last executing test programs: 7m7.661099686s ago: executing program 3 (id=661): syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x3d9a, &(0x7f0000002dc0)={0x0, 0x9b8b, 0x80, 0x1, 0xc}, &(0x7f0000002e40), &(0x7f0000002e80)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, 0xffffffffffffffff, 0x0) 7m6.716490118s ago: executing program 3 (id=663): r0 = syz_open_dev$video4linux(&(0x7f0000001900), 0x6, 0xc0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESHEX=r1]) r2 = syz_open_dev$vcsn(0x0, 0x1, 0x1) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) prctl$PR_CAPBSET_READ(0x59616d61, 0xffffffff) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='selinux_audited\x00', r7, 0x0, 0x8000000000000}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r8 = socket(0x1e, 0x1, 0x0) connect$tipc(r8, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0xa}}, 0x10) 7m5.457568803s ago: executing program 3 (id=665): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x1e0541) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = dup(r0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) io_setup(0x13, &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x401) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000024a000/0x4000)=nil, 0x4000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000ec0000/0x4000)=nil, 0x4000}, 0x1}) syz_io_uring_setup(0x23c9, &(0x7f0000000240)={0x0, 0x38d4, 0x400, 0x803, 0x46}, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() io_cancel(0x0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r6, 0xc0046209, &(0x7f0000001340)) sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) shmget(0x0, 0x4000, 0x20, &(0x7f0000067000/0x4000)=nil) mmap(&(0x7f0000171000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) r7 = syz_clone(0x409c080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240), 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 7m0.233358248s ago: executing program 3 (id=679): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x910, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x5) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)=':\'\x00', &(0x7f00000000c0)='.\x00', 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[], 0x0) accept(r6, 0x0, 0x0) 6m55.994834884s ago: executing program 3 (id=690): syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$fscrypt_v1(0x0, &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f0000000440)={0x0, "121094e249783d2d467c80b8b83aafd17621974d05873fa60fec44d55f01db504dc044568755c24536bc23fbc2632843da9e33080a45cf2ba4d8b2e4f3ea8a5d", 0x20}, 0x48, r3) r5 = add_key$fscrypt_provisioning(&(0x7f0000000680), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000000000007162636465"], 0x18, r4) keyctl$instantiate_iov(0x14, r3, 0x0, 0x0, r5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0x4, 0xa00}, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000640), 0x129202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f00000000c0)=[{r6, 0x28}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x200000f, 0x11, r6, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x4000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) timer_create(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x3}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000540)={r8, 0x43, "4dd138c3cd9fa03116a73ad1f00357021b0437b6aac0fa8c364dcd250025841ce715cd5c054b19e7b37ed600706f12888d4889e3a057a9afd55787995e7a1e7de8069a"}, &(0x7f00000005c0)=0x4b) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) 6m55.021712835s ago: executing program 3 (id=694): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x41982) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x25dfdbfb, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x4, 0x0}, 0x0, 0x0, 0x3, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x4c050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 6m39.336701734s ago: executing program 32 (id=694): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x41982) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x25dfdbfb, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x4, 0x0}, 0x0, 0x0, 0x3, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x4c050) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 4m16.717746151s ago: executing program 0 (id=1129): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf00a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0xfe, 0x3, 0x0, 0x5e12c20dd363f5b, 0x0, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x75, 0x4}}}}}]}}]}}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x1) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000340)={0x18, 0x2, {0x80, @loopback}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @empty}}, 0x1e) syz_usb_connect$cdc_ncm(0x1, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0xbb, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "d249e5b0"}, {0x5, 0x24, 0x0, 0x273}, {0xd, 0x24, 0xf, 0x1, 0x79e6, 0x6, 0xa, 0x3}, {0x6, 0x24, 0x1a, 0x6, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x8, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x10, 0x0, 0x36}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0xd}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x55, 0x3, 0x17, 0x40, 0x1b}, 0x92, &(0x7f00000008c0)={0x5, 0xf, 0x92, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x7, 0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x5, 0xf000, 0x6, [0x0, 0xc0c0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0x8, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x3, 0x2}, @generic={0x64, 0x10, 0x2, "93483248da34d67f4f1534c371e27cdcd8419b3edd64c286a9ea1eb48872f864ec2c33c659617aa2eeeebb6081d47e138282bae5927826062a9f1b9868795838a6c98da7c37884cb09800bf783607e7b3e4e7bd23273de01b8935dff8e36d79839"}]}, 0x9, [{0x68, &(0x7f0000000180)=@string={0x68, 0x3, "8b9f88472a2f28aa45578b0808d7f842962c99f8c985e8b2c791044a6def5706fb21604f9784f27c4833f27516f09d5fb6d9fbf0998d8f98a2c3be194d331578420fdd619c4094019155bc6de00a877c61021cd4657cde70b9e70612c918b904d31d19e4a449"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41b}}, {0xd1, &(0x7f0000000700)=@string={0xd1, 0x3, "df8dad8dc5ed2a8812e0b5e9c0188186b12f81cd2febbc8781cceab14db10d2c4543786c75d890f4aaa927b8ccc66d4bf835cfae87251fff6794b3550ea52cba9d0278833ca4556b2e4371078c182f44e6d9849f7532639faa47115843df7e42345ebd4e5dac36920f15b2dce2921e7d8a52adf796cf18cd0116e2c65c67b42655a860641bed3245bd468050eb4a3b04fe2a03c9449b1340dfcfe40754817ae997fc17a3d58639cb2c6b0eede4e84439d283db59129a54c5166ebfac63adaafc000bc5066205a65eca77c4d9a0014e"}}, {0xb4, &(0x7f0000000800)=@string={0xb4, 0x3, "6af5221e7b1d3f3ef09bafca2c03f798011f099d6bf14506fe1b866fea5a645216b6a934c2992b9b8733dc22bd1a47c15bb9c3a54f1e85e4850bbe19a178d343d5bad9878ca65f8940a608e952ca463aa078fcbd02a46b5432a4ad1bc24038b5940d26a4a411e7864de5369a4e4a89afabeaf3d4dde558e4571341dbe3d96eff96c69268b302ebce6b28a44e19efd17774b6f960752e17a6ad7e429d49d93edc43f182e5a006275c7e6d6f3732eedd2ea531"}}, {0x67, &(0x7f0000000300)=@string={0x67, 0x3, "debd66b86b937a737eab17d7e93cd72aeb49533d84f754a59b2f71778c47eef6ae2defa3b865029ebaa8a1ba769b1a9de487fd3629e666aabfc2a77f1e57fa57020e655dd327db51edaf1ee31507eaf5e8f004b965759d8963bbf61c78459bd171ace79f36"}}, {0xab, &(0x7f0000000380)=@string={0xab, 0x3, "4e98abc55e9aee06e298ca8e28a6d20e43e042f92d90130e34d4dc195fe6abdf9f17d34796f08c4d2343a1b32a0cc82289f924be5d2491e44a681310e2031d209ffa951b7dd82696d6e7066d3c41b99951c02e339614886036e3232a73bc112f69a853837706d9fe7c04c2f33a46c689de2cc457f384856643e7e7ce4cda3df16693d07793184a7fe43d43d0b6b8ac51cc7bb3961dc2717280614ed06c2846854445d60ce68fe28157"}}, {0xb6, &(0x7f0000000440)=@string={0xb6, 0x3, "ff90f6877a0e2f6ed5d837360d2c77e0c193a0c2ea25b610ccaeff7ac5aa9f7f8d8763a09ac56c708d3f3680d780a2e5f29fee7dfdc0491e3596affa68bfcd811ec84f5515b90024c5d3d47650a58e486e152146d7f67b5a223dfd84be7ac7de10740a32154dd7ff8496c0cbe7064e699ec45a157b818de5454b5391f074809bda51baa79c30370f62db4ee0711cc8fea6e5ff3ea0d2e3be47a33a91cfb472859841d8da16977498c8af46ca1b39ac34f17e7b54"}}, {0xa2, &(0x7f0000000500)=@string={0xa2, 0x3, "41d6c283ac729deb3adaafffde8c7fded24013315bec04ccae3ba6bec8a16173dd6c3f09471de35e2f6eaec7c3eda908e8de9a173fc050463be96f3e71b06bf587ebc3702c320969da87d69a937ac79969fdb82866e47321de00af6e8020f8868fdd0b5426101b2af3e76df551aba33a3dd96e8737ef5efdb050607a3ead971d09a27499d6d4002ba483586b86d428dc9b4f1b8de2334c2c36a03992ede4eb6e"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x20004881) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000307"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m15.904487225s ago: executing program 0 (id=1132): socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0xff01, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) keyctl$clear(0x3, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, 0x0, 0x64) r3 = msgget$private(0x0, 0x193) msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgsnd(r3, 0x0, 0x3f9, 0x0) msgrcv(r3, 0x0, 0x0, 0x1, 0x800) write$sndseq(r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000d00)=r6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 4m14.883374228s ago: executing program 0 (id=1137): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000ffffffff78ac1e0001ac1e00010b029078090000004500000000000000ab2f0000ac14140ae0000001040022ebff5f90ff444db8a203a719e34470e004c726"], 0x0) r7 = socket$kcm(0x2d, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0xffffffffffffffec, 0x18, {0x4e22, 0x4e23}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e3, &(0x7f0000000180)={r7, r9}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x40, 0x10, 0x9, "5484059c97c27fc7b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m11.641354652s ago: executing program 0 (id=1148): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x28, 0x0, &(0x7f0000000680)="000000006bd4871ff589d5c113b5146f3dbdacbef58ed5e04ad97ffe1e341f0d36e149b4cb376e9f", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000980)={0xff, 0xee, 0x1, 0x0}) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$poke(0x5, r7, &(0x7f0000000200), 0x0) 4m8.584378343s ago: executing program 0 (id=1160): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="ef", 0x1}], 0x1) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) 4m8.055515333s ago: executing program 0 (id=1161): getpgid(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@gettaction={0xd8, 0x32, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff800}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6c4}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe000000}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3af}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r3, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611866000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d1b9b2a96f3dec, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac010000100001000000000000000000fc0100000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000000058001400636d61632861657329000000000000000000000037021e9bfb86d7630000000000000000000000000000000000000000000000000000000000000000000000006000000000000000b74a27a4f44bd05db8f139a0"], 0x1ac}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x2a, 0xa, 0x1, 0x52, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, 0x20, 0xb6cfa4117767c35d, 0x9, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000440)={'tunl0\x00', r6, 0x20, 0x781c, 0x6, 0x3, {{0xb, 0x4, 0x2, 0x5, 0x2c, 0x64, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xa2, 0x3, 0x4}, @generic={0x94, 0xe, "9bd247e09578cd167aa45456"}, @ra={0x94, 0x4}]}}}}}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000080)="29000300010003", 0x7) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x2, 0x5004) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000540)="791377ba40ff6c173d234ecee5f7794d17e615a29b64243b50b45e576fc9ceedb2dbf7ca5895923601e89869723fcc36218037a57f000e2a80a07a481106a11d72617fecebfaf792ea1516619a0f352d684c46456a996347c5cda052328e5e4eb33df4173c75cbee1fb18eb6338cd349a5abe0b4a5f9ff47b5b87591e3d1d571b289ca40f212ec94513058279b7fe40df3697b9e6ef84ddc72b7bd3224f76541b83eea7c122219eed5ae251d27a178a92673e19de290e19891aff14698e825f79dee485e73154a994fa8222388c6cf4539", &(0x7f0000000440)="afd05b7f7d234b19829632cfb12a358634dd8e49505c9af531d579d923"}}, &(0x7f0000000380)) 3m52.713528034s ago: executing program 33 (id=1161): getpgid(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@gettaction={0xd8, 0x32, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff800}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6c4}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe000000}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3af}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r3, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611866000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d1b9b2a96f3dec, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac010000100001000000000000000000fc0100000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000000058001400636d61632861657329000000000000000000000037021e9bfb86d7630000000000000000000000000000000000000000000000000000000000000000000000006000000000000000b74a27a4f44bd05db8f139a0"], 0x1ac}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x2a, 0xa, 0x1, 0x52, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, 0x20, 0xb6cfa4117767c35d, 0x9, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000440)={'tunl0\x00', r6, 0x20, 0x781c, 0x6, 0x3, {{0xb, 0x4, 0x2, 0x5, 0x2c, 0x64, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xa2, 0x3, 0x4}, @generic={0x94, 0xe, "9bd247e09578cd167aa45456"}, @ra={0x94, 0x4}]}}}}}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000080)="29000300010003", 0x7) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x2, 0x5004) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000540)="791377ba40ff6c173d234ecee5f7794d17e615a29b64243b50b45e576fc9ceedb2dbf7ca5895923601e89869723fcc36218037a57f000e2a80a07a481106a11d72617fecebfaf792ea1516619a0f352d684c46456a996347c5cda052328e5e4eb33df4173c75cbee1fb18eb6338cd349a5abe0b4a5f9ff47b5b87591e3d1d571b289ca40f212ec94513058279b7fe40df3697b9e6ef84ddc72b7bd3224f76541b83eea7c122219eed5ae251d27a178a92673e19de290e19891aff14698e825f79dee485e73154a994fa8222388c6cf4539", &(0x7f0000000440)="afd05b7f7d234b19829632cfb12a358634dd8e49505c9af531d579d923"}}, &(0x7f0000000380)) 2m46.913090396s ago: executing program 2 (id=1417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r1) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x2c, r2, 0x101, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008020) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c40)={0x2d4, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0xfffffffffffffff3, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_EEE_MODES_OURS={0x2a4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x52, 0x4, "c41eca86a8d109e999125a426d0db3038a0fa7df97cc86ce1ce9e3384e65eed1d13bcf7591e7a7e4ccd3782ca5cf40bc4959d05f3d62fe0ec6c10e183588db223c4c920f906ac16b4a86149c14b4"}, @ETHTOOL_A_BITSET_BITS={0x58}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x94aa}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}]}]}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "ecaee370d7e9de92f037cc5848f7a375c6dbab629f2ac01a4ce4"}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) sendmsg$nl_generic(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf250100"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x40) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r5, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x2, 0x1, 0x0, {0x80, 0x7, 0x0, 0x3, 0x0, 0x1, 0x1}, 0x300, 0xd1, 0xe}}]}, 0x3c}}, 0x0) 2m46.540652479s ago: executing program 2 (id=1418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setpriority(0x0, 0x1, 0xa7a8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 2m45.172973027s ago: executing program 2 (id=1422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000b"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x24004090) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)={0x44, r3, 0xb97534d5fe9704cf, 0x0, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x581}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4081) 2m42.385723152s ago: executing program 2 (id=1432): syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80000}, 0x0, &(0x7f0000000280)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0) dup(r0) socket(0x10, 0x3, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000"], 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x500000000000000, 0x4000004}, 0x4) 2m38.340116485s ago: executing program 2 (id=1444): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001000)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x1}, 0xffffffffffffff85) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') socket$inet6(0xa, 0x3, 0x2) (async) r5 = socket(0xa, 0x3, 0xff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x2d, 0x12, @void}, 0x10) (async) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x4046040) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000001200)={0x1, [{0x6, 0x68, 0x8, &(0x7f0000000000)="7bed9444afa9b918829d0f83d7"}, {0x1, 0x630, 0x1000, &(0x7f0000000300)="963892a23362b3f5809c937d7598bc25ff13c3327726cfc22217eb455e0d4f1fbff22a30711f309f4f04fe57bde26861db11a4de380c7258330d96e425b8519c2d0d9c45e4d0d9fab53f907b1e03c3a24921f119bface4115ca048fd8697afc5d41c9de30208b124a7a5dba497ec9f7ee75716b0d28f539d189edaf80d755ce56e565c171cb523f622e4b6c02f11148d94d622e10b3d9270f68cdcf535402de2dd248496d11032c1233acc492752bbb5fcfe0e66321d0054d9948269526acd0696babf7cb4d3"}, {0x2, 0xa0, 0xf, &(0x7f0000000040)="f1bd5ba7c8ef99646e09fb1b4111dd8b02837d94"}, {0x0, 0x308, 0x2, &(0x7f0000000400)="73c47896fe20419623164b458e0f2c9ba7d9f408c4de8fb69fd5023f7fcf6ecf1c384a70840302f96372f3e531ccfcdcd6e05ab74ee954144baa4f82efd047ca767793989667a8afacc63c923b1761b6f94379c416c181a74ebb3d6428ca3db3f2"}, {0x2, 0x5b8, 0x5, &(0x7f0000000a80)="b57511eb5ed4d327a9e8d830e1c5abfae1d3583b4b7f715f7d2d0d5bde50134b4ea22fa5b24354a64ad9fe4bec07620147e21b9564e243d1fefb954bac3a44daad955b5faddcfa36edac90fbdeb1db0efd7e240fd94031ab98926c34f3d93ecaf35d3109e10f3979161e9fefae36a768a1576f51f4fa5a4390dd9e3e391077a5338f86bfc4a1379977404ac884b2ed506e057fb332f40662e1800bb49f8c0bd26e24219ff1ae8f236b1735dde9bcb07cfa1a3e1b859773"}, {0x1, 0x8000, 0x1ff, &(0x7f0000001f80)="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"}, {0x3, 0x248, 0x9, &(0x7f0000000b40)="118131e7d816e8cdc73618a5667b80d56e21f4b4c8718828fc2f20b446e3cc8d13e8c06e3c1e5df9b90e4f0a8b7e15ed7a8a014b88dc4681603b08c07d74335e07b21cc170a09a6cbb"}, {0x1, 0x3f0, 0x4, &(0x7f0000000c00)="847f5072a3945a55c2478f508f0b8bc0ab961c5982c37b2c592aad3a5c421f7a4da5a30addcbca35c17f96013fb1d4e01c06e85b22f2a0c7dedc320334cea562162bbd716f081e7520ed8a4124633ac3896e4da4b213b902179bbdb724023ba8edc4fa5b810cce02bdcdc1bce3c78d6dd3d0f42ce9991cd8e9ef5a959ce5"}, {0x2, 0x368, 0xc744, &(0x7f0000000cc0)="28a5cd6a5240d5962ef4e0bc5518625e8b61a10b340080b74975a6e8723403938546ea801b93b0fba965072862cbbbbcc0008f0ea594b6dc97aa6bd66a11e675db173dc385e2b6fdf87b943290479b7478993e6f30b65a1097e49bb0897dd723ce60cb7be8b344ae710b9eae0e"}, {0x0, 0x548, 0x92d, &(0x7f0000000d80)="c5485aab3217ae6edf0f7169af1c7adb69c2ad8b4a863d5ad123132d0d0f2aebbde89bebbdd53c5c51621631fcf34832cad6213407bac8e4d3c3e70f56d8eecebd2c84d25d3bbe0d45b701bbec8ead906fa64a8d43bdc3768e545af274fa61f93c7ed2829c1db8fc06be62bd08bae876b6c6c1485a134e1ecee87eee621cdbb3121b6ddb6b2c8949eefa424bc12fc4b8b563ce8d0767f44ff2b7adc52777c9fd3877c266926070ce8b"}, {0x2, 0x4d8, 0x374, &(0x7f0000000e40)="00cfe1c93cb81827d22981c710f57836c11d4605d78d90e365c55491304d48969496571793bcceebcd7a96c9bed8498f6b32df585ff6b9e2cb9bdc1ea9813348cf6d282e749582776eb5a64a466536b1819fd73bb0f0cb02480bd6d88b415ca83b5290e3fcc11ee6468d77c00c06d45b11d5e80e2a151346e0da3cb29cb16f608530bb94131e05a43adf3fa928a75226f72721d3df473b72703f3d"}, {0x1, 0x740, 0x8, &(0x7f0000000f00)="5f48cb55252618ef5b850d1291a3a4a7b8a64051c347388c986e00eef11fd45c5d4b5c2cd3da81cbb03797dfab36c691d7a32a6ec6eb909e183d633828b345d01038e68099a26e79a30e91c01054af922dce90d1fd1d1fdf26b411e0d5c9f4af9e1f541a76b333cb8cfc1175308037c42e770b902469acb0d4adc4fe4340f99d807a5f788babcd0aa46f538f2527169eb6c370dc2fbee3d99fa48b3830404b015abebc31f6f008f4167afcbf4648663b87c42dc8efd0a8d652c03f860b1a47f03ff28ad438c004887857b46c9dd51eac7761a56c1c121f28556dc27572780b21d1c518ea26f02f63"}, {0x3, 0x2b0, 0x1, &(0x7f0000001000)="5483e3b68b37d26859deb5bc6b997cfe9fcd5b5ba8469f29f78a33883ec111d6c498e25f75a8d5a09b00d90b27e47b40476052d4b1d92f2b354c19195958adde076f45dc96acf1b21f853499141078d45bdcb3f18c83"}, {0x1, 0x390, 0xeec4, &(0x7f0000001080)="cbf8f3f22fc1f4f3f6b317c9fcb6b5f1062115497797ef4d12606a143ddeebc6def6a0bd2e6555427a46aaaae32638ff22153d12d7e4031f71cf050bf33381648e6b121455112db52539079f08d61aa1715f84fbc076a1b256ce4751a144d8cfb5770c6d1a8838b7ee3ed2d6a10b45dfa03a"}, {0x2, 0x330, 0x0, &(0x7f0000001100)="4d8a558fa3f3fe96e08cf2ddc8b6651bfc9c03f9113d0aa5a1b66c7e2ead540d9d796819fdc472750842e4a66369b3ba067d4507232569efb278ccd8fb020a7c878b8a99958153deea0a4650e9548d722e208ac82908d5e661e562a86c040295c75749175a80"}, {0x1, 0x208, 0x568, &(0x7f0000001180)="b8af40d68ff5f1363704a39b1d60f5ad85910ff07b02256afbc11759fcc9113a5ec7b56efbd54d329a580bc4308f2c827522a1fbbb8ab8f02daec135922d4e9736"}]}) (async) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) (async) syz_emit_ethernet(0x4f, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaa1aaaaaaaaaaabb0800462700410068000000069078ac1e0101ffffffff010101000000000000000000000000000000000200004e20000000040000000200000002000000030000000000a134daf308bf1edcad1b552bc9cac077b45fee32d37e2d57f46fd04f5eb88d6a4d82bf9e8aadda6e336643bb48fe0c9a792a8a55823091c6d858480cf636e12ba67356767d7a2b1d7a86887120a7d93de688b062d29e4e66f1a763af43dd6ada110d6a2e6f3b27"], 0x0) 2m38.201287615s ago: executing program 2 (id=1445): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fsmount(0xffffffffffffffff, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) io_setup(0x1, &(0x7f0000000380)) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x101, 0x3, 0x100, 0x10000000, {0x3f, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r8, 0x902, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m23.132925098s ago: executing program 34 (id=1445): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fsmount(0xffffffffffffffff, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) io_setup(0x1, &(0x7f0000000380)) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x101, 0x3, 0x100, 0x10000000, {0x3f, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r8, 0x902, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.651245293s ago: executing program 7 (id=1893): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5865, &(0x7f0000000300)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2100, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x44}}, 0x0) 10.593068938s ago: executing program 7 (id=1895): mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32, @ANYBLOB="0bb1000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704020002000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000340)=0xf4240) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="214d96df0429cbb103000000f7a59e97f9d3f072936d05a3c0ccfe00000c38230000c9569e2f87879a163ba27d141c7c66a88a25b982294737bb6160103a70b54be061f9cbe6fb75d958e9af0dc6f9969cd2ed537b8d44276ca91d7dde8afbe60254e4f4c9c395113168dc46fce52894f1c290e09a7b92cfeebb278db0dfe0f61ab242da35655d009c291260d200b15d237d76267d1a358ab5451d1462e84c8c8f502a97b7b25f7606c11d0b8b231db7b64022716800405a5e7e", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000000800"/28], 0x50) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) 10.556406633s ago: executing program 7 (id=1896): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d9, 0x0, r6}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r6, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000180)={0x0, 0xa, 0x2, "f66e1d7400f2000000001b00", 0x42474752}) syz_open_procfs(0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2800003ce7006804347a93ab92d700000a0101000000005e1afff492cf8be2a744c8d5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a3000e7ff0008000340000000010900020073797a3100000000140000001100010000000000000000000000000a"], 0x98}}, 0x0) 9.335053836s ago: executing program 4 (id=1900): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040eec9e2720"], 0x7) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x3, 0x1, 0x1}) r4 = dup(r3) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x3}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() 8.169437936s ago: executing program 7 (id=1905): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000980)={0xff, 0xee, 0x1, 0x0}) 7.577861362s ago: executing program 5 (id=1913): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) sendmmsg(r1, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000001c0)="ba7b3ccd", 0x4}], 0x1}}], 0x1, 0x2004000c) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x8, 0x20, 0xb, 0x400, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x65, 0x0, 0x8e, 0x29, 0x0, @remote, @broadcast}}}}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.534343427s ago: executing program 5 (id=1915): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x1fffff, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) shutdown(r0, 0x1) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)=ANY=[]) unlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 6.79910634s ago: executing program 4 (id=1916): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x22, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1f}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, 0x0) fcntl$getownex(r0, 0x10, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.574751065s ago: executing program 5 (id=1917): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000003c0)={@mcast2}, &(0x7f0000000400)=0x14) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f00000004c0)='timers\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) r3 = socket(0x23, 0x80000, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x80000, @loopback, 0x1}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000580)=0x0) mount$nfs(&(0x7f0000000480)='timers\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x8, &(0x7f00000005c0)={[{'^'}, {'nl802154\x00'}, {'#^\xf1'}], [{@fowner_gt={'fowner>', r7}}, {@flag='silent'}, {@fsname={'fsname', 0x3d, '\'$]}\x14-}@%\xb7(!+.}@%,'}}]}) r8 = syz_open_pts(r6, 0x183803) r9 = dup3(r8, r6, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0xff) connect$l2tp6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3d5, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f00000000c0)="2c1084e212d1293bdfaf4eb1229f008d48ae5b840480ced45ad1fbc5e03717d0f6e1c07b9d5a7c94d7004d1fabe609be0d1ce8a2edeb1084782b7ee3ad74442dbc5feea04a47fe06b253d429012ed20577b992cbe07420291aaf90018b97448ee166555f8b468647fafaf03ef39c7295bcc24ffa2374f2390d7f929b9ffc405a1763defe1f766a001b998c7f6af9411a32deff797f9658cd3653d9994913e792f9454f2f0eef738fa6e90b8e99c44075f2f4f2c038478a5d05e6d32dead9f2999c9a7cffb34e4a434659", &(0x7f00000001c0)=@udp=r3}, 0x20) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000740)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x28, r10, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x29f, 0x28}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x0) bind$l2tp6(r3, &(0x7f0000000380)={0xa, 0x0, 0xfffffffd, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3, 0x4}, 0x20) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000410009cc7e6987000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888012005001800128008000100736974000c00028006000f0015950000"], 0x38}, 0x1, 0x0, 0x0, 0x40101}, 0x4008844) 6.166775474s ago: executing program 6 (id=1918): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebce, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) io_uring_enter(r3, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) 5.881162554s ago: executing program 4 (id=1919): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='io_uring_fail_link\x00', r0}, 0x18) socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006a9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r7}, 0x8) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) r8 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r8, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) 5.231685411s ago: executing program 5 (id=1920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000003cc0)={{0x12, 0x1, 0x201, 0xae, 0xd1, 0x95, 0x20, 0xace, 0x1608, 0x4c20, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x1, 0x3, 0xa0, 0x4, [{{0x9, 0x4, 0xa9, 0x7, 0x1, 0x1c, 0xaa, 0x1, 0x3, [], [{{0x9, 0x5, 0xf, 0x10, 0x8, 0xec, 0xf5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3d, 0xfffc}]}}]}}]}}]}}, &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r6 = syz_usbip_server_init(0x2) write$usbip_server(r6, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = fcntl$getown(r5, 0x9) prlimit64(r7, 0x5, &(0x7f0000000140)={0x97, 0x6}, &(0x7f00000005c0)) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000080)=0x80000003) r9 = dup2(r8, r8) read$FUSE(r9, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r10, 0x7, 0x0, &(0x7f00000000c0)) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r11, 0x0, 0x3}, 0x18) read$FUSE(r9, &(0x7f0000004840)={0x2020}, 0x2020) 5.213301834s ago: executing program 6 (id=1921): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(0x3) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0xffb9) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000240)=0x4) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000440)={0x9, @win={{0xa3, 0x7, 0x7f, 0x1ff}, 0x8, 0x8, &(0x7f0000000140)={{0x5, 0x8000, 0x5, 0xffffffff}, &(0x7f0000000100)={{0x2, 0xc21, 0x54c, 0x2}, &(0x7f0000000080)={{0xf81, 0x7, 0x401, 0x5}}}}, 0x4, &(0x7f0000000340)="d315f3df06741c0d210bdab8bcc056078e41fb16a1c0c9916f27214754d4663be8003c38a7435243e4d6ff00357415a1c15fd58666e852cd22b4a3ed388afab7b84f88ee01115f23d382ed1098d3b54d7ba382c4df630008bf980ca84c95928667c1cdb890bde84e4de194871ffa910df5b572bfb85e4974e62d7b426507bdfb614bf63d83c29e6fa888d9233a5ed8cfb5a8aeb071796b0b7b73b4514274eb6c629d15d0adad29923394befa4230a706eb6faf69b7ce8c371a4eeb8bb904a3f855"}}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2100, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x44}}, 0x0) 5.069181035s ago: executing program 6 (id=1922): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getcwd(&(0x7f0000001180)=""/4096, 0x1000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[]) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800", @ANYRES16=r5, @ANYBLOB="110128bd7000ffdbdf250a329de50fcf90b5000013a10003806840dd16d1585f6b3cc4c540d7f79fdd908126341962efe806bfc37103ab359249ca97d696875a200eaa032bde5153b7573fb56f6e06ee91502f712128172ad42f991e5acd6e0ed9ad99e0b323bf6e5bfb10e4b4041e3f74268386c3179325a7715033d40091e6db7e88c0e3dc9b906d9911d25d85de966e896a253b6a5e2f11cc01631988b4af0c376d3d8f1e7a8547381a6cd3dc923b25d12b477665e72dc7c47f4acc8e08098d27935637656bbaea6357799f30c7e020833d6d2a14b163d19e9092253e213ab2791d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000240)) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000100360007010300000000000000017c00000a6666f2ae768e1e7152c8ab9a55cac7"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB='\v\v\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00'], 0x14}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000001c0)={0x4}) 4.968010593s ago: executing program 7 (id=1923): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7, 0x80000001, 0x4, 0x20, 0x5, 0xff}, 0x9c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) r1 = syz_clone3(&(0x7f0000000300)={0x10008080, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x9}, &(0x7f00000039c0)=""/4096, 0x1000, &(0x7f00000049c0)=""/4096, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000380)=r1) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x8395}) add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x103, 0x0, 0x0, {0x0, 0x0, 0x2}}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x5, 0x0, 0x0, {0xfef9b3ab00530ad4, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x24bc, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1ff8, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xfffd}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x10}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x24}]}}}]}]}, {0x3c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "71593cc1f1d20fa42f9340e7507e8c6cc1adba7258324f9071fc92620f946d7e332d8de8c34c40415e15e70f1c629993ca55a8cf8eba28254ecf0fad4ed03aa616683bf1aac9194680dcc2366d9df64b2ff213a32a4aa35c3afd7f2655c58bc8467e76541cdb2017fd49fb0e1f835c93e10113c39c5ec7d31327e601e810f9c96012742884f401ea49b37c63cda38c8856da55a959cea78eaabb8ed84a3752ddb259a3a85f184a3483cb2b73cf3f07cba8"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x800}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffff7fff}, @NFTA_SET_ELEM_DATA={0x24c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf0, 0x1, "292ccff7932e814ac754d2777012043f7c58612b622f311201208b080fa4abaf89da1b1be8d7c142d83ac7431e314c3763abf386d58a4d70dcf88cf73d33b381f28059ddf9ebe398e5af6ccbfcd48a2bec965b8d47b99749c9c8850482d3f65346961ad3a9fb1ba869857b2a2ffcfd567102c9f55fd08d55c10d881388e145d33468481d6011b634a93e3ad537cf6cee10d73406001f7bd91f80ce91040408e96403b714f03bce8517958ab4c8dbaa241d2588a5c7dbfdbf214df16e29cd60ba126333904004701fda5ed267db24e49d251fd87e17cf984857b083ab47818a47c02812b9cd72ff065f654f27"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x74, 0x1, "527e09f16a3e48a0e0db8b87ba55e4c646c38c9dda9f226a778af456f7517ef37aee5a2fb2ea0ffbb7a7c18dbcf3db508f6bc60d4730cf2a2685bfc584931bb029e516185ea5650b7074c813a5f0fc66f71c2d89eb8a8273bee6feefad488c2de6bc0c7a7829aabe70e44ed4fe6f8ba2"}, @NFTA_DATA_VALUE={0xa2, 0x1, "fa0f1b435567a1e67b4aedfa7a81e97f98ea1fde8851a96bff5ca9ee0a9448a51c6014b157b99fa9cd7d2b2d794e30dc0a918b1217c11470b897da7f2809c4a92b6ca9f3b67f9d2b790eb7598cfbfa76d0b0d632032081b3ba802b9234a61f8396d22d837357baf273cc429b83fa614f99db22b7270d2d04328cf8d5da84602b3075a1f91742e3c790311646c8b5db8248100d393c1f117284419a9a9b8e"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_USERDATA={0x8d, 0x6, 0x1, 0x0, "396b9639c37f6e5402755a4f696d12aeeb957b264a3174ad6aead6157810aff12175d0522b970a1d4e14f499261e6e70d90ac93064ee29944742bb47db0aa747fac8854415f08a20dd1409dc2dc29c36d5c17fe0672e86df29edb57b6d754bca1fac36b3b9f4f2b7d21a4d27f05767f8edd47252c998d496fec95b0b078ee1841a8a09d08824304035"}]}, {0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_ELEM_USERDATA={0x64, 0x6, 0x1, 0x0, "5588b3d9fb05b2b574b0879adb17e8760ecfe3ae9ac7b319851618748547d54d95d2cb0d8ab7f72775cf54fdd55b0b7b75730895a135202787435e6cf5ab5e5cf88f8954d9e2f24b112ed9ad54e822d86beccc335f38f76e498e64640348e413"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x448, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x300, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VALUE={0x6f, 0x1, "c0a4e4fbcc223451086959be5aea56059aac2c8a33823a53587d82133a8d40a99e79a399901fbde07d4efff35fe3afe66aab008718dd4235a61774b710cf1a774e20531054931e8fd3f18f0fef9f5e2bf9bd6968ec65f2481779de8bd7da35394f89fd8e0c881d94aa6d54"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x70, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0xb0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x39, 0x1, "5bbd5ced0e563f2c41bed1fb57e139406d01f7f8d0ea8833e2810c1d1752ff31c6cd9c4277d4aad96ef02828b71e79344df2ce4af8"}, @NFTA_DATA_VALUE={0x6f, 0x1, "5cb92b15e8bda1edbd5abccb2a0e4777c44daaa27da0b5ebb9950dd43bee90815e7b6d99283786d0052c95919fab65f0727f0872d72fbd7cd3f214862770d2e808dba0123cf5d42f949ad1d1dea1dc7bcba5f3e04efee9426acdc410de60ca77601d1f4396e86d233bc43e"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7ff}]}, {0x1708, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x244, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xa4, 0x1, "2071a479cf31054db5c3ca23b0318adbd65146a886cee303c9aa95a7cf18746ef9ecafda73af808dfde577100b20065682c81588a48689184a082920e2bb9146a576513fb2b86b223cf41d5ae4096cfa50bf869a347dfd69d45fb51efe716362397682146b3db378f1ea34409b6e428a4750d3222fe93539ebfa7f21ea1a1bdac3cda85b4664f6e914b36c7facc75704976bb5bafe1433ca4822ed3407748080"}, @NFTA_DATA_VALUE={0xe4, 0x1, "6a50e3252ffe278d48616b3585a959b430b29bb05c4a48d92911020029d8ead5ab02003884c7fcc56224e307a7fca026b301d2d2492a0d5d3d979ade8cf26d9323a29cbf0391d92374763605ecdb353501a3e83c961e7c60895d7c560256953ff7f0dc1ebcafa0e72ebb005c9ab3626e5bc2c4206526cae58c4737c35f9de7b210a1d5c50177e00f857665f1bd9a63a791029a1afcca0f3ce7d4f2c43fea337df4794072c0489917088315f06e8880a711438e99ae4870ccc70de80d1a42655f8c44e099ac5fc07b11184df20b90e8a62c44fa4f65a2dac3a5c95a4d7c69b3ce"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x174, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x164, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x54, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_RANGE_TO_DATA={0x10c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4c, 0x1, "bd0757c929ad144572486ea8de7a0c4550f647423fd272acaa7fbd6ebf20e6f60499312b0a11faccca91e9f2c9ba4d8314f6d9678dc2c9804ee6e30563b0cf22627f76cf4e2d0f57"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY_END={0x117c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd4, 0x1, "653772faeb72ecb8858f6dcbac1548b9e76d7f87440743e061bfcc9e5320ea371bf0ed208cfdab4ffcc3963026d16bce44253b6fadaab40cebd15a099ee4b62752629c17744ca81ee0bd30571887911fac6c38e83fdf0bcc1a06fd2b9990ce26241d5af2406490059eecd6ae29e90bd081849f5fa2624ea30a84c17df842ae6fd0c2f63ba1c4e59de8b50424ada73a7fc80dcb00a8dd132b309fb7b7e6c80b11de58ca061e2db746c60c597aea03fe4893293247212585a70a793aae5ab45c466efd03bf271e7e8389f59d92203df260"}, @NFTA_DATA_VALUE={0x1004, 0x1, "f04de0f15f8290e44e629f42769b384dce09a20ecf7ee665d51c7cbc1aec40288aa97c7ea236a7b2dc6bb9634a735115159817a92c950165d7b5f06730d2a77650a67874ca9930bbc32f5d0e8f64dbe728a30dab26bd632ce1df0bbffeb963ad82e9cacbf418b0738566f64539cca30a890dd149a920d9922a32eaab67e0482b759dd849fbe9dd0d4e987869cbb3e4e77d6afbd1a60e74fbe6bc9c6499d2282a6f95026c6b16175e133441e0f4623fbc89e013e0a5b0badf2251c34e1f3a60aab43346bf277a723ebaf86f4080e3fd8ceaffe5f5d9bb402c537b0c101e1d7dd6d9988c8c8f1741c0351c451808eecc6ae38cffd3a3e7c29f27a4b516dc7ecb6d6f74cbcb346f04cde8711eac22f45de6308a7e0cfc717d5caee04c910c30e9bb62c4e3099b924866b4bcff8120cabb628b091f4ccdd045ff99e50f871fdcc935b711c82d06d4bc11b32830d765ee9478e4350835022c78979c43602c440e86c72528902d6221d2cca261d7713e30fa1d040c1221ce5a9bd4a975f93dc2ade635e4bf68ec3ec0df98628f6a5ca5525235e4fb2c4515a8fe26c73506f7f00fba27c7df2ac86ffa2f5f3201ad8a8525d0d37a6b59999d92e7822d575a7d50a20df4c874b16dea4494700674b46065948608c894f176174001035d6664a729c0c308580505e221724c0e52779867035f810edb7884623bb8014c90b6a1e477aa501a0dee11c0509c2a700ff867ac527d42b00a582acfefe1173f4cb07feaaccbd17011602936c3e339886e8d3817982b5da10128d13d84869546af47e631c842f0400a958359fa2785a24507e3134646fb47b9410666bf2711af71f18c034e551a85c6c42767b79310c6fa3b86d7c77c5c55d0c73760ab4886a7e81e1ef25d7e5885c7818bb557760c783f62d943b014c3fccdfb6895823f25b64e52f79a2e4cc8a3dc5d6ff7de4663c2562544955cccf7e3cbd58a5086d326103e3ec1ac44e9d253bc45364db14d066ce9239c9349f3ac96029abe5b8ec3d6bfa3f1201b40aec0fca5a0deed60f44e4f9cd6cf2f5a0da8407354d6acf1956e32cbefdc31392b8af0a3dde4f07852171481d2979647b766dafb21cfb6710a7b4cc1d34687e6b227f7e45017514a611fd137bbf100cdaa57bb70f75603f2040f8c047a9d5734150136398db56054c546cb63f45fee2094acd4cd09682741bcc7ac47fb1ebf9112b36abc840c3bd6c4f4fa208f9eaff7ab3b4a1045d024d835efbfa646cd9207b038be1ab4d1d2f2f4af3a64e79f3ebd18e1e48ee7cd58869d75a65e4ee9f81f79497b0d96286e6a3f50d9df7e2a5c89c3c5add9e492722356dd0005b75188a4e2931d0b5c02ec72589fc87216afffdc3e07d660cf6705a74d22afe2e2615f41302990566b86fc1b6e5c394f0d4dc56d93e4a4f7d2e6f3955f1a1584a2cdbf3f1535701f9d1c45a620f4a133797962560afe045bfd76818360d5446bdb4fe73854ab2f4fad8fb9fa057b82c17533ac1b6cbbef8bd6c72f924b657d379c631bc090b2b0c075d977753e1262039ce1a0b6b523ddafbef0f0195512d78104d8d69971afbac2dec9b9c36c2cd6a4aea7713cd4c3bec2e654fb1ded0341aba0794b7ac91c4dab3a7b940711bd5e4cdf5e65bd645139e7ecf15559883a5e814a196880ae59eb791241c7800b3fbbae4161303f1ac102bc14fce8967ceec2ca6b8278b1a3498c71004c4a05341dd83c8c8e1905003864e543bcae35f80087e791090d7e35c3ce58eb85be7cb4c56112bb251173042cf68bbe00093c4124ab8c46a77c123636c00166cac439f921703ac838298c37f80045aaeea318cd3133dff425bd4c295dbb4a924a28cf89ccbe68086f98dbe4ebaec90e081d7dd0c51e73e190745bdb6961906ac32723e09b025307cbbe2969d026049721cb0de370de51e0ce1bcb40a5c7bb93ae6943306993a9199a208dff4babdb91943ac33eb8eea9eb358d2364cba70eda389e5d3dbf3bfd9ca047f5d1858c44013d6e98179dc1d8ea36927bbf9b8bc79d4d451b9f539e52e13939fd2d8226f4e239828447b887b6cc01f343f3857d87c850d3ac8b760e52681b7a24edee5ad14225247ff5f3c41f091e95c93dbe5218b615afa2e533646f87cfc6255f1952b625440b5cf15a24b0fbb4458bbd7f3a8cb42d6a488d1a042ab6a33040d8e30fa593d9ee1b17fa27278c51dc0c2054035c479760fbb896a34a8ff401fc5300bd8bb198f175f139aea1c968b1c804754119500b248cda0a152bc1a7fe083f7f6033765d59873ef620a521c70bd35ed9f0c321dcc8eb0284a357cb422526ca4501c4311531c91975d56ff801d275392f9b586a4b8f403ec17964dd9751fade54567ed509cbe9c3bbf7d761b861d7a88246021e79b3acab79a15eba8aed489f9c4a49b88d679a2d76d5a32bb7d2abade74405be9bfceeb11e5c355d3d3ec706b14864dbc36dc1afcc21afcbb49543413b99944dd62d363c5340a37d6edcf91b77a63f0a0c6f37dd44b5ae88ef50747f4a9365f7edc4179cad0865112cf3604cc03b4e899cc3e7364fe470ad2f55d48a645510f1ddde2238f036b3b5a556dc44843a4619f5cc59fb3f7d35539c7236c02258a9107014a63b534b6ac7dadcb6f5fb00ff1a594765b086965bd33db9343eff81c7fd3b9752a9af31e9dd4b5342cb5e1e9bb1c4f5951c3564987c898f4e83868f940f5ae5bb96d8dddedf91ddb760e7f8a96188c960065c345bf552f32c643fe5c041fd2dab85c50efea31fe1cba8ce86dd23e986961c89cb822dd5562ded6657def821d19704c11fee3d4c45d2f658c3d69af95f3ba79fc8486beb61a292aec0239c7921aa80eacabe5013a967c9cd7f9ad2bb6f44d4fe2c2ada10e99c95a63e438c4f280e8a7b9796e8c2ed7ef7a53f769f79720ccf2363d567056fe7e5ca47039e5c494e5d45a14d8b275442c2e4369835155cd316fd0f3fd24b6f939b979df15cc898b28c60af04051ac2d15013d87eee1ccc06005f03471e0d6599362f87b52c85a1d57fb4b14cff037e92184da415a0eb56af4cd0d7bd3aba577397cfbb663212c0ad2bc080f38c7e85e24e4111412c00cfd6f44579a6469159e12ca10148b48514a46a1b88f502f35a32acc4735b1e9a856ca2a56a2fc5aef23fa49991a8b9ecd4881bc0e197c452fb2172ef2b89f429ebea0dda3118ef10c17e0191b12e21293a9efd2103a5e0bce640f7e92c952c6763e46578c22c76b1eb51e90fcf9d1385681abe755de6b5c8588838dff0f7d1f3ea5685601ec34dba6d9b663babfe129c68232a2c58c112a5cc75992d2e22c70c1df81b7ff46d01206b957d5b79836f624c992656a18cadaf458a0b41d7a8fdcb0076f6410f38f4558f411ce378cf6cb33368b308c51573126db25a717e1052f06cd82564245e7c54d808f66e5e95f27e0e8f9f83848d6391969cf8d115d45cff6bbbeda8f5d390feb44605a7eb22b141a60a293faf418122474fdd2da11ba1fbeac52a00775b33bc2898322d8b7197b6ed2e1bd38e487a19f0bd9ec334436daf81f1be7f585e2053a17fa702833ae3d9e581c2eab811a9ccc82166f93a12b6ea8a40fb317cf8f7d3e94a80dcaa6d935a13e8aa7477654b587d942070ecf3879a1c85a48af88abc0bf645ef90bee819a28bef17a54e5c0f938c64f3291145f771d710c2f274c4ad74485e245950cb9ce9b79de3e53e4481ab873462fdf64c3fdea7209852817c9d974bda314a8563f725da8bf18dd7f7fbe2d486e75c5a1749debf038c16dd2c1ae3f9527ca1751d6d9b3ec91dc7b2b085d0979aed2c0694ab4f51248caec256d8d225323496c2729df5b1f81b9dadfaed53d00559dd25d93f7e47a76a2d86cd4ee7bc7d7e65e2cea043d16a7adb4d765fb14e41e6d6422c5ded653afff291c902d28c878d592966562d5cadb13e73e5dca636efc1b943b03bb3b0d9c63c91fea203aef4c36742ee98cb8ff45c83277fec5206950ff338c90818c6b68d14a43d133e97212db218a5df5b2237458621bcdcb82c69351b19b212048d98c949bd3e6dd0118df6a558336f3110d431c698548193b43f4850ef7d32ffcd1d16a511b5f66cfd7044329b0ad1a7f96696f5393644f52083ba21415657e27b5feb105025b1687d3ac2925a6cb3b202e92fe5d8f0d1e6599280aac43d298a9359491235b3d0f16615f667b075f7f7e9787b2d3b70051d5d30740b3ec03e9d6ba7392ad5a1507d94ede9d2ad918c73e7fab02f42fadfbb9916effd7634be0c1cf6ce9f39c9cb37ba45af456c35aa6b7d05bd8380f55a996f8558a22e8665c2e94a56a71104e491ec3c97acdcf5f1e2beda19767d1220e9528c226583e4ea8390b9f5d3de5b3b15ea38c39b64cf7ff547e2891b5d1f5604fc35e462f68655614ce0b79ee441107d37d46bb856fd8cf7865083815b660b36f2788731b80e1ef9720b06aebf90286ade341bf2be82d846e777918d0b5d0d73001de1302522a5ed2c9ef08e80f5423a3b101478095af9e3d193053a6d60b83ecd7164d4d852de8bc2c4dca3a9856419457debd1756026e028773f8757b65f5825c912edb3ef549e1782cbfda9d80851f78f7af96f36e518295d351121d08324037c4a43e9f7704b7673118e5b5cded90e16b8651ae3cffdd639bd804fbf9a62d2a772b5d91885fc9009b47fda58c780cba31b1b15cc7b17ba04e703a1ff57b496451abc861b73398928079f43cbf9dc67d1f105342428bced0a95424a3e0c8a56d10f06c7c2bde52f46d51be45ff2e38b898f0ec94cb3b10efe1f2b83c1e8476df98eae6991b03cd04d8c147ffd69ba2ab6e0ca1f50daadeece8e2e2dace22e00ee2853bbc69b9ffc748c36ca1e9ba4952ed0f9d6057dc7257224124b5cad6fa3702b2e2b1c5f867b9addc278db30caccc316bc074884ee60f48b74f82b1918588dcedb4fa860f4fd3e1d513c4d225dc969fbadf885974e05ad780434eecd28d4b2b0bb50c7186178146e8637d339015fc60fa5b09da97235a558e97e2c43376c8ec07ca3436d6356204cf2341fb00177c80e222bd0106f750c37efefe07625b040af5adb536ae6bef42fbda5f27ceca27f17c74e128f5a343957499a238693f357ce6739f33144b2bcaacf0c1576c7d005167b3b722d3aeaecca55103ff96168e42cbe952f0e9cfc65a531306752d48304a66aa45b746f16e9c30926a0e7bb464d1c63ae0ad36b67e3a26d8969c1cd66c3898c233bbbe2818690ea55202298da7a91c67f2b66caa8dd1009545bdae5430f29812bb713e6d6fe1c38288411234353f4cecb2642f6f966a24b042096f74d747f8c5d27ef476c8fcc28ae49c1237baa9a20d09d72c3ecf63bf8fa76280938e82aba1649aaeaf57e4edbe6f0110672c39ae7f78e286c371249026ee34688b5586036ddca2495db96a7a3a89478d6ca8ab6c212806f27f14109e1c8f8316eb42b391f90c16c9344f406518e29168069edc301bebf5e05ce46c7b2a578fd94a9abbce84a09f0077d703cf98fa777486e42bbef94c16fbe449f6ba5add8bfc5058400418a1146c9a1e4684730881ce91a9dc12c861795fd971d8907d5207d4f8d37525087d6c7c176fc25ecab96f3179e75c9504fe020ea2956a1754a4803ae216a895a1333dd75c9c70894ca3ca348dfd1be9213dcf4e33463129c36923e3cd9231d141fa5d330c48895cff7e74f96e675c83b52f8c6ebbcf9c696464aee56524ba470264e64983511088755a8e5cc79641756d676cf2585d340c7b716bbddca8880a22f"}, @NFTA_DATA_VALUE={0x8a, 0x1, "412d87fc9e158333b0de3ebe22d4f8e7e3f0cbf14140c538ae47a9ce74d569463dcf9620062064e789e6a923e5a8b27a3d25c82a76467892739e683194ab262f46dfe8b069236a285f2cb76d4727c96271183fa8ef117d64e7c0a430e4ca7b8e5b8524fd7005b4dedb95f4f805bdd1a10e39ad75bf6932650f3f1572c937ee67242b5bb470a6"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_USERDATA={0x3d, 0x6, 0x1, 0x0, "8922d0d9da6ef839fc1d11274d853c62ee874b0bcdf76c393c1d4e8589f687cc1ff3103a1467f51e38b8b4b65a6f02eb760edb48714de31cb7"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0xfc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xf, 0x1, "694bc93afe31be574bc872"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "6a116140b4f79f59ef4a1ffdd390941864f68e602e36ce9c39e15f8902c7d469a6f4289e29257165c184a10529504d48ddcf6c0b059116727ac74076672fcc2125d45c5753b792b19b3fd36f9d02873cf9c3223038502edeac2c3324cf9d1b4010ffa10d9d28f05e1b6344e99534c098e9ba195bd9796acc06d9a486c6323b5eaa4398598a7408aef0938fb22fcfeb71be43b629c118062bc50eb1c2798384e22857ff415aba6ddbbcdc460fa2e6b486373a53a1b52cd0532c24c0"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x464, 0x3, 0x0, 0x1, [{0x460, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x29c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x46, 0x1, "25783767e11b0941b8904b0d56b052a3cc7398b7e899c319bd06a1f674a3b61aeba4be4576ea149925ba838f057f50352c2d36562625c486e8f4347f43e8732241c4"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x62, 0x1, "2b1ef0d8eb4dbcd1907b2a9d0e2b13375b688ac8bd5f31a6036c55c312efee081e2983cee6a3d0f84ac677710d27ab515c78c7472753dd50cdb8d602abaec5f238fb247f6a0e9b8876707b5f4a0e8f0aaa1bf26a02d6b69ef4a30abe2768"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x3e, 0x1, "b99919a66fd71cf8850c4ec91425c3625be010c663bf311fbac1418df10fb3ecacc5238cceadfd36809c4aaed94c267cd3307ec7ff0055b6c8a2"}, @NFTA_DATA_VALUE={0x93, 0x1, "de70a667b353986949ecc2ef4b58b8cf5730c3b1f5e3438ae12894f6183cd93690f2d510397f4d363f0c272f64ce6c66908a400515849c924fed8ef42c5dbc739d19538e6c47767c44febe895649ecc05e46cf2ddef5c7aca4f0b509454e1390a450ec7abc183ee10fa8963399112106f779ef08d773d4a3fb75a7044d37f288b8ca35cc26cb6b51babed81e880df1"}, @NFTA_DATA_VALUE={0x7e, 0x1, "94d8951293e06a69863f5337f8a9e9c8193462ef0b609c519247c4cd6a025fe3bf39f29c68b2ae615311fa390a9214c50b952af3f7e8a4aef5c509402c4b730c2db3ed5a0fab070c399dfac93cfc19081b4f7d2c11719430be824ca3955fe7a68bb39e2cf43f00c8c5f1e4c24a1a936024bad946ce21ea979606"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xbc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x98, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x88, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x70, 0x3, "c33c64dceec0bb939d02f49367e5a2358b39ede5013a72b89517f2fac838a928608812cee8cc0f1f88b2af22d8d0881fe8ad05b6d06bdcdc7174f6ceb1c878359ef294d361f5c11fc76eb355d960df5d26d4dc827b38502f115d47596b267d82b20218e07a833a62d005caa9"}, @NFTA_TARGET_NAME={0xa, 0x1, 'TRACE\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000001}, @NFTA_SET_ELEM_USERDATA={0xba, 0x6, 0x1, 0x0, "bf5b4de96913ff54b428e1ee7b36cb7492339c4232e89b00e1f32de60364c6802f5d19a553c88b0b2386622ffc4e0cc589db84bdffeed1fb03d9b7a1c0264845182aced1bf8bffac05430b94ced93757ea5ad4ef784b3df58b553b4d507b538f50484c9055b1850b3540bf8582b43b07a65c85cf149e2c4fec07cf228cdefe3e589977227c739bfb1a393b9fd426afd54d932a87ed48b5acbd1cedb342b1a6c50009e95619a584321150d65628ba2de53439494301fe"}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0xb3c, 0xe, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x5e0, 0x3, 0x0, 0x1, [{0x534, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2ec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "d60ec563d1c1a4de72becaeaefe2bf55cb6500ba26dded7ef60981e6c00f6fe295b80eedf40defd711ecd772b833f7f8eede853f6423f8cfb9b54756fda7a4b87961ece7bf0eca9934ea106cb1c1f45eb176f43bcf6c4d6a915fb9c0af11c2a9695a00e9d5ee9f6908810907e9b682098962fbe4e6dab095b41c704bb5ebb2a7c44410df5ea4b1d4b8970c18f46052"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xf7, 0x1, "ec2ccdb2deaa86d82d6f0b51fb038fe2899a7040e978ba23326319e26fd6b90d4179de7322a47942d37a0fc5d9f56ce738c10411a76ff48f5e228a90c521fef3b2cd4941f658ea10408b9b9a21722fba53187201662bb754b6294a2b8da81d40e21b45d9b41e61bff634f214f0f1acbe3c7d1654294d58635abc9a66b383cfb19f1913a3bf5ff5072e0e4af44a51e3c0bae53fbbc929e0f111fba1f039022217d36127ab3507853da24259b4e6d4a282892d9aca568f561ed8d7451d559c2f2a09267cfb436cf323f40926c21a07b576262068a912049c97162a6c1e26bf7ee8ebdca3e23574a527ca3fd78338fb3b2e205b65"}, @NFTA_DATA_VALUE={0xfd, 0x1, "f09f65e9b0cb308e99065fd223332cbc6bb39bb2ffb698ffbdae0aa24e4e9d5f778b4f8152f75dcc496cbe335fce7146f44eedddf42c79780e3f7a1c7a1d041ac09e083fcb9f2b0758b9408329bc9ff4d98f9ab13691f370349a9680761a339e0fd39b11238145f03131e5f1e0564ad97e2372bb63b6e2a3b4dde9b727dc2caae516b269bb56ad79635b03d31f57da491bcb0a48483bde9f9426037bd14bcc7ae64142ed392f68001e09388a82de28480fa345a8b3640fff9270f24469f196a954034d12984b96bd5899e735e8ee0fde88e807c6bef63014de151c654beefc2bddbfa8cca36ab15b0dfb193ec6200ce3cb161ec5ea038fc84a"}]}, @NFTA_SET_ELEM_DATA={0x244, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "7f7cc26c64e3e048ddc1fa134723b0b6157a991312baf6e05a1c221842e6e72b79518a6d7e48c55f84b8bbed90ea081cc378d2f7c529c7bed6f7fcf9f3d7206ede2f53a5c0b7758bbba047576ce260f44d92acdfe99878eba801e3ab3ab2237fae297d1f3ee77841074f47a3aa60cf9fa0"}, @NFTA_DATA_VALUE={0x1f, 0x1, "5dab0388adf26193497471f85c8227008d3169b0a7b9abefa7d5a2"}, @NFTA_DATA_VALUE={0x77, 0x1, "c7aeb5fcd3ab912b473cedabe8d61d5b66e28b58158163b41cf38280721f6f6342d69451923a30eec5f3462b446c2410a629e7ca9c68f43ebe568714d4adc3348e4b49cb78ef9c8a966f96492782d47b5a531c0b75d209faaf6324979ac8c4421fb8310884bb5020e802d6f0eff6b65c3d2bae"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb3, 0x1, "11c79bab64af9aa85e3b64fdc13cd1760f1ba90d4faf0b50a3ae99909a38f6d1cc11c07d2046e6486a9c1fd4be4e5fd665233646283bce4989c790a5afbf2ff9e22196fed1544c1ea67a2b1d4a7dfbdf3f8776eeea069bfc447aab35847045c2ebbb4701aae728bef72c3066a38f8c6e5cc7bd3aad22467f56937699819a2bb192863562e3b4b2581150ba8cb0137505f694a5a897fb082e234becd2d3cde14fd2af956cd0ea70d880e28b68956497"}, @NFTA_DATA_VALUE={0x13, 0x1, "2b702afea6c727ce024cb8c0422918"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x98, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x348, 0x3, 0x0, 0x1, [{0x344, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_ELEM_USERDATA={0x90, 0x6, 0x1, 0x0, "47914165681028af7f21b320f7018d866489527fe383af6cdd36ab98d7621037951eb699937cdcb929f7cc2247d585f2e149359e716cec244476d0bf930b4d22f26ea879521156eac2a6da617ce5aa28ce9c6ddb1ec1f5e280077d29e54e6b3186d91b1184554d995dfea11b63a5e74c9c78f50bd5f364f9fc909e5c7fe3cd5c377c0a65fb46d4f36f22101a"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x98, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x7}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1dc, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x50, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x1a}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x64, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x83}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xd}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x4d}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xae}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_DREG={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}, {0x70, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x1d}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1e0, 0x3, 0x0, 0x1, [{0x1dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x148, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd8, 0x1, "8f80a38c9a6f40ce964f94643e9562716e7f89b3f56b6616b99a3cebe6794f6ed2e1fb8602f24ecd69b86430fd89b4be7cfcf7cd1e16b775766f323867adf084664920291f3fd36ca890e5c9a4afb6673c894f6654409bc6dc35998076d0de77d1a4cca87c0f6eaa6208c5d85f32f33cffea25986ccc9b5fb538d51886d97c9fb1bd2b6e5c2da108141b2aa79f7629e90dc43781615198eba8f67126d78acfa98aea7f3fc0cccfbb19f9d113b22650675e4c974b7821a3158ab0009f19d1fd2d0ce3c5c6ef3a250203265fb855f4efebe953037e"}, @NFTA_DATA_VALUE={0x39, 0x1, "556611c4420ad45408020a9997e61ae45c1584e5821b18c7cb54d0c920e69d9558c8ee17b410138eee2881628b809dd7f1295c92a4"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x13c}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x88, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELSET={0x90, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x36}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x64, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xdc}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x31dc}, 0x1, 0x0, 0x0, 0x90020}, 0x2) socket$alg(0x26, 0x5, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8001}]}}]}, 0x98}}, 0x0) 4.967356143s ago: executing program 4 (id=1924): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x220000, 0x0) mmap(&(0x7f0000ff0000/0x2000)=nil, 0x2000, 0x2000000, 0x1032, r1, 0x780d6000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000010) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028180000000069003e00000000009500740000000000", @ANYRESDEC], 0x0, 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) 4.433743662s ago: executing program 6 (id=1926): socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x200}) socket(0x400000000010, 0x3, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc8800, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x131000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, r1, 0x0) r2 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shmctl$IPC_RMID(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) dup3(r6, r7, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.433195382s ago: executing program 1 (id=1927): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = dup2(r5, r5) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xf}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000640)={@remote, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff, 0x40, 0x93, 0x100, 0x2, 0xbb002f, r8}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080), 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x0, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x110}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x1b, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x69}, 0x94) 3.126188607s ago: executing program 1 (id=1928): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2b, 0x80801, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) flistxattr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x48200, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000001000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100000000fd80000000080001400000041008000240000000000900010073797a30"], 0xd8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffff08, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) 3.103430957s ago: executing program 7 (id=1929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x60c02, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) syz_io_uring_setup(0x5e9, &(0x7f0000000300)={0x0, 0x2f28, 0x10, 0x2, 0x20}, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x29fd, 0x84, 0x105}, 0x50) r3 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000019440), 0x800000000002, 0x0) read$msr(r5, &(0x7f0000000300)=""/102392, 0x18ff8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000020030430600000000000010902240001000000000904"], 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r7 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r7, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x54) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 3.09702529s ago: executing program 6 (id=1930): setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000502ae489f000000100000"], 0x24, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x118) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8911, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x42280, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='ext4_fc_replay_scan\x00', r2, 0x0, 0xfff7fffffffffff5}, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrlimit(0x4, &(0x7f0000000080)) setregid(0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x80800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000380)={0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 2.765568464s ago: executing program 4 (id=1931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000380)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000091, 0x1936ca0e, 0x6939ee12}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000c0002400000000000000001"], 0x80}}, 0x0) 2.031577275s ago: executing program 1 (id=1932): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRES16=r2, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="0a003400020202020202000004000801", @ANYRES32=r3, @ANYRESOCT=r2], 0x2c}}, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000080)={@none, 0x80}) socket$netlink(0x10, 0x3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) read(r6, &(0x7f0000000900)=""/198, 0xc6) socket(0x40000000015, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = fsopen(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='port', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000080)=0x40000) write$dsp(r9, 0x0, 0xfffffe59) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) mmap(&(0x7f00007f8000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x100010, 0xffffffffffffffff, 0x0) 1.231834661s ago: executing program 4 (id=1933): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000180000000090400000103000000092105000001220500090581"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000980)={0xff, 0xee, 0x1, 0x0}) 1.125618664s ago: executing program 1 (id=1934): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='io_uring_fail_link\x00', r0}, 0x18) socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006a9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r7}, 0x8) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) r8 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r8, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) 484.383942ms ago: executing program 5 (id=1935): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) get_robust_list(0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1c}}, './file0\x00'}) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}}, 0x804) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01032abd7001fedb9f25120000005a32bc122b35a53b8d2ede427fdeda49a9b9ac5a4d917aed0a50d8fb24aed85ba0f1b498989c4c00fa4e93cfb0bec50ee297829ae79177bbf3dc9098ea0183257b98fcc986af7ee0320f3f0294f8b5be"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)={0x244, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xdc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x442}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc011}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x580b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x175e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa829}]}, @TIPC_NLA_NODE={0x154, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5d, 0x3, "c1e99596801e4959f7141ea708efe941980028a18e9d9602998b80217d8c563222ef7bc2155c43437b6a84fb40695cfab987106cf17695e5111275aa2c99630378e1df7f1e3defb3adabc57badf96e7ab3d9499aae4b6cadc1"}, @TIPC_NLA_NODE_ID={0x61, 0x3, "7a43283cd376c6a3c83fd8f9ad316bbf729b43473b0487bc5615af1fb46cbf90dd42583fa467d150ffb0a788bd3df48249b2f225efcb17d01f79e6ce80fdcb310f86f42805c9351bdf5352119479fe3468b67a5fe52c2f833203dd90b3"}, @TIPC_NLA_NODE_ID={0x86, 0x3, "a13e16bbcec0cfcfcd94b72ad6f7cf266a4c05bd1820ca693b978899a7e6c8a6d493a0a87df3fd7050b125ca32ab6f2ddbcd2bb220e8e1cd076cda61317ad8b42e1435c08ebe2f38cd2b86157872f7cfb97429f6696d9c452a56e271065f18a4482218b14fdabf104669044d973968303e92fd5ede3124f2f64009bd69a9b40f2c06"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$read(0xb, r2, &(0x7f0000000200)=""/4, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe(0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000ee43f6642531e0800450000200000e0b441da3309432fc0dfc1000011907800"/46], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r2) 347.668235ms ago: executing program 6 (id=1936): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, 0x0) getdents64(r5, &(0x7f0000000080)=""/147, 0x93) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000000800000000000000140000"], 0xac}}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x84280) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r6, 0xffffffffffffffff, 0x0) 149.33536ms ago: executing program 1 (id=1937): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) sendmmsg(r1, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000001c0)="ba7b3ccd", 0x4}], 0x1}}], 0x1, 0x2004000c) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x8, 0x20, 0xb, 0x400, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x65, 0x0, 0x8e, 0x29, 0x0, @remote, @broadcast}}}}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.181199ms ago: executing program 1 (id=1938): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5}, 0x94) syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000402000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000000)={0x81, 0x68, 0x81, 0x7, 0x8}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvmmsg(r5, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0xb, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x40000}], 0x1}}], 0x3, 0x102, &(0x7f0000005ec0)={0x0, 0x3938700}) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000180)='bD', 0x2}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r1, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000003040)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 0s ago: executing program 5 (id=1939): shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000417000/0x1000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x300, 0x70bd29, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4050000}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="1661f96f2fbd1101b858c0284c98b52a6654d7e441b2ccd1588f866ae12ea906a078ce49c6994b4c0789ba6e072261c979e1fcc4f75b18a1839681b415b28f45ac7de362356b0dc0f68a2c8b4558d72ab00a80427800f467e9975bcb99f04ed115557656af4f1b2856c787a34c24a1fc258a6dedad928083d4c290e0f5a3afda5b7724d0bb83c92796a0a036ff4d8319bc5d229f08", 0x95) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(0x0, r6) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r7, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101000000cc5a2a2900010000000900010073797a00000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000003800000051bde7c50000000000000000010000010900010073797a30000000000c0002400000000000000001090003e672797a3000000000140000001100010000000000000000000000000a"], 0xac}, 0x1, 0x20, 0x0, 0x8040}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xe3000}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xdb}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040c1}, 0x4014) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) kernel console output (not intermixed with test programs): tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 654.854462][ T30] audit: type=1400 audit(1767708703.008:917): avc: denied { setopt } for pid=11805 comm="syz.5.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 655.118345][T11764] veth0_vlan: entered promiscuous mode [ 655.192357][T11764] veth1_vlan: entered promiscuous mode [ 655.439589][T11764] veth0_macvtap: entered promiscuous mode [ 655.479325][T11764] veth1_macvtap: entered promiscuous mode [ 655.521618][T11764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.537831][T11764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.556128][ T3902] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.573753][ T3902] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.587695][ T3902] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.599168][ T30] audit: type=1400 audit(1767708703.818:918): avc: denied { ioctl } for pid=11838 comm="syz.1.1490" path="socket:[38233]" dev="sockfs" ino=38233 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 655.602071][ T3902] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.817917][ T3902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.857843][ T3902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.903834][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.911870][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.133245][ T935] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 656.318814][ T935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.335069][ T935] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 656.346427][ T935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.400762][ T935] usb 5-1: config 0 descriptor?? [ 656.474688][ T935] pwc: Askey VC010 type 2 USB webcam detected. [ 656.586918][ T48] usb 6-1: USB disconnect, device number 34 [ 656.773713][ T9723] Bluetooth: hci0: command 0x041b tx timeout [ 657.010692][ T935] pwc: recv_control_msg error -32 req 02 val 2b00 [ 657.255908][ T935] pwc: recv_control_msg error -32 req 02 val 2700 [ 657.269044][ T935] pwc: recv_control_msg error -32 req 02 val 2c00 [ 657.299510][ T935] pwc: recv_control_msg error -32 req 04 val 1000 [ 657.312543][ T935] pwc: recv_control_msg error -32 req 04 val 1300 [ 657.331996][ T935] pwc: recv_control_msg error -32 req 04 val 1400 [ 657.386466][ T935] pwc: recv_control_msg error -32 req 02 val 2000 [ 657.403678][ T935] pwc: recv_control_msg error -71 req 02 val 2100 [ 657.421399][ T935] pwc: recv_control_msg error -71 req 04 val 1500 [ 657.433563][ T935] pwc: recv_control_msg error -71 req 02 val 2500 [ 657.440447][ T935] pwc: recv_control_msg error -71 req 02 val 2400 [ 657.449420][ T935] pwc: recv_control_msg error -71 req 02 val 2600 [ 657.456448][ T935] pwc: recv_control_msg error -71 req 02 val 2900 [ 657.464296][ T935] pwc: recv_control_msg error -71 req 02 val 2800 [ 657.471233][ T935] pwc: recv_control_msg error -71 req 04 val 1100 [ 657.479213][ T935] pwc: recv_control_msg error -71 req 04 val 1200 [ 657.539830][ T935] pwc: Registered as video103. [ 657.563514][ T935] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 657.607073][ T935] usb 5-1: USB disconnect, device number 79 [ 657.892636][ T30] audit: type=1400 audit(1767708706.108:919): avc: denied { setattr } for pid=11862 comm="syz.5.1496" path="/dev/mixer" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 657.998779][ T30] audit: type=1400 audit(1767708706.218:920): avc: denied { write } for pid=11867 comm="syz.7.1498" name="ip_vs" dev="proc" ino=4026532930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 658.154091][ T48] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 658.210545][T11878] FAULT_INJECTION: forcing a failure. [ 658.210545][T11878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.224549][T11878] CPU: 1 UID: 0 PID: 11878 Comm: syz.6.1501 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.224577][T11878] Tainted: [L]=SOFTLOCKUP [ 658.224583][T11878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 658.224593][T11878] Call Trace: [ 658.224599][T11878] [ 658.224606][T11878] dump_stack_lvl+0x16c/0x1f0 [ 658.224633][T11878] should_fail_ex+0x512/0x640 [ 658.224661][T11878] _copy_from_user+0x2e/0xd0 [ 658.224687][T11878] memdup_user+0x6b/0xe0 [ 658.224705][T11878] strndup_user+0x78/0xe0 [ 658.224723][T11878] __do_sys_fsconfig+0x86e/0xbe0 [ 658.224746][T11878] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 658.224763][T11878] ? fput+0x70/0xf0 [ 658.224785][T11878] do_syscall_64+0xcd/0xf80 [ 658.224806][T11878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.224824][T11878] RIP: 0033:0x7fa585d8f749 [ 658.224837][T11878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.224852][T11878] RSP: 002b:00007fa586cdf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 658.224869][T11878] RAX: ffffffffffffffda RBX: 00007fa585fe5fa0 RCX: 00007fa585d8f749 [ 658.224879][T11878] RDX: 0000200000000b40 RSI: 0000000000000001 RDI: 0000000000000003 [ 658.224890][T11878] RBP: 00007fa586cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 658.224899][T11878] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 658.224909][T11878] R13: 00007fa585fe6038 R14: 00007fa585fe5fa0 R15: 00007ffcc179dfc8 [ 658.224932][T11878] [ 658.445431][ T5898] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 658.475195][ T48] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 658.484967][ T48] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 658.499628][ T48] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 658.508893][ T48] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 658.520846][ T48] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 658.538178][ T48] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 658.547368][ T48] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 658.574808][ T48] usb 6-1: Product: syz [ 658.613569][ T48] usb 6-1: Manufacturer: syz [ 658.655181][ T48] cdc_wdm 6-1:1.0: skipping garbage [ 658.660410][ T48] cdc_wdm 6-1:1.0: skipping garbage [ 658.695329][ T48] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 658.717252][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.727425][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 658.747896][ T48] cdc_wdm 6-1:1.0: Unknown control protocol [ 658.797619][ T5898] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 658.821318][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.853516][ T9723] Bluetooth: hci0: command 0x041b tx timeout [ 658.924970][ T5898] usb 5-1: config 0 descriptor?? [ 659.103701][ T48] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 659.305030][ T48] usb 8-1: Using ep0 maxpacket: 8 [ 659.329463][ T48] usb 8-1: config 0 has an invalid interface number: 56 but max is 0 [ 659.352916][ T48] usb 8-1: config 0 has no interface number 0 [ 659.409386][ T30] audit: type=1400 audit(1767708707.628:921): avc: denied { read write } for pid=11862 comm="syz.5.1496" name="cdc-wdm0" dev="devtmpfs" ino=4126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 659.520035][ T30] audit: type=1400 audit(1767708707.628:922): avc: denied { open } for pid=11862 comm="syz.5.1496" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 659.636702][T11899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.644652][ T48] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 659.686815][T11899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.810978][ T48] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.854682][ T48] usb 8-1: Product: syz [ 659.867933][ T48] usb 8-1: Manufacturer: syz [ 659.883162][ T48] usb 8-1: SerialNumber: syz [ 659.916309][ T48] usb 8-1: config 0 descriptor?? [ 659.937749][ T48] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 659.949317][ T48] pctv452e: pctv452e_power_ctrl: 1 [ 659.949317][ T48] [ 659.964879][ T48] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 659.964879][ T48] [ 659.980314][ T48] dvb-usb: bulk message failed: -22 (5/0) [ 660.006372][ T48] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 660.042584][ T48] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 660.131606][ T48] usb 8-1: media controller created [ 660.214445][ T48] dvb-usb: bulk message failed: -22 (8/0) [ 660.283962][ T48] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 660.364827][ T48] dvb-usb: MAC address reading failed. [ 660.436531][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 660.642387][ T48] DVB: Unable to find symbol stb0899_attach() [ 660.732254][ T48] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 660.884281][ T6848] usb 6-1: USB disconnect, device number 35 [ 660.934871][ T9723] Bluetooth: hci0: command 0x041b tx timeout [ 660.953045][ T48] rc_core: IR keymap rc-tt-1500 not found [ 660.962229][ T48] Registered IR keymap rc-empty [ 661.346121][ T48] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 661.390691][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1508'. [ 661.420218][ T48] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input32 [ 661.474635][ T48] dvb-usb: schedule remote query interval to 100 msecs. [ 661.497249][ T48] pctv452e: pctv452e_power_ctrl: 0 [ 661.497249][ T48] [ 661.522089][ T48] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 661.548604][ T48] usb 8-1: USB disconnect, device number 2 [ 661.793827][ T48] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 662.934195][T11910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11910 comm=syz.7.1507 [ 663.126961][T11926] FAULT_INJECTION: forcing a failure. [ 663.126961][T11926] name failslab, interval 1, probability 0, space 0, times 0 [ 663.139921][T11926] CPU: 1 UID: 0 PID: 11926 Comm: syz.4.1510 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.139950][T11926] Tainted: [L]=SOFTLOCKUP [ 663.139956][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 663.139967][T11926] Call Trace: [ 663.139973][T11926] [ 663.139981][T11926] dump_stack_lvl+0x16c/0x1f0 [ 663.140011][T11926] should_fail_ex+0x512/0x640 [ 663.140038][T11926] ? fs_reclaim_acquire+0xae/0x150 [ 663.140064][T11926] should_failslab+0xc2/0x120 [ 663.140089][T11926] __kmalloc_cache_noprof+0x80/0x800 [ 663.140118][T11926] ? shmem_read_file_info+0x5f/0x260 [ 663.140145][T11926] ? shmem_read_file_info+0x5f/0x260 [ 663.140167][T11926] shmem_read_file_info+0x5f/0x260 [ 663.140191][T11926] dquot_load_quota_sb+0x83a/0x11c0 [ 663.140218][T11926] shmem_fill_super+0xa48/0x1380 [ 663.140246][T11926] ? __pfx_shmem_fill_super+0x10/0x10 [ 663.140270][T11926] ? sget_fc+0x808/0xc20 [ 663.140295][T11926] ? __pfx_shmem_fill_super+0x10/0x10 [ 663.140318][T11926] get_tree_nodev+0xdd/0x190 [ 663.140342][T11926] vfs_get_tree+0x8e/0x330 [ 663.140360][T11926] path_mount+0x7bf/0x23a0 [ 663.140378][T11926] ? rcu_is_watching+0x12/0xc0 [ 663.140398][T11926] ? __pfx_path_mount+0x10/0x10 [ 663.140416][T11926] ? kmem_cache_free+0x2d8/0x770 [ 663.140435][T11926] ? putname+0xf5/0x1a0 [ 663.140466][T11926] ? putname+0xf5/0x1a0 [ 663.140490][T11926] ? putname+0xf5/0x1a0 [ 663.140518][T11926] ? __x64_sys_mount+0x293/0x310 [ 663.140533][T11926] __x64_sys_mount+0x293/0x310 [ 663.140550][T11926] ? __pfx___x64_sys_mount+0x10/0x10 [ 663.140566][T11926] ? rcu_is_watching+0x12/0xc0 [ 663.140590][T11926] do_syscall_64+0xcd/0xf80 [ 663.140616][T11926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.140635][T11926] RIP: 0033:0x7f07afb8f749 [ 663.140649][T11926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.140666][T11926] RSP: 002b:00007f07addf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 663.140684][T11926] RAX: ffffffffffffffda RBX: 00007f07afde6180 RCX: 00007f07afb8f749 [ 663.140696][T11926] RDX: 0000200000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 663.140707][T11926] RBP: 00007f07addf6090 R08: 0000200000000300 R09: 0000000000000000 [ 663.140717][T11926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 663.140728][T11926] R13: 00007f07afde6218 R14: 00007f07afde6180 R15: 00007ffd32514168 [ 663.140758][T11926] [ 663.140797][T11926] tmpfs: failed to enable quota tracking (type=0, err=-12) [ 663.417634][T11918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.540558][T11918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.954479][T11932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.963349][T11932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.280541][ T5898] usbhid 5-1:0.0: can't add hid device: -32 [ 664.421208][ T5898] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 664.745180][ T5898] usb 5-1: USB disconnect, device number 80 [ 666.948326][ T12] bridge_slave_1: left allmulticast mode [ 666.963178][ T12] bridge_slave_1: left promiscuous mode [ 666.979012][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.039949][ T12] bridge_slave_0: left allmulticast mode [ 667.049636][ T12] bridge_slave_0: left promiscuous mode [ 667.063388][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.242509][ T12] dvmrp0 (unregistering): left allmulticast mode [ 667.878977][T11967] 9p: Bad value for 'rfdno' [ 668.071228][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.100881][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.115995][ T12] bond0 (unregistering): Released all slaves [ 668.136969][ T12] bond1 (unregistering): Released all slaves [ 668.343518][ T12] bond2 (unregistering): Released all slaves [ 669.341243][T12007] netlink: 'syz.1.1530': attribute type 39 has an invalid length. [ 669.669905][ T30] audit: type=1400 audit(1767708717.888:923): avc: denied { read } for pid=12017 comm="syz.6.1532" path="socket:[39021]" dev="sockfs" ino=39021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 669.795693][T12018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.846311][T12018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.752870][T12042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.883168][T12042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.148805][ T12] hsr_slave_0: left promiscuous mode [ 671.175890][ T12] hsr_slave_1: left promiscuous mode [ 671.411374][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.463593][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.470978][ T30] audit: type=1400 audit(1767708719.668:924): avc: denied { setopt } for pid=12050 comm="syz.7.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 672.579310][T12083] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1548'. [ 672.588988][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1548'. [ 672.598335][T12083] FAULT_INJECTION: forcing a failure. [ 672.598335][T12083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.612932][T12083] CPU: 1 UID: 0 PID: 12083 Comm: syz.6.1548 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.612963][T12083] Tainted: [L]=SOFTLOCKUP [ 672.612968][T12083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 672.612978][T12083] Call Trace: [ 672.612983][T12083] [ 672.612989][T12083] dump_stack_lvl+0x16c/0x1f0 [ 672.613015][T12083] should_fail_ex+0x512/0x640 [ 672.613043][T12083] _copy_to_user+0x32/0xd0 [ 672.613069][T12083] simple_read_from_buffer+0xcb/0x170 [ 672.613093][T12083] proc_fail_nth_read+0x197/0x240 [ 672.613111][T12083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 672.613129][T12083] ? rw_verify_area+0xcf/0x6c0 [ 672.613147][T12083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 672.613163][T12083] vfs_read+0x1e4/0xcf0 [ 672.613183][T12083] ? __pfx___mutex_lock+0x10/0x10 [ 672.613207][T12083] ? __pfx_vfs_read+0x10/0x10 [ 672.613233][T12083] ? __fget_files+0x20e/0x3c0 [ 672.613262][T12083] ksys_read+0x12a/0x250 [ 672.613281][T12083] ? __pfx_ksys_read+0x10/0x10 [ 672.613307][T12083] do_syscall_64+0xcd/0xf80 [ 672.613329][T12083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.613346][T12083] RIP: 0033:0x7fa585d8e15c [ 672.613359][T12083] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 672.613375][T12083] RSP: 002b:00007fa586cdf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 672.613391][T12083] RAX: ffffffffffffffda RBX: 00007fa585fe5fa0 RCX: 00007fa585d8e15c [ 672.613402][T12083] RDX: 000000000000000f RSI: 00007fa586cdf0a0 RDI: 0000000000000007 [ 672.613411][T12083] RBP: 00007fa586cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 672.613420][T12083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 672.613429][T12083] R13: 00007fa585fe6038 R14: 00007fa585fe5fa0 R15: 00007ffcc179dfc8 [ 672.613454][T12083] [ 673.272388][ T12] team0 (unregistering): Port device team_slave_1 removed [ 673.281880][T12087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.290557][T12087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.324930][ T12] team0 (unregistering): Port device team_slave_0 removed [ 673.687013][T12089] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 674.253746][T12108] tmpfs: Unknown parameter 'veno' [ 674.327267][ T5898] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 674.484919][ T5898] usb 8-1: Using ep0 maxpacket: 16 [ 674.495037][ T5898] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 674.508001][ T5898] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.516968][ T5898] usb 8-1: Product: syz [ 674.521346][ T5898] usb 8-1: Manufacturer: syz [ 674.526464][ T5898] usb 8-1: SerialNumber: syz [ 674.533855][ T5898] usb 8-1: config 0 descriptor?? [ 674.716048][ T6516] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 674.978508][ T5898] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 674.986831][ T6516] usb 6-1: Using ep0 maxpacket: 32 [ 674.995297][ T6516] usb 6-1: unable to get BOS descriptor or descriptor too short [ 675.005866][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 675.019995][ T5898] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 675.029769][ T6516] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 675.039313][ T5898] usb 8-1: media controller created [ 675.045081][ T6516] usb 6-1: config 7 has no interface number 0 [ 675.060226][ T6516] usb 6-1: config 7 interface 187 has no altsetting 0 [ 675.075505][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 675.105260][ T6516] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 675.109091][ T6848] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 675.130170][ T6516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.181453][ T6516] usb 6-1: Product: syz [ 675.209647][ T5898] zl10353_read_register: readreg error (reg=127, ret==0) [ 675.217088][ T6516] usb 6-1: Manufacturer: syz [ 675.222845][ T6516] usb 6-1: SerialNumber: syz [ 675.237752][ T5898] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 675.283269][ T5898] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 675.297338][ T6848] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 675.315400][ T6848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.325225][ T5898] usb 8-1: USB disconnect, device number 3 [ 675.350268][ T6848] usb 5-1: config 0 descriptor?? [ 675.420112][ T5898] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 675.552730][T12146] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1556'. [ 675.617722][ T6516] usb 6-1: Cannot retrieve CPort count: -71 [ 675.632589][ T6516] usb 6-1: Cannot retrieve CPort count: -71 [ 675.641091][ T6516] es2_ap_driver 6-1:7.187: probe with driver es2_ap_driver failed with error -71 [ 675.665347][ T6516] usb 6-1: USB disconnect, device number 36 [ 677.131269][T12176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.165442][T12176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.297832][T12181] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1564'. [ 677.307569][ T6848] usb 5-1: Cannot set autoneg [ 677.313060][ T6848] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 677.378894][ T6848] usb 5-1: USB disconnect, device number 81 [ 678.832266][T12190] cgroup: fork rejected by pids controller in /syz1 [ 679.588483][T12186] Set syz1 is full, maxelem 65536 reached [ 680.796131][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 37190 - 0 [ 680.925480][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 37190 - 0 [ 681.033024][T12220] FAULT_INJECTION: forcing a failure. [ 681.033024][T12220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.957159][T12220] CPU: 0 UID: 0 PID: 12220 Comm: syz.6.1578 Tainted: G L syzkaller #0 PREEMPT(full) [ 681.957192][T12220] Tainted: [L]=SOFTLOCKUP [ 681.957199][T12220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 681.957209][T12220] Call Trace: [ 681.957215][T12220] [ 681.957223][T12220] dump_stack_lvl+0x16c/0x1f0 [ 681.957256][T12220] should_fail_ex+0x512/0x640 [ 681.957284][T12220] _copy_from_user+0x2e/0xd0 [ 681.957309][T12220] input_event_from_user+0x133/0x3b0 [ 681.957330][T12220] ? __pfx_input_event_from_user+0x10/0x10 [ 681.957349][T12220] ? __pfx___might_resched+0x10/0x10 [ 681.957366][T12220] ? input_inject_event+0x1c0/0x3b0 [ 681.957389][T12220] evdev_write+0x37b/0x750 [ 681.957413][T12220] ? __pfx_evdev_write+0x10/0x10 [ 681.957435][T12220] ? bpf_lsm_file_permission+0x9/0x10 [ 681.957461][T12220] ? security_file_permission+0x71/0x210 [ 681.957488][T12220] ? rw_verify_area+0xcf/0x6c0 [ 681.957510][T12220] ? __pfx_evdev_write+0x10/0x10 [ 681.957529][T12220] vfs_write+0x2a0/0x11d0 [ 681.957557][T12220] ? __pfx_vfs_write+0x10/0x10 [ 681.957578][T12220] ? find_held_lock+0x2b/0x80 [ 681.957607][T12220] ? __fget_files+0x204/0x3c0 [ 681.957636][T12220] ? __fget_files+0x20e/0x3c0 [ 681.957668][T12220] ksys_write+0x1f8/0x250 [ 681.957691][T12220] ? __pfx_ksys_write+0x10/0x10 [ 681.957720][T12220] do_syscall_64+0xcd/0xf80 [ 681.957745][T12220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.957763][T12220] RIP: 0033:0x7fa585d8f749 [ 681.957779][T12220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.957795][T12220] RSP: 002b:00007fa586cdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 681.957814][T12220] RAX: ffffffffffffffda RBX: 00007fa585fe5fa0 RCX: 00007fa585d8f749 [ 681.957826][T12220] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 000000000000000a [ 681.957837][T12220] RBP: 00007fa586cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 681.957848][T12220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.957858][T12220] R13: 00007fa585fe6038 R14: 00007fa585fe5fa0 R15: 00007ffcc179dfc8 [ 681.957884][T12220] [ 682.450210][T12232] Invalid source name [ 682.460206][T12232] FAULT_INJECTION: forcing a failure. [ 682.460206][T12232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.474392][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 682.492379][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 682.508448][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 682.532050][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 682.540517][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 682.563013][T12232] CPU: 1 UID: 0 PID: 12232 Comm: syz.5.1581 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.563044][T12232] Tainted: [L]=SOFTLOCKUP [ 682.563050][T12232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 682.563061][T12232] Call Trace: [ 682.563067][T12232] [ 682.563074][T12232] dump_stack_lvl+0x16c/0x1f0 [ 682.563104][T12232] should_fail_ex+0x512/0x640 [ 682.563136][T12232] _copy_from_user+0x2e/0xd0 [ 682.563165][T12232] kstrtouint_from_user+0xd6/0x1d0 [ 682.563185][T12232] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 682.563205][T12232] ? __lock_acquire+0x436/0x2890 [ 682.563231][T12232] ? lock_acquire+0x179/0x330 [ 682.563258][T12232] proc_fail_nth_write+0x83/0x220 [ 682.563278][T12232] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 682.563304][T12232] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 682.563322][T12232] vfs_write+0x2a0/0x11d0 [ 682.563347][T12232] ? __pfx___mutex_lock+0x10/0x10 [ 682.563374][T12232] ? __pfx_vfs_write+0x10/0x10 [ 682.563405][T12232] ? __fget_files+0x20e/0x3c0 [ 682.563429][T12232] ? __x64_sys_mount+0x180/0x310 [ 682.563454][T12232] ksys_write+0x12a/0x250 [ 682.563476][T12232] ? __pfx_ksys_write+0x10/0x10 [ 682.563507][T12232] do_syscall_64+0xcd/0xf80 [ 682.563533][T12232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.563551][T12232] RIP: 0033:0x7fc6bc58e1ff [ 682.563566][T12232] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 682.563583][T12232] RSP: 002b:00007fc6bd4c9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 682.563600][T12232] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc6bc58e1ff [ 682.563622][T12232] RDX: 0000000000000001 RSI: 00007fc6bd4c90a0 RDI: 0000000000000003 [ 682.563632][T12232] RBP: 00007fc6bd4c9090 R08: 0000000000000000 R09: 0000000000000000 [ 682.563642][T12232] R10: 0000000000008000 R11: 0000000000000293 R12: 0000000000000002 [ 682.563653][T12232] R13: 00007fc6bc7e6038 R14: 00007fc6bc7e5fa0 R15: 00007ffc30b282b8 [ 682.563679][T12232] [ 682.780738][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 37190 - 0 [ 682.903297][ T30] audit: type=1400 audit(1767708731.128:925): avc: denied { module_load } for pid=12235 comm="syz.6.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 682.903376][T12236] Invalid ELF header type: 0 != 1 [ 682.999168][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 37190 - 0 [ 683.136293][T12243] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 683.152630][T12244] FAULT_INJECTION: forcing a failure. [ 683.152630][T12244] name failslab, interval 1, probability 0, space 0, times 0 [ 683.183261][T12243] audit: out of memory in audit_log_start [ 683.212289][ T30] audit: type=1400 audit(1767708731.428:926): avc: denied { create } for pid=12237 comm="syz.5.1583" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 683.233270][T12244] CPU: 1 UID: 0 PID: 12244 Comm: syz.5.1583 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.233300][T12244] Tainted: [L]=SOFTLOCKUP [ 683.233305][T12244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 683.233315][T12244] Call Trace: [ 683.233321][T12244] [ 683.233328][T12244] dump_stack_lvl+0x16c/0x1f0 [ 683.233356][T12244] should_fail_ex+0x512/0x640 [ 683.233381][T12244] ? __kmalloc_cache_noprof+0x5f/0x800 [ 683.233409][T12244] should_failslab+0xc2/0x120 [ 683.233432][T12244] __kmalloc_cache_noprof+0x80/0x800 [ 683.233460][T12244] ? genl_start+0x1e8/0x980 [ 683.233489][T12244] ? genl_start+0x1e8/0x980 [ 683.233511][T12244] genl_start+0x1e8/0x980 [ 683.233538][T12244] __netlink_dump_start+0x60e/0x990 [ 683.233564][T12244] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 683.233590][T12244] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 683.233629][T12244] ? __pfx_genl_get_cmd+0x10/0x10 [ 683.233651][T12244] ? __pfx_genl_start+0x10/0x10 [ 683.233671][T12244] ? __pfx_genl_dumpit+0x10/0x10 [ 683.233693][T12244] ? __pfx_genl_done+0x10/0x10 [ 683.233719][T12244] ? ____sys_sendmsg+0xa5d/0xc30 [ 683.233741][T12244] ? ___sys_sendmsg+0x134/0x1d0 [ 683.233756][T12244] ? __radix_tree_lookup+0x21f/0x2c0 [ 683.233782][T12244] genl_rcv_msg+0x46e/0x800 [ 683.233810][T12244] ? __pfx_genl_rcv_msg+0x10/0x10 [ 683.233835][T12244] ? __pfx_tipc_nl_node_dump_monitor_peer+0x10/0x10 [ 683.233863][T12244] ? __lock_acquire+0x436/0x2890 [ 683.233887][T12244] netlink_rcv_skb+0x158/0x420 [ 683.233909][T12244] ? __pfx_genl_rcv_msg+0x10/0x10 [ 683.233933][T12244] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 683.233961][T12244] ? netlink_deliver_tap+0x1ae/0xd30 [ 683.233982][T12244] genl_rcv+0x28/0x40 [ 683.234001][T12244] netlink_unicast+0x5aa/0x870 [ 683.234026][T12244] ? __pfx_netlink_unicast+0x10/0x10 [ 683.234056][T12244] netlink_sendmsg+0x8c8/0xdd0 [ 683.234081][T12244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.234111][T12244] ____sys_sendmsg+0xa5d/0xc30 [ 683.234132][T12244] ? copy_msghdr_from_user+0x10a/0x160 [ 683.234149][T12244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.234181][T12244] ___sys_sendmsg+0x134/0x1d0 [ 683.234199][T12244] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.234246][T12244] __sys_sendmsg+0x16d/0x220 [ 683.234265][T12244] ? __pfx___sys_sendmsg+0x10/0x10 [ 683.234297][T12244] do_syscall_64+0xcd/0xf80 [ 683.234320][T12244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.234337][T12244] RIP: 0033:0x7fc6bc58f749 [ 683.234351][T12244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.234367][T12244] RSP: 002b:00007fc6bd487038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 683.234461][T12244] RAX: ffffffffffffffda RBX: 00007fc6bc7e6180 RCX: 00007fc6bc58f749 [ 683.234468][T12244] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 683.234475][T12244] RBP: 00007fc6bd487090 R08: 0000000000000000 R09: 0000000000000000 [ 683.234481][T12244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.234493][T12244] R13: 00007fc6bc7e6218 R14: 00007fc6bc7e6180 R15: 00007ffc30b282b8 [ 683.234511][T12244] [ 683.583066][ T30] audit: type=1400 audit(1767708731.428:927): avc: denied { write } for pid=12237 comm="syz.5.1583" name="file0" dev="tmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 683.746362][T12247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.755417][T12247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.881748][ T30] audit: type=1400 audit(1767708731.428:928): avc: denied { open } for pid=12237 comm="syz.5.1583" path="/174/file0" dev="tmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 684.659842][ T5826] Bluetooth: hci1: command tx timeout [ 684.673058][ T30] audit: type=1400 audit(1767708731.428:929): avc: denied { ioctl } for pid=12237 comm="syz.5.1583" path="/174/file0" dev="tmpfs" ino=953 ioctlcmd=0x4c09 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 684.769181][ T30] audit: type=1400 audit(1767708731.958:930): avc: denied { unlink } for pid=8676 comm="syz-executor" name="file0" dev="tmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 684.859234][ T13] bridge_slave_1: left allmulticast mode [ 684.896872][ T13] bridge_slave_1: left promiscuous mode [ 684.919125][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.145809][ T13] bridge_slave_0: left allmulticast mode [ 685.161796][ T13] bridge_slave_0: left promiscuous mode [ 685.177345][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.343516][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.349981][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.463365][ T6516] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 685.508263][T12276] tmpfs: Unknown parameter 'veno' [ 685.993264][ T6516] usb 8-1: device descriptor read/64, error -71 [ 686.191216][ T30] audit: type=1400 audit(1767708734.408:931): avc: denied { read } for pid=12281 comm="syz.5.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 686.242668][ T30] audit: type=1400 audit(1767708734.458:932): avc: denied { bind } for pid=12281 comm="syz.5.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 686.243049][ T6516] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 686.385539][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.393280][ T6516] usb 8-1: device descriptor read/64, error -71 [ 686.414943][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.424659][ T13] bond0 (unregistering): Released all slaves [ 686.503446][ T6516] usb usb8-port1: attempt power cycle [ 686.532673][ T13] bond1 (unregistering): (slave veth3): Releasing active interface [ 686.549065][ T13] bond1 (unregistering): Released all slaves [ 686.695917][ T9723] Bluetooth: hci1: command tx timeout [ 686.710775][ T13] tipc: Left network mode [ 686.795939][T12229] chnl_net:caif_netlink_parms(): no params data found [ 686.843537][ T6516] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 686.894622][ T6516] usb 8-1: device descriptor read/8, error -71 [ 686.925300][T12305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.934663][T12305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.116730][ T5898] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 687.145454][ T6516] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 687.207042][ T6516] usb 8-1: device descriptor read/8, error -71 [ 687.224686][T12229] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.231881][T12229] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.239393][T12229] bridge_slave_0: entered allmulticast mode [ 687.246860][T12229] bridge_slave_0: entered promiscuous mode [ 687.279820][T12229] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.287144][T12229] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.295886][T12229] bridge_slave_1: entered allmulticast mode [ 687.302314][ T5898] usb 6-1: unable to get BOS descriptor or descriptor too short [ 687.312392][T12229] bridge_slave_1: entered promiscuous mode [ 687.319042][ T5898] usb 6-1: not running at top speed; connect to a high speed hub [ 687.352302][ T6516] usb usb8-port1: unable to enumerate USB device [ 687.360456][ T5898] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.377453][ T5898] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 687.386835][ T5898] usb 6-1: config 1 has no interface number 1 [ 687.394153][ T5898] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 687.413054][ T9723] Bluetooth: hci6: command 0x0406 tx timeout [ 687.473038][ T5898] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 687.516665][T12229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.554911][ T5898] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 687.576222][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.584454][ T5898] usb 6-1: Product: syz [ 687.593504][T12229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.603241][ T5898] usb 6-1: Manufacturer: syz [ 687.607858][ T5898] usb 6-1: SerialNumber: syz [ 687.638950][T12330] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1594'. [ 687.653910][T12330] netlink: 'syz.6.1594': attribute type 7 has an invalid length. [ 687.661793][T12330] netlink: 'syz.6.1594': attribute type 8 has an invalid length. [ 687.674043][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1594'. [ 687.767613][ T13] hsr_slave_0: left promiscuous mode [ 687.781424][ T13] hsr_slave_1: left promiscuous mode [ 687.802611][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.810716][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.829999][ T13] pim6reg (unregistering): left allmulticast mode [ 687.861314][ T5898] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 687.918045][T12340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.935136][T12340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.949095][ T5898] usb 6-1: USB disconnect, device number 37 [ 688.040204][ T8258] udevd[8258]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 688.291656][ T13] team0 (unregistering): Port device team_slave_1 removed [ 688.325563][ T13] team0 (unregistering): Port device team_slave_0 removed [ 688.353126][ T5897] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 688.469697][T12345] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1596'. [ 688.524794][ T5897] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 688.543986][ T5897] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 688.561350][ T5897] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 688.573187][ T5897] usb 5-1: config 0 interface 0 has no altsetting 0 [ 688.582049][ T5897] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 688.592725][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 688.601327][ T5897] usb 5-1: Product: syz [ 688.605737][ T5897] usb 5-1: Manufacturer: syz [ 688.610343][ T5897] usb 5-1: SerialNumber: syz [ 688.620128][ T5897] usb 5-1: config 0 descriptor?? [ 688.626205][T12343] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 688.637235][ T5897] usb 5-1: selecting invalid altsetting 0 [ 688.775168][ T5826] Bluetooth: hci1: command tx timeout [ 689.080280][T12229] team0: Port device team_slave_0 added [ 689.105647][T12350] Bluetooth: MGMT ver 1.23 [ 689.125693][T12331] syzkaller0: entered promiscuous mode [ 689.131181][T12331] syzkaller0: entered allmulticast mode [ 689.142720][T12229] team0: Port device team_slave_1 added [ 689.156936][ T5898] usb 5-1: USB disconnect, device number 82 [ 689.597243][T12357] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.1599'. [ 690.853816][ T5826] Bluetooth: hci1: command tx timeout [ 691.793309][ T6516] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 691.903090][ T935] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 691.955144][ T6516] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 691.983064][ T6516] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 64602, setting to 64 [ 692.005067][ T6516] usb 5-1: config 0 interface 0 has no altsetting 0 [ 692.014820][ T6516] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 692.027396][ T6516] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 692.044860][ T6516] usb 5-1: Product: syz [ 692.049134][ T6516] usb 5-1: Manufacturer: syz [ 692.065366][ T6516] usb 5-1: SerialNumber: syz [ 692.074524][ T935] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 692.086941][ T6516] usb 5-1: config 0 descriptor?? [ 692.092301][T12374] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 692.112086][ T935] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 692.124221][ T6516] usb 5-1: selecting invalid altsetting 0 [ 692.145774][ T935] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 692.184570][ T935] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 692.196930][ T935] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.212442][ T935] usb 8-1: config 0 descriptor?? [ 692.238777][T12376] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 692.654647][ T6516] usb 5-1: USB disconnect, device number 83 [ 692.690604][ T935] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 693.049091][T12229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.079915][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.161964][T12229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.220675][T12229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.253894][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.336510][T12229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.373799][ T13] IPVS: stop unused estimator thread 0... [ 693.373858][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1609'. [ 693.401717][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1609'. [ 693.456129][T12229] hsr_slave_0: entered promiscuous mode [ 693.469877][T12229] hsr_slave_1: entered promiscuous mode [ 694.089766][ T30] audit: type=1400 audit(1767708742.308:933): avc: denied { setopt } for pid=12406 comm="syz.4.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 694.112202][ T30] audit: type=1400 audit(1767708742.328:934): avc: denied { bind } for pid=12406 comm="syz.4.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 694.701629][T12413] tmpfs: Unknown parameter 'veno' [ 695.186334][ T935] usb 8-1: USB disconnect, device number 8 [ 695.535257][T12428] gfs2: gfs2 mount does not exist [ 696.014176][ T30] audit: type=1400 audit(1767708743.768:935): avc: denied { mount } for pid=12417 comm="syz.6.1611" name="/" dev="hugetlbfs" ino=40743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 696.369195][ T30] audit: type=1400 audit(1767708744.378:936): avc: denied { unmount } for pid=10499 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 696.593509][ T30] audit: type=1400 audit(1767708744.628:937): avc: denied { connect } for pid=12433 comm="syz.7.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 696.943318][T12441] sp0: Synchronizing with TNC [ 696.957693][ T935] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 696.973227][ T6848] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 697.554001][ T5826] Bluetooth: Unexpected continuation frame (len 4) [ 697.633014][ T6848] usb 6-1: Using ep0 maxpacket: 32 [ 697.656364][ T6848] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 697.675146][ T6848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.693920][ T935] usb 5-1: Using ep0 maxpacket: 16 [ 697.721931][ T935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.736222][ T935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.737104][ T6848] usb 6-1: Product: syz [ 697.746179][ T935] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 697.746208][ T935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.748063][ T935] usb 5-1: config 0 descriptor?? [ 697.827705][ T6848] usb 6-1: Manufacturer: syz [ 697.832352][ T6848] usb 6-1: SerialNumber: syz [ 697.873511][ T6848] usb 6-1: config 0 descriptor?? [ 697.902631][ T6848] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 697.968275][T12229] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 697.998790][T12229] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 698.024777][T12229] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 698.044929][T12229] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 698.178365][T12229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.193158][ T6516] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 698.215032][T12229] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.228489][ T1961] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.235681][ T1961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.252181][ T1961] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.259392][ T1961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.289954][ T935] corsair 0003:1B1C:1B02.002B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 698.309599][ T30] audit: type=1400 audit(1767708746.528:938): avc: denied { shutdown } for pid=12480 comm="syz.6.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 698.391555][ T6516] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 698.406011][ T30] audit: type=1400 audit(1767708746.528:939): avc: denied { read } for pid=12480 comm="syz.6.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 698.428956][ T6516] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.449189][ T6516] usb 8-1: Product: syz [ 698.459695][ T6516] usb 8-1: Manufacturer: syz [ 698.468379][ T6516] usb 8-1: SerialNumber: syz [ 698.475033][ T935] corsair 0003:1B1C:1B02.002B: Read invalid backlight brightness: d4. [ 698.502014][ T30] audit: type=1400 audit(1767708746.718:940): avc: denied { sys_module } for pid=12229 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 698.529203][ T6516] usb 8-1: config 0 descriptor?? [ 698.551715][ T6516] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 009 [ 698.618760][ T6848] gspca_ov534_9: reg_w failed -110 [ 698.660171][T12431] fuse: Unknown parameter '0000000000000000000400000000000000000000037' [ 698.702598][ T30] audit: type=1400 audit(1767708746.918:941): avc: denied { mounton } for pid=12439 comm="syz.4.1617" path="/320/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 698.724189][T12229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.748030][ T30] audit: type=1400 audit(1767708746.918:942): avc: denied { write } for pid=12430 comm="syz.5.1614" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 698.862000][T12229] veth0_vlan: entered promiscuous mode [ 698.879629][T12229] veth1_vlan: entered promiscuous mode [ 698.934919][T12229] veth0_macvtap: entered promiscuous mode [ 698.946535][T12229] veth1_macvtap: entered promiscuous mode [ 698.947785][ T935] usb 5-1: USB disconnect, device number 84 [ 698.962773][T12229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.974341][T12229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.983397][T12463] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1621'. [ 699.033106][ T6516] (null): failure reading functionality [ 699.050085][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.068140][ T6516] i2c i2c-2: failure reading functionality [ 699.084077][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.116755][ T6516] i2c i2c-2: connected i2c-tiny-usb device [ 699.123266][T12501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.133321][T12501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.147822][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.158449][ T6516] usb 8-1: USB disconnect, device number 9 [ 699.237813][ T6848] gspca_ov534_9: Unknown sensor 0000 [ 699.237889][ T6848] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 699.267748][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.337823][ T6848] usb 6-1: USB disconnect, device number 38 [ 699.350804][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.371174][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.575051][ T8829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.623591][ T8829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.764183][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1629'. [ 701.638821][ T975] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 702.352263][T12552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1631'. [ 702.372060][ T975] usb 6-1: Using ep0 maxpacket: 32 [ 702.561753][ T975] usb 6-1: unable to get BOS descriptor or descriptor too short [ 702.570660][ T975] usb 6-1: config 56 has an invalid interface number: 222 but max is 0 [ 702.578955][ T975] usb 6-1: config 56 has no interface number 0 [ 702.585170][ T975] usb 6-1: config 56 interface 222 has no altsetting 0 [ 703.217750][ T975] usb 6-1: New USB device found, idVendor=2020, idProduct=2031, bcdDevice=3b.23 [ 703.383781][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.391800][ T975] usb 6-1: Product: syz [ 703.433061][ T975] usb 6-1: can't set config #56, error -71 [ 703.457858][ T975] usb 6-1: USB disconnect, device number 39 [ 703.618324][T12570] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1637'. [ 704.207855][T12576] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1639'. [ 704.544090][T12590] gfs2: gfs2 mount does not exist [ 705.323787][ T975] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 705.614635][ T975] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.640054][ T975] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.678890][ T975] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 705.738032][ T975] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 705.755249][T12607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.852036][ T975] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.860538][T12607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.870709][ T975] usb 8-1: config 0 descriptor?? [ 705.996924][T12610] tmpfs: Unknown parameter 'veno' [ 706.717481][ T975] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 707.530712][T12628] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 707.557321][T12628] CIFS mount error: No usable UNC path provided in device string! [ 707.557321][T12628] [ 707.567655][T12628] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 707.651384][T12628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.660029][T12628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.811198][T12633] binder: 12631:12633 ioctl 4018620d 0 returned -22 [ 707.959653][T12635] ntfs3(nullb0): Primary boot signature is not NTFS. [ 708.018886][T12635] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 708.525233][ C1] plantronics 0003:047F:FFFF.002C: usb_submit_urb(ctrl) failed: -1 [ 709.266271][ T30] audit: type=1400 audit(1767708756.948:943): avc: denied { write } for pid=12642 comm="syz.5.1651" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 709.330079][ T5897] usb 8-1: reset high-speed USB device number 10 using dummy_hcd [ 709.933112][T12649] FAULT_INJECTION: forcing a failure. [ 709.933112][T12649] name failslab, interval 1, probability 0, space 0, times 0 [ 709.946165][T12649] CPU: 0 UID: 0 PID: 12649 Comm: syz.7.1653 Tainted: G L syzkaller #0 PREEMPT(full) [ 709.946193][T12649] Tainted: [L]=SOFTLOCKUP [ 709.946198][T12649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 709.946205][T12649] Call Trace: [ 709.946211][T12649] [ 709.946216][T12649] dump_stack_lvl+0x16c/0x1f0 [ 709.946235][T12649] should_fail_ex+0x512/0x640 [ 709.946252][T12649] ? kmem_cache_alloc_noprof+0x62/0x770 [ 709.946266][T12649] should_failslab+0xc2/0x120 [ 709.946282][T12649] kmem_cache_alloc_noprof+0x83/0x770 [ 709.946294][T12649] ? getname_flags.part.0+0x4c/0x550 [ 709.946309][T12649] ? getname_flags.part.0+0x4c/0x550 [ 709.946320][T12649] getname_flags.part.0+0x4c/0x550 [ 709.946333][T12649] getname_flags+0x93/0xf0 [ 709.946348][T12649] __io_openat_prep+0x16d/0x410 [ 709.946363][T12649] io_openat2_prep+0xd6/0x150 [ 709.946378][T12649] io_submit_sqes+0xa14/0x28e0 [ 709.946398][T12649] __do_sys_io_uring_enter+0xd6b/0x1630 [ 709.946414][T12649] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 709.946427][T12649] ? __pfx___schedule+0x10/0x10 [ 709.946448][T12649] do_syscall_64+0xcd/0xf80 [ 709.946463][T12649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.946475][T12649] RIP: 0033:0x7f1a49b8f749 [ 709.946485][T12649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.946496][T12649] RSP: 002b:00007f1a4aa87038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 709.946508][T12649] RAX: ffffffffffffffda RBX: 00007f1a49de6090 RCX: 00007f1a49b8f749 [ 709.946515][T12649] RDX: 000000000000bacc RSI: 00000000000047f6 RDI: 0000000000000004 [ 709.946522][T12649] RBP: 00007f1a4aa87090 R08: 0000000000000000 R09: 0000000000000000 [ 709.946528][T12649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.946535][T12649] R13: 00007f1a49de6128 R14: 00007f1a49de6090 R15: 00007ffe96a841e8 [ 709.946550][T12649] [ 711.314321][ T975] usb 8-1: USB disconnect, device number 10 [ 711.361043][T12655] can0: slcan on ttyS3. [ 712.477435][T12665] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 712.488303][T12665] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 712.499804][ T30] audit: type=1400 audit(1767708760.728:944): avc: denied { firmware_load } for pid=12659 comm="syz.6.1656" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 712.499811][T12665] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 712.593102][T12654] can0 (unregistered): slcan off ttyS3. [ 713.256956][T12684] netlink: zone id is out of range [ 713.364836][ T30] audit: type=1400 audit(1767708761.558:945): avc: denied { listen } for pid=12674 comm="syz.6.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 713.810258][T12685] overlayfs: missing 'lowerdir' [ 713.910787][T12694] netlink: 'syz.4.1659': attribute type 1 has an invalid length. [ 714.074495][T12701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.204334][T12701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.613483][T12707] netlink: 'syz.4.1662': attribute type 1 has an invalid length. [ 714.718144][T12711] bond1: (slave geneve3): making interface the new active one [ 714.736444][T12711] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 714.783100][ T143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 714.802831][ T143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 714.838449][ T143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 714.848187][ T143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 715.021382][T12718] FAULT_INJECTION: forcing a failure. [ 715.021382][T12718] name failslab, interval 1, probability 0, space 0, times 0 [ 715.034246][T12718] CPU: 0 UID: 0 PID: 12718 Comm: syz.1.1663 Tainted: G L syzkaller #0 PREEMPT(full) [ 715.034275][T12718] Tainted: [L]=SOFTLOCKUP [ 715.034282][T12718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 715.034294][T12718] Call Trace: [ 715.034301][T12718] [ 715.034308][T12718] dump_stack_lvl+0x16c/0x1f0 [ 715.034336][T12718] should_fail_ex+0x512/0x640 [ 715.034361][T12718] ? fs_reclaim_acquire+0xae/0x150 [ 715.034389][T12718] should_failslab+0xc2/0x120 [ 715.034411][T12718] __kmalloc_noprof+0xeb/0x910 [ 715.034436][T12718] ? preempt_schedule_thunk+0x16/0x30 [ 715.034455][T12718] ? tomoyo_encode2+0x100/0x3e0 [ 715.034483][T12718] ? tomoyo_encode2+0x100/0x3e0 [ 715.034505][T12718] tomoyo_encode2+0x100/0x3e0 [ 715.034532][T12718] tomoyo_encode+0x29/0x50 [ 715.034555][T12718] tomoyo_mount_acl+0x314/0x850 [ 715.034580][T12718] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 715.034603][T12718] ? kernel_text_address+0x8d/0x100 [ 715.034627][T12718] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 715.034649][T12718] ? arch_stack_walk+0xa6/0x100 [ 715.034697][T12718] ? tomoyo_domain+0xba/0x150 [ 715.034724][T12718] ? tomoyo_profile+0x47/0x60 [ 715.034753][T12718] tomoyo_mount_permission+0x16d/0x420 [ 715.034774][T12718] ? tomoyo_mount_permission+0x14f/0x420 [ 715.034799][T12718] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 715.034838][T12718] security_sb_mount+0x9b/0x260 [ 715.034863][T12718] path_mount+0x158/0x23a0 [ 715.034880][T12718] ? rcu_is_watching+0x12/0xc0 [ 715.034901][T12718] ? __pfx_path_mount+0x10/0x10 [ 715.034918][T12718] ? kmem_cache_free+0x2d8/0x770 [ 715.034937][T12718] ? putname+0xf5/0x1a0 [ 715.034966][T12718] ? putname+0xf5/0x1a0 [ 715.034990][T12718] ? putname+0xf5/0x1a0 [ 715.035017][T12718] ? __x64_sys_mount+0x293/0x310 [ 715.035032][T12718] __x64_sys_mount+0x293/0x310 [ 715.035050][T12718] ? __pfx___x64_sys_mount+0x10/0x10 [ 715.035070][T12718] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 715.035098][T12718] do_syscall_64+0xcd/0xf80 [ 715.035124][T12718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.035142][T12718] RIP: 0033:0x7fda3938f749 [ 715.035156][T12718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.035180][T12718] RSP: 002b:00007fda375f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 715.035197][T12718] RAX: ffffffffffffffda RBX: 00007fda395e6090 RCX: 00007fda3938f749 [ 715.035209][T12718] RDX: 0000200000000200 RSI: 0000200000000180 RDI: 0000000000000000 [ 715.035220][T12718] RBP: 00007fda375f6090 R08: 0000200000000340 R09: 0000000000000000 [ 715.035232][T12718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 715.035242][T12718] R13: 00007fda395e6128 R14: 00007fda395e6090 R15: 00007ffd106fac38 [ 715.035268][T12718] [ 715.889036][ T5826] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 716.402995][ T30] audit: type=1800 audit(1767708764.418:946): pid=12726 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1665" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 716.558553][ T30] audit: type=1400 audit(1767708764.768:947): avc: denied { write } for pid=12725 comm="syz.4.1665" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 718.745461][ T30] audit: type=1400 audit(1767708766.958:948): avc: denied { mount } for pid=12745 comm="syz.6.1670" name="/" dev="configfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 718.963087][ T30] audit: type=1400 audit(1767708766.968:949): avc: denied { search } for pid=12745 comm="syz.6.1670" name="/" dev="configfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 719.025160][ T30] audit: type=1400 audit(1767708766.968:950): avc: denied { audit_write } for pid=12745 comm="syz.6.1670" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 719.115340][T12746] xt_ecn: cannot match TCP bits for non-tcp packets [ 719.201208][ T30] audit: type=1400 audit(1767708767.018:951): avc: denied { read open } for pid=12745 comm="syz.6.1670" path="/" dev="configfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 719.323608][ T30] audit: type=1400 audit(1767708767.118:952): avc: denied { watch watch_reads } for pid=12745 comm="syz.6.1670" path="/" dev="configfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 719.382851][T12755] fuse: Bad value for 'fd' [ 719.529906][T12760] input input34: cannot allocate more than FF_MAX_EFFECTS effects [ 720.225225][T12761] Process accounting resumed [ 720.274402][T12768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.503870][T12768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.799609][T12777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1677'. [ 720.808671][T12777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1677'. [ 721.142269][ T30] audit: type=1400 audit(1767708769.358:953): avc: denied { execute } for pid=12784 comm="syz.6.1680" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 721.253597][ T5898] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 721.532527][ T5898] usb 6-1: New USB device found, idVendor=0458, idProduct=7029, bcdDevice=8b.92 [ 721.567914][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.631054][ T5898] usb 6-1: Product: syz [ 721.655411][ T5898] usb 6-1: Manufacturer: syz [ 721.679412][T12790] netlink: 'syz.1.1681': attribute type 3 has an invalid length. [ 721.722588][T12790] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 721.732599][ T5898] usb 6-1: SerialNumber: syz [ 721.751956][ T5898] usb 6-1: config 0 descriptor?? [ 721.772402][T12792] loop7: detected capacity change from 0 to 16384 [ 721.795005][ T5898] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:7029 [ 721.888755][T12795] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 722.149249][ T5898] gspca_sn9c20x: Write register 1000 failed -71 [ 722.657159][ T5898] gspca_sn9c20x: Device initialization failed [ 722.683242][ T5898] gspca_sn9c20x 6-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 722.753198][ T5898] usb 6-1: USB disconnect, device number 40 [ 722.805170][T12796] loop7: detected capacity change from 16384 to 0 [ 722.805392][ C0] I/O error, dev loop7, sector 7424 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 722.812201][ C1] I/O error, dev loop7, sector 7680 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 723.151424][T12813] gfs2: gfs2 mount does not exist [ 723.636372][ T30] audit: type=1400 audit(1767708771.858:954): avc: denied { ioctl } for pid=12818 comm="syz.1.1687" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 724.549035][T12832] xt_TPROXY: Can be used only with -p tcp or -p udp [ 724.562784][ T30] audit: type=1400 audit(1767708772.778:955): avc: denied { read write } for pid=12828 comm="syz.7.1689" name="mouse0" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 724.650219][ T30] audit: type=1400 audit(1767708772.778:956): avc: denied { open } for pid=12828 comm="syz.7.1689" path="/dev/input/mouse0" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 726.427091][ T30] audit: type=1400 audit(1767708774.648:957): avc: denied { module_load } for pid=12852 comm="syz.6.1698" path="/sys/kernel/notes" dev="sysfs" ino=1404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 727.678326][T12871] gfs2: gfs2 mount does not exist [ 728.160551][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 728.173588][ T30] audit: type=1326 audit(1767708776.398:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.4.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07afb8f749 code=0x7ffc0000 [ 728.227604][ T30] audit: type=1326 audit(1767708776.408:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.4.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07afb8f749 code=0x7ffc0000 [ 728.258585][ T30] audit: type=1326 audit(1767708776.408:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.4.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f07afb8f749 code=0x7ffc0000 [ 728.736980][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 728.747796][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 728.790943][ T30] audit: type=1326 audit(1767708776.408:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.4.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07afb8f749 code=0x7ffc0000 [ 728.793038][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 728.888543][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.925218][ T30] audit: type=1326 audit(1767708776.408:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.4.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f07afb8f749 code=0x7ffc0000 [ 728.943036][ T9] usb 6-1: config 0 descriptor?? [ 728.959834][T12883] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1696'. [ 728.963648][ T30] audit: type=1326 audit(1767708776.408:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.4.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07afb8f749 code=0x7ffc0000 [ 729.130074][ T30] audit: type=1326 audit(1767708776.408:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.4.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f07afb8f749 code=0x7ffc0000 [ 729.136842][T12885] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 729.181943][ T30] audit: type=1326 audit(1767708776.438:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.4.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f07afb8f783 code=0x7ffc0000 [ 729.239947][T12886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.268653][ T30] audit: type=1326 audit(1767708776.438:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.4.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f07afb8f783 code=0x7ffc0000 [ 729.284220][T12886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.315805][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1711'. [ 729.320197][T12885] SELinux: failed to load policy [ 729.325479][ T30] audit: type=1326 audit(1767708776.438:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.4.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07afb8f749 code=0x7ffc0000 [ 729.395626][ T30] audit: type=1326 audit(1767708776.458:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.4.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f07afb8f749 code=0x7ffc0000 [ 729.427295][ T9] hid_parser_main: 8 callbacks suppressed [ 729.427316][ T9] sony 0003:054C:024B.002D: unknown main item tag 0x0 [ 729.440787][ T9] sony 0003:054C:024B.002D: item fetching failed at offset 3/5 [ 729.447313][ T30] audit: type=1326 audit(1767708776.458:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.4.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07afb8f749 code=0x7ffc0000 [ 729.473520][ T9] sony 0003:054C:024B.002D: parse failed [ 729.474562][ T30] audit: type=1326 audit(1767708776.458:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.4.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07afb8f749 code=0x7ffc0000 [ 729.479233][ T9] sony 0003:054C:024B.002D: probe with driver sony failed with error -22 [ 729.511568][ T5898] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 729.665512][ T5898] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 729.686653][ T5898] usb 5-1: config 0 has no interface number 0 [ 729.692748][ T5898] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.723066][ T5898] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.746508][ T9] usb 6-1: USB disconnect, device number 41 [ 729.763803][ T5898] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 729.793286][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.819514][ T5898] usb 5-1: config 0 descriptor?? [ 730.260344][ T5898] prodikeys 0003:041E:2801.002E: unknown main item tag 0x0 [ 730.298050][ T5898] prodikeys 0003:041E:2801.002E: unknown main item tag 0x0 [ 730.327535][ T5898] prodikeys 0003:041E:2801.002E: unknown main item tag 0x0 [ 730.356020][ T5898] prodikeys 0003:041E:2801.002E: unknown main item tag 0x0 [ 730.385787][ T5898] prodikeys 0003:041E:2801.002E: unknown main item tag 0x0 [ 730.413117][ T5898] prodikeys 0003:041E:2801.002E: unknown main item tag 0x0 [ 730.579042][ T5898] prodikeys 0003:041E:2801.002E: unknown main item tag 0x0 [ 730.593140][ T5898] prodikeys 0003:041E:2801.002E: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 730.607130][ T5898] hid_prodikeys: hid-prodikeys: failed to find output report [ 730.607130][ T5898] [ 730.633568][ T5898] usb 5-1: USB disconnect, device number 85 [ 731.152078][T12911] fido_id[12911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 731.606188][T12917] gfs2: gfs2 mount does not exist [ 732.057756][T12915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=12915 comm=syz.7.1717 [ 732.898004][T12932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.937406][T12932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.019318][ T975] libceph: connect (1)[c::]:6789 error -101 [ 733.027598][ T975] libceph: mon0 (1)[c::]:6789 connect error [ 733.039941][T12937] random: crng reseeded on system resumption [ 733.660294][T12937] syz.5.1723 (12937): drop_caches: 2 [ 733.745858][T12934] ceph: No mds server is up or the cluster is laggy [ 733.963000][ T975] libceph: connect (1)[c::]:6789 error -101 [ 734.026948][ T975] libceph: mon0 (1)[c::]:6789 connect error [ 735.213044][ T975] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 735.436691][ T975] usb 6-1: Using ep0 maxpacket: 32 [ 735.484980][ T975] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 735.507289][T12962] gre1: entered promiscuous mode [ 735.523645][ T975] usb 6-1: config 0 has no interface number 0 [ 735.562113][T12964] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 735.568658][T12964] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 735.592050][ T975] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 735.640049][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.657281][T12964] vhci_hcd vhci_hcd.0: Device attached [ 735.754146][ T975] usb 6-1: Product: syz [ 735.775963][ T975] usb 6-1: Manufacturer: syz [ 735.783856][T12964] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 735.822432][ T975] usb 6-1: SerialNumber: syz [ 735.850175][ T975] usb 6-1: config 0 descriptor?? [ 735.894949][ T975] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 735.896688][ T5898] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 735.980860][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 735.980876][ T30] audit: type=1800 audit(1767708784.198:1002): pid=12976 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1732" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 736.173333][ T5926] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 736.333198][ T5926] usb 5-1: device descriptor read/64, error -71 [ 736.527996][T12948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.546636][T12948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.235825][ T5926] usb 5-1: new low-speed USB device number 87 using dummy_hcd [ 737.383036][ T5926] usb 5-1: device descriptor read/64, error -71 [ 737.509714][ T5926] usb usb5-port1: attempt power cycle [ 737.558291][ T30] audit: type=1400 audit(1767708785.778:1003): avc: denied { read } for pid=12992 comm="syz.7.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 737.863018][ T5926] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 737.899839][ T5926] usb 5-1: device descriptor read/8, error -71 [ 738.153037][ T5926] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 738.203511][ T5926] usb 5-1: device descriptor read/8, error -71 [ 738.381905][ T5926] usb usb5-port1: unable to enumerate USB device [ 738.389010][ T6516] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 738.487946][T13003] gfs2: gfs2 mount does not exist [ 738.523221][ T6516] usb 8-1: device descriptor read/64, error -71 [ 738.871053][ T6516] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 738.938194][T12965] vhci_hcd: connection reset by peer [ 739.459090][ T3848] vhci_hcd vhci_hcd.4: stop threads [ 739.464950][ T3848] vhci_hcd vhci_hcd.4: release socket [ 739.470453][ T3848] vhci_hcd vhci_hcd.4: disconnect device [ 739.523239][ T6516] usb 8-1: device descriptor read/64, error -71 [ 739.664277][ T6516] usb usb8-port1: attempt power cycle [ 739.821352][ T975] usb 6-1: qt2_attach - failed to power on unit: -71 [ 739.835425][ T975] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 739.866539][ T975] usb 6-1: USB disconnect, device number 42 [ 740.163995][ T6516] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 740.176664][T13017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.198671][T13017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.213855][ T6516] usb 8-1: device descriptor read/8, error -71 [ 740.283159][ T30] audit: type=1326 audit(1767708788.488:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13021 comm="syz.5.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bc58f749 code=0x7ffc0000 [ 740.332218][ T30] audit: type=1326 audit(1767708788.488:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13021 comm="syz.5.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bc58f749 code=0x7ffc0000 [ 740.399265][ T30] audit: type=1326 audit(1767708788.488:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13021 comm="syz.5.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc6bc58f749 code=0x7ffc0000 [ 740.425003][ T30] audit: type=1326 audit(1767708788.488:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13021 comm="syz.5.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bc58f749 code=0x7ffc0000 [ 740.763946][ T6516] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 740.843557][ T6516] usb 8-1: device descriptor read/8, error -71 [ 740.855135][ T30] audit: type=1326 audit(1767708788.488:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13021 comm="syz.5.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fc6bc58f749 code=0x7ffc0000 [ 740.905482][ T30] audit: type=1326 audit(1767708788.488:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13021 comm="syz.5.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bc58f749 code=0x7ffc0000 [ 741.051203][T13031] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1749'. [ 741.133909][ T30] audit: type=1326 audit(1767708788.488:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13021 comm="syz.5.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fc6bc58f749 code=0x7ffc0000 [ 741.161339][ T6516] usb usb8-port1: unable to enumerate USB device [ 741.188837][ T5898] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 741.328599][ T30] audit: type=1326 audit(1767708788.488:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13021 comm="syz.5.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bc58f749 code=0x7ffc0000 [ 741.354539][ T30] audit: type=1326 audit(1767708788.488:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13021 comm="syz.5.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bc58f749 code=0x7ffc0000 [ 741.578235][ T30] audit: type=1326 audit(1767708788.488:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13021 comm="syz.5.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6bc58f749 code=0x7ffc0000 [ 741.602164][ T30] audit: type=1326 audit(1767708788.498:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13021 comm="syz.5.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bc58f749 code=0x7ffc0000 [ 742.123254][T13037] gfs2: gfs2 mount does not exist [ 742.433558][ T30] audit: type=1326 audit(1767708788.498:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13021 comm="syz.5.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bc58f749 code=0x7ffc0000 [ 742.459105][ T30] audit: type=1326 audit(1767708788.498:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13021 comm="syz.5.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fc6bc58f749 code=0x7ffc0000 [ 742.487867][ T30] audit: type=1326 audit(1767708788.498:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13021 comm="syz.5.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6bc58f749 code=0x7ffc0000 [ 742.630574][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1753'. [ 742.821933][T13049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1742'. [ 742.848096][T13051] Mount JFS Failure: -5 [ 742.863696][ T975] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 742.963326][ T6516] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 743.044561][ T975] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 743.059597][ T975] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 743.071758][ T975] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 743.084084][ T975] usb 8-1: config 0 interface 0 has no altsetting 0 [ 743.093429][ T975] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 743.103249][ T975] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 743.113164][ T975] usb 8-1: Product: syz [ 743.119611][ T975] usb 8-1: Manufacturer: syz [ 743.128792][ T975] usb 8-1: SerialNumber: syz [ 743.196399][ T6516] usb 6-1: Using ep0 maxpacket: 32 [ 743.198870][ T975] usb 8-1: config 0 descriptor?? [ 743.219974][ T6516] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 743.222075][T13043] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 743.244454][ T6516] usb 6-1: config 0 has no interface number 0 [ 743.264718][ T6516] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 743.538035][ T975] usb 8-1: selecting invalid altsetting 0 [ 743.571128][ T6516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.598130][ T6516] usb 6-1: Product: syz [ 743.604265][ T6516] usb 6-1: Manufacturer: syz [ 743.611626][ T6516] usb 6-1: SerialNumber: syz [ 743.638153][ T6516] usb 6-1: config 0 descriptor?? [ 743.662480][ T975] usb 8-1: USB disconnect, device number 15 [ 743.723500][ T6516] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 743.747744][T12794] udevd[12794]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.823839][T13065] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 743.837093][ T30] audit: type=1400 audit(1767708792.058:1018): avc: denied { shutdown } for pid=13063 comm="syz.1.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 744.115164][T13074] Device name cannot be null; rc = [-22] [ 744.124138][ T30] audit: type=1400 audit(1767708792.338:1019): avc: denied { setattr } for pid=13066 comm="syz.4.1759" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 745.815816][ T6516] usb 6-1: qt2_attach - failed to power on unit: -71 [ 745.830106][ T6516] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 745.873275][ T6516] usb 6-1: USB disconnect, device number 43 [ 746.583038][ T5926] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 746.801406][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.807930][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.833645][ T5926] usb 8-1: Using ep0 maxpacket: 32 [ 746.854233][ T5926] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 746.862349][ T5926] usb 8-1: config 0 has no interface number 0 [ 747.026267][ T5926] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 747.519294][ T5926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.555155][ T5926] usb 8-1: Product: syz [ 747.573287][ T5926] usb 8-1: Manufacturer: syz [ 747.600865][ T5926] usb 8-1: SerialNumber: syz [ 747.627875][ T5926] usb 8-1: config 0 descriptor?? [ 747.675365][ T5926] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 747.948000][ T5926] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 748.004138][ T5926] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 748.382816][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 748.383181][ T975] usb 8-1: USB disconnect, device number 16 [ 748.457761][ T975] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 748.715380][T13118] kAFS: unable to lookup cell 'syz1' [ 748.785118][ T975] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 748.835344][ T975] quatech2 8-1:0.51: device disconnected [ 748.983126][ T9] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 749.055835][T13124] bridge_slave_0: left allmulticast mode [ 749.061482][T13124] bridge_slave_0: left promiscuous mode [ 749.099453][T13124] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.123745][T13124] bridge_slave_1: left allmulticast mode [ 749.133106][ T9] usb 6-1: device descriptor read/64, error -71 [ 749.149665][T13124] bridge_slave_1: left promiscuous mode [ 749.175685][T13124] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.215804][T13124] bond0: (slave bond_slave_0): Releasing backup interface [ 749.233887][T13124] bond0: (slave bond_slave_1): Releasing backup interface [ 749.262512][T13124] team0: Port device team_slave_0 removed [ 749.306381][T13124] team0: Port device team_slave_1 removed [ 749.330935][T13124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.333950][T13132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.358759][T13124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.360920][T13132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.376770][T13124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.393037][T13124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.409302][T13124] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 749.431841][ T9] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 749.456656][T13125] team0: Mode changed to "loadbalance" [ 749.573126][ T9] usb 6-1: device descriptor read/64, error -71 [ 749.653595][ T5926] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 749.688639][ T9] usb usb6-port1: attempt power cycle [ 749.709516][T13138] loop6: detected capacity change from 0 to 2640 [ 749.719715][T13138] buffer_io_error: 311 callbacks suppressed [ 749.719733][T13138] Buffer I/O error on dev loop6, logical block 0, async page read [ 749.736008][T13138] Buffer I/O error on dev loop6, logical block 0, async page read [ 749.745741][T13138] Buffer I/O error on dev loop6, logical block 0, async page read [ 749.754418][T13138] Buffer I/O error on dev loop6, logical block 0, async page read [ 749.762399][T13138] Buffer I/O error on dev loop6, logical block 0, async page read [ 749.771323][T13138] Buffer I/O error on dev loop6, logical block 0, async page read [ 749.779612][T13138] Buffer I/O error on dev loop6, logical block 0, async page read [ 749.789344][T13138] Buffer I/O error on dev loop6, logical block 0, async page read [ 749.797426][T13138] ldm_validate_partition_table(): Disk read failed. [ 749.804651][T13138] Buffer I/O error on dev loop6, logical block 0, async page read [ 749.813212][T13138] Buffer I/O error on dev loop6, logical block 0, async page read [ 749.821639][T13138] Dev loop6: unable to read RDB block 0 [ 749.832021][T13138] loop6: unable to read partition table [ 749.842471][T13138] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 750.265580][ T5926] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 750.287765][ T5926] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 750.311595][ T5926] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 750.343024][ T9] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 750.345894][ T5926] usb 5-1: config 220 has no interface number 2 [ 750.362768][ T5926] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 750.377663][T13140] FAULT_INJECTION: forcing a failure. [ 750.377663][T13140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.392545][ T9] usb 6-1: device descriptor read/8, error -71 [ 750.393387][T13140] CPU: 1 UID: 0 PID: 13140 Comm: syz.7.1777 Tainted: G L syzkaller #0 PREEMPT(full) [ 750.393412][T13140] Tainted: [L]=SOFTLOCKUP [ 750.393418][T13140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 750.393428][T13140] Call Trace: [ 750.393434][T13140] [ 750.393441][T13140] dump_stack_lvl+0x16c/0x1f0 [ 750.393467][T13140] should_fail_ex+0x512/0x640 [ 750.393496][T13140] _copy_from_user+0x2e/0xd0 [ 750.393520][T13140] do_sock_getsockopt+0x3a1/0x410 [ 750.393541][T13140] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 750.393560][T13140] ? __fget_files+0x204/0x3c0 [ 750.393594][T13140] __sys_getsockopt+0x12f/0x260 [ 750.393621][T13140] __x64_sys_getsockopt+0xbd/0x160 [ 750.393635][T13140] ? do_syscall_64+0x91/0xf80 [ 750.393656][T13140] ? lockdep_hardirqs_on+0x7c/0x110 [ 750.393676][T13140] do_syscall_64+0xcd/0xf80 [ 750.393698][T13140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.393714][T13140] RIP: 0033:0x7f1a49b8f749 [ 750.393729][T13140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.393745][T13140] RSP: 002b:00007f1a4aaa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 750.393761][T13140] RAX: ffffffffffffffda RBX: 00007f1a49de5fa0 RCX: 00007f1a49b8f749 [ 750.393772][T13140] RDX: 0000000000000072 RSI: 0000000000000084 RDI: 0000000000000003 [ 750.393782][T13140] RBP: 00007f1a4aaa8090 R08: 0000200000000040 R09: 0000000000000000 [ 750.393792][T13140] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.393802][T13140] R13: 00007f1a49de6038 R14: 00007f1a49de5fa0 R15: 00007ffe96a841e8 [ 750.393824][T13140] [ 750.393949][ T5926] usb 5-1: config 220 interface 0 has no altsetting 0 [ 750.524474][T13143] FAULT_INJECTION: forcing a failure. [ 750.524474][T13143] name failslab, interval 1, probability 0, space 0, times 0 [ 750.533078][ T5926] usb 5-1: config 220 interface 76 has no altsetting 0 [ 750.598800][ T5926] usb 5-1: config 220 interface 1 has no altsetting 0 [ 750.628886][ T5926] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 750.638170][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.649595][ T5926] usb 5-1: Product: syz [ 750.651769][T13143] CPU: 0 UID: 0 PID: 13143 Comm: syz.6.1778 Tainted: G L syzkaller #0 PREEMPT(full) [ 750.651794][T13143] Tainted: [L]=SOFTLOCKUP [ 750.651800][T13143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 750.651810][T13143] Call Trace: [ 750.651816][T13143] [ 750.651822][T13143] dump_stack_lvl+0x16c/0x1f0 [ 750.651848][T13143] should_fail_ex+0x512/0x640 [ 750.651872][T13143] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 750.651893][T13143] should_failslab+0xc2/0x120 [ 750.651914][T13143] kmem_cache_alloc_node_noprof+0x86/0x800 [ 750.651930][T13143] ? __alloc_skb+0x156/0x410 [ 750.651953][T13143] ? __alloc_skb+0x35d/0x410 [ 750.651979][T13143] ? __alloc_skb+0x156/0x410 [ 750.652000][T13143] __alloc_skb+0x156/0x410 [ 750.652021][T13143] ? __alloc_skb+0x35d/0x410 [ 750.652044][T13143] ? __pfx___alloc_skb+0x10/0x10 [ 750.652065][T13143] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 750.652095][T13143] netlink_ack+0x15d/0xb80 [ 750.652121][T13143] netlink_rcv_skb+0x332/0x420 [ 750.652141][T13143] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 750.652161][T13143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 750.652188][T13143] ? netlink_deliver_tap+0x1ae/0xd30 [ 750.652211][T13143] netlink_unicast+0x5aa/0x870 [ 750.652233][T13143] ? __pfx_netlink_unicast+0x10/0x10 [ 750.652260][T13143] netlink_sendmsg+0x8c8/0xdd0 [ 750.652283][T13143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 750.652311][T13143] ____sys_sendmsg+0xa5d/0xc30 [ 750.652333][T13143] ? copy_msghdr_from_user+0x10a/0x160 [ 750.652350][T13143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 750.652381][T13143] ___sys_sendmsg+0x134/0x1d0 [ 750.652399][T13143] ? __pfx____sys_sendmsg+0x10/0x10 [ 750.652441][T13143] __sys_sendmsg+0x16d/0x220 [ 750.652457][T13143] ? __pfx___sys_sendmsg+0x10/0x10 [ 750.652488][T13143] do_syscall_64+0xcd/0xf80 [ 750.652510][T13143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.652526][T13143] RIP: 0033:0x7fa585d8f749 [ 750.652540][T13143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.652555][T13143] RSP: 002b:00007fa586cbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.652572][T13143] RAX: ffffffffffffffda RBX: 00007fa585fe6090 RCX: 00007fa585d8f749 [ 750.652583][T13143] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 750.652597][T13143] RBP: 00007fa586cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 750.652607][T13143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.652617][T13143] R13: 00007fa585fe6128 R14: 00007fa585fe6090 R15: 00007ffcc179dfc8 [ 750.652640][T13143] [ 750.863055][ T9] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 750.879733][ T5926] usb 5-1: Manufacturer: syz [ 750.924868][ T5926] usb 5-1: SerialNumber: syz [ 751.075578][ T9] usb 6-1: device descriptor read/8, error -71 [ 751.203606][ T9] usb usb6-port1: unable to enumerate USB device [ 751.243720][ T5926] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 751.271310][ T5926] uvcvideo 5-1:220.0: No valid video chain found. [ 751.293113][ T5926] usb 5-1: selecting invalid altsetting 0 [ 751.330744][ T5926] usb 5-1: selecting invalid altsetting 0 [ 751.351689][ T5926] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 751.392138][ T5926] usb 5-1: USB disconnect, device number 90 [ 752.448059][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 752.448077][ T30] audit: type=1400 audit(1767708800.178:1021): avc: denied { append } for pid=13150 comm="syz.5.1781" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 752.532393][ T30] audit: type=1400 audit(1767708800.708:1022): avc: denied { read write } for pid=11764 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 752.707006][ T30] audit: type=1400 audit(1767708800.708:1023): avc: denied { open } for pid=11764 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.187804][ T30] audit: type=1400 audit(1767708800.708:1024): avc: denied { ioctl } for pid=11764 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.638616][T13169] FAULT_INJECTION: forcing a failure. [ 753.638616][T13169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.679722][T13169] CPU: 0 UID: 0 PID: 13169 Comm: syz.7.1786 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.679747][T13169] Tainted: [L]=SOFTLOCKUP [ 753.679752][T13169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 753.679759][T13169] Call Trace: [ 753.679764][T13169] [ 753.679768][T13169] dump_stack_lvl+0x16c/0x1f0 [ 753.679787][T13169] should_fail_ex+0x512/0x640 [ 753.679807][T13169] _copy_from_user+0x2e/0xd0 [ 753.679824][T13169] video_usercopy+0xee2/0x16c0 [ 753.679840][T13169] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 753.679852][T13169] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 753.679870][T13169] ? __pfx_video_usercopy+0x10/0x10 [ 753.679891][T13169] v4l2_ioctl+0x1bd/0x250 [ 753.679903][T13169] ? __pfx_v4l2_ioctl+0x10/0x10 [ 753.679916][T13169] __x64_sys_ioctl+0x18e/0x210 [ 753.679931][T13169] do_syscall_64+0xcd/0xf80 [ 753.679947][T13169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.679959][T13169] RIP: 0033:0x7f1a49b8f749 [ 753.679969][T13169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.679980][T13169] RSP: 002b:00007f1a4aaa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 753.679991][T13169] RAX: ffffffffffffffda RBX: 00007f1a49de5fa0 RCX: 00007f1a49b8f749 [ 753.679998][T13169] RDX: 0000200000000540 RSI: 00000000c0e85667 RDI: 0000000000000003 [ 753.680005][T13169] RBP: 00007f1a4aaa8090 R08: 0000000000000000 R09: 0000000000000000 [ 753.680011][T13169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.680018][T13169] R13: 00007f1a49de6038 R14: 00007f1a49de5fa0 R15: 00007ffe96a841e8 [ 753.680032][T13169] [ 753.683211][T13172] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 754.064423][T13172] bond2: (slave lo): Enslaving as a backup interface with an up link [ 754.096240][T13172] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 754.403722][T13187] No source specified [ 755.965311][ T30] audit: type=1400 audit(1767708804.188:1025): avc: denied { create } for pid=13221 comm="syz.1.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 756.127489][T13225] FAULT_INJECTION: forcing a failure. [ 756.127489][T13225] name failslab, interval 1, probability 0, space 0, times 0 [ 756.177381][T13225] CPU: 0 UID: 0 PID: 13225 Comm: syz.5.1805 Tainted: G L syzkaller #0 PREEMPT(full) [ 756.177414][T13225] Tainted: [L]=SOFTLOCKUP [ 756.177421][T13225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 756.177431][T13225] Call Trace: [ 756.177437][T13225] [ 756.177444][T13225] dump_stack_lvl+0x16c/0x1f0 [ 756.177472][T13225] should_fail_ex+0x512/0x640 [ 756.177497][T13225] ? fs_reclaim_acquire+0xae/0x150 [ 756.177522][T13225] should_failslab+0xc2/0x120 [ 756.177547][T13225] __kmalloc_noprof+0xeb/0x910 [ 756.177576][T13225] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 756.177606][T13225] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 756.177628][T13225] tomoyo_realpath_from_path+0xc2/0x6e0 [ 756.177654][T13225] ? tomoyo_profile+0x47/0x60 [ 756.177684][T13225] tomoyo_path_number_perm+0x245/0x580 [ 756.177705][T13225] ? tomoyo_path_number_perm+0x237/0x580 [ 756.177729][T13225] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 756.177752][T13225] ? find_held_lock+0x2b/0x80 [ 756.177804][T13225] ? find_held_lock+0x2b/0x80 [ 756.177832][T13225] ? hook_file_ioctl_common+0x144/0x410 [ 756.177866][T13225] ? __fget_files+0x20e/0x3c0 [ 756.177897][T13225] security_file_ioctl+0x9b/0x240 [ 756.177924][T13225] __x64_sys_ioctl+0xb7/0x210 [ 756.177949][T13225] do_syscall_64+0xcd/0xf80 [ 756.177975][T13225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.177994][T13225] RIP: 0033:0x7fc6bc58f749 [ 756.178010][T13225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.178028][T13225] RSP: 002b:00007fc6bd4c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.178046][T13225] RAX: ffffffffffffffda RBX: 00007fc6bc7e5fa0 RCX: 00007fc6bc58f749 [ 756.178058][T13225] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 756.178069][T13225] RBP: 00007fc6bd4c9090 R08: 0000000000000000 R09: 0000000000000000 [ 756.178079][T13225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.178090][T13225] R13: 00007fc6bc7e6038 R14: 00007fc6bc7e5fa0 R15: 00007ffc30b282b8 [ 756.178115][T13225] [ 756.389973][T13225] ERROR: Out of memory at tomoyo_realpath_from_path. [ 756.527731][T13228] netlink: 'syz.6.1806': attribute type 10 has an invalid length. [ 756.573480][T13228] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1806'. [ 756.637976][T13228] dummy0: entered promiscuous mode [ 756.670044][T13239] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 756.670990][T13228] bridge0: port 3(dummy0) entered blocking state [ 756.694690][ T5926] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 756.706588][T13228] bridge0: port 3(dummy0) entered disabled state [ 756.713429][T13228] dummy0: entered allmulticast mode [ 756.847977][T13242] libceph: resolve 'ci' (ret=-3): failed [ 757.046428][T13228] bridge0: port 3(dummy0) entered blocking state [ 757.052905][T13228] bridge0: port 3(dummy0) entered forwarding state [ 757.063788][ T5926] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 757.071904][ T5926] usb 8-1: config 0 has no interface number 0 [ 757.079212][ T5926] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 757.096549][ T5926] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 757.126679][ T5926] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 757.153341][ T5926] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 757.186076][ T5926] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 757.198814][ T5926] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 757.223013][ T5926] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 757.254893][ T5926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.301012][ T5926] usb 8-1: config 0 descriptor?? [ 757.313860][ T30] audit: type=1400 audit(1767708805.538:1026): avc: denied { create } for pid=13245 comm="syz.4.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 757.352558][T13234] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 757.365725][T13234] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 757.422456][ T5926] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 757.709432][ T5926] usb 8-1: USB disconnect, device number 17 [ 757.722250][ T5926] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 758.207083][ T30] audit: type=1400 audit(1767708806.408:1027): avc: denied { name_bind } for pid=13265 comm="syz.6.1817" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 758.237828][ T30] audit: type=1400 audit(1767708806.458:1028): avc: denied { ioctl } for pid=13259 comm="syz.1.1816" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 758.484793][T13273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.498129][T13273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.585385][T13275] tmpfs: Unknown parameter 'veno' [ 758.927572][ T5926] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 759.019668][T13279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13279 comm=syz.1.1821 [ 759.052521][T13279] netlink: 'syz.1.1821': attribute type 1 has an invalid length. [ 759.093062][ T5926] usb 8-1: device descriptor read/64, error -71 [ 759.152798][T13281] bond1: (slave gretap1): making interface the new active one [ 759.162068][T13281] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 759.230485][T13279] vlan2: entered allmulticast mode [ 759.235818][T13279] bond1: entered allmulticast mode [ 759.241720][T13279] gretap1: entered allmulticast mode [ 759.257208][T13279] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 759.343200][ T5926] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 759.503443][ T5926] usb 8-1: device descriptor read/64, error -71 [ 759.615321][ T5926] usb usb8-port1: attempt power cycle [ 759.973105][ T5926] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 760.018393][ T5926] usb 8-1: device descriptor read/8, error -71 [ 760.047044][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1825'. [ 760.263017][ T5926] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 760.294780][ T5926] usb 8-1: device descriptor read/8, error -71 [ 760.318332][ T30] audit: type=1400 audit(1767708808.538:1029): avc: denied { read } for pid=13299 comm="syz.5.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 760.403943][ T5926] usb usb8-port1: unable to enumerate USB device [ 760.549466][T13305] netlink: zone id is out of range [ 760.789105][ T30] audit: type=1400 audit(1767708809.008:1030): avc: denied { connect } for pid=13307 comm="syz.6.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 761.464488][T13317] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1831'. [ 761.474302][T13317] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1831'. [ 761.733976][T13321] tmpfs: Unknown parameter 'veno' [ 762.018814][ T30] audit: type=1400 audit(1767708810.238:1031): avc: denied { create } for pid=13322 comm="syz.5.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 762.783112][ T975] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 763.062304][ T975] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 763.490050][ T975] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 763.501204][ T975] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 763.534409][ T975] usb 8-1: config 0 interface 0 has no altsetting 0 [ 763.554505][ T975] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 763.568274][ T975] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 763.576950][ T975] usb 8-1: Product: syz [ 763.582517][ T975] usb 8-1: Manufacturer: syz [ 763.588462][T13346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65301 sclass=netlink_route_socket pid=13346 comm=syz.4.1840 [ 763.588714][ T975] usb 8-1: SerialNumber: syz [ 763.609829][ T975] usb 8-1: config 0 descriptor?? [ 763.616421][T13340] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 763.628419][ T975] usb 8-1: selecting invalid altsetting 0 [ 763.674585][T13347] dvmrp0: entered allmulticast mode [ 763.823329][ T30] audit: type=1400 audit(1767708812.048:1032): avc: denied { ioctl } for pid=13350 comm="syz.5.1842" path="socket:[44561]" dev="sockfs" ino=44561 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 763.997683][ T30] audit: type=1400 audit(1767708812.218:1033): avc: denied { setattr } for pid=13353 comm="syz.5.1843" name="NETLINK" dev="sockfs" ino=45567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 765.190234][ T5926] usb 8-1: USB disconnect, device number 22 [ 765.283820][T13363] mac80211_hwsim hwsim14 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 766.069125][T13375] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1847'. [ 766.085532][ T30] audit: type=1326 audit(1767708814.308:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13367 comm="syz.1.1847" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda3938f749 code=0x0 [ 766.525393][T13385] syz_tun: entered allmulticast mode [ 766.808620][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1852'. [ 766.817975][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1852'. [ 767.348308][T13402] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1854'. [ 767.433792][T13402] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1854'. [ 767.573818][ T5926] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 767.764621][ T5926] usb 5-1: config 0 has no interfaces? [ 767.817536][ T5926] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 767.837792][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.853370][ T5897] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 767.863001][ T5926] usb 5-1: Product: syz [ 767.883029][ T5926] usb 5-1: Manufacturer: syz [ 767.896202][ T5926] usb 5-1: SerialNumber: syz [ 767.923691][ T5926] usb 5-1: config 0 descriptor?? [ 768.034527][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 768.063345][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 768.102075][ T5897] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 768.114426][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.131605][ T5897] usb 8-1: Product: syz [ 768.141753][ T5897] usb 8-1: Manufacturer: syz [ 768.152678][ T5897] usb 8-1: SerialNumber: syz [ 768.167677][ T5897] usb 8-1: config 0 descriptor?? [ 768.194077][T13411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.207413][T13411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.311963][T13419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1859'. [ 769.347933][ T5927] usb 5-1: USB disconnect, device number 92 [ 769.643230][ T5926] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 769.807545][ T5926] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 769.819488][ T5926] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 769.832986][ T5926] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 769.847061][ T5926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 769.857007][ T5926] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 769.866743][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 769.876271][ T5926] usb 6-1: Product: syz [ 769.880647][ T5926] usb 6-1: Manufacturer: syz [ 769.886649][ T5926] usb 6-1: SerialNumber: syz [ 769.904616][ T5926] usb 6-1: config 0 descriptor?? [ 769.916943][T13421] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 770.633428][ T5926] usb 6-1: selecting invalid altsetting 0 [ 770.635653][ T5897] usb 8-1: USB disconnect, device number 23 [ 770.760201][ T5926] usb 6-1: USB disconnect, device number 48 [ 770.780823][T13061] udevd[13061]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.939265][T12757] udevd[12757]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 771.475436][ T5897] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 771.655320][ T5897] usb 8-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 771.801902][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.815162][ T5897] usb 8-1: config 0 descriptor?? [ 771.823854][ T5897] gspca_main: spca508-2.14.0 probing 8086:0110 [ 771.913090][T13450] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 771.913090][T13450] Ue[%#s' [ 772.419048][ T5897] gspca_spca508: reg_read err -110 [ 772.527464][T13452] gfs2: gfs2 mount does not exist [ 772.897719][T13453] netlink: 'syz.7.1862': attribute type 11 has an invalid length. [ 773.045734][ T30] audit: type=1400 audit(1767708821.098:1035): avc: denied { bind } for pid=13426 comm="syz.7.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 773.167552][ T30] audit: type=1400 audit(1767708821.098:1036): avc: denied { name_bind } for pid=13426 comm="syz.7.1862" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 773.245638][ T5897] gspca_spca508: reg_read err -71 [ 773.256168][ T5897] gspca_spca508: reg_read err -71 [ 773.279739][ T30] audit: type=1400 audit(1767708821.108:1037): avc: denied { node_bind } for pid=13426 comm="syz.7.1862" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 773.304439][ T5897] gspca_spca508: reg_read err -71 [ 773.309892][ T5897] gspca_spca508: reg_read err -71 [ 773.318791][ T5897] gspca_spca508: reg write: error -71 [ 773.325591][ T5897] spca508 8-1:0.0: probe with driver spca508 failed with error -71 [ 773.337810][ T5897] usb 8-1: USB disconnect, device number 24 [ 773.417431][T13460] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 773.423960][T13460] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 773.441578][T13460] vhci_hcd vhci_hcd.0: Device attached [ 773.454117][T13458] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(7) [ 773.460661][T13458] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 773.558153][T13466] fuse: Unknown parameter '' [ 773.763164][ T5926] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 773.881401][T13458] vhci_hcd vhci_hcd.0: Device attached [ 773.887794][T13462] vhci_hcd: connection closed [ 773.887916][ T8829] vhci_hcd vhci_hcd.6: stop threads [ 773.900043][T13464] vhci_hcd: connection closed [ 773.902058][T13460] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(10) [ 773.913319][T13460] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 773.930583][ T8829] vhci_hcd vhci_hcd.6: release socket [ 773.949966][ T8829] vhci_hcd vhci_hcd.6: disconnect device [ 773.959329][T13468] vhci_hcd: connection closed [ 773.959718][T13460] vhci_hcd vhci_hcd.0: Device attached [ 773.973087][ T8829] vhci_hcd vhci_hcd.6: stop threads [ 773.980143][ T8829] vhci_hcd vhci_hcd.6: release socket [ 773.988127][ T8829] vhci_hcd vhci_hcd.6: disconnect device [ 773.998547][ T8829] vhci_hcd vhci_hcd.6: stop threads [ 774.004101][ T8829] vhci_hcd vhci_hcd.6: release socket [ 774.009638][ T8829] vhci_hcd vhci_hcd.6: disconnect device [ 774.281301][ T30] audit: type=1400 audit(1767708822.498:1038): avc: denied { ioctl } for pid=13470 comm="syz.4.1872" path="socket:[45895]" dev="sockfs" ino=45895 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 774.333495][ T30] audit: type=1400 audit(1767708822.528:1039): avc: denied { connect } for pid=13471 comm="syz.5.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 774.466444][T13480] comedi comedi2: dt2814: I/O port conflict (0x4000b013,2) [ 774.506540][ T9723] Bluetooth: hci0: command 0x041b tx timeout [ 777.765849][ T30] audit: type=1400 audit(1767708825.988:1040): avc: denied { getopt } for pid=13490 comm="syz.1.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 777.844030][ T30] audit: type=1400 audit(1767708826.048:1041): avc: denied { mount } for pid=13494 comm="syz.4.1877" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 777.885967][ T30] audit: type=1400 audit(1767708826.108:1042): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 778.715082][T13506] gfs2: gfs2 mount does not exist [ 778.835706][T13499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.943007][ T975] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 779.031362][ T5926] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 779.164747][ T975] usb 6-1: Using ep0 maxpacket: 16 [ 779.169411][ T30] audit: type=1400 audit(1767708827.388:1043): avc: denied { cmd } for pid=13509 comm="syz.6.1882" path="socket:[44845]" dev="sockfs" ino=44845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 779.919086][ T975] usb 6-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 779.933912][ T30] audit: type=1400 audit(1767708828.158:1044): avc: denied { getopt } for pid=13515 comm="syz.4.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 779.936868][ T975] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 779.963390][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.911649][T13517] overlayfs: failed to resolve './file1': -2 [ 780.923870][T13520] overlayfs: failed to resolve './file1': -2 [ 780.997389][ T975] usbhid 6-1:128.0: couldn't find an input interrupt endpoint [ 782.668092][ T5926] usb 6-1: USB disconnect, device number 49 [ 782.766797][T13550] syzkaller0: entered promiscuous mode [ 782.772339][T13550] syzkaller0: entered allmulticast mode [ 783.941376][ T5826] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 784.537162][T13585] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 785.304685][ T30] audit: type=1400 audit(1767708833.528:1045): avc: denied { setattr } for pid=13592 comm="syz.5.1907" path="/dev/rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 785.407737][T13600] netlink: zone id is out of range [ 785.430515][ T30] audit: type=1400 audit(1767708833.648:1046): avc: denied { append } for pid=13601 comm="syz.1.1909" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 785.485611][T13602] loop3: detected capacity change from 0 to 16384 [ 785.513534][ T5927] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 785.553604][T13602] loop3: detected capacity change from 16384 to 0 [ 785.672999][ T5927] usb 8-1: Using ep0 maxpacket: 16 [ 785.682880][ T5927] usb 8-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 785.698369][ T5927] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 785.707795][ T5927] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.739290][ T5927] usbhid 8-1:128.0: couldn't find an input interrupt endpoint [ 785.984928][T13616] tmpfs: Unknown parameter 'veno' [ 788.164489][ T5897] usb 8-1: USB disconnect, device number 25 [ 788.243190][ T5927] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 788.424642][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 788.441791][ T5927] usb 6-1: unable to get BOS descriptor or descriptor too short [ 788.467117][ T5927] usb 6-1: config 1 has an invalid interface number: 169 but max is 0 [ 788.480086][ T5927] usb 6-1: config 1 has no interface number 0 [ 788.487373][ T5927] usb 6-1: config 1 interface 169 has no altsetting 0 [ 788.498267][ T5927] usb 6-1: New USB device found, idVendor=0ace, idProduct=1608, bcdDevice=4c.20 [ 788.514642][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.534957][ T5927] usb 6-1: Product: syz [ 788.543065][ T5927] usb 6-1: Manufacturer: syz [ 788.547800][ T5927] usb 6-1: SerialNumber: syz [ 788.856637][T13655] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 789.464635][T13655] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 789.471189][T13655] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 789.491173][T13655] vhci_hcd vhci_hcd.0: Device attached [ 789.912886][ T30] audit: type=1400 audit(1767708837.948:1047): avc: denied { write } for pid=13653 comm="syz.1.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 790.072137][ T5926] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 790.183320][ T5926] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 790.470000][T13671] gfs2: gfs2 mount does not exist [ 791.411056][T13677] infiniband syz1: set active [ 791.415798][T13677] infiniband syz1: added syz_tun [ 791.443814][T13677] RDS/IB: syz1: added [ 791.447859][T13677] smc: adding ib device syz1 with port count 1 [ 791.454108][T13677] smc: ib device syz1 port 1 has no pnetid [ 791.898126][T13659] vhci_hcd: connection reset by peer [ 791.938802][ T5968] vhci_hcd vhci_hcd.5: stop threads [ 791.955066][ T6516] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 791.959305][ T5968] vhci_hcd vhci_hcd.5: release socket [ 791.991634][ T5968] vhci_hcd vhci_hcd.5: disconnect device [ 792.061193][ T5927] cdc_acm 6-1:1.169: skipping garbage [ 792.097202][ T5927] usb 6-1: USB disconnect, device number 50 [ 792.153027][ T6516] usb 8-1: Using ep0 maxpacket: 32 [ 792.247117][ T6516] usb 8-1: config 0 has an invalid interface number: 58 but max is 0 [ 792.264572][ T6516] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.283231][ T6516] usb 8-1: config 0 has no interface number 0 [ 792.300684][ T6516] usb 8-1: too many endpoints for config 0 interface 58 altsetting 115: 48, using maximum allowed: 30 [ 792.333376][ T935] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 792.406958][ T6516] usb 8-1: config 0 interface 58 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 792.490834][ T6516] usb 8-1: config 0 interface 58 has no altsetting 0 [ 792.539602][ T6516] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 792.600436][ T6516] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.621209][ T935] usb 5-1: Using ep0 maxpacket: 16 [ 792.654653][ T935] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.667053][ T6516] usb 8-1: config 0 descriptor?? [ 792.688079][ T935] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 792.717651][ T935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.745744][ T935] usbhid 5-1:128.0: couldn't find an input interrupt endpoint [ 793.066769][ T935] usb 8-1: USB disconnect, device number 26 [ 793.338457][ T30] audit: type=1400 audit(1767708841.558:1048): avc: denied { read } for pid=13696 comm="syz.1.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 793.788544][ T31] INFO: task kworker/0:9:6078 blocked for more than 143 seconds. [ 793.804494][ T31] Tainted: G L syzkaller #0 [ 793.817957][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 793.826988][ T31] task:kworker/0:9 state:D stack:20408 pid:6078 tgid:6078 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 793.839319][ T31] Workqueue: usb_hub_wq hub_event [ 793.844656][ T31] Call Trace: [ 793.848044][ T31] [ 793.851170][ T31] ? __schedule+0x10b9/0x6150 [ 793.856490][ T31] __schedule+0x1139/0x6150 [ 793.861075][ T31] ? __lock_acquire+0x436/0x2890 [ 793.866232][ T31] ? __pfx___schedule+0x10/0x10 [ 793.871512][ T31] ? find_held_lock+0x2b/0x80 [ 793.876332][ T31] ? schedule+0x2d7/0x3a0 [ 793.880696][ T31] schedule+0xe7/0x3a0 [ 793.885090][ T31] schedule_timeout+0x257/0x290 [ 793.889987][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 793.895498][ T31] ? mark_held_locks+0x49/0x80 [ 793.900460][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 793.906495][ T31] __wait_for_common+0x2fc/0x4e0 [ 793.911496][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 793.918511][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 793.924413][ T31] ? __pfx_device_del+0x10/0x10 [ 793.929454][ T31] ? kobject_put+0xaf/0x6f0 [ 793.934046][ T31] i2c_del_adapter+0x640/0x850 [ 793.938930][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 793.944199][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 793.949583][ T31] ? rcu_is_watching+0x12/0xc0 [ 793.954400][ T31] ? devres_log+0xef/0x330 [ 793.959744][ T31] devres_release_group+0x238/0x3d0 [ 793.965081][ T31] ? __pfx_devres_release_group+0x10/0x10 [ 793.970930][ T31] ? __pfx_mcp2221_remove+0x10/0x10 [ 793.976216][ T31] hid_device_remove+0x107/0x260 [ 793.981211][ T31] ? __pfx_hid_device_remove+0x10/0x10 [ 793.986730][ T31] device_remove+0xcb/0x170 [ 793.991268][ T31] device_release_driver_internal+0x44b/0x620 [ 793.997400][ T31] bus_remove_device+0x22f/0x450 [ 794.002392][ T31] device_del+0x396/0x9f0 [ 794.006868][ T31] ? __pfx_device_del+0x10/0x10 [ 794.011783][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 794.016983][ T31] hid_destroy_device+0x19c/0x240 [ 794.025656][ T31] usbhid_disconnect+0xa0/0xe0 [ 794.030587][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 794.035969][ T31] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 794.042118][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 794.047927][ T31] device_remove+0x125/0x170 [ 794.052553][ T31] device_release_driver_internal+0x44b/0x620 [ 794.060188][ T31] bus_remove_device+0x22f/0x450 [ 794.065328][ T31] device_del+0x396/0x9f0 [ 794.069790][ T31] ? __pfx_device_del+0x10/0x10 [ 794.074724][ T31] ? kobject_put+0x218/0x6f0 [ 794.079358][ T31] usb_disable_device+0x355/0x820 [ 794.084478][ T31] usb_disconnect+0x2e1/0x9e0 [ 794.089193][ T31] hub_event+0x1d84/0x52f0 [ 794.093689][ T31] ? __lock_acquire+0x436/0x2890 [ 794.098670][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 794.104035][ T31] ? __pfx_hub_event+0x10/0x10 [ 794.108853][ T31] ? put_objects.isra.0+0x100/0x1f0 [ 794.114148][ T31] ? rcu_is_watching+0x12/0xc0 [ 794.118976][ T31] process_one_work+0x9ba/0x1b20 [ 794.124033][ T31] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 794.130623][ T31] ? __pfx_process_one_work+0x10/0x10 [ 794.150931][ T31] ? assign_work+0x1a0/0x250 [ 794.162033][ T31] worker_thread+0x6c8/0xf10 [ 794.166784][ T31] ? __kthread_parkme+0x19e/0x250 [ 794.171815][ T31] ? __pfx_worker_thread+0x10/0x10 [ 794.179452][ T31] kthread+0x3c5/0x780 [ 794.185497][ T31] ? __pfx_kthread+0x10/0x10 [ 794.190118][ T31] ? rcu_is_watching+0x12/0xc0 [ 794.194911][ T31] ? __pfx_kthread+0x10/0x10 [ 794.199516][ T31] ret_from_fork+0x983/0xb10 [ 794.204214][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 794.209330][ T31] ? __switch_to+0x7af/0x10d0 [ 794.214088][ T31] ? __pfx_kthread+0x10/0x10 [ 794.218702][ T31] ret_from_fork_asm+0x1a/0x30 [ 794.223535][ T31] [ 794.328690][ T31] [ 794.328690][ T31] Showing all locks held in the system: [ 794.336578][ T31] 1 lock held by khungtaskd/31: [ 794.341448][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 794.353479][ T31] 2 locks held by getty/5579: [ 794.358161][ T31] #0: ffff88814d25a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 794.368907][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 794.379108][ T31] 5 locks held by kworker/1:6/5926: [ 794.384432][ T31] #0: ffff888020ec5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 794.395275][ T31] #1: ffffc90003007c90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 794.406568][ T31] #2: ffff888144faa198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0 [ 794.415519][ T31] #3: ffff888144fad518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b87/0x52f0 [ 794.425503][ T31] #4: ffff888144f1e968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bb0/0x52f0 [ 794.435223][ T31] 6 locks held by kworker/0:9/6078: [ 794.440442][ T31] #0: ffff888020ec5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 794.451310][ T31] #1: ffffc9000576fc90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 794.462608][ T31] #2: ffff888029f4d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0 [ 794.472429][ T31] #3: ffff88803f047198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9e0 [ 794.481737][ T31] #4: ffff88802ab4d160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 794.492325][ T31] #5: ffff888058999a20 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 794.503064][ T31] [ 794.505404][ T31] ============================================= [ 794.505404][ T31] [ 794.517314][ T31] NMI backtrace for cpu 1 [ 794.517327][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 794.517343][ T31] Tainted: [L]=SOFTLOCKUP [ 794.517347][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 794.517354][ T31] Call Trace: [ 794.517358][ T31] [ 794.517363][ T31] dump_stack_lvl+0x116/0x1f0 [ 794.517381][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 794.517400][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 794.517414][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 794.517433][ T31] sys_info+0x133/0x180 [ 794.517449][ T31] watchdog+0xe66/0x1180 [ 794.517472][ T31] ? rcu_is_watching+0x12/0xc0 [ 794.517491][ T31] ? __pfx_watchdog+0x10/0x10 [ 794.517509][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 794.517525][ T31] ? __kthread_parkme+0x19e/0x250 [ 794.517537][ T31] ? __pfx_watchdog+0x10/0x10 [ 794.517549][ T31] kthread+0x3c5/0x780 [ 794.517562][ T31] ? __pfx_kthread+0x10/0x10 [ 794.517576][ T31] ? rcu_is_watching+0x12/0xc0 [ 794.517586][ T31] ? __pfx_kthread+0x10/0x10 [ 794.517603][ T31] ret_from_fork+0x983/0xb10 [ 794.517616][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 794.517630][ T31] ? __switch_to+0x7af/0x10d0 [ 794.517645][ T31] ? __pfx_kthread+0x10/0x10 [ 794.517658][ T31] ret_from_fork_asm+0x1a/0x30 [ 794.517681][ T31] [ 794.517686][ T31] Sending NMI from CPU 1 to CPUs 0: [ 794.658439][ C0] NMI backtrace for cpu 0 [ 794.658457][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.658484][ C0] Tainted: [L]=SOFTLOCKUP [ 794.658489][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 794.658498][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 794.658521][ C0] Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 39 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 794.658535][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 794.658548][ C0] RAX: 0000000002b9a38d RBX: 0000000000000000 RCX: ffffffff8b7826d9 [ 794.658558][ C0] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: ffffffff8bf2b480 [ 794.658566][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 794.658575][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 794.658584][ C0] R13: ffffffff8e097b40 R14: ffffffff9088bad0 R15: 0000000000000000 [ 794.658593][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 794.658607][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 794.658616][ C0] CR2: 00007fa585fb7198 CR3: 000000001f7d2000 CR4: 00000000003526f0 [ 794.658626][ C0] Call Trace: [ 794.658632][ C0] [ 794.658637][ C0] default_idle+0x13/0x20 [ 794.658656][ C0] default_idle_call+0x6c/0xb0 [ 794.658675][ C0] do_idle+0x38d/0x510 [ 794.658698][ C0] ? __pfx_do_idle+0x10/0x10 [ 794.658730][ C0] cpu_startup_entry+0x4f/0x60 [ 794.658762][ C0] rest_init+0x16b/0x2b0 [ 794.658773][ C0] ? acpi_subsystem_init+0x133/0x180 [ 794.658787][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 794.658802][ C0] start_kernel+0x3ef/0x4d0 [ 794.658823][ C0] x86_64_start_reservations+0x18/0x30 [ 794.658849][ C0] x86_64_start_kernel+0x130/0x190 [ 794.658862][ C0] common_startup_64+0x13e/0x148 [ 794.658887][ C0] [ 794.851721][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 794.858560][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 794.869215][ T31] Tainted: [L]=SOFTLOCKUP [ 794.873512][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 794.883543][ T31] Call Trace: [ 794.886802][ T31] [ 794.889806][ T31] dump_stack_lvl+0x3d/0x1f0 [ 794.894378][ T31] vpanic+0x640/0x6f0 [ 794.898335][ T31] panic+0xca/0xd0 [ 794.902038][ T31] ? __pfx_panic+0x10/0x10 [ 794.906437][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 794.912443][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 794.918592][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 794.924740][ T31] ? watchdog+0xe83/0x1180 [ 794.929138][ T31] ? watchdog+0xe76/0x1180 [ 794.933546][ T31] watchdog+0xe94/0x1180 [ 794.937805][ T31] ? rcu_is_watching+0x12/0xc0 [ 794.942573][ T31] ? __pfx_watchdog+0x10/0x10 [ 794.947241][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 794.952431][ T31] ? __kthread_parkme+0x19e/0x250 [ 794.957439][ T31] ? __pfx_watchdog+0x10/0x10 [ 794.962102][ T31] kthread+0x3c5/0x780 [ 794.966158][ T31] ? __pfx_kthread+0x10/0x10 [ 794.970758][ T31] ? rcu_is_watching+0x12/0xc0 [ 794.975503][ T31] ? __pfx_kthread+0x10/0x10 [ 794.980077][ T31] ret_from_fork+0x983/0xb10 [ 794.984652][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 794.989746][ T31] ? __switch_to+0x7af/0x10d0 [ 794.994408][ T31] ? __pfx_kthread+0x10/0x10 [ 794.998985][ T31] ret_from_fork_asm+0x1a/0x30 [ 795.003746][ T31] [ 795.007038][ T31] Kernel Offset: disabled [ 795.011337][ T31] Rebooting in 86400 seconds..