ffc0000
[ 2961.474728][   T30] audit: type=1326 audit(2000000563.990:7959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf63d8d290 code=0x7ffc0000
[ 2961.478269][T16212] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2961.498998][   T30] audit: type=1326 audit(2000000563.990:7960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf63d8e929 code=0x7ffc0000
[ 2961.545013][   T30] audit: type=1326 audit(2000000563.990:7961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7faf63d8e929 code=0x7ffc0000
[ 2961.865734][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10856'.
[ 2961.896887][T16212] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2962.517241][T10456] chnl_net:caif_netlink_parms(): no params data found
[ 2962.651108][T29163] Bluetooth: hci2: command tx timeout
[ 2962.698799][T16212] bridge_slave_1: left allmulticast mode
[ 2962.794797][T16212] bridge_slave_1: left promiscuous mode
[ 2962.800667][T16212] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2962.880416][T16212] bridge_slave_0: left allmulticast mode
[ 2962.892902][T16212] bridge_slave_0: left promiscuous mode
[ 2962.900694][T16212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2964.743208][T29163] Bluetooth: hci2: command tx timeout
[ 2964.752233][T28139] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 2965.499004][T28139] usb 2-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b
[ 2965.519930][T28139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2965.932869][   T30] kauditd_printk_skb: 13 callbacks suppressed
[ 2965.932889][   T30] audit: type=1400 audit(2000000569.500:7975): avc:  denied  { ioctl } for  pid=10544 comm="syz.1.10865" path="socket:[167551]" dev="sockfs" ino=167551 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 2965.983614][T28139] pegasus 2-1:254.0: probe with driver pegasus failed with error -71
[ 2965.999666][T28139] usb 2-1: USB disconnect, device number 3
[ 2966.491026][T16212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2966.502243][T16212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2966.514034][T16212] bond0 (unregistering): Released all slaves
[ 2966.688231][T10456] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2966.709328][T10456] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2966.737827][T10456] bridge_slave_0: entered allmulticast mode
[ 2966.752748][T10456] bridge_slave_0: entered promiscuous mode
[ 2966.781096][T16212] tipc: Left network mode
[ 2966.781717][T10456] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2966.793516][T10456] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2966.805840][T10456] bridge_slave_1: entered allmulticast mode
[ 2966.829096][T29163] Bluetooth: hci2: command tx timeout
[ 2966.836191][T10456] bridge_slave_1: entered promiscuous mode
[ 2966.926988][T10456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2966.976839][T10456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2967.428852][T10456] team0: Port device team_slave_0 added
[ 2967.466182][T10456] team0: Port device team_slave_1 added
[ 2968.359511][T10587] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2969.202417][T10456] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2969.209454][T10456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2969.707882][T10456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2969.840644][T10456] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2969.950173][T10456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2969.986961][T10456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2970.033986][T10607] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10881'.
[ 2970.360307][T10621] overlayfs: failed to clone upperpath
[ 2970.767976][T10456] hsr_slave_0: entered promiscuous mode
[ 2970.790495][T10456] hsr_slave_1: entered promiscuous mode
[ 2970.810284][T10456] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2970.833658][T10456] Cannot create hsr debugfs directory
[ 2972.521528][T10649] netlink: 'syz.3.10892': attribute type 2 has an invalid length.
[ 2973.965282][T10456] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2974.057246][T10456] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2974.543422][T10456] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2974.597644][T10456] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2975.136357][T10683] Process accounting resumed
[ 2975.612838][T10456] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2975.636916][T10456] 8021q: adding VLAN 0 to HW filter on device team0
[ 2975.720678][ T7746] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2975.727933][ T7746] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2975.747847][T10712] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2975.754450][T10712] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2976.192823][ T9831] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2976.200120][ T9831] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2976.314178][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10911'.
[ 2976.458343][T10718] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 2978.976268][T10748] No source specified
[ 2979.343230][T16212] hsr_slave_0: left promiscuous mode
[ 2979.352117][T16212] hsr_slave_1: left promiscuous mode
[ 2979.358917][T16212] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2979.375256][T16212] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2979.553139][T10740] ------------[ cut here ]------------
[ 2979.559371][T10740] ODEBUG: free active (active state 1) object: ffff8880271f6010 object type: rcu_head hint: 0x0
[ 2979.579450][T10740] WARNING: CPU: 1 PID: 10740 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0
[ 2979.589996][T10740] Modules linked in:
[ 2979.595252][T10740] CPU: 1 UID: 0 PID: 10740 Comm: syz.3.10917 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[ 2979.608311][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2979.620151][T10740] RIP: 0010:debug_print_object+0x1a2/0x2b0
[ 2979.627336][T10740] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 00 8a 15 8c 4c 89 e6 48 c7 c7 80 7e 15 8c e8 bf 33 99 fc 90 <0f> 0b 90 90 58 83 05 56 99 c6 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d
[ 2979.647271][T10740] RSP: 0018:ffffc900041dfa78 EFLAGS: 00010282
[ 2979.654221][T10740] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc9001795c000
[ 2979.662977][T10740] RDX: 0000000000080000 RSI: ffffffff817ae255 RDI: 0000000000000001
[ 2979.671787][T10740] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[ 2979.679873][T10740] R10: 0000000000000001 R11: 0000000000070ca8 R12: ffffffff8c158520
[ 2979.688824][T10740] R13: ffffffff8baeb4a0 R14: 0000000000000000 R15: ffffc900041dfb78
[ 2979.697723][T10740] FS:  00007f4ba01e86c0(0000) GS:ffff888124853000(0000) knlGS:0000000000000000
[ 2979.707263][T10740] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2979.715004][T10740] CR2: 00007fd876fb7bac CR3: 000000004ed9d000 CR4: 00000000003526f0
[ 2979.723288][T10740] Call Trace:
[ 2979.726592][T10740]  <TASK>
[ 2979.729522][T10740]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 2979.735398][T10740]  debug_check_no_obj_freed+0x4b7/0x600
[ 2979.741203][T10740]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[ 2979.747272][T10740]  ? __memcg_slab_free_hook+0xd0/0x5d0
[ 2979.753131][T10740]  ? __memcg_slab_free_hook+0xda/0x5d0
[ 2979.758587][T10740]  kmem_cache_free+0x2ac/0x4d0
[ 2979.763758][T10740]  ? io_sq_offload_create+0xe4b/0x1330
[ 2979.769221][T10740]  ? io_sq_offload_create+0xe24/0x1330
[ 2979.775462][T10740]  io_sq_offload_create+0xe4b/0x1330
[ 2979.780767][T10740]  ? io_sq_offload_create+0xe24/0x1330
[ 2979.786655][T10740]  ? __pfx_io_sq_offload_create+0x10/0x10
[ 2979.792793][T10740]  ? bpf_lsm_capable+0x9/0x10
[ 2979.797459][T10740]  ? security_capable+0x7e/0x260
[ 2979.803106][T10740]  io_uring_setup+0x1514/0x2120
[ 2979.807968][T10740]  ? __pfx_io_uring_setup+0x10/0x10
[ 2979.813581][T10740]  ? __do_sys_rt_sigreturn+0x16b/0x230
[ 2979.819046][T10740]  ? __pfx___do_sys_rt_sigreturn+0x10/0x10
[ 2979.825215][T10740]  __x64_sys_io_uring_setup+0xc2/0x170
[ 2979.830669][T10740]  do_syscall_64+0xcd/0x4c0
[ 2979.835803][T10740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2979.842077][T10740] RIP: 0033:0x7f4b9f38e929
[ 2979.846482][T10740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2979.866788][T10740] RSP: 002b:00007f4ba01e7fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2979.875578][T10740] RAX: ffffffffffffffda RBX: 00007f4b9f5b5fa0 RCX: 00007f4b9f38e929
[ 2979.883910][T10740] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000003665
[ 2979.892441][T10740] RBP: 0000200000000100 R08: 0000000000000000 R09: 0000000000000000
[ 2979.900573][T10740] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 2979.908976][T10740] R13: 0000000000000000 R14: 0000000000003665 R15: 0000000000000000
[ 2979.917337][T10740]  </TASK>
[ 2979.920360][T10740] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2979.927646][T10740] CPU: 1 UID: 0 PID: 10740 Comm: syz.3.10917 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[ 2979.939793][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2979.949843][T10740] Call Trace:
[ 2979.953109][T10740]  <TASK>
[ 2979.956028][T10740]  dump_stack_lvl+0x3d/0x1f0
[ 2979.960631][T10740]  panic+0x71c/0x800
[ 2979.964532][T10740]  ? __pfx_panic+0x10/0x10
[ 2979.968947][T10740]  ? show_trace_log_lvl+0x29b/0x3e0
[ 2979.974156][T10740]  ? debug_print_object+0x1a2/0x2b0
[ 2979.979360][T10740]  check_panic_on_warn+0xab/0xb0
[ 2979.984309][T10740]  __warn+0xf6/0x3c0
[ 2979.988197][T10740]  ? debug_print_object+0x1a2/0x2b0
[ 2979.993397][T10740]  report_bug+0x3c3/0x580
[ 2979.997747][T10740]  ? debug_print_object+0x1a2/0x2b0
[ 2980.002968][T10740]  handle_bug+0x184/0x210
[ 2980.007282][T10740]  exc_invalid_op+0x17/0x50
[ 2980.011780][T10740]  asm_exc_invalid_op+0x1a/0x20
[ 2980.016626][T10740] RIP: 0010:debug_print_object+0x1a2/0x2b0
[ 2980.022448][T10740] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 00 8a 15 8c 4c 89 e6 48 c7 c7 80 7e 15 8c e8 bf 33 99 fc 90 <0f> 0b 90 90 58 83 05 56 99 c6 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d
[ 2980.042062][T10740] RSP: 0018:ffffc900041dfa78 EFLAGS: 00010282
[ 2980.048129][T10740] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc9001795c000
[ 2980.056091][T10740] RDX: 0000000000080000 RSI: ffffffff817ae255 RDI: 0000000000000001
[ 2980.064077][T10740] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[ 2980.072046][T10740] R10: 0000000000000001 R11: 0000000000070ca8 R12: ffffffff8c158520
[ 2980.080008][T10740] R13: ffffffff8baeb4a0 R14: 0000000000000000 R15: ffffc900041dfb78
[ 2980.088003][T10740]  ? __warn_printk+0x1a5/0x350
[ 2980.092801][T10740]  ? debug_print_object+0x1a1/0x2b0
[ 2980.097992][T10740]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 2980.103803][T10740]  debug_check_no_obj_freed+0x4b7/0x600
[ 2980.109337][T10740]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[ 2980.115383][T10740]  ? __memcg_slab_free_hook+0xd0/0x5d0
[ 2980.120834][T10740]  ? __memcg_slab_free_hook+0xda/0x5d0
[ 2980.126332][T10740]  kmem_cache_free+0x2ac/0x4d0
[ 2980.131103][T10740]  ? io_sq_offload_create+0xe4b/0x1330
[ 2980.136569][T10740]  ? io_sq_offload_create+0xe24/0x1330
[ 2980.142027][T10740]  io_sq_offload_create+0xe4b/0x1330
[ 2980.147300][T10740]  ? io_sq_offload_create+0xe24/0x1330
[ 2980.152753][T10740]  ? __pfx_io_sq_offload_create+0x10/0x10
[ 2980.158477][T10740]  ? bpf_lsm_capable+0x9/0x10
[ 2980.163153][T10740]  ? security_capable+0x7e/0x260
[ 2980.168091][T10740]  io_uring_setup+0x1514/0x2120
[ 2980.172938][T10740]  ? __pfx_io_uring_setup+0x10/0x10
[ 2980.178127][T10740]  ? __do_sys_rt_sigreturn+0x16b/0x230
[ 2980.183569][T10740]  ? __pfx___do_sys_rt_sigreturn+0x10/0x10
[ 2980.189363][T10740]  __x64_sys_io_uring_setup+0xc2/0x170
[ 2980.194821][T10740]  do_syscall_64+0xcd/0x4c0
[ 2980.199338][T10740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2980.205214][T10740] RIP: 0033:0x7f4b9f38e929
[ 2980.209631][T10740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2980.229257][T10740] RSP: 002b:00007f4ba01e7fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2980.237661][T10740] RAX: ffffffffffffffda RBX: 00007f4b9f5b5fa0 RCX: 00007f4b9f38e929
[ 2980.245622][T10740] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000003665
[ 2980.253589][T10740] RBP: 0000200000000100 R08: 0000000000000000 R09: 0000000000000000
[ 2980.261557][T10740] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 2980.269518][T10740] R13: 0000000000000000 R14: 0000000000003665 R15: 0000000000000000
[ 2980.277502][T10740]  </TASK>
[ 2980.280777][T10740] Kernel Offset: disabled
[ 2980.285106][T10740] Rebooting in 86400 seconds..