last executing test programs: 4m32.944207886s ago: executing program 4 (id=81): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0x4}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x30}, 0x1, 0x0, 0x500, 0x46b2d3ba8e12a610}, 0x4000) 4m32.780971112s ago: executing program 4 (id=82): socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000000a4ff0002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000002ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000cb756d970000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac14144300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000027f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) 4m31.919101208s ago: executing program 4 (id=86): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents64(0xffffffffffffffff, &(0x7f00000004c0)=""/225, 0xe1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2a, 0x2a, 0x9, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], '\t'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "e1"}]}, {0x0, [0x0, 0x0, 0x2e, 0x61, 0x61, 0x30, 0x61]}}, 0x0, 0x4d, 0x0, 0x1}, 0x28) mount$overlay(0xc00000000000000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m30.968349568s ago: executing program 4 (id=89): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x8f4}], 0x1, 0x40800) 4m26.492696555s ago: executing program 4 (id=101): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r1, 0x1, 0x400a00, 0x25dfdbf9, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c080}, 0x4004000) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x1, 0x7fff, 0x8, 0x8000005, 0x20, 0x99, 0xee}, &(0x7f0000000000)=0x9c) 4m25.080690398s ago: executing program 4 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newaddr={0x20, 0x14, 0x0, 0x70bd2a, 0x25dfdbfe, {0x2, 0x0, 0x1, 0xff}, [@IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x3e7, &(0x7f0000001ac0)={&(0x7f0000000300)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x278, 0x1b8, 0x12, 0x60d, 0x0, 0x202, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @dev={0xfe, 0x80, '\x00', 0x3b}, [0xff000000], [], 'veth0_to_team\x00', 'macsec0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x2, 0x2}, {}, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a240100000002010205240400000905000000000000000525"], 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008840) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 4m8.796180513s ago: executing program 32 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newaddr={0x20, 0x14, 0x0, 0x70bd2a, 0x25dfdbfe, {0x2, 0x0, 0x1, 0xff}, [@IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x3e7, &(0x7f0000001ac0)={&(0x7f0000000300)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x278, 0x1b8, 0x12, 0x60d, 0x0, 0x202, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @dev={0xfe, 0x80, '\x00', 0x3b}, [0xff000000], [], 'veth0_to_team\x00', 'macsec0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x2, 0x2}, {}, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a240100000002010205240400000905000000000000000525"], 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008840) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 2m3.849206029s ago: executing program 1 (id=633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0xfffffffffffffff5, 0x0, 0x4000850}, 0x40) 2m1.301056132s ago: executing program 1 (id=644): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0xffffff7f00000000, 0x0) 1m57.675150252s ago: executing program 0 (id=656): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0xf3, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x6, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3486, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4a44e74b]}) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffe) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x240300, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80098, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 1m57.609029629s ago: executing program 1 (id=657): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x11f) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r2, 0x11, 0x6, @random="7bb18c570400"}, 0x10) unshare(0x54000000) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000100)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x5400, 0x4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, 0x0, r5, r4, r5, 0x0, 0x7fff}, 0x8a9, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x8000}) r6 = getegid() r7 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000a00)={{}, {0x1, 0x7}, [{0x2, 0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x6}, {}], {0x4, 0x2}, [{0x8, 0x4}, {0x8, 0xb}, {0x8, 0x1}, {0x8, 0x6, r3}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x7, 0xee01}], {0x10, 0x6}}, 0xa4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="85000000ae000000cd00000004000000000000000100008079127f9993fe31911dd925f721fd3a313f76a631605f6a866a116fa68c7c0b449285146426253f18b52077f42a0cbb016a306704e305672eff74c4ae9fd0687069d0ce35f4ce5a39bf8b8aec7f6c288e95c732ea8a63cf7410a53d56fbf1d0838960ab161148ce1c04325460e673692c3ed2b33b7c17177db5156cfd3237ec274ef1ae9b9b69109c472f33df400d5340a2ca5f7f04a840625480b2c87c996ca62c3717e740eb1c48772fe6b1ba9186713e35bac2cb7fa3f141851ca70c49c7d26254e5b0bdbc8a5c868d0ad1d108f56761b0b54dc22aaee20c607442c2"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1m56.89777494s ago: executing program 1 (id=659): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) mount$tmpfs(0x0, 0x0, 0x0, 0x99c822, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffe35, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5, @ANYBLOB="d6dbc5b68f362c0b094435c56da24b9a47704ae0f741684181605f80bbd7fc5d2e4962e1d268c148efc7ae5fa648909f1cef2f50a5626ec68adcef59766c18f6822a147904b6113b065c799644ebb85cf59b0d0df10740fb4fd2132b6d03f97e6a6ea25d67d232c074e37e31c2f3ea70c7198762a583b97593d7cf59a6b29e687b8ba1"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0) 1m56.43845446s ago: executing program 0 (id=661): socket$inet6(0xa, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x2000000000000048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2040400) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x700) 1m56.053543166s ago: executing program 2 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={0x0, 0x7f390004, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000020000440000000000900020073797a3100000000050005000a"], 0x60}}, 0x0) 1m55.933129954s ago: executing program 0 (id=664): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$getflags(r1, 0x401) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x1) 1m55.932863303s ago: executing program 2 (id=665): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB='\x000'], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3], 0xd0}}, 0x0) 1m55.893134624s ago: executing program 1 (id=666): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x807, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6c8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r3}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000340)=@add_del={0x2, &(0x7f0000000280)='wg1\x00'}) mount(0x0, 0x0, 0x0, 0x0, 0x0) chroot(0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) read$ptp(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000001000030000008000100ac1414"], 0x24}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='htcp', 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x2}, 0x1c) shutdown(r0, 0x1) 1m55.78538124s ago: executing program 0 (id=668): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0xb4, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x86, 0x6, "c2ec8296819ffa60e25afa53c668542836f2d968d4e65f161f6ed827c241dddd4ae2ca632ec02e543311a6857ac660cde0cb625492f63f5c7612bd0b7249d7893454ddaeac6946bf6d7da16156bad289683f526beaf532f9392057beaf0221975f0a530f5b9f74aed72b99af37e34728b18ac936752837e99b83685df2f000980726"}]}, @NFT_MSG_DELOBJ={0x84, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x62, 0x8, "36787841c1c936614ba603731758f9f8b8629eb83a3daa1470b8de1eda6351f8b03f10f4b1bac42523c6ddd8886ed0e027274c4c3be6bee57d3f332857aa19af1bb589bbd4c33405cee294d8906eddac8552686ba6c234a0484f046e3614"}]}, @NFT_MSG_NEWRULE={0xe4, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x9b, 0x7, 0x1, 0x0, "a0cd1c231b83c18140b7d53734ba539d7726b40c85df1abce7b8f6d6c047408f2aeff3824e5fff72be206b73d0c63c583a24e701715eab9e0c7a78b8a2259a7410dc6ebf039f84e07e7bb32a8fafc408ecf14160b820a7a03b8fc29e9e26e0bac73b21f9db9a3ed898962b2016cda70da16d6fd53f2d8f6ebd4339612f74f08a01d50551bc078c1816f65d51f5806dce366445a2403d87"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x10c4, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x29c, 0x3, 0x0, 0x1, [{0x298, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}]}}}, {0x68, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x388}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_KEY={0x44, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "bc69e41556a470"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x198, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x21, 0x1, "f526808ae0ffbac176fd3c3a588af47609e65deafca7f24059de5b72fb"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "06924a0cdf78a04e572c10e7aade31532707248d4f0c26db877a2c997d75cc0859a36ae7725f85587d3203f87f7af4b3665d98489a040adac16f20e1c901cd79f4b31e3cee1824d53a097e529c6c38b0ef272c11a02730d1e62753e65474ab014278e85b251371c32e3ad87d72cec91791cae6c6ee31ddfaf2f8c028f84406617cc96aa5e0673ae18401"}, @NFTA_DATA_VALUE={0x9a, 0x1, "902219347eb4f38778b602bb6913f5ce131f04fd7d4230b565a396adc9a624540f97303600dcbe38086f2933760dae0593e382ba967c199bf48f7a208a59ca4905bf70aa19e5f2a92445494a519d0fdbcd6a78ddffba60102f785aec65224348568dd626e0b386fc6f0c4810a5ec1d980802d5b33ea4d60cc787951f9eefa2322c156c2b990a98ed1dbd8e91bed18903e26e5333658a"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xdf0, 0x3, 0x0, 0x1, [{0x2b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x258, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x9, 0x1, "ecefa933b7"}, @NFTA_DATA_VALUE={0xdf, 0x1, "3f755d98efebdc95758f191248a14ef1322243670016828e8ff76dcdec82cb21fa184b0c84bdfc8b7c03195322b281d9ede46f334c97201eb36bde51798e0023f934b3e63a1151bc2b3e0adabb19619d87d90f4791c0fd6eb7f0c59d2ea087406ddf9602c7750af8ca765d611613892e249fdb764521fe09cd8b1261383d7b7279f3a6faa29410d962e03126395ed7c44973c8082c2d2681dc52b8de6a97470b47f85ef98cfd860ce92ee00306fc161e49f061babb2dedb551044224707a76ec1dffeb8828d1be6496513784965794962d2243bab30e2ecbe6c125"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf8, 0x1, "016efc203e5f6668e08fb3b17d32361ddc587085beaf9fb005a9bba19794febd68f275e06dbfb885ff7573d8292cc5e5e1bcb26a563efd6429eb04795a0f2f7481f9e4212cf8ed9b8e1a27d11e72159d9e6295f0e2ebb027511f88ec6e7a90b5193d432849aaf8968829fcc7f49f91cc792cc4d269829a9a31953a038cef207146eb9bac6ab3a9a727f45b1c76ad3fd552663f69fd22d37533e6f2876b9ed014bc8d559149fb0867cbf085c62d9b63172c8e79365683fd03847b8b78e5f5aa6cea83352ea4d8a5c0d9c0394a8fdc5ba21e1c2b4cc0335ce63a4337115b306b83e99f8f4794076d0e0b7a7e75e6945398e1eb0aae"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4d}]}, {0xf8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xbf, 0x6, 0x1, 0x0, "57e20232b6e117f5ba5afc5bd613568e35cd67f421052d161b165213a566113305b61abbb8e4011855067e20953f1f4f93a4c5fa63533265f732c6a172da404eb18ee2d0e4ebd6b824993e5855296cec941071125f9567e22844afed45502e55ac9ba5fc0d52069eda1e3326de6377db28466cb5993ba16b71c93a3266678ff455ed6082681796f0f0c6c7b28f3197ed412104f31af5a95f79ed9169b72bdc6b683f4ed1a9556046d0a58fd8911fbbf9dba29b758ad5f754fda4bf"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x40}]}, {0x1cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1bc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "8aaed81fd46619147d3950d9f4d0e568519d4ce1ada1"}, @NFTA_DATA_VALUE={0xb9, 0x1, "27721b85f0bcff564488f79307dc7182af8ab818654e4bf4c44eed52676a95de5743e1fc33d058d06871031a43a6bc5e5b27857aff1a79614c47804053148b2551d70ccf650308ca223a61b633f06dd74532b54f57969852b5968ca7f93c5c5c5b82ba10281a092397d74735d6924755938dfa8f79117a0fe18fd1ee94aaf4571718b09e8d99a6d18c16286393695b9e028ec1da843fe5c2e1e84988d0e3a0bcd6fbdd04bdf8316132ef6643d34d34ce453c7b1279"}, @NFTA_DATA_VALUE={0x85, 0x1, "627536c41f86305946de533c0ee7d23cce0bf7a2fdb22b4dc1b13d99c23621c677ca1b6e876104e74be25b3acd5d2840267ab8f4cd9dfd78421747bc2c999e1d3f532355c9e75c725ffc56f972147028be89592ef45d232f2549bca075b4d91dbb62014193998ec992efb90cf917b22f70f02860abd6ca60025a38d92798c49cef"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x124, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_USERDATA={0xe2, 0x6, 0x1, 0x0, "5725b991bfc4ce014f9551020d38a6369d7712cfd0183b9d438d50d43702b5073b3a93c9281ba9c78c1ba870be7d9852fc40dd2975b029d69bebce30c35ebace1d98bdab737cb0274b8f39c30e9312564a288c60119149c174e0eab13358ad8db1d91a2978793d75ee37c85216a1365d3bedeea3570ce63e243ddc2c5e8cce6a18984570de97b7ee4bb8945f715fb17675d666eb5fdec1b6596f089f0e5f93ae2c6735a9ab19ef8830130b359e1b7d1024c7a8e0dc0e2e315b1a44551931fc30e4d12be9b556854579eb24b0c9006168e499539844c2a605a02bd2e45331"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}, {0x218, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x1ec, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x34, 0x1, "46b7dea74e6c6b7763a5e6c78f4c0ab58b165bca417936f8584a1c8fd6f25021beffe4ddccbe5a36e53b6e39009fa817"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x2a, 0x1, "816dbe19a3e534903b8713e6bcbe4957392793005efe499a8a3f85804568a4842cedc98324eb"}, @NFTA_DATA_VALUE={0xcc, 0x1, "5be7b560b673a99d6270ba7c382aff3270b4d747c2e8bb46e37f3dfb0ac6c09960a0bdd9f144ac803fdedd303a9d4e006e625d60db4623ae80e15189ec014e26219de8fc2c4a5f9a7ecda3128eb2a941725d907c72d48a8a303423672d873eba55592809edb590bef29ce4dbb2e76323ecf8fa2104f53c7a4af787a25d40457f6ec262987cd5f0a1b6e27fc2c28c3246d82095cc296c010cfd9926c3a9316445085030c610f6c837f46ef5b872d32a11900c86e63b25faf8d806ad656b9ab2e91bd7a80733dd08ea"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, {0x370, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_ELEM_KEY_END={0x100, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "fa797f5c6a6e359bede9fd17117a4c244d71e1421e420c1e8dba00e1468df0942e17d13c95f5cceb9c38eab7d16eb2d0336f439e9aa2896990061ae03cd1d4574d23bc726477922ef27e0f2fbd63e62698c1d6ccf7eb589c39b2db809ea9ceed3839af6ffc094511bb0896c8db3625b597abf0cb3707489dfa032ac0af8c6bbf02506b7d3338ee5e5b4f4562934844"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x97, 0x6, 0x1, 0x0, "88a3035af4ee6136813c7245b312f54881223b30936ce1d4997ecde6c715e2fce6f799ab604e84125e8728a0183dac32d947a47144c459a6946fc3a79d80ef3967282ebc7dc5121da5a8d07553e6606ef656855660d2c0ca2dade09acf1ef2d86241f2a9df37b31f6bd9b3e24fef24418c7f9453d30efdef26841d011988697163afa26cbe1d587ef0510fbeb562b1a171b165"}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x168, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb9, 0x1, "820955b8f06772ab8f68a4aaeea69966a30832ed2e777db46841be76adeb2accfcf54769b21e9d8734b62c1471264a49214d4e731e9996fa2aca977134cdb02745cd21b0367d54ff069d610683aac1a07161c8fdd16c120e9547a03aadf9a46f585a554335c2c0c18ee9d1f4400c53ee01380c91cc83a71647b96cabae523010d08dcbce6653ccf73ac25830445c717160f435434d00b07cb28b7c55d1680cbbb29033ca898cc68f4bff48b58432b59e50f7f07e5f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x15, 0x1, "9ff120b976ad482159fd8c90ac565cef62"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x90, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x90da}, @NFTA_SET_ELEM_USERDATA={0x80, 0x6, 0x1, 0x0, "05db213e4719b0461eba5e2bc8a62463509a2afead37ac56deb50322e7f2eb805e0f0cc67e69ce781076c9e07f385f1e6c3db3d03a4e271b0665ca075d6d9514af8e85810763dcb522346a77faeb053714a8ee58c84bc662b3c0c1023a3fac1e76343991ceeda0fc104783ad36a719361ce65f03e4b0d8b0447f5ee3"}]}, {0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x11c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xe7, 0x1, "3855a11e37d1ccc2a57ed25774cc54fcc3acee2d03dc228f140cb0fb0bdbd62877d445d18795756efb0cd00f8bf0478ec22f5bb6201371011c06523f8d9aaafb6fa2ef76b65e3eb0c8a9669d88f5a72f3039a49db389a0d95f9a4b2f4c7a670dbcc27db1f89e4b1c5cf0b9cb806bcc9d133dd9d158b3c5846b3502bbf1436ed058121a8c17f964921a596b7993f808201b7b69916dd38a595c174a83fb19cc82d0e6aa0badd5e15dbee1e78ebf0e97b836d5eb497cf14dfb2ef38da8b2177cd42a19898d6ccad403c9ee951084010f3521d4d5a74840ccabc69c9ec841de6933e3b4fb"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x47f4, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x6b0, 0x3, 0x0, 0x1, [{0x620, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0xac, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "ca4064188bc21b2312174ff6eb01205c2786"}, @NFTA_DATA_VALUE={0x8e, 0x1, "295a9e6e78533c1603057e82e6324e22eb0d4912e964cb39267197eaa49ea89034a4c8f7d080052e5578cba67ede4d7c6b8e34f6507ea0d51e81f8c6af124d32d1a2b1431070f03e6d688077832247a2b0c4c1a3a6e2a19df2e687a8c7c58412e04c45a573a5a2f292ec2ee41fc24b664e95b870f0249d2f9515de39ac631043447a4e7cda2796c9823a"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0x320, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb2, 0x1, "3f0bbfe86b42d26857ef8981b4aeaa79deecada5c94adc89081d92acba878fcd18979d283a4a1df002c8be8c3ca9296e998d99ec985dda73ec9f820c6612f4bf2babafceca7d4d95ccc7c91803ac21c2a1bae36ce1e07a4ec5a010f2d0b43ae364cd2a462eb09a72defec2168f701919955768c27efbbda54920ffbc81d7d6f7b2874ae598fc7615c5875a4e322293f68074d00808ea997f66f5742a6249da316e25db3f9beaea1764f0a2f225d3"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc3, 0x1, "4e82a5fa658a8ee8798b6f89c9a4ea229bca179a2befd1e19c5794da94d38c29e3dba6efd86dcea73f72929ec10741ad63615f1810c80b8d8fcf164d803e384d47629b3d6a8876a4e47ab494597b5619c19f473041e4946cc741c3d789bad7cb877ad2b9ad70a8c3bac06d0422b4b84a49a904db359e94de9282c697894e132d50a776254368ea169935bb5a12606af6bbcc7a976708911c6f2b0a0b74d8a2efa4dc4a48e4af46b0187e7bb32396879971b430bbfef949aaaefc11e2dedbfa"}, @NFTA_DATA_VALUE={0xf3, 0x1, "f5918e46818dab1d9278bfb48f7ad59c4d9138f38f92d5ec37c0172841e0c4c8d7d4e6a340e20a7b3685b2a5859ab4504d9bb5841cfc52c42269a9ed9577d5559dd36236969a9a76a4414738192923d8b206fa77ae81bf076a7908a39390c7ac7822a3844d9ba54b8412f99264522a1220107e6c0116388063a53393eb0a27de95dbebd9d5748af32230cb397647ba00b6eec43a9ceba4b9f7abeb2e9fd9f4935228d9e615be9eff20845906fec0467e34949febc714a1ba76bb035fddbfb31a405d7c4ad5552eee79d894e1ff52ef04301690dfe312456330f317b1425c47afffa5ba56b948fa0d3c972e2b4d06b8"}, @NFTA_DATA_VALUE={0x7a, 0x1, "58ee9fc21993ff83a9f0e6a9a818742b49a7aea6a513dddbe173e6a9d9fe6f27fbdc71bda36b9068c95e396a78d866a42a04b4eaf9d6a7985af959203f97659ffe88539c3641337d5c9167d798804d819212184b7db7dc0f286d55ca6edb6b203019006c186ba981f45b92fe8e469661989923f70c6b"}]}, @NFTA_SET_ELEM_DATA={0x21c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x81, 0x1, "3dbc777ad5fb0b93786bc0b949b4b6f9739e2c436b6cfc1a91d2b5e5081ea9fd06b329893503f2b67a7ba2580d623c035fde8e7a883b9a3ac2d3f6c1d4f5ba540025dbd0c072332a810e3cdcb45e370b003167cb86e80370af9edd56da9eb3f1e03fa99fd05815e153211eda35a7f664385b8ab181467d5e6371ed1225"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000001}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x3c, 0x1, "9bf89e3d6e5e40293e43b7de2c1a987602495f4c891616d2692c1ec2acbcda470de67d0609b713cb213cd78484dccc86d7ffb9c5cb48d429"}, @NFTA_DATA_VALUE={0xbc, 0x1, "0a70e6d3655612a7c3c0ea16f89df100973e383d73663f0f98f63731636ba5775390ed06f0551d5282bab890f2393e0f1c694485e7bd2921ca075835f15e5b6c40fbb6791fecf7d210f069b14cce56b5f50c430555f2609f56456fe53e2ff366a19453af300c86dda14c6bbddb748505ebb9aac1b1f2d219ce6ecff2e4386e342b9f541e0433c9f672c70611189225028758ff39c23de4c8db58d43d0b4fe4bc35c38290fb21fb9d25ff2deb70cabab6cc070894b4fb7bb6"}]}, @NFTA_SET_ELEM_USERDATA={0x1a, 0x6, 0x1, 0x0, "3b7da937bede9e9277406f0e8889db61a5f1c30c18d9"}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x88, 0x6, 0x1, 0x0, "9548ed921f77af6b8d242a2dda33a62b1e4f3ecb20cd89603538fb9d943d4ed87adb51a8341d35971dea18f1f07ead7050df8c00a14b8fd388fcda1b3fdf08eb7dcc12ce8fb9bdab80d57cb25bbe8d94d16c241b4dce730d2a1b3ca273bd0a02f8d2c3903b9e30dd0231167cc12b35cb32a0edda433233c5d6d713ef4d3232c9bb7f2aee"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x289c, 0x3, 0x0, 0x1, [{0x494, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x101, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_KEY_END={0x1a8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x63, 0x1, "ab4c7892797fc7505427516ef7a4069e23ff674a09d8bcf6d4719a9e5af9f821f00343121cf77998435815693c46bce49ccda689ca3e9d97d3087c821a9bb41c9567759aa4062cea2be1f102eee37e56a8d49b60072eabc70d377ad1caae77"}, @NFTA_DATA_VALUE={0xce, 0x1, "367721c08cce0a691ba7276ab20dca825baffd914187779a395b759f93ccb00ff5705b6d33cde9c24fa396a9b77a24e8e04c3557bdd20fe60e66d2299bfc72012f42514d34a263e9bd8953e12dd7a546988f08f28e78e83b4fef4ef3440debd5914e9fbdc4ce1e8846f15ebd6f4adadf4efc54b0ba9c40491721b1a7f1aa2baff14d688911721fa48baad391b21a71befbb977d5afb7560efdbbd754d51092e12d23b78564e29bd9c2706357de6b99355e13f753469425bade9acc6f6ce9d995fa73672e5fef7d37e767"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_KEY={0x1e4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7fffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "146c7a66dab1f137a8cb1d6b00630c6e8e43bed4e0c3b19177d4af162ed72d57cbdb418937e0f6fd231f78ad202f8980676b4e45c558fee7238615fc08c17c10c0d59a9b1aa3a8562148d7affcd8e5880e4004401ff477cd374139bfd5252e252d5af1d2800471eab26ca107a27cf31652c3909abee9b52fe75c9999eac4aa3c584f0d1b638d4ec746e6b1ec0c860a0fabfd47895aa9bedee1"}, @NFTA_DATA_VALUE={0xfb, 0x1, "b0b13c697aef235cbffc5000a3fc7fffa43ec3c2e3461f483e125a0f544a03156bc1adeea72be93af9161db8cd215d6c52f735d04d58431f9f6978e99f3f3a3c1ff6cbfc7306799de4373d2a32e86c0e4d2d7f2d36de5c986bb89b494cf839d69f95b3c1ef7da8f9409f8a4a7cf4bf5bd9bbd5f9487043cc985e137d2b3683bebb6c1f85464b7bfc0d0717687bc73ecc9eb3380e0f73fa309994cdd6f3d2080fd6b5be282155ab6764ba4c22126e09f1be610e093cfe046132a90276af554371749100ce7c285b43671b2a8546aaabb77dc4ea1fc0f0084b624970dcebe282caef6b037e2cdb0700d6e08e4d43c59ab6f8a5e160803b08"}]}]}, {0x4e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x78, 0x1, "40721d56e2c529d956d5f9d9e416429962a730b2c45b7de8bf5754da15d0cf7ba69c4388a704ae1da2414f307e9d26f429998af1ce1e4d50f3c5ff2153c9a8b456c9ed29b8e1b6af63a3e4487c95a5d0c4663083e98020e9f8147cc4605d230e4464089ac6d7b6602a6a066c1efee57425bb1736"}]}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "61b1ffb84fd5af3fd9ecbb3bca41b41ed702"}]}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x3cc, 0xb, 0x0, 0x1, [{0x3c8, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x3b8, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_EXPRESSIONS={0x3ac, 0xa, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xc9}, @NFTA_HASH_TYPE={0x8}]}}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x308, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2fc, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xa0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x60, 0x1, "4270666c692219e8ae655f9e6fbfa2b0d691aa5ddb2425e527ba89991d7bf3a4fad11d1e1f3d96212b3ce7f3d3a34608f2eb76b6bb6715e852d1809a3b58b6ef052a43b7f083dc9eeeed3ea9717f08f95ef6000c85d77b7b7f841609"}, @NFTA_DATA_VALUE={0x19, 0x1, "b8e491d307e82837be500941369e542078071f951b"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_CMP_DATA={0x174, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "fe69fbae068ee68d0202c766c10542d78dc5042c4a01ab9e72055e65f18429c64526e5b468ea6ecf090dce1c860405c14e4bcdfb85c87fea4556667394bb4cebee8eb12e57a5b08e7328f92f8a2baa13f80f1e6df76b0808a92c46bd5c9c1904461f830fab724a664c8b54c70949947ef5dffb51a1244638f1633ef0e7681c5ddc88cc81c222de9dc1e1b7b839d4c9f2730c60aecfe4d948b0f58fdfa06150b6dce0a3e15b8948bdedd2b2cf2c973eca01fc2ce8f9bb696cbb8e14d1ad2f343d8a147134678346c215f3f91b4a"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_CMP_DATA={0xe4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdd, 0x1, "57e1f92195d572d6e21dd76036c16be1197b9628690fed44b39a7f65f4f4ff1cc2e63386bb93352fdb5d7c934fc91095e02a5c8b56d2b842e4b7170b7a8f5818abb5de01ce01bfc331f29f0a621c92bf67862a2485dce6f0918236b50a79596d80c4fe8ec4b2b087715b2821ac77dcc2bd3613c6b5e770fda4c11c494ac6fb4338ad1c8b427171dd6dd0745ed7510ddfe224f554ac8fc4522a055aa834aeca88ae82a908c69d6153e940ed0d5e39237b3f8d60c946c4761616f5ed0dd5fe4b1b87ca1f68d6720ef740e2230270777d30330940e1006559538e"}]}]}}}]}]}}}]}]}, {0x6c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa4, 0x1, "93d5f0f18861e182ffdeccd1ea62eeb6d5a6d336270452de4cbe10b6a925f042fa74f2cfb4bba611f2f7414efc3411b2037b13fa83e6aac4e9fbec7d997807682280c09acabb335330bbf04856e10929ddfcc0e37ac7e7b5c2ac1e5405c485803e6d06e8e411aaacdc9197199832dc7f11e7e3621e09fcf4edf8bd4fde5b9b6a6b478fa4e3e5cb67625a8411838901eae1a058f53845aa853871534bbb055c63"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_KEY_END={0xf8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xdb, 0x1, "85e5a175a788eaab2e2aa0faf6876d201c5e33dc9c45359a62a1e824474fdc527621e5e2d1ca226254ec602487ad0f87eb2826bfb019ac0c2501ab75bd72ec98e4edc6dbc37fbcd2a8e1d65882902be7e15ce0752e72cafe8c40d545a1855e4bcd5be405dce27ee0f02f7aa98cf37fb9b817feba119f3ac40f28f3b92c3c54684018f65c2fb10de3fb88860772120fedf8fc6d128c4238dcdb42f80c102b838a64e6bc98a18364506e24fd28147287e3866e7ff9c598f1db33d7b638d719e3c989e93c2057ea74c040f500df43a9e1771e36a0b6a1f949"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x300000}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_KEY={0x180, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd, 0x1, "be64f3c2f5baa9e811"}, @NFTA_DATA_VALUE={0x73, 0x1, "0ca15f4fdbfcacccb1b592cb80c4b8c7ecc899cdfbbeca30393857437b72deac2c0375c4acf4287ffd17b1387b8e8f24df7846a8d4db4eb9939a12ea830eb0f5a0e70f2bb51b29dcd1d244e32d700f7e3717949dba6ffdd0d6f8005fc828a5d92a6726256b8621db98be54dc5b6d17"}, @NFTA_DATA_VALUE={0x22, 0x1, "5d911e15b73faa78f598bd34a45c77d6946d376974fa7153e389b7d49026"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x304, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xbee9}]}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x50, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xf4000000}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x97}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xf4, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xe4, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x97, 0x3, "ba0a2c15775624e2eaa28994c320f17b14367f5e5b769213d0f4f1fb91e67b094ba04657ba262ccf197dcd60d30a01a3094584cdc81a52e195fb550213620663bf190be8db71dc503dce5adfa3bddba4e64c7de07771c67e12b971326422b275fc9036c5d910fc0fad82a16ce940ffcb1756020f2f83c114ae7b2b35213d0a0d501f9cddbcdbd8789be0c12c61297fb11a261d"}, @NFTA_MATCH_NAME={0x9, 0x1, 'ipvs\x00'}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_INFO={0x2d, 0x3, "96e7044043c3b88e458d63b0167a18a7017d53b340f480289f1c2839c45c4b86043a6fd74d41175a84"}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x138, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x128, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x108, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1971b477b5c8e409}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x9a, 0x1, "13c670dcdeed874b723e7460ad0ea52b157a20f5ca82bff2ba32bded19b1eed637a53b385f8efa5ed79279d6fcda842e807bc6695e95421264431a0a0d94bce8a543c9fe4c838dc1f04c95fc4824311e4fec655f194d63d8e48b693c8daedb9f2265a435e298397b1bb1f166918fcf97875bc25b4bd0669acf5745fe229a48426d87177a26923a8ff6331264674aecc1c9b33fbca29f"}, @NFTA_DATA_VALUE={0x32, 0x1, "16859e0a02d18effc2efd4f135f72436cb85e6028a325c067cef27a38f896f54f41119255d49f8986ad1ab30fa47"}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xbc7a46334c2436d1}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x94}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xaf}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x158, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_DATA={0x144, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "3e8ec9f3c35a654cf7621cf5896d65ea037cfd917e709abcc11c8b5087e98606dd619e32a5f3c8a2e754d7ff3573ba9521532241868a0b513b71f4491840eb4f0d9f8419b1322c6ca85cb9e98488e2db3862796be3d965d21c967cc838de1c739eded235325f30bc79b4f5334363cdc166cc172f24d484bc6a8a451af59cb49fb20e026b0d8ce3f6bac5ac47925317c94e6df578b8b5b5f18742d2e5905bbaa1413bea61cc367a3e23de65267a65a4785695766a862b3746a32ed4a8075d2080cb829bec694d4c"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6aa1b14ab6a66151}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x1078, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80}, @NFTA_SET_ELEM_KEY={0x1068, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xff4, 0x1, "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"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x238, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xd61e}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xfde}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x55192bdf}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_DATA={0x13c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfd, 0x1, "667f25b76a7baefad7aeeb909eccd90dbf99b422f86d35a661b173dfaa9e9801014d6c225fb932b87dc758f477ffe73783f1ccd8ce23d5be8dd7f6d20ad04749cf64dba0dfed94e6f95afb70eb7b8b10acc92d535fce2386865ddcdeaa3aaeaf4bc4a7e9e0937b04ef7626546c53427651e941cd1d95cffbf34adedc3b8bb0d5fd44036baa04717e1fb71c91e485840b160acc970d9be8ccca2ae8b130149dfe57f3d67daf0219ad41c293cac7cb117dcd80db30b21a617979ba136707ec7ab2444dd83d070a83669f7dc8ecd437301d16e7d7d82e4e847f9f78853a6dc67b94bff35240b6f26d7528063e2af9598db94584c83db0b803b303"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x30c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_ELEM_DATA={0x22c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcd, 0x1, "8101381fbeb2b7fb77875f67cee74553d1856a612b9dd885635c97dae7ed2fc276b5abd016234152629da3052bba8b2a94b1cc4d0776b8af73d30774c17fec29dc4067ed13bf7dacc8df205a1feb53fdd494c9c3a90b8e117cbe9b66f6204b00ac2b84b691be1186d024a60998e53e850508bf5ffec20bb451088189b4e46682547416570e87cda96857b8282e6caca156191828736738f5ffc2ed259bb7745ffaa17ca5985e0577ef71c5961440307b83d75494c356c6ec1ffb24553358a72ca11b1de4e60e95eed6"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}, {0xbc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xb8, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x30, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xf08, 0x3, 0x0, 0x1, [{0x4}, {0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffff73}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_SET_ELEM_KEY={0x4}]}, {0x350, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x150, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9d, 0x1, "9a27cd383d13e4996a0fadad90460aef03edc7d7a0a5f095da97563ef16b378536235ef4f78a51fd646c87c564e9a6252112faeb8c189c0d08f0c57b86f99abb2054d9bd6290b12750d2b6631b651ae6d32806ccae3c471a8adfcb228dd61e5282640372de2af867f9070d420600a2df2b68799c7c3a54584cbaec2af4199a10f62b2241a20f6c77eadf234cad4189b98c365376a208f5bb92"}, @NFTA_DATA_VALUE={0xac, 0x1, "ea8f0eed01a9079e00a697e5a13aac7b57275c2a81aa3bcbd8c8fc6bb74da62ecb849c7d95ad07da071eb195bfbbf943c66f3d1f68bc36fc0e59c84c6227bca45dca3dd4f51f2f5db72e2bc186f42a5f326fca01208d0b0fa921ceca49560ec2060cca2006c0c33c3b5c81eaf26663650b2e9a154875cd3630a529ad38996075a72ad14207af40cf4c498b9e8e2d1cd3f8a66bf6ef087fd8528e0e06826e9c446658f1590718d997"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_DATA={0x1f8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "6d65eb0ba229df5f38fb7a6d92585156f374a152c0eadf403ca5fd527ea463ec2ca378a5dedac552ba6802f34cf5a684823613363888ad30320fd9f0b59e63836f1ae6f30f95abf383e9989831ec"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x4a, 0x1, "16a8cbb13a381c3d03e526b99dcc9c6ba7f6f9ad0833f962faedbfc5f0e24159e3ebd3136ead17784b49cd15242a71da91aecc9386e27a676011ee6111ab351a884e46a87327"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffff9}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xbb4c72d6cf45f7e9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xdc, 0x1, "b04256787389c41170d026d4283e10f2c6121a415c7d4beeb778ec5b3e7d4e1ea1ccc531141977b543134fe1bb9915166538e698725e56977f50ce6c5ce5bc9d8e86f4827fbf2462bf611ef28d8c2238ce546792d914a67ba28ee69c83f2a959c408f62aec091d2b288825751bc77c080d5bfb7a3ae37dd53306a47daa7726fb68ed8c3270a52c6182b94d447022dffae359c688dfb23856ca4da0eceac29da3809b90366b5ddd1b9883ed42f1f5ec675f6cadbb0ee7adbd6f37760f37497764e5da9694ef5c749980577dbc3b140636dbfba57cbd604a8b"}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0xaf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4d, 0x6, 0x1, 0x0, "104d54f09348a27e8446ab829c3393adb922205f91de8a8204e586666b797c4e4baf83fe713f7857866f11d1602301f2c81db0e54489acc54476959c3905cdb9f51776d3c4a228e9d4"}, @NFTA_SET_ELEM_KEY_END={0xa9c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x47, 0x1, "9e74fe0eee7b668b4fbf35e7e631b8c53a60b1daa5defc6386644ada0bf494e4ccba5715205d41f11b7a4e94ca2724d049657149f4ad7f6e29dd3c6284e73771d80ee0"}, @NFTA_DATA_VALUE={0x9ae, 0x1, "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"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "7198726b519fb1c802694ca8ce16bc22ff297c34887d58bbd8"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x968, 0x3, 0x0, 0x1, [{0x7d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_KEY_END={0x11c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x51, 0x1, "e0a51a9cb66056a26b8e34a0d6b571f853b0e5b093612df154f06b1ec8311f75e7b24b73526badb4d30b0e59423867eafc153c12ccde99ed0e3a3a1d2547dc44d83f817d2de6515b8a9164f9a0"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x77, 0x1, "1b2a9337747825cdfd4a10421ef4dc1f772da53c42edffd7ae89dc4f544775c0cfe79fdfedff2c15853a3492d3049569ce46e8190582a6f0e580f484d3369b237be177960ba100f69936b5c4ff7818d21dc001e39cdc8b397b1ae2fe6e502eb17e7994a32a1d8fe2932c1cce0853290194e986"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY_END={0x680, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x5e9, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "120c1f752a2ce4f73d629e15b8bd91cba76ca704eb97e4b0a4506f227ac86cc295a58e461eb490ed"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x168, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x39, 0x1, "0226e3d84653ac3513e3c539c29b4aa0e27843ac99e0d06dc03b722d3953102ea0b352c7f0574698c7cc399df8a434cacd852f8bea"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0xa8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa1, 0x1, "91d219750aac75b18b7e3281c8d776a9ec898a5d57519bba9ad5c28124ed31ebc97abdfb1692ac97d206ab17f9e4c7428177c090606804a329d4773fb1c25c7f98e8d76e76d051d816abe5b6502bc5495d2681105b4cfa598fa85cedbdc788eba41c588eab31fc5740d9e6012dd4993e5ffc34fce9b869d5f6feed37cb7c3b4be319fa66b405ff18ce65773634fc0744e33cf1b3554a4dcafd3ed1f801"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2b890000000}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5afc}, 0x1, 0x0, 0x0, 0x8044}, 0x20000000) 1m55.784774313s ago: executing program 2 (id=669): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x11f) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r3, 0x11, 0x6, @random="7bb18c570400"}, 0x10) unshare(0x54000000) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000100)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x5400, 0x4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)={{0x2, 0x0, r6, r5, r6, 0x0, 0x7fff}, 0x8a9, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x8000}) r7 = getegid() r8 = getgid() fsetxattr$system_posix_acl(r1, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000a00)={{}, {0x1, 0x7}, [{0x2, 0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x6}, {}], {0x4, 0x2}, [{0x8, 0x4}, {0x8, 0xb}, {0x8, 0x1}, {0x8, 0x6, r4}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x7, 0xee01}], {0x10, 0x6}}, 0xa4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="85000000ae000000cd00000004000000000000000100008079127f9993fe31911dd925f721fd3a313f76a631605f6a866a116fa68c7c0b449285146426253f18b52077f42a0cbb016a306704e305672eff74c4ae9fd0687069d0ce35f4ce5a39bf8b8aec7f6c288e95c732ea8a63cf7410a53d56fbf1d0838960ab161148ce1c04325460e673692c3ed2b33b7c17177db5156cfd3237ec274ef1ae9b9b69109c472f33df400d5340a2ca5f7f04a840625480b2c87c996ca62c3717e740eb1c48772fe6b1ba9186713e35bac2cb7fa3f141851ca70c49c7d26254e5b0bdbc8a5c868d0ad1d108f56761b0b54dc22aaee20c607442c2"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1m54.90391116s ago: executing program 1 (id=671): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0xf3, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x6, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3486, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4a44e74b]}) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffe) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x240300, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80098, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 1m54.64539503s ago: executing program 0 (id=673): r0 = syz_open_dev$audion(0x0, 0xffffffff, 0x8000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="de1be9162d594713f5dcaf2cf2c8c58a75e2d403b0570f11ced04664bdad11bd6af904a5e314589c5552d1e4f426e036752f7d90151b3bc9c8c4cc2f0700000000000000dffe4e28215edf9e05e5fec0265fe00c479dc204da2c422e50834bc218df80473aae8b72c5dc44eaa81700"/123, @ANYRES16], 0x28}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 1m54.209097843s ago: executing program 2 (id=674): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480), 0x1f00}}], 0x56, 0x10) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x6}, &(0x7f0000000200)=0x7fffffff, 0x0, 0x10000, 0x7, 0x8, 0xcebc, 0x11, 0x9}}], 0x58, 0x40845}, 0x0) 1m53.402808946s ago: executing program 3 (id=676): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)=@l2tp6, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/170, 0xaa}, {&(0x7f0000000600)=""/237, 0xed}, {&(0x7f0000000400)=""/125, 0x7d}, {&(0x7f0000000700)=""/107, 0x6b}], 0x4}, 0x9}, {{&(0x7f0000000780)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/135, 0x87}, {&(0x7f0000000380)=""/27, 0x1b}, {&(0x7f00000008c0)=""/124, 0x7c}, {&(0x7f00000004c0)=""/63, 0x3f}, {&(0x7f0000000940)=""/100, 0x64}], 0x5, &(0x7f0000000a40)=""/212, 0xd4}, 0xfffffff7}, {{&(0x7f0000000b40)=@hci, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)=""/11, 0xb}, {&(0x7f0000000c00)=""/155, 0x9b}, {&(0x7f0000000cc0)}], 0x3, &(0x7f0000000d40)=""/145, 0x91}, 0x7}], 0x3, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)=@l2tp6, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/170, 0xaa}, {&(0x7f0000000600)=""/237, 0xed}, {&(0x7f0000000400)=""/125, 0x7d}, {&(0x7f0000000700)=""/107, 0x6b}], 0x4}, 0x9}, {{&(0x7f0000000780)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/135, 0x87}, {&(0x7f0000000380)=""/27, 0x1b}, {&(0x7f00000008c0)=""/124, 0x7c}, {&(0x7f00000004c0)=""/63, 0x3f}, {&(0x7f0000000940)=""/100, 0x64}], 0x5, &(0x7f0000000a40)=""/212, 0xd4}, 0xfffffff7}, {{&(0x7f0000000b40)=@hci, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)=""/11, 0xb}, {&(0x7f0000000c00)=""/155, 0x9b}, {&(0x7f0000000cc0)}], 0x3, &(0x7f0000000d40)=""/145, 0x91}, 0x7}], 0x3, 0x2, 0x0) r3 = syz_io_uring_setup(0x585d, &(0x7f0000000140)={0x0, 0x400d73c, 0x1, 0x1}, &(0x7f00000001c0), &(0x7f00000003c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x389d, &(0x7f0000000ec0)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r3}, 0x0, 0x0) (async) syz_io_uring_setup(0x389d, &(0x7f0000000ec0)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r3}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) wait4(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000002000000000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r6, @ANYBLOB="2e00000010"], 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0x556d}}, './file0\x00'}) read$msr(r7, &(0x7f0000001340)=""/4096, 0x1000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02800000020000000200"/28], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02800000020000000200"/28], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) 1m53.090489866s ago: executing program 2 (id=677): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000140)=[{0x6, 0x11, 0x4, 0x2}]}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000200)={0x0, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) syz_extract_tcp_res(0x0, 0x8147, 0x200) syz_extract_tcp_res(&(0x7f00000005c0), 0xff, 0x1) syz_emit_ethernet(0xf7, &(0x7f00000003c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @generic={{0x14, 0x4, 0x3, 0x7, 0xe9, 0x66, 0x0, 0x5, 0xd8, 0x0, @broadcast, @rand_addr=0x64010101, {[@timestamp={0x44, 0x28, 0x29, 0x0, 0x3, [0x7, 0xffffffff, 0x9b, 0x8, 0x7ff, 0xba73, 0x3, 0x6, 0x333]}, @lsrr={0x83, 0x13, 0x44, [@broadcast, @remote, @local, @broadcast]}]}}, "01aa4f058c75c23e22f68f48db6d70d2a04772ba7be9029b2fa21cc5388f1fd947a4c3fa9a5c6dbdccd2fd0cf5a6d75eea2eaa8701e05bdd10893f8377b5c19c6fd18dc2afb307a553aa6e07d4b50e8496c647e7e313a45d54b6c0d2ff74f8ba4581d3ae58d2103e72ceee8d24e4de24b69454a252f5fece99ab239346081fbb16f06cc9d64440b5ab7540e4444bd68a83c3417a98af36a8d4"}}}}, 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0x10001, 0x1000) syz_emit_ethernet(0x11d, &(0x7f00000023c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x1, 0x4, 0x10f, 0x64, 0x0, 0x8, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, {[@lsrr={0x83, 0x7, 0xd8, [@multicast1]}]}}, {{0x4e20, 0x4e24, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6, "ebdb50", 0xd8, "f1a79e"}, "6d2485732527abaee184bcc081205ede9800811a73709e90ce706aa75d59b07770dbef84cd86c8a8b7e3a68c66ff698ceef9d009b337c120b5c7a140e214f6ae3c9c5780b7e808570ef25a145ca78728e2f9336cdd435c5b826cccad32d4c97a64cd0b2b993f56caf9d569dc37db3ea5dd69ca1098e612bb41786793906f648165657253d882b3bc045b37f02b8617357f93ffa341381b20cdb55169c797a0bcf3ec3ea9a86fea31598cd6ebcd4042b7e7609531a6c496816a3a29533247c5c6b624948416c7517f0ebbddc69f8aec6575891db8c00cbbc0fa44505c737f9b51957930"}}}}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd2) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000ffffffffffffff8000ffffff80e500020000000000c500fcff000000007f00feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff6f}, 0x94) 1m52.998066207s ago: executing program 3 (id=678): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x18}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m52.996656996s ago: executing program 0 (id=679): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2b, 0xa1, 0xef, 0x40, 0x5ac, 0x245, 0xa3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1c, 0x0, 0x0, 0x3, 0x4a, 0x2}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x802) (async) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000080)={0x9, 0xc6}, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xe, 0x1, {0x8, 0x6, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) (async, rerun: 32) r3 = gettid() (rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 1m51.961111733s ago: executing program 3 (id=680): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) 1m51.939418608s ago: executing program 2 (id=681): open_tree(0xffffffffffffff9c, 0x0, 0x89901) (async) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c000c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) listen(0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$COMEDI_SETRSUBD(0xffffffffffffffff, 0x6410) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x800) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mq_unlink(0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) 1m50.158622338s ago: executing program 3 (id=682): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, 0x0, 0x0, 0xffffffffffffffea, 0x200000000}) timerfd_create(0x8, 0x80800) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 1m46.688992843s ago: executing program 3 (id=683): openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) syz_io_uring_setup(0x73d3, 0x0, &(0x7f0000000540), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="030303100000fddbdf253da6ff00"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x82100, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000002680)={'macsec0\x00', 0x7fff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, 0x0, 0x0) 1m37.718754927s ago: executing program 33 (id=679): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2b, 0xa1, 0xef, 0x40, 0x5ac, 0x245, 0xa3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1c, 0x0, 0x0, 0x3, 0x4a, 0x2}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x802) (async) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000080)={0x9, 0xc6}, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xe, 0x1, {0x8, 0x6, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) (async, rerun: 32) r3 = gettid() (rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 1m35.737339884s ago: executing program 34 (id=671): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0xf3, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x6, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3486, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4a44e74b]}) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffe) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x240300, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80098, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 1m34.717331054s ago: executing program 35 (id=681): open_tree(0xffffffffffffff9c, 0x0, 0x89901) (async) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c000c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) listen(0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$COMEDI_SETRSUBD(0xffffffffffffffff, 0x6410) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x800) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mq_unlink(0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) 1m33.744063015s ago: executing program 3 (id=688): r0 = socket$packet(0x11, 0x3, 0x300) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x8, &(0x7f0000000000), 0x4) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB]) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r8, &(0x7f0000006b40)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380), 0x1814800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r7, 0x4) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000340)={0x0, @initdev, @initdev}, &(0x7f00000003c0)=0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @local, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa0}}}}}}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r10, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) r11 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$uac1(r11, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="400505"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, &(0x7f00000001c0)) 1m16.942158259s ago: executing program 36 (id=688): r0 = socket$packet(0x11, 0x3, 0x300) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x8, &(0x7f0000000000), 0x4) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB]) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r8, &(0x7f0000006b40)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380), 0x1814800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r7, 0x4) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000340)={0x0, @initdev, @initdev}, &(0x7f00000003c0)=0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @local, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa0}}}}}}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r10, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) r11 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$uac1(r11, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="400505"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, &(0x7f00000001c0)) 51.816319045s ago: executing program 5 (id=694): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1a000, 0x4000000) 44.585719394s ago: executing program 5 (id=695): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000020000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 38.372992974s ago: executing program 5 (id=696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000300)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x1b8, 0x12, 0x60d, 0x0, 0x202, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @dev={0xfe, 0x80, '\x00', 0x3b}, [0xff000000], [], 'veth0_to_team\x00', 'macsec0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x33, 0x2}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x2, 0x2}, {}, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a24010000000201020524040000090500000000000000052501000000000725010000f3fb"], 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008840) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 29.72372989s ago: executing program 5 (id=697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000001a0000de00000000000014000780080006400000000005001500010000000500010006001f00050005000200000005000400030000000900020073797a310000000012000300686173683a6e6574"], 0x60}}, 0x0) 25.671065224s ago: executing program 5 (id=698): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x4006, 0x53, 0x7, 0x0, 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="ec4969ce12aee5cbcb87448d7b8d39e591f0817d13f230e3603631a855802b483c", 0x21}], 0x1}}], 0x1, 0x20000800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000067c000/0x4000)=nil, &(0x7f0000711000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000e3000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x100000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12019be9a0e900025b3387106d040e0aaa9d0102030109021200010c000000090442ee00"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 15.117172064s ago: executing program 5 (id=699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000003000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 0s ago: executing program 37 (id=699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000003000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) kernel console output (not intermixed with test programs): nied { create } for pid=6602 comm="syz.3.189" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.314811][ T30] audit: type=1400 audit(1764360962.242:369): avc: denied { link } for pid=6602 comm="syz.3.189" name="#3" dev="tmpfs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.337160][ T30] audit: type=1400 audit(1764360962.242:370): avc: denied { rename } for pid=6602 comm="syz.3.189" name="#4" dev="tmpfs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 121.026328][ T6190] hsr_slave_0: left promiscuous mode [ 121.103062][ T6190] hsr_slave_1: left promiscuous mode [ 121.115872][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.182047][ T5818] Bluetooth: hci5: command tx timeout [ 121.202147][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.222311][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.231071][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.498742][ T6190] veth1_macvtap: left promiscuous mode [ 121.516095][ T6190] veth0_macvtap: left promiscuous mode [ 121.536540][ T6190] veth1_vlan: left promiscuous mode [ 121.594012][ T6190] veth0_vlan: left promiscuous mode [ 124.158651][ T6646] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 124.319024][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 124.319035][ T30] audit: type=1400 audit(1764360966.792:384): avc: denied { create } for pid=6653 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 124.365464][ T30] audit: type=1400 audit(1764360966.832:385): avc: denied { write } for pid=6653 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 124.390178][ T30] audit: type=1400 audit(1764360966.842:386): avc: denied { read } for pid=6653 comm="syz.3.198" path="socket:[10737]" dev="sockfs" ino=10737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 124.681676][ T6660] slcan: can't register candev [ 124.694696][ T6660] Falling back ldisc for ttyS3. [ 124.734642][ T30] audit: type=1400 audit(1764360966.972:387): avc: denied { write } for pid=6656 comm="syz.1.199" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 124.826442][ T6665] netlink: 92 bytes leftover after parsing attributes in process `syz.1.200'. [ 124.838616][ T6665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.200'. [ 124.960261][ T30] audit: type=1400 audit(1764360967.432:388): avc: denied { watch watch_reads } for pid=6668 comm="syz.1.202" path="/42/file1" dev="tmpfs" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 125.019290][ T30] audit: type=1400 audit(1764360967.462:389): avc: denied { watch } for pid=6668 comm="syz.1.202" path="/42/file0" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 125.624703][ T6190] team0 (unregistering): Port device team_slave_1 removed [ 125.652806][ T6190] team0 (unregistering): Port device team_slave_0 removed [ 125.882241][ T6515] hsr_slave_0: entered promiscuous mode [ 125.888352][ T6515] hsr_slave_1: entered promiscuous mode [ 125.901121][ T6638] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 125.934219][ T6638] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 127.530404][ T6515] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 127.583418][ T30] audit: type=1400 audit(1764360970.052:390): avc: denied { setattr } for pid=6697 comm="syz.1.206" name="NETLINK" dev="sockfs" ino=10860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.718711][ T6515] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.782900][ T6515] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.804847][ T6515] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.871937][ T5859] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 127.899226][ T6706] netlink: 'syz.2.207': attribute type 27 has an invalid length. [ 127.910535][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 128.204472][ T5859] usb 2-1: not running at top speed; connect to a high speed hub [ 128.215557][ T5859] usb 2-1: config 3 has an invalid interface number: 247 but max is 0 [ 128.352813][ T5859] usb 2-1: config 3 has an invalid descriptor of length 255, skipping remainder of the config [ 128.398434][ T5859] usb 2-1: config 3 has no interface number 0 [ 128.437991][ T5859] usb 2-1: config 3 interface 247 altsetting 88 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.504043][ T6515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.538885][ T5859] usb 2-1: config 3 interface 247 has no altsetting 0 [ 128.753154][ T5859] usb 2-1: New USB device found, idVendor=083a, idProduct=4507, bcdDevice= 7.f6 [ 128.845680][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.860282][ T6515] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.871586][ T5859] usb 2-1: Product: մ仫哿ꘛள耒댻ï‹ì°ì²„ᔃ鎕ë˜à¸¶ïª¯æ«ˆä€œç°í¶ [ 128.887051][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 128.902831][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.909994][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.920478][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.927679][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.938279][ T5859] usb 2-1: Manufacturer: à¡  [ 128.970713][ T5859] usb 2-1: SerialNumber: И [ 128.977171][ T6724] openvswitch: netlink: Flow actions attr not present in new flow. [ 129.003438][ T5859] usb 2-1: Could not find all expected endpoints [ 129.431034][ T980] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.567353][ T6515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.617766][ T980] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 129.655545][ T980] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 129.655636][ T6744] 8021q: VLANs not supported on wg1 [ 129.692026][ T980] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 129.728703][ T980] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 129.748289][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.758863][ T980] usb 3-1: Product: syz [ 129.763553][ T980] usb 3-1: Manufacturer: syz [ 129.791417][ T980] usb 3-1: SerialNumber: syz [ 129.815801][ T980] usb 3-1: config 0 descriptor?? [ 129.864736][ T30] audit: type=1400 audit(1764360972.332:391): avc: denied { connect } for pid=6746 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.911947][ T30] audit: type=1400 audit(1764360972.332:392): avc: denied { bind } for pid=6746 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.933916][ T980] usb-storage 3-1:0.0: USB Mass Storage device detected [ 130.024424][ T980] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 130.117509][ T30] audit: type=1400 audit(1764360972.592:393): avc: denied { write } for pid=6717 comm="syz.2.209" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 130.162726][ T5950] usb 3-1: USB disconnect, device number 5 [ 130.405108][ T6515] veth0_vlan: entered promiscuous mode [ 130.593690][ T6515] veth1_vlan: entered promiscuous mode [ 131.050717][ T980] usb 2-1: USB disconnect, device number 5 [ 131.077222][ T6515] veth0_macvtap: entered promiscuous mode [ 131.110981][ T6515] veth1_macvtap: entered promiscuous mode [ 131.155833][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.323197][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.342553][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.363257][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.813342][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.847351][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.312091][ T6782] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.362055][ T6782] IPv6: Can't replace route, no match found [ 132.368854][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.368871][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.388911][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.530343][ T6794] x_tables: ip_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 568 [ 132.607595][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.635550][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.852298][ T30] audit: type=1400 audit(1764360975.262:394): avc: denied { mount } for pid=6515 comm="syz-executor" name="/" dev="gadgetfs" ino=7560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 132.878297][ T30] audit: type=1400 audit(1764360975.332:395): avc: denied { mount } for pid=6790 comm="syz.3.220" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 133.029332][ T30] audit: type=1400 audit(1764360975.412:396): avc: denied { setopt } for pid=6795 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.240967][ T6805] autofs: Unknown parameter '›W' [ 133.402510][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 133.478255][ T6812] vxcan2: entered allmulticast mode [ 133.662036][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.104489][ T6822] fuse: Bad value for 'fd' [ 135.142935][ T5859] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 135.452162][ T5859] usb 4-1: Using ep0 maxpacket: 32 [ 135.499222][ T5859] usb 4-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 135.532554][ T30] audit: type=1400 audit(1764360978.002:397): avc: denied { map } for pid=6829 comm="syz.0.226" path="socket:[12339]" dev="sockfs" ino=12339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.549843][ T5859] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 135.610804][ T30] audit: type=1400 audit(1764360978.032:398): avc: denied { write } for pid=6829 comm="syz.0.226" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.633724][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.669450][ T6834] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 135.671979][ T5859] usb 4-1: Product: syz [ 135.681016][ T5859] usb 4-1: Manufacturer: syz [ 135.729588][ T5859] usb 4-1: SerialNumber: syz [ 135.743060][ T5859] usb 4-1: config 0 descriptor?? [ 135.753429][ T5859] usb 4-1: bad CDC descriptors [ 135.904451][ T5859] usb 4-1: unsupported MDLM descriptors [ 136.050441][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 136.495421][ T980] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 136.513765][ T5859] usb 4-1: USB disconnect, device number 10 [ 136.811988][ T980] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.844176][ T980] usb 6-1: config 0 has no interfaces? [ 136.849788][ T980] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 137.349617][ T30] audit: type=1400 audit(1764360979.812:399): avc: denied { setopt } for pid=6858 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 137.352713][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.379979][ T30] audit: type=1400 audit(1764360979.812:400): avc: denied { ioctl } for pid=6858 comm="syz.1.232" path="socket:[12384]" dev="sockfs" ino=12384 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 137.406165][ T980] usb 6-1: config 0 descriptor?? [ 137.604784][ T6865] netlink: 56 bytes leftover after parsing attributes in process `syz.2.234'. [ 138.731694][ T30] audit: type=1400 audit(1764360981.202:401): avc: denied { create } for pid=6879 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 138.872084][ T30] audit: type=1400 audit(1764360981.332:402): avc: denied { sys_admin } for pid=6879 comm="syz.0.237" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 138.909667][ T5886] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.050306][ T30] audit: type=1400 audit(1764360981.522:403): avc: denied { append } for pid=6881 comm="syz.3.238" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.211952][ T30] audit: type=1400 audit(1764360981.552:404): avc: denied { write } for pid=6879 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 139.404519][ T6884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.409359][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 139.418173][ T6890] netlink: 'syz.5.229': attribute type 39 has an invalid length. [ 139.429372][ T6884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.429649][ T5886] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 139.451725][ T6891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.464503][ T5886] usb 2-1: config 0 has no interface number 0 [ 139.470813][ T5886] usb 2-1: config 0 interface 48 altsetting 185 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 139.482816][ T6891] netlink: 'syz.2.239': attribute type 10 has an invalid length. [ 139.490620][ T30] audit: type=1400 audit(1764360981.962:405): avc: denied { bind } for pid=6889 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.510015][ T5886] usb 2-1: config 0 interface 48 has no altsetting 0 [ 139.521476][ T6884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.560800][ T6884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.566297][ T5886] usb 2-1: New USB device found, idVendor=05c6, idProduct=9222, bcdDevice=59.d9 [ 139.611786][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.615591][ T6891] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.626798][ T5886] usb 2-1: Product: syz [ 139.626818][ T5886] usb 2-1: Manufacturer: syz [ 139.626831][ T5886] usb 2-1: SerialNumber: syz [ 139.643439][ T6891] bond0: (slave team0): Enslaving as an active interface with an up link [ 139.653158][ T5886] usb 2-1: config 0 descriptor?? [ 140.448633][ T6910] FAULT_INJECTION: forcing a failure. [ 140.448633][ T6910] name failslab, interval 1, probability 0, space 0, times 0 [ 140.463474][ T6910] CPU: 0 UID: 0 PID: 6910 Comm: syz.3.245 Not tainted syzkaller #0 PREEMPT(full) [ 140.463499][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.463512][ T6910] Call Trace: [ 140.463518][ T6910] [ 140.463525][ T6910] dump_stack_lvl+0x16c/0x1f0 [ 140.463548][ T6910] should_fail_ex+0x512/0x640 [ 140.463567][ T6910] ? fs_reclaim_acquire+0xae/0x150 [ 140.463590][ T6910] should_failslab+0xc2/0x120 [ 140.463611][ T6910] kmem_cache_alloc_noprof+0x75/0x6e0 [ 140.463635][ T6910] ? __pfx_map_id_range_down+0x10/0x10 [ 140.463658][ T6910] ? security_inode_alloc+0x3b/0x2b0 [ 140.463681][ T6910] ? security_inode_alloc+0x3b/0x2b0 [ 140.463696][ T6910] security_inode_alloc+0x3b/0x2b0 [ 140.463715][ T6910] inode_init_always_gfp+0xce4/0x1030 [ 140.463737][ T6910] alloc_inode+0x86/0x240 [ 140.463762][ T6910] new_inode+0x22/0x1c0 [ 140.463787][ T6910] shmem_get_inode+0x19a/0xfb0 [ 140.463815][ T6910] shmem_mknod+0x1a8/0x450 [ 140.463840][ T6910] ? __pfx_shmem_create+0x10/0x10 [ 140.463860][ T6910] lookup_open.isra.0+0x11d3/0x1580 [ 140.463893][ T6910] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 140.463925][ T6910] ? find_held_lock+0x2b/0x80 [ 140.463954][ T6910] ? __pfx_down_write+0x10/0x10 [ 140.463981][ T6910] path_openat+0x893/0x2cb0 [ 140.464008][ T6910] ? __pfx_path_openat+0x10/0x10 [ 140.464025][ T6910] ? __lock_acquire+0xb8a/0x1c90 [ 140.464043][ T6910] do_filp_open+0x20b/0x470 [ 140.464062][ T6910] ? __pfx_do_filp_open+0x10/0x10 [ 140.464100][ T6910] ? alloc_fd+0x471/0x7d0 [ 140.464127][ T6910] do_sys_openat2+0x11b/0x1d0 [ 140.464150][ T6910] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.464177][ T6910] ? bpf_trace_run2+0x2ab/0x590 [ 140.464204][ T6910] __x64_sys_openat+0x174/0x210 [ 140.464227][ T6910] ? __pfx___x64_sys_openat+0x10/0x10 [ 140.464252][ T6910] ? syscall_trace_enter+0x1cb/0x240 [ 140.464281][ T6910] ? rcu_is_watching+0x12/0xc0 [ 140.464306][ T6910] do_syscall_64+0xcd/0xfa0 [ 140.464326][ T6910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.464343][ T6910] RIP: 0033:0x7f7b3c18f749 [ 140.464358][ T6910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.464373][ T6910] RSP: 002b:00007f7b3d06e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.464390][ T6910] RAX: ffffffffffffffda RBX: 00007f7b3c3e5fa0 RCX: 00007f7b3c18f749 [ 140.464401][ T6910] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 140.464411][ T6910] RBP: 00007f7b3d06e090 R08: 0000000000000000 R09: 0000000000000000 [ 140.464420][ T6910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.464429][ T6910] R13: 00007f7b3c3e6038 R14: 00007f7b3c3e5fa0 R15: 00007ffeba5c0c58 [ 140.464454][ T6910] [ 140.882128][ T5950] usb 6-1: USB disconnect, device number 2 [ 141.145442][ T5886] usb 2-1: USB disconnect, device number 6 [ 141.703544][ T30] audit: type=1400 audit(1764360983.952:406): avc: denied { create } for pid=6917 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.775159][ T30] audit: type=1400 audit(1764360983.952:407): avc: denied { ioctl } for pid=6917 comm="syz.3.248" path="socket:[13529]" dev="sockfs" ino=13529 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.799776][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.892230][ T30] audit: type=1400 audit(1764360984.012:408): avc: denied { name_connect } for pid=6917 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 144.948780][ T30] audit: type=1400 audit(1764360987.422:409): avc: denied { connect } for pid=6956 comm="syz.5.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.197377][ T30] audit: type=1400 audit(1764360987.512:410): avc: denied { write } for pid=6956 comm="syz.5.254" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 145.471193][ T30] audit: type=1400 audit(1764360987.772:411): avc: denied { ioctl } for pid=6959 comm="syz.1.255" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 145.763156][ T30] audit: type=1400 audit(1764360988.242:412): avc: denied { create } for pid=6962 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.847446][ T30] audit: type=1400 audit(1764360988.272:413): avc: denied { setopt } for pid=6962 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.118007][ T6975] veth1_to_bond: entered allmulticast mode [ 146.152959][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 146.212094][ T30] audit: type=1400 audit(1764360988.632:414): avc: denied { ioctl } for pid=6968 comm="syz.1.259" path="socket:[12574]" dev="sockfs" ino=12574 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.711953][ T5950] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.984607][ T5950] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 146.997834][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.008267][ T5950] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 147.076638][ T5950] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 147.086720][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.096860][ T5950] usb 3-1: Product: syz [ 147.101176][ T5950] usb 3-1: Manufacturer: syz [ 147.107987][ T5950] usb 3-1: SerialNumber: syz [ 147.123303][ T5950] usb 3-1: config 0 descriptor?? [ 147.171715][ T5950] usb-storage 3-1:0.0: USB Mass Storage device detected [ 147.366165][ T5950] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 147.770919][ T5950] usb 3-1: USB disconnect, device number 6 [ 147.843841][ T6994] capability: warning: `syz.3.265' uses deprecated v2 capabilities in a way that may be insecure [ 147.984870][ T6999] netlink: 5 bytes leftover after parsing attributes in process `syz.3.267'. [ 147.994262][ T6999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.990822][ T30] audit: type=1400 audit(1764360991.462:415): avc: denied { ioctl } for pid=7015 comm="syz.2.271" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 149.960837][ T6974] veth1_to_bond: left allmulticast mode [ 150.740038][ T59] Bluetooth: hci3: Frame reassembly failed (-84) [ 150.757150][ T7051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.278'. [ 150.890751][ T7056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.957614][ T7052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.073512][ T30] audit: type=1400 audit(1764360993.552:416): avc: denied { read write } for pid=7067 comm="syz.5.282" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 151.139680][ T30] audit: type=1400 audit(1764360993.552:417): avc: denied { open } for pid=7067 comm="syz.5.282" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 151.236992][ T7078] fuse: Unknown parameter 'fSU0x0000000000000003' [ 151.522274][ T30] audit: type=1400 audit(1764360993.982:418): avc: denied { append } for pid=7067 comm="syz.5.282" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 151.637005][ T30] audit: type=1400 audit(1764360994.112:419): avc: denied { write } for pid=7084 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 152.051921][ T30] audit: type=1400 audit(1764360994.522:420): avc: denied { setopt } for pid=7096 comm="syz.3.288" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.130324][ T30] audit: type=1400 audit(1764360994.602:421): avc: denied { create } for pid=7101 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 152.204819][ T7109] binder: 7108:7109 ioctl c00c620f 200000000080 returned -22 [ 152.224396][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.291'. [ 152.233920][ T7109] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 152.247167][ T7109] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.254501][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 152.254704][ T7109] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.263482][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'. [ 152.342136][ T980] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 152.394230][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.293'. [ 152.520726][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.571970][ T980] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 152.581748][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.633260][ T980] usb 4-1: config 0 descriptor?? [ 152.784174][ T5820] Bluetooth: hci3: command 0x1003 tx timeout [ 152.790918][ T5818] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 152.927474][ T980] usbhid 4-1:0.0: can't add hid device: -71 [ 152.938160][ T30] audit: type=1400 audit(1764360995.412:422): avc: denied { sqpoll } for pid=7121 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 152.944145][ T980] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 152.969535][ T7118] SELinux: ebitmap: map size 5 does not match my size 64 (high bit was 6) [ 152.998151][ T7118] SELinux: failed to load policy [ 153.036790][ T7118] input: syz1 as /devices/virtual/input/input7 [ 153.043488][ T980] usb 4-1: USB disconnect, device number 11 [ 153.232020][ T5867] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 153.252010][ T24] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 153.413126][ T5867] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 153.421773][ T5867] usb 1-1: config 0 has no interfaces? [ 153.428760][ T5867] usb 1-1: config 0 has no interfaces? [ 153.436908][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.450012][ T5867] usb 1-1: config 0 has no interfaces? [ 153.463517][ T5867] usb 1-1: config 0 has no interfaces? [ 153.469106][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 153.477275][ T5867] usb 1-1: config 0 has no interfaces? [ 153.486484][ T5867] usb 1-1: config 0 has no interfaces? [ 153.493121][ T24] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 153.502555][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.510815][ T24] usb 2-1: Product: syz [ 153.515648][ T5867] usb 1-1: config 0 has no interfaces? [ 153.521760][ T24] usb 2-1: Manufacturer: syz [ 153.527445][ T24] usb 2-1: SerialNumber: syz [ 153.533134][ T5867] usb 1-1: config 0 has no interfaces? [ 153.538624][ T5867] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 153.549112][ T980] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 153.558760][ T24] usb 2-1: config 0 descriptor?? [ 153.686270][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.701637][ T5867] usb 1-1: config 0 descriptor?? [ 153.864384][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.879191][ T980] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 153.889947][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.943720][ T7124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.035432][ T24] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 154.045837][ T7124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.076711][ T24] imon 2-1:0.0: unable to initialize intf0, err -19 [ 154.170318][ T24] imon:imon_probe: failed to initialize context! [ 154.277504][ T5867] IPVS: starting estimator thread 0... [ 154.500712][ T980] usb 4-1: config 0 descriptor?? [ 154.530678][ T24] imon 2-1:0.0: unable to register, err -19 [ 154.551495][ T980] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 154.566657][ T24] usb 2-1: USB disconnect, device number 7 [ 154.604405][ T7156] IPVS: using max 74 ests per chain, 177600 per kthread [ 154.628001][ T5950] usb 1-1: USB disconnect, device number 12 [ 154.744983][ T7099] netlink: 40 bytes leftover after parsing attributes in process `syz.3.288'. [ 154.773360][ C1] usb 4-1: unknown answer from device [ 154.778961][ C1] input input8: Pen battery low [ 154.920369][ T7162] input: syz1 as /devices/virtual/input/input9 [ 155.491060][ T7099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.531368][ T7099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.580540][ T30] audit: type=1400 audit(1764360998.032:423): avc: denied { bind } for pid=7171 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.710506][ T7174] vxcan1: entered promiscuous mode [ 155.813368][ T30] audit: type=1400 audit(1764360998.112:424): avc: denied { connect } for pid=7171 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.835209][ T30] audit: type=1400 audit(1764360998.112:425): avc: denied { write } for pid=7171 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.880337][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 155.887678][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 155.895017][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 155.902431][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 155.902747][ T5169] usb 4-1: control msg error: -71 [ 155.909940][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 155.922804][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 155.930331][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 155.937676][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 155.944965][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 155.952280][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 155.959552][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 155.966721][ C1] usb 4-1: pegasus_irq - usb_submit_urb failed with result -1 [ 156.032868][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.040204][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.048243][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.055593][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.063500][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.070797][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.078105][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.085490][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.092792][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.100093][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.107711][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.115425][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.122933][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.131562][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.140005][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.147846][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.155211][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.162483][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.169795][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.177059][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.184321][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.191639][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.198951][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.206299][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.213556][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.220801][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.228254][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.235759][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.243120][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.250399][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.257689][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.265102][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.272423][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.279682][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.286975][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.294248][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.301607][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.308864][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.316117][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.323396][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.330964][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.338227][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.345512][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.352963][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.360272][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.367552][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.368837][ T5169] usb 4-1: control msg error: -71 [ 156.374840][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.375027][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.394809][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.402090][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.409344][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.416605][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.423850][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.431102][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.438746][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.446035][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.453318][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.460573][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.467915][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.475164][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.482407][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.489767][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.497029][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.504275][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.511512][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.518760][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.526169][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.533571][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.541587][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.548950][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.556225][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.563534][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.570860][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.578213][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.585599][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.592848][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.600121][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.607431][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.614746][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.621914][ C0] usb 4-1: pegasus_irq - usb_submit_urb failed with result -1 [ 156.668167][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.676025][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.683294][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.690579][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.697868][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.702052][ T30] audit: type=1400 audit(1764360999.142:426): avc: denied { connect } for pid=7165 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 156.705209][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.732009][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.739576][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.746894][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.754272][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.761607][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.768961][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.776684][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.784009][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.791264][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.798546][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.805991][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.813320][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.820633][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.828052][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.835322][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.842999][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.850320][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.857571][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.864846][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.872097][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.879351][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.886628][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.893925][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.901993][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.909197][ T980] usb 4-1: USB disconnect, device number 12 [ 156.915137][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 156.915151][ C1] usb 4-1: pegasus_irq - usb_submit_urb failed with result -19 [ 156.933069][ T5169] usb 4-1: control msg error: -19 [ 156.976074][ T30] audit: type=1400 audit(1764360999.232:427): avc: denied { write } for pid=7165 comm="syz.1.302" path="socket:[13869]" dev="sockfs" ino=13869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.702459][ T24] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 157.853886][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.862617][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.885496][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 157.977183][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 158.022051][ T24] usb 1-1: can't read configurations, error -71 [ 158.053051][ T7204] netlink: 'syz.1.311': attribute type 10 has an invalid length. [ 158.061005][ T7204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.311'. [ 158.661440][ T7211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.928976][ T7217] atomic_op ffff888028b3e198 conn xmit_atomic 0000000000000000 [ 159.322401][ T7212] 9pnet_fd: Insufficient options for proto=fd [ 159.370499][ T30] audit: type=1400 audit(1764361001.402:428): avc: denied { bind } for pid=7209 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 159.689714][ T30] audit: type=1400 audit(1764361001.402:429): avc: denied { write } for pid=7209 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 159.866824][ T5895] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 160.528177][ T7232] netlink: 92 bytes leftover after parsing attributes in process `syz.5.320'. [ 160.537424][ T7232] netlink: 24 bytes leftover after parsing attributes in process `syz.5.320'. [ 160.640955][ T5895] usb 3-1: config 0 has an invalid interface number: 3 but max is 2 [ 160.650818][ T5895] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 160.678726][ T5895] usb 3-1: config 0 has no interface number 1 [ 160.695158][ T5895] usb 3-1: config 0 has no interface number 2 [ 160.714452][ T5895] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 160.729069][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.769499][ T5895] usb 3-1: config 0 descriptor?? [ 160.881973][ T5950] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 160.985242][ T5895] usb 3-1: Could not set interface, error -71 [ 161.019314][ T5895] usb 3-1: USB disconnect, device number 7 [ 161.042560][ T977] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 161.061624][ T5950] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 161.072377][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.093324][ T5950] usb 4-1: Product: syz [ 161.101425][ T5950] usb 4-1: Manufacturer: syz [ 161.107129][ T5950] usb 4-1: SerialNumber: syz [ 161.114437][ T5950] usb 4-1: config 0 descriptor?? [ 161.292399][ T977] usb 6-1: Using ep0 maxpacket: 8 [ 161.299352][ T977] usb 6-1: unable to get BOS descriptor or descriptor too short [ 161.312892][ T977] usb 6-1: config 57 has an invalid interface number: 229 but max is 0 [ 161.323960][ T977] usb 6-1: config 57 has no interface number 0 [ 161.402159][ T7242] loop2: detected capacity change from 0 to 7 [ 161.508647][ T7242] Dev loop2: unable to read RDB block 7 [ 161.514593][ T7242] loop2: unable to read partition table [ 161.522250][ T7242] loop2: partition table beyond EOD, truncated [ 161.529100][ T7242] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 161.745360][ T977] usb 6-1: config 57 interface 229 has no altsetting 0 [ 161.755307][ T977] usb 6-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 161.766216][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.774541][ T977] usb 6-1: Product: syz [ 161.778937][ T977] usb 6-1: Manufacturer: syz [ 161.783868][ T977] usb 6-1: SerialNumber: syz [ 162.110551][ T30] audit: type=1400 audit(1764361004.582:430): avc: denied { create } for pid=7235 comm="syz.5.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 162.233346][ T7249] netlink: 60 bytes leftover after parsing attributes in process `syz.0.325'. [ 162.242561][ T7249] bridge_slave_1: left allmulticast mode [ 162.248248][ T7249] bridge_slave_1: left promiscuous mode [ 162.255717][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.538434][ T977] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 162.556233][ T7249] bridge_slave_0: left allmulticast mode [ 162.562023][ T7249] bridge_slave_0: left promiscuous mode [ 162.568644][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.719905][ T977] usb 6-1: USB disconnect, device number 3 [ 162.814535][ T30] audit: type=1400 audit(1764361005.292:431): avc: denied { mount } for pid=7257 comm="syz.2.327" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 163.002206][ T7259] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 163.009120][ T7259] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 163.018000][ T7259] vhci_hcd vhci_hcd.0: Device attached [ 163.051999][ T5950] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 163.269339][ T5895] vhci_hcd: vhci_device speed not set [ 163.432103][ T5895] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 163.579673][ T5867] usb 4-1: USB disconnect, device number 13 [ 164.226768][ T7262] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 164.350022][ T1331] vhci_hcd: stop threads [ 164.358420][ T1331] vhci_hcd: release socket [ 164.377177][ T1331] vhci_hcd: disconnect device [ 164.392628][ T5950] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 164.445106][ T5950] usb 2-1: config 0 has no interface number 0 [ 164.618075][ T30] audit: type=1400 audit(1764361007.032:432): avc: denied { append } for pid=7272 comm="syz.3.331" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 164.622846][ T5950] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 164.869892][ T7279] netdevrim0: renamed from gretap0 (while UP) [ 164.997006][ T7279] A link change request failed with some changes committed already. Interface netdevrim0 may have been left with an inconsistent configuration, please check. [ 165.014067][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.085848][ T5950] usb 2-1: Product: syz [ 165.090122][ T5950] usb 2-1: Manufacturer: syz [ 165.102010][ T5950] usb 2-1: SerialNumber: syz [ 165.110933][ T5950] usb 2-1: config 0 descriptor?? [ 165.605566][ T7256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.632240][ T7256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.645598][ T30] audit: type=1400 audit(1764361008.092:433): avc: denied { firmware_load } for pid=7282 comm="syz.3.333" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 165.675755][ T7285] syz.3.333 (7285) used greatest stack depth: 17720 bytes left [ 165.692093][ T5950] usb 2-1: Firmware: major: 152, minor: 96, hardware type: UNKNOWN (94) [ 165.786130][ T7293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.845752][ T7293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.867289][ T30] audit: type=1400 audit(1764361008.342:434): avc: denied { map } for pid=7295 comm="syz.2.337" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 165.894459][ T30] audit: type=1400 audit(1764361008.342:435): avc: denied { execute } for pid=7295 comm="syz.2.337" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 165.919673][ T5950] usb 2-1: no permanent extended address found, random address set [ 165.932272][ T5950] usb 2-1: atusb_probe: initialization failed, error = -524 [ 165.949690][ T5950] atusb 2-1:0.128: probe with driver atusb failed with error -524 [ 166.040394][ T30] audit: type=1400 audit(1764361008.512:436): avc: denied { mounton } for pid=7280 comm="syz.0.334" path="/62/file0" dev="tmpfs" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 166.063829][ T7281] fuse: Unknown parameter 'r–S' [ 166.131234][ T5950] usb 2-1: USB disconnect, device number 8 [ 166.259674][ T30] audit: type=1400 audit(1764361008.732:437): avc: denied { mounton } for pid=7280 comm="syz.0.334" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 167.445255][ T7317] netlink: 'syz.5.342': attribute type 1 has an invalid length. [ 167.517279][ T7317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.635577][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.342'. [ 167.665471][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.342'. [ 168.180096][ T7329] netlink: 28 bytes leftover after parsing attributes in process `syz.5.342'. [ 168.195201][ T7328] veth3: entered promiscuous mode [ 168.221284][ T7328] bond1: (slave veth3): Enslaving as an active interface with a down link [ 168.702564][ T5895] vhci_hcd: vhci_device speed not set [ 168.827725][ T7337] can0: slcan on ttyS3. [ 169.277079][ T7340] netlink: 52 bytes leftover after parsing attributes in process `syz.0.345'. [ 169.313121][ T7334] can0 (unregistered): slcan off ttyS3. [ 169.481476][ T30] audit: type=1400 audit(1764361011.932:438): avc: denied { read } for pid=7348 comm="syz.5.350" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 169.512089][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.632736][ T30] audit: type=1400 audit(1764361011.932:439): avc: denied { open } for pid=7348 comm="syz.5.350" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 170.343912][ T7365] netlink: 92 bytes leftover after parsing attributes in process `syz.0.356'. [ 170.367968][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.356'. [ 170.842968][ T7382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.359'. [ 170.855022][ T7382] ip6gre1: entered allmulticast mode [ 170.887955][ T7383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.359'. [ 170.942114][ T30] audit: type=1400 audit(1764361013.402:440): avc: denied { create } for pid=7373 comm="syz.5.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 171.028792][ T30] audit: type=1400 audit(1764361013.402:441): avc: denied { ioctl } for pid=7373 comm="syz.5.358" path="socket:[14475]" dev="sockfs" ino=14475 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 171.213041][ T7393] atomic_op ffff88802defa198 conn xmit_atomic 0000000000000000 [ 171.252269][ T5886] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 171.616494][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 171.664834][ T5886] usb 1-1: not running at top speed; connect to a high speed hub [ 171.748396][ T5886] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 16 [ 172.202912][ T5886] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 172.220927][ T5886] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.248257][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.296747][ T5886] usb 1-1: Product: syz [ 172.316792][ T5886] usb 1-1: Manufacturer: syz [ 172.338202][ T5886] usb 1-1: SerialNumber: syz [ 172.950368][ T5886] usb 1-1: unit 5 not found! [ 173.060654][ T7430] netlink: 5 bytes leftover after parsing attributes in process `syz.3.370'. [ 173.072795][ T7430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.431088][ T5886] usb 1-1: USB disconnect, device number 15 [ 173.547630][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.603318][ T7439] netlink: 92 bytes leftover after parsing attributes in process `syz.1.372'. [ 173.642127][ T7439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.372'. [ 173.668175][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 173.769121][ T7447] FAULT_INJECTION: forcing a failure. [ 173.769121][ T7447] name failslab, interval 1, probability 0, space 0, times 0 [ 173.781908][ T7447] CPU: 1 UID: 0 PID: 7447 Comm: syz.5.374 Not tainted syzkaller #0 PREEMPT(full) [ 173.781933][ T7447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.781942][ T7447] Call Trace: [ 173.781948][ T7447] [ 173.781954][ T7447] dump_stack_lvl+0x16c/0x1f0 [ 173.781975][ T7447] should_fail_ex+0x512/0x640 [ 173.781995][ T7447] ? fs_reclaim_acquire+0xae/0x150 [ 173.782016][ T7447] should_failslab+0xc2/0x120 [ 173.782036][ T7447] kmem_cache_alloc_noprof+0x75/0x6e0 [ 173.782059][ T7447] ? __pfx_map_id_range_down+0x10/0x10 [ 173.782078][ T7447] ? security_inode_alloc+0x3b/0x2b0 [ 173.782101][ T7447] ? security_inode_alloc+0x3b/0x2b0 [ 173.782115][ T7447] security_inode_alloc+0x3b/0x2b0 [ 173.782133][ T7447] inode_init_always_gfp+0xce4/0x1030 [ 173.782154][ T7447] alloc_inode+0x86/0x240 [ 173.782174][ T7447] new_inode+0x22/0x1c0 [ 173.782195][ T7447] shmem_get_inode+0x19a/0xfb0 [ 173.782222][ T7447] shmem_mknod+0x1a8/0x450 [ 173.782244][ T7447] ? __pfx_shmem_create+0x10/0x10 [ 173.782261][ T7447] lookup_open.isra.0+0x11d3/0x1580 [ 173.782290][ T7447] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 173.782317][ T7447] ? find_held_lock+0x2b/0x80 [ 173.782343][ T7447] ? __pfx_down_write+0x10/0x10 [ 173.782366][ T7447] path_openat+0x893/0x2cb0 [ 173.782391][ T7447] ? __pfx_path_openat+0x10/0x10 [ 173.782409][ T7447] ? __lock_acquire+0xb8a/0x1c90 [ 173.782427][ T7447] do_filp_open+0x20b/0x470 [ 173.782445][ T7447] ? __pfx_do_filp_open+0x10/0x10 [ 173.782479][ T7447] ? alloc_fd+0x471/0x7d0 [ 173.782503][ T7447] do_sys_openat2+0x11b/0x1d0 [ 173.782525][ T7447] ? __pfx_do_sys_openat2+0x10/0x10 [ 173.782561][ T7447] ? bpf_trace_run2+0x2ab/0x590 [ 173.782585][ T7447] __x64_sys_openat+0x174/0x210 [ 173.782607][ T7447] ? __pfx___x64_sys_openat+0x10/0x10 [ 173.782631][ T7447] ? syscall_trace_enter+0x1cb/0x240 [ 173.782653][ T7447] ? rcu_is_watching+0x12/0xc0 [ 173.782677][ T7447] do_syscall_64+0xcd/0xfa0 [ 173.782694][ T7447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.782711][ T7447] RIP: 0033:0x7ff030d8f749 [ 173.782725][ T7447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.782741][ T7447] RSP: 002b:00007ff031ba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 173.782757][ T7447] RAX: ffffffffffffffda RBX: 00007ff030fe5fa0 RCX: 00007ff030d8f749 [ 173.782767][ T7447] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 173.782777][ T7447] RBP: 00007ff031ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 173.782786][ T7447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.782795][ T7447] R13: 00007ff030fe6038 R14: 00007ff030fe5fa0 R15: 00007ffc49a3ad68 [ 173.782820][ T7447] [ 174.215554][ T30] audit: type=1400 audit(1764361016.682:442): avc: denied { write } for pid=7448 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 174.290746][ T7460] can0: slcan on ttyS3. [ 174.752338][ T7456] can0 (unregistered): slcan off ttyS3. [ 175.172772][ T977] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 175.331391][ T7487] sit1: entered promiscuous mode [ 175.377121][ T7490] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=243 sclass=netlink_tcpdiag_socket pid=7490 comm=syz.1.387 [ 175.380781][ T30] audit: type=1400 audit(1764361017.842:443): avc: denied { mount } for pid=7489 comm="syz.1.387" name="/" dev="ramfs" ino=14615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 175.869734][ T7502] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 175.931971][ T30] audit: type=1326 audit(1764361018.402:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7498 comm="syz.3.389" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b3c18f749 code=0x0 [ 176.087287][ T7511] netlink: 'syz.5.393': attribute type 1 has an invalid length. [ 176.120272][ T7511] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.144710][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.393'. [ 176.155417][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.393'. [ 176.165343][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 176.381289][ T7519] slcan: can't register candev [ 176.387447][ T7519] Falling back ldisc for ttyS3. [ 176.482484][ T7496] overlayfs: overlapping lowerdir path [ 176.492094][ T24] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 176.493693][ T7516] netlink: 28 bytes leftover after parsing attributes in process `syz.5.393'. [ 176.523345][ T7512] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 176.539011][ T7512] overlayfs: overlapping lowerdir path [ 176.549125][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.599901][ T7518] veth5: entered promiscuous mode [ 176.605627][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 176.629695][ T24] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 176.641572][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.667346][ T24] usb 3-1: Product: syz [ 176.672614][ T24] usb 3-1: Manufacturer: syz [ 176.679280][ T24] usb 3-1: SerialNumber: syz [ 176.680573][ T7525] SELinux: ebitmap start bit (2037580928) is beyond the end of the bitmap (1472) [ 176.705009][ T24] usb 3-1: config 0 descriptor?? [ 176.714247][ T24] usb-storage 3-1:0.0: USB Mass Storage device detected [ 176.746375][ T24] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 176.753046][ T7525] SELinux: failed to load policy [ 176.788762][ T30] audit: type=1400 audit(1764361019.262:445): avc: denied { ioctl } for pid=7527 comm="syz.3.396" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 177.112154][ T5950] usb 3-1: USB disconnect, device number 8 [ 177.171951][ T5886] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 177.201988][ T977] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 177.419837][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 177.839633][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.853733][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.863958][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.877051][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.891154][ T5886] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 177.900543][ T5886] usb 2-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 177.909259][ T977] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.924630][ T5886] usb 2-1: Manufacturer: syz [ 177.941601][ T977] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.961703][ T5886] usb 2-1: config 0 descriptor?? [ 177.967026][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.977966][ T977] usb 6-1: config 0 descriptor?? [ 178.566052][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.406'. [ 178.700597][ T5886] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 178.708803][ T5886] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 178.724370][ T5886] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 178.760059][ T5886] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 178.859362][ T977] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 179.174605][ T5867] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 179.215308][ T5886] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 179.242721][ T5886] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [syz] on usb-dummy_hcd.1-1/input0 [ 179.280266][ T7565] netlink: 'syz.1.397': attribute type 10 has an invalid length. [ 179.504475][ T7566] bridge0: entered promiscuous mode [ 179.565630][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 179.572944][ T7565] bridge0: left promiscuous mode [ 179.612212][ T5867] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 179.614880][ T7565] i2c i2c-1: unsupported multi-msg i2c transaction [ 179.705654][ T30] audit: type=1400 audit(1764361022.162:446): avc: denied { setopt } for pid=7560 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 179.733513][ T5867] usb 1-1: config 0 has no interface number 0 [ 179.763634][ T7575] netlink: 'syz.2.408': attribute type 27 has an invalid length. [ 179.772054][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 179.791573][ T5867] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 66, changing to 10 [ 179.896926][ T5867] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 57600, setting to 1024 [ 180.059197][ T977] usb 2-1: USB disconnect, device number 10 [ 180.089908][ T5867] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 180.123645][ C1] plantronics 0003:047F:FFFF.0003: hid_field_extract() called with n (132) > 32! (ksoftirqd/1) [ 180.140920][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.178292][ T5867] usb 1-1: config 0 descriptor?? [ 180.632471][ T5950] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 180.668985][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 180.786166][ T30] audit: type=1400 audit(1764361023.262:447): avc: denied { append } for pid=7590 comm="syz.3.413" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 180.893873][ T7589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.411'. [ 181.009025][ T5867] input: HID 28bd:0094 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.0004/input/input10 [ 181.115793][ T5809] udevd[5809]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 181.165543][ T5867] uclogic 0003:28BD:0094.0004: input,hidraw1: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 181.205795][ T5867] usb 1-1: USB disconnect, device number 16 [ 182.143034][ T977] usb 6-1: USB disconnect, device number 4 [ 182.177355][ T7602] fido_id[7602]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 182.260711][ T30] audit: type=1400 audit(1764361024.732:448): avc: denied { ioctl } for pid=7611 comm="syz.2.419" path="mnt:[4026532805]" dev="nsfs" ino=4026532805 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 182.382869][ T9] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 182.455820][ T30] audit: type=1400 audit(1764361024.932:449): avc: denied { connect } for pid=7616 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 182.462605][ T7617] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.421'. [ 182.640118][ T7622] netlink: 5 bytes leftover after parsing attributes in process `syz.1.422'. [ 182.722152][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 182.861043][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 182.879759][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.925906][ T9] usb 4-1: config 0 descriptor?? [ 182.932666][ T7605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 183.085620][ T30] audit: type=1400 audit(1764361025.562:450): avc: denied { lock } for pid=7615 comm="syz.2.421" path="socket:[14894]" dev="sockfs" ino=14894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 183.138573][ T7626] futex_wake_op: syz.2.421 tries to shift op by -1; fix this program [ 183.149382][ T7626] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 183.166695][ T30] audit: type=1400 audit(1764361025.622:451): avc: denied { mount } for pid=7615 comm="syz.2.421" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 183.188771][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.215461][ T30] audit: type=1400 audit(1764361025.622:452): avc: denied { mounton } for pid=7615 comm="syz.2.421" path="/91/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 183.237906][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.254501][ T30] audit: type=1400 audit(1764361025.632:453): avc: denied { read } for pid=7615 comm="syz.2.421" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 183.321124][ T30] audit: type=1400 audit(1764361025.632:454): avc: denied { read } for pid=7615 comm="syz.2.421" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 183.348857][ T30] audit: type=1400 audit(1764361025.632:455): avc: denied { open } for pid=7615 comm="syz.2.421" path="/91/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 183.372546][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.385322][ T9] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 183.393679][ T30] audit: type=1400 audit(1764361025.632:456): avc: denied { read } for pid=7615 comm="syz.2.421" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 183.415873][ T9] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 183.424490][ T9] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 183.431348][ T9] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 183.438371][ T9] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 183.453270][ T9] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 183.673065][ T7584] usb 4-1: USB disconnect, device number 14 [ 184.378538][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.424'. [ 184.495960][ T7622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.568316][ T7633] macvlan2: entered promiscuous mode [ 184.587385][ T7633] macvlan2: entered allmulticast mode [ 184.594636][ T7633] bond1: entered promiscuous mode [ 184.600335][ T7633] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 184.616245][ T7633] bond1: left promiscuous mode [ 184.970934][ T7652] netlink: 304 bytes leftover after parsing attributes in process `syz.1.431'. [ 185.532257][ T5887] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 185.663307][ T5135] Bluetooth: hci1: command 0x0406 tx timeout [ 185.669496][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 185.669513][ T5819] Bluetooth: hci2: command 0x0406 tx timeout [ 185.675660][ T5135] Bluetooth: hci4: command 0x0406 tx timeout [ 185.733888][ T5887] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 185.744092][ T5887] usb 1-1: config 0 has no interface number 0 [ 185.756075][ T5887] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 185.765451][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.799339][ T5887] usb 1-1: Product: syz [ 185.809538][ T5887] usb 1-1: Manufacturer: syz [ 185.814691][ T5887] usb 1-1: SerialNumber: syz [ 185.832202][ T5887] usb 1-1: config 0 descriptor?? [ 185.899213][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 186.247831][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 186.286309][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.438'. [ 186.344767][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 186.344783][ T30] audit: type=1400 audit(1764361028.802:460): avc: denied { read append } for pid=7684 comm="syz.5.441" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 186.374205][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.381489][ T5887] usb 1-1: Firmware: major: 175, minor: 159, hardware type: UNKNOWN (176) [ 186.493276][ T30] audit: type=1400 audit(1764361028.802:461): avc: denied { open } for pid=7684 comm="syz.5.441" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 187.011538][ T5887] usb 1-1: failed to fetch extended address, random address set [ 187.019291][ T5887] usb 1-1: atusb_probe: initialization failed, error = -524 [ 187.028307][ T5887] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 187.046364][ T5887] usb 1-1: USB disconnect, device number 17 [ 187.158552][ T7685] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.189212][ T7685] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 187.355277][ T7685] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.406789][ T7685] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 187.667392][ T7685] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.677012][ T7685] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 187.687671][ T7685] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 187.693941][ T7685] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 187.711512][ T7685] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 187.732216][ T7685] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 187.776579][ T7685] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 188.055302][ T7703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.206501][ T5950] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 188.371993][ T5950] usb 4-1: Using ep0 maxpacket: 8 [ 188.648066][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 188.697489][ T30] audit: type=1400 audit(1764361030.752:462): avc: denied { write } for pid=7706 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 189.016674][ T5950] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 189.052077][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.086064][ T5950] usb 4-1: Product: syz [ 189.090242][ T5950] usb 4-1: Manufacturer: syz [ 189.116420][ T5950] usb 4-1: SerialNumber: syz [ 189.133496][ T5950] usb 4-1: config 0 descriptor?? [ 189.184092][ T5950] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 189.422539][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 189.531982][ T30] audit: type=1400 audit(1764361032.002:463): avc: denied { connect } for pid=7719 comm="syz.5.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.902607][ T5950] gspca_sonixj: reg_r err -110 [ 190.164862][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 190.170917][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 190.177243][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 190.183541][ T5950] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 190.292090][ T7584] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 190.294417][ T7724] cgroup: subsys name conflicts with all [ 190.702134][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 190.762481][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 190.783427][ T7584] usb 2-1: device descriptor read/64, error -71 [ 190.799052][ T6190] Bluetooth: hci3: Frame reassembly failed (-84) [ 190.925619][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 190.934997][ T9] usb 3-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 190.945579][ T9] usb 3-1: Product: syz [ 190.950963][ T9] usb 3-1: SerialNumber: syz [ 190.967222][ T9] usb 3-1: config 0 descriptor?? [ 191.084594][ T7736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.239198][ T9] ldusb 3-1:0.0: Interrupt in endpoint not found [ 191.419421][ T9] usb 3-1: USB disconnect, device number 9 [ 191.461965][ T7584] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 191.501949][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 191.591995][ T7584] usb 2-1: device descriptor read/64, error -71 [ 191.613922][ T5867] usb 4-1: USB disconnect, device number 15 [ 191.736882][ T7584] usb usb2-port1: attempt power cycle [ 192.223064][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 192.229210][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 192.235696][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 192.861987][ T5810] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 192.869434][ T5820] Bluetooth: hci3: command 0x1003 tx timeout [ 193.835607][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.161494][ T7766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.301944][ T5810] Bluetooth: hci5: command 0x0c1a tx timeout [ 194.393451][ T30] audit: type=1400 audit(1764361036.862:464): avc: denied { getopt } for pid=7768 comm="syz.5.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.625598][ T7775] can0: slcan on ttyS3. [ 194.716277][ T30] audit: type=1400 audit(1764361036.862:465): avc: denied { map } for pid=7768 comm="syz.5.466" path="/dev/vbi3" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 194.765948][ T30] audit: type=1400 audit(1764361036.862:466): avc: denied { execute } for pid=7768 comm="syz.5.466" path="/dev/vbi3" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 194.900890][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.5.468'. [ 195.252674][ T7584] libceph: connect (1)[c::]:6789 error -101 [ 195.279029][ T7584] libceph: mon0 (1)[c::]:6789 connect error [ 195.292867][ T7771] can0 (unregistered): slcan off ttyS3. [ 195.672572][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.471'. [ 195.994947][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 196.001322][ T7784] ceph: No mds server is up or the cluster is laggy [ 196.042140][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 196.199228][ T7802] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 196.239730][ T7812] netdevrim0: renamed from gretap0 (while UP) [ 196.257258][ T7812] A link change request failed with some changes committed already. Interface netdevrim0 may have been left with an inconsistent configuration, please check. [ 197.458996][ T30] audit: type=1400 audit(1764361039.812:467): avc: denied { mounton } for pid=7829 comm="syz.1.477" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 199.661007][ T7871] netlink: 11988 bytes leftover after parsing attributes in process `syz.5.485'. [ 199.945140][ T30] audit: type=1400 audit(1764361042.422:468): avc: denied { mount } for pid=7873 comm="syz.2.486" name="/" dev="hugetlbfs" ino=16483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 200.064973][ T30] audit: type=1400 audit(1764361042.532:469): avc: denied { setattr } for pid=7879 comm="syz.5.488" path="socket:[16494]" dev="sockfs" ino=16494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.931631][ T30] audit: type=1400 audit(1764361043.382:470): avc: denied { read } for pid=7879 comm="syz.5.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 201.009757][ T30] audit: type=1400 audit(1764361043.442:471): avc: denied { getopt } for pid=7879 comm="syz.5.488" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 201.051262][ T7891] netlink: 'syz.5.489': attribute type 1 has an invalid length. [ 201.226193][ T7894] netlink: 28 bytes leftover after parsing attributes in process `syz.5.489'. [ 201.786886][ T7837] batman_adv: batadv0: Adding interface: ipvlan0 [ 201.793324][ T7837] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.819597][ T7837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.830071][ T7837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.839925][ T7837] batman_adv: batadv0: Interface activated: ipvlan0 [ 201.900402][ T7891] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 201.911343][ T30] audit: type=1400 audit(1764361044.382:472): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 201.997456][ T7893] veth5: entered promiscuous mode [ 202.541708][ T7906] syzkaller0: entered promiscuous mode [ 202.547548][ T7906] syzkaller0: entered allmulticast mode [ 202.591502][ T7912] atomic_op ffff888034cd2198 conn xmit_atomic 0000000000000000 [ 202.631921][ T5887] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 203.031926][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 203.066606][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 203.086228][ T5887] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 203.137341][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.156743][ T5887] usb 2-1: Product: syz [ 203.169837][ T5887] usb 2-1: Manufacturer: syz [ 203.197463][ T5887] usb 2-1: SerialNumber: syz [ 203.226652][ T5887] usb 2-1: config 0 descriptor?? [ 203.240480][ T5887] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 203.250102][ T5887] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 203.301032][ T30] audit: type=1400 audit(1764361045.772:473): avc: denied { mounton } for pid=7924 comm="syz.2.499" path="/110/file0" dev="tmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 203.334651][ T7929] /dev/nullb0: Can't open blockdev [ 203.785929][ T7943] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 204.060617][ T7943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.094749][ T5887] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 204.233736][ T7943] veth3: entered promiscuous mode [ 204.244872][ T7943] bond2: (slave veth3): Enslaving as an active interface with a down link [ 204.302412][ T7943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.504'. [ 204.584661][ T7950] wg1: entered promiscuous mode [ 204.589599][ T7950] wg1: entered allmulticast mode [ 204.823867][ T5887] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 204.847276][ T5887] em28xx 2-1:0.0: board has no eeprom [ 204.939215][ T30] audit: type=1400 audit(1764361047.412:474): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 204.975581][ T7957] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 205.190158][ T30] audit: type=1400 audit(1764361047.602:475): avc: denied { bind } for pid=7956 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 205.253055][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.508'. [ 205.287759][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.367126][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.549685][ T7963] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.557274][ T7963] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.654578][ T7947] tipc: Started in network mode [ 205.661574][ T7947] tipc: Node identity 96bb3e5732ac, cluster identity 4711 [ 205.717837][ T7947] tipc: Enabled bearer , priority 0 [ 206.017917][ T7947] netlink: 'syz.1.490': attribute type 10 has an invalid length. [ 206.121911][ T5887] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 206.218556][ T7900] em28xx 2-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 206.634649][ T7964] syzkaller0: entered promiscuous mode [ 206.649377][ T7964] syzkaller0: entered allmulticast mode [ 206.666139][ T7964] tipc: Resetting bearer [ 206.849208][ T7970] slcan: can't register candev [ 207.356316][ T7947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.448509][ T5950] tipc: Node number set to 2752986711 [ 207.709272][ T5887] em28xx 2-1:0.0: dvb set to bulk mode. [ 207.720008][ T5867] em28xx 2-1:0.0: Binding DVB extension [ 207.817961][ T7979] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 207.870665][ T30] audit: type=1400 audit(1764361050.302:476): avc: denied { name_bind } for pid=7975 comm="syz.3.513" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 208.203400][ T5950] usb 2-1: USB disconnect, device number 14 [ 208.221356][ T5867] em28xx 2-1:0.0: Registering input extension [ 208.249584][ T5950] em28xx 2-1:0.0: Disconnecting em28xx [ 208.274761][ T7947] tipc: Resetting bearer [ 208.290980][ T5950] em28xx 2-1:0.0: Closing input extension [ 208.373288][ T5950] em28xx 2-1:0.0: Freeing device [ 208.440674][ T7985] input: syz1 as /devices/virtual/input/input12 [ 208.550933][ T7985] overlayfs: invalid origin (0000) [ 208.558169][ T5867] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 208.753420][ T5867] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 208.767301][ T5867] usb 3-1: config 0 has no interface number 0 [ 208.778334][ T7993] block device autoloading is deprecated and will be removed. [ 208.921974][ T7996] program syz.0.519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.012382][ T5867] usb 3-1: too many endpoints for config 0 interface 49 altsetting 50: 56, using maximum allowed: 30 [ 209.109530][ T5867] usb 3-1: config 0 interface 49 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 209.172958][ T5867] usb 3-1: config 0 interface 49 has no altsetting 0 [ 209.205710][ T5867] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 209.249689][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.311550][ T5867] usb 3-1: config 0 descriptor?? [ 209.555635][ T8000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.859667][ T30] audit: type=1400 audit(1764361052.332:477): avc: denied { module_request } for pid=8015 comm="syz.3.525" kmod="netdev-batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 209.897577][ T5867] usb 3-1: string descriptor 0 read error: -71 [ 209.965620][ T5867] kaweth 3-1:0.49: Firmware present in device. [ 209.975867][ T5867] kaweth 3-1:0.49: Error reading configuration (-71), no net device created [ 210.011581][ T5867] kaweth 3-1:0.49: probe with driver kaweth failed with error -5 [ 210.039912][ T5867] usb 3-1: USB disconnect, device number 10 [ 210.236004][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.5.526'. [ 210.410351][ T8029] xt_nfacct: accounting object `syz1' does not exist [ 210.954254][ T5950] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 211.121998][ T5950] usb 3-1: device descriptor read/64, error -71 [ 211.251524][ T7947] tipc: Disabling bearer [ 211.372382][ T5950] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 211.762020][ T5887] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 211.982064][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 212.025194][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.052173][ T5950] usb 3-1: device descriptor read/64, error -71 [ 212.052745][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.054803][ T5887] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 212.054829][ T5887] usb 2-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 212.054849][ T5887] usb 2-1: Manufacturer: syz [ 212.058194][ T5887] usb 2-1: config 0 descriptor?? [ 212.162694][ T5950] usb usb3-port1: attempt power cycle [ 212.512271][ T5950] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 212.661993][ T5887] usbhid 2-1:0.0: can't add hid device: -71 [ 212.662088][ T5887] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 212.674228][ T5950] usb 3-1: device descriptor read/8, error -71 [ 212.684680][ T5887] usb 2-1: USB disconnect, device number 15 [ 212.699537][ T9] hid-generic FFFF:0008:0003.0006: item fetching failed at offset 0/2 [ 212.700019][ T9] hid-generic FFFF:0008:0003.0006: probe with driver hid-generic failed with error -22 [ 213.088658][ T5950] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 213.121825][ T5950] usb 3-1: device descriptor read/8, error -71 [ 213.244415][ T5950] usb usb3-port1: unable to enumerate USB device [ 214.823044][ T30] audit: type=1400 audit(1764361057.292:478): avc: denied { write } for pid=8076 comm="syz.5.542" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 215.382281][ T8079] netlink: 'syz.2.540': attribute type 1 has an invalid length. [ 215.408839][ T30] audit: type=1400 audit(1764361057.472:479): avc: denied { read } for pid=8069 comm="syz.2.540" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 215.441818][ T30] audit: type=1400 audit(1764361057.842:481): avc: denied { write } for pid=8069 comm="syz.2.540" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 215.464904][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.804391][ T8074] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 215.819519][ T30] audit: type=1400 audit(1764361057.842:482): avc: denied { open } for pid=8069 comm="syz.2.540" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 215.874840][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 215.888689][ T8074] block device autoloading is deprecated and will be removed. [ 216.456953][ T30] audit: type=1400 audit(1764361057.522:480): avc: denied { open } for pid=8069 comm="syz.2.540" path="/120/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 218.252079][ T5867] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 218.426259][ T30] audit: type=1400 audit(1764361060.902:483): avc: denied { bind } for pid=8116 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 218.669733][ T8126] netlink: 52 bytes leftover after parsing attributes in process `syz.2.555'. [ 218.703629][ T5867] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.984587][ T5867] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 218.999038][ T30] audit: type=1400 audit(1764361060.912:484): avc: denied { node_bind } for pid=8116 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 219.043271][ T5867] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 219.060669][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.069076][ T5867] usb 6-1: Product: syz [ 219.073642][ T5867] usb 6-1: Manufacturer: syz [ 219.078510][ T5867] usb 6-1: SerialNumber: syz [ 219.099071][ T5867] usb 6-1: config 0 descriptor?? [ 219.121281][ T5867] usb-storage 6-1:0.0: USB Mass Storage device detected [ 219.158149][ T5867] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 219.202072][ T5950] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 219.332740][ T5867] usb 6-1: USB disconnect, device number 5 [ 219.597940][ T5950] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.623207][ T5950] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 219.636847][ T5950] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.648246][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.659725][ T8132] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 219.679281][ T5950] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 220.470822][ T30] audit: type=1400 audit(1764361062.942:485): avc: denied { setopt } for pid=8145 comm="syz.5.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 220.493461][ T8131] /dev/nullb0: Can't open blockdev [ 220.527636][ T30] audit: type=1400 audit(1764361063.002:486): avc: denied { ioctl } for pid=8145 comm="syz.5.562" path="socket:[17191]" dev="sockfs" ino=17191 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 220.602927][ T30] audit: type=1400 audit(1764361063.072:487): avc: denied { bind } for pid=8145 comm="syz.5.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 221.207204][ T5867] usb 4-1: USB disconnect, device number 16 [ 221.241625][ T8160] netlink: 'syz.0.565': attribute type 10 has an invalid length. [ 221.666608][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.567'. [ 221.675740][ T8160] syz_tun: entered allmulticast mode [ 221.756204][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 221.927454][ T8177] netlink: 'syz.1.569': attribute type 1 has an invalid length. [ 222.016342][ T8177] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.263052][ T8188] netlink: 636 bytes leftover after parsing attributes in process `syz.3.570'. [ 222.330114][ T8177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.569'. [ 222.467966][ T8182] veth5: entered promiscuous mode [ 222.475747][ T8182] bond2: (slave veth5): Enslaving as an active interface with a down link [ 222.741463][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 222.759287][ T8198] openvswitch: netlink: Flow actions attr not present in new flow. [ 223.076953][ T30] audit: type=1400 audit(1764361065.552:488): avc: denied { bind } for pid=8211 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 223.864893][ T977] IPVS: starting estimator thread 0... [ 223.978016][ T30] audit: type=1400 audit(1764361065.582:489): avc: denied { setopt } for pid=8211 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.132003][ T8220] IPVS: using max 73 ests per chain, 175200 per kthread [ 224.402938][ T8235] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.455243][ T8235] 9pnet_fd: Insufficient options for proto=fd [ 224.597090][ T5867] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 224.721972][ T977] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 224.766161][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 224.795662][ T5867] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 225.164990][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.213371][ T5867] usb 4-1: config 0 descriptor?? [ 225.223223][ T977] usb 6-1: config 0 has an invalid interface number: 3 but max is 2 [ 225.233256][ T977] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 225.269489][ T977] usb 6-1: config 0 has no interface number 1 [ 225.269892][ T8246] A link change request failed with some changes committed already. Interface netdevrim0 may have been left with an inconsistent configuration, please check. [ 225.281990][ T977] usb 6-1: config 0 has no interface number 2 [ 225.312570][ T977] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 225.324165][ T8248] netlink: 'syz.0.586': attribute type 1 has an invalid length. [ 225.336139][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.367220][ T977] usb 6-1: config 0 descriptor?? [ 225.391073][ T8250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65040 sclass=netlink_route_socket pid=8250 comm=syz.0.586 [ 225.397863][ T8248] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.512172][ T5867] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 225.530824][ T30] audit: type=1400 audit(1764361067.982:490): avc: denied { execute } for pid=8251 comm="syz.2.588" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=17664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 225.594460][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 225.625350][ T977] usb 6-1: Could not set interface, error -71 [ 225.630594][ T5867] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 225.650162][ T5867] usb 4-1: media controller created [ 225.689174][ T977] usb 6-1: USB disconnect, device number 6 [ 225.714246][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.865854][ T5867] az6027: usb out operation failed. (-71) [ 225.879855][ T5867] az6027: usb out operation failed. (-71) [ 225.892227][ T5867] stb0899_attach: Driver disabled by Kconfig [ 225.903065][ T8258] netlink: 'syz.0.589': attribute type 12 has an invalid length. [ 225.928521][ T5867] az6027: no front-end attached [ 225.928521][ T5867] [ 225.987318][ T5867] az6027: usb out operation failed. (-71) [ 226.009252][ T5867] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 226.041403][ T5867] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 226.078741][ T5867] dvb-usb: schedule remote query interval to 400 msecs. [ 226.087225][ T5867] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 226.114832][ T5867] usb 4-1: USB disconnect, device number 17 [ 226.251938][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 226.439263][ T8270] input: syz1 as /devices/virtual/input/input14 [ 226.485172][ T5867] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 226.516362][ T8267] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 226.527135][ T24] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 226.580459][ T8267] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.593886][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.651731][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 226.659224][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.675679][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.832923][ T5886] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 227.012596][ T24] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 227.037977][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.046548][ T24] usb 1-1: Product: syz [ 227.050863][ T24] usb 1-1: Manufacturer: syz [ 227.059430][ T24] usb 1-1: SerialNumber: syz [ 227.061915][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 227.066666][ T24] usb 1-1: config 0 descriptor?? [ 227.073229][ T5886] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 227.082907][ T5886] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 227.088360][ T24] usb-storage 1-1:0.0: USB Mass Storage device detected [ 227.102945][ T5886] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 227.119148][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 227.120078][ T24] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 227.131124][ T5886] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 227.146732][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 227.160455][ T5886] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 227.170438][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.180569][ T5950] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 227.214274][ T5886] usb 2-1: config 0 descriptor?? [ 227.362015][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 227.369160][ T5950] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 227.391142][ T5950] usb 3-1: config 0 has no interface number 0 [ 227.412485][ T5950] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 227.421794][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.432767][ T5950] usb 3-1: Product: syz [ 227.438774][ T5886] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 227.466207][ T5950] usb 3-1: Manufacturer: syz [ 227.484099][ T5950] usb 3-1: SerialNumber: syz [ 227.492534][ T5950] usb 3-1: config 0 descriptor?? [ 227.512733][ T5950] smsc95xx v2.0.0 [ 227.635499][ T30] audit: type=1400 audit(1764361070.112:491): avc: denied { read write } for pid=8266 comm="syz.1.592" name="lp0" dev="devtmpfs" ino=3025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 227.641474][ T8267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.592'. [ 227.672343][ T30] audit: type=1400 audit(1764361070.112:492): avc: denied { open } for pid=8266 comm="syz.1.592" path="/dev/usb/lp0" dev="devtmpfs" ino=3025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 227.697331][ T30] audit: type=1400 audit(1764361070.112:493): avc: denied { create } for pid=8266 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 227.718445][ T8267] bond3: entered promiscuous mode [ 227.727381][ T8267] bond3: entered allmulticast mode [ 227.741066][ T24] usb 2-1: USB disconnect, device number 16 [ 227.782427][ T24] usblp0: removed [ 227.850283][ T5886] usb 1-1: USB disconnect, device number 18 [ 228.692509][ T5950] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 229.035524][ T5950] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 229.781989][ T5866] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 229.942000][ T5866] usb 6-1: Using ep0 maxpacket: 16 [ 229.956927][ T5866] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 229.981987][ T5866] usb 6-1: config 1 has no interface number 0 [ 229.988117][ T5866] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 230.091914][ T5866] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 230.112025][ T5866] usb 6-1: config 1 interface 105 has no altsetting 0 [ 230.150871][ T5866] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 230.190846][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.243794][ T5866] usb 6-1: Product: syz [ 230.248651][ T5866] usb 6-1: Manufacturer: syz [ 230.256752][ T5866] usb 6-1: SerialNumber: syz [ 230.691541][ T8314] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 230.716523][ T8314] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 230.840579][ T5950] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 230.890630][ T5950] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 231.012401][ T5950] usb 3-1: USB disconnect, device number 15 [ 231.166409][ T8314] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.173698][ T30] audit: type=1400 audit(1764361073.622:494): avc: denied { mount } for pid=8329 comm="syz.2.610" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 231.195850][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.272375][ T8314] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.240740][ T5866] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 232.253884][ T5866] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 232.275158][ T8344] netlink: 'syz.1.614': attribute type 1 has an invalid length. [ 232.299030][ T8344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.311242][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'. [ 232.333368][ T8344] veth7: entered promiscuous mode [ 232.341741][ T8344] bond4: (slave veth7): Enslaving as an active interface with a down link [ 232.354405][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.614'. [ 232.513402][ T8350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.909258][ T5866] aqc111 6-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 62:a4:eb:86:b7:42 [ 232.968249][ T5866] usb 6-1: USB disconnect, device number 7 [ 233.029435][ T5866] aqc111 6-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 233.155509][ T30] audit: type=1400 audit(1764361075.592:495): avc: denied { create } for pid=8356 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 233.185030][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.616'. [ 233.308228][ T8359] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 233.593640][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'. [ 233.602599][ T8361] openvswitch: netlink: Message has 12 unknown bytes. [ 233.653034][ T8365] /dev/nullb0: Can't open blockdev [ 233.705523][ T30] audit: type=1400 audit(1764361076.182:496): avc: denied { write } for pid=8356 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 233.732132][ T5866] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 233.741536][ T5866] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 234.611356][ T8370] rdma_rxe: rxe_newlink: failed to add lo [ 234.662474][ T5866] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 234.870603][ T8388] netlink: 'syz.1.625': attribute type 1 has an invalid length. [ 234.929001][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 234.991430][ T8388] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.066644][ T8398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.162193][ T5866] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 235.182628][ T5887] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 235.429469][ T8396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.628'. [ 235.441498][ T8384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.625'. [ 235.452864][ T8396] netlink: 'syz.2.628': attribute type 1 has an invalid length. [ 235.465465][ T8397] veth9: entered promiscuous mode [ 235.475980][ T8397] bond5: (slave veth9): Enslaving as an active interface with a down link [ 235.482183][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 235.494531][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 235.495135][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.534516][ T5887] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 235.552482][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.573374][ T5887] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 235.605768][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 235.619783][ T8405] FAULT_INJECTION: forcing a failure. [ 235.619783][ T8405] name failslab, interval 1, probability 0, space 0, times 0 [ 235.646326][ T5866] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 235.662019][ T5887] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.671095][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.692043][ T8405] CPU: 0 UID: 0 PID: 8405 Comm: syz.2.629 Not tainted syzkaller #0 PREEMPT(full) [ 235.692067][ T8405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.692077][ T8405] Call Trace: [ 235.692082][ T8405] [ 235.692090][ T8405] dump_stack_lvl+0x16c/0x1f0 [ 235.692113][ T8405] should_fail_ex+0x512/0x640 [ 235.692135][ T8405] ? __kmalloc_cache_noprof+0x5f/0x780 [ 235.692164][ T8405] should_failslab+0xc2/0x120 [ 235.692186][ T8405] __kmalloc_cache_noprof+0x72/0x780 [ 235.692211][ T8405] ? shmem_init_fs_context+0x45/0x2f0 [ 235.692238][ T8405] ? shmem_init_fs_context+0x45/0x2f0 [ 235.692258][ T8405] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.692281][ T8405] shmem_init_fs_context+0x45/0x2f0 [ 235.692303][ T8405] ? __pfx_shmem_init_fs_context+0x10/0x10 [ 235.692325][ T8405] alloc_fs_context+0x54d/0x9c0 [ 235.692351][ T8405] path_mount+0xe1b/0x23a0 [ 235.692377][ T8405] ? __pfx_path_mount+0x10/0x10 [ 235.692400][ T8405] ? kmem_cache_free+0x2d4/0x6c0 [ 235.692415][ T8405] ? putname+0x154/0x1a0 [ 235.692441][ T8405] ? putname+0x154/0x1a0 [ 235.692460][ T8405] ? putname+0x154/0x1a0 [ 235.692484][ T8405] ? __x64_sys_mount+0x293/0x310 [ 235.692503][ T8405] __x64_sys_mount+0x293/0x310 [ 235.692524][ T8405] ? __pfx___x64_sys_mount+0x10/0x10 [ 235.692553][ T8405] do_syscall_64+0xcd/0xfa0 [ 235.692572][ T8405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.692590][ T8405] RIP: 0033:0x7f4052d8f749 [ 235.692605][ T8405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.692621][ T8405] RSP: 002b:00007f4053c68038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 235.692645][ T8405] RAX: ffffffffffffffda RBX: 00007f4052fe5fa0 RCX: 00007f4052d8f749 [ 235.692657][ T8405] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 235.692668][ T8405] RBP: 00007f4053c68090 R08: 0000200000000800 R09: 0000000000000000 [ 235.692678][ T8405] R10: 0000000000010008 R11: 0000000000000246 R12: 0000000000000002 [ 235.692688][ T8405] R13: 00007f4052fe6038 R14: 00007f4052fe5fa0 R15: 00007ffdb81b1fa8 [ 235.692712][ T8405] [ 235.693330][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.916854][ T5887] usb 4-1: Product: syz [ 235.921042][ T5887] usb 4-1: Manufacturer: syz [ 235.931813][ T5887] usb 4-1: SerialNumber: syz [ 236.046942][ T8410] netlink: 52 bytes leftover after parsing attributes in process `syz.1.630'. [ 236.127050][ T8420] netlink: 52 bytes leftover after parsing attributes in process `syz.5.631'. [ 236.506966][ T5866] usb 1-1: config 0 descriptor?? [ 236.521031][ T5887] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 236.529780][ T5887] usb 4-1: found format II with max.bitrate = 3, frame size=7 [ 236.546395][ T5887] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 236.556396][ T5887] usb 4-1: found format II with max.bitrate = 3, frame size=7 [ 236.747284][ T5887] usb 4-1: USB disconnect, device number 18 [ 236.944087][ T7250] udevd[7250]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.972299][ T5866] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 236.979549][ T5866] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 237.028133][ T5866] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 237.055546][ T5866] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 237.092209][ T5866] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 237.130600][ T5866] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 237.153535][ T5866] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 237.169890][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 237.198069][ T5866] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 237.233579][ T5866] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 237.285819][ T5866] microsoft 0003:045E:07DA.0007: no inputs found [ 237.517738][ T5866] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 237.675580][ T5866] usb 1-1: USB disconnect, device number 19 [ 238.664144][ T8458] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 238.941987][ T8463] netlink: 'syz.2.641': attribute type 1 has an invalid length. [ 239.037348][ T8470] ptm ptm36: ldisc open failed (-12), clearing slot 36 [ 239.322131][ T30] audit: type=1400 audit(1764361081.722:497): avc: denied { execute_no_trans } for pid=8464 comm="syz.3.642" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=17909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 239.573995][ T8463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.614908][ T8477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.641'. [ 239.689911][ T8475] veth3: entered promiscuous mode [ 240.049722][ T8475] bond1: (slave veth3): Enslaving as an active interface with a down link [ 240.831051][ T8499] pimreg: entered allmulticast mode [ 240.848890][ T8500] pimreg: left allmulticast mode [ 240.869416][ T30] audit: type=1400 audit(1764361083.322:498): avc: denied { connect } for pid=8490 comm="syz.5.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 241.192049][ T30] audit: type=1400 audit(1764361083.322:499): avc: denied { setopt } for pid=8490 comm="syz.5.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 241.225760][ T30] audit: type=1400 audit(1764361083.702:500): avc: denied { override_creds } for pid=8487 comm="syz.2.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 243.945459][ T8533] netlink: 'syz.1.659': attribute type 1 has an invalid length. [ 244.045792][ T8533] 8021q: adding VLAN 0 to HW filter on device bond6 [ 244.391181][ T8538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.659'. [ 244.391256][ T8533] veth11: entered promiscuous mode [ 244.484994][ T8548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.663'. [ 244.487151][ T8533] bond6: (slave veth11): Enslaving as an active interface with a down link [ 244.708487][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.667'. [ 244.717484][ T8555] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 245.023315][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 245.899695][ T8574] nfs: Unknown parameter 'nsc' [ 246.625927][ T8585] atomic_op ffff88807cba1998 conn xmit_atomic 0000000000000000 [ 247.673503][ T30] audit: type=1400 audit(1764361090.142:501): avc: denied { read } for pid=8595 comm="syz.0.679" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 248.263734][ T30] audit: type=1400 audit(1764361090.732:502): avc: denied { listen } for pid=8594 comm="syz.2.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 248.283218][ T5867] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 248.476178][ T5867] usb 1-1: config 4 has an invalid interface number: 28 but max is 0 [ 248.553904][ T5867] usb 1-1: config 4 has no interface number 0 [ 248.563080][ T5867] usb 1-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 248.598289][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.614230][ T5867] usb 1-1: Product: syz [ 248.621761][ T5867] usb 1-1: Manufacturer: syz [ 248.627632][ T5867] usb 1-1: SerialNumber: syz [ 248.658718][ T8608] netlink: ct family unspecified [ 248.667878][ T5867] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:4.28/input/input15 [ 248.710365][ T8608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.473737][ T30] audit: type=1400 audit(1764361092.952:503): avc: denied { create } for pid=8595 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 252.796339][ T8617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.742198][ T5169] bcm5974 1-1:4.28: could not read from device [ 253.749655][ T5169] bcm5974 1-1:4.28: could not read from device [ 253.814838][ T5867] bcm5974 1-1:4.28: could not read from device [ 256.212848][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.767242][ T5867] input: failed to attach handler mousedev to device input15, error: -5 [ 266.782860][ T5867] usb 1-1: USB disconnect, device number 20 [ 267.733125][ T977] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 273.233734][ T8634] kAFS: No cell specified [ 273.363702][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.324303][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.335517][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.344290][ T5818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.344699][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.452081][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.962028][ T5810] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 277.942193][ T5818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.950584][ T5818] Bluetooth: hci3: command tx timeout [ 277.950916][ T5810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.977962][ T5818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.936649][ T977] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 278.983438][ T5818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.982511][ T5818] Bluetooth: hci3: command tx timeout [ 279.982785][ T5810] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.221934][ T5810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.271988][ T5818] Bluetooth: hci3: command tx timeout [ 283.372988][ T5810] Bluetooth: hci6: command tx timeout [ 283.487402][ T5810] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 284.508862][ T5820] Bluetooth: hci3: command tx timeout [ 284.516758][ T5810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 284.540030][ T5810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 285.512017][ T5820] Bluetooth: hci6: command tx timeout [ 285.572105][ T5810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 288.950762][ T5810] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 288.961924][ T5820] Bluetooth: hci6: command tx timeout [ 292.900453][ T5818] Bluetooth: hci6: command tx timeout [ 296.569093][ T8631] chnl_net:caif_netlink_parms(): no params data found [ 297.512172][ T5818] Bluetooth: hci7: command tx timeout [ 300.519206][ T5810] Bluetooth: hci7: command tx timeout [ 302.445083][ T5818] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 304.341905][ T5818] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 304.349070][ T5820] Bluetooth: hci7: command tx timeout [ 304.362052][ T5818] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 305.518808][ T5818] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 305.562198][ T5818] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 306.452615][ T5820] Bluetooth: hci7: command tx timeout [ 307.610988][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 308.641975][ T5810] Bluetooth: hci8: command tx timeout [ 310.702252][ T5810] Bluetooth: hci8: command tx timeout [ 313.661959][ T5810] Bluetooth: hci8: command tx timeout [ 315.741907][ T5810] Bluetooth: hci8: command tx timeout [ 316.863950][ T5812] syz_tun (unregistering): left allmulticast mode [ 316.882460][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.073818][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.5.695'. [ 322.049140][ T8633] chnl_net:caif_netlink_parms(): no params data found [ 332.803124][ T8640] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 333.791247][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.809286][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.769322][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.778213][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.790543][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.551942][ T5818] Bluetooth: hci0: command tx timeout [ 340.348594][ T30] audit: type=1400 audit(1764361182.822:504): avc: denied { map } for pid=8693 comm="syz.5.698" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 341.541940][ T5818] Bluetooth: hci0: command tx timeout [ 343.322431][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.286074][ T5820] Bluetooth: hci0: command tx timeout [ 344.303736][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.313997][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.306708][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.316507][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.285855][ T7584] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 347.286250][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.295455][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.311897][ T5810] Bluetooth: hci0: command tx timeout [ 347.324986][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.285605][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.301977][ T5810] Bluetooth: hci1: command tx timeout [ 348.332559][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 350.383069][ T5818] Bluetooth: hci1: command tx timeout [ 352.382714][ T5818] Bluetooth: hci4: command tx timeout [ 353.356985][ T5818] Bluetooth: hci1: command tx timeout [ 354.469655][ T5818] Bluetooth: hci4: command tx timeout [ 354.499350][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.535062][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 354.552912][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 354.581928][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.362083][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 355.407967][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.422164][ T5818] Bluetooth: hci1: command tx timeout [ 356.471915][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.543182][ T5818] Bluetooth: hci4: command tx timeout [ 357.422186][ T5818] Bluetooth: hci3: command tx timeout [ 359.434375][ T5818] Bluetooth: hci4: command tx timeout [ 359.503122][ T5818] Bluetooth: hci3: command tx timeout [ 361.591850][ T5818] Bluetooth: hci3: command tx timeout [ 364.232651][ T5818] Bluetooth: hci3: command tx timeout [ 370.211935][ T5820] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 370.261911][ T5820] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 370.272172][ T5820] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 370.305740][ T5820] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 370.316884][ T5820] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 371.307718][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.318530][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.341900][ T5818] Bluetooth: hci6: command tx timeout [ 375.421912][ T5818] Bluetooth: hci6: command tx timeout [ 377.652470][ T5818] Bluetooth: hci6: command tx timeout [ 378.144684][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.911853][ T5818] Bluetooth: hci6: command tx timeout [ 380.693468][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.703940][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.696574][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.689667][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.502992][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.782585][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 394.743841][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 394.787136][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 395.733251][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.748741][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.732372][ T5818] Bluetooth: hci5: command tx timeout [ 401.732733][ T5818] Bluetooth: hci5: command tx timeout [ 403.742423][ T5818] Bluetooth: hci5: command tx timeout [ 404.444533][ T5820] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 404.454003][ T5820] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 404.463573][ T5820] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 404.490983][ T5810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 404.515653][ T5827] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 404.522005][ T5810] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 404.572241][ T5810] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 404.580867][ T5810] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 405.567356][ T5810] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 405.575574][ T5810] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 406.582661][ T5810] Bluetooth: hci5: command tx timeout [ 407.583379][ T5820] Bluetooth: hci7: command tx timeout [ 407.661999][ T5810] Bluetooth: hci9: command tx timeout [ 410.473947][ T5810] Bluetooth: hci7: command tx timeout [ 410.479524][ T5810] Bluetooth: hci9: command tx timeout [ 411.492017][ T31] INFO: task syz.2.681:8608 blocked for more than 146 seconds. [ 411.499600][ T31] Not tainted syzkaller #0 [ 411.521076][ T31] Blocked by coredump. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 412.543365][ T5810] Bluetooth: hci9: command tx timeout [ 412.543465][ T5820] Bluetooth: hci7: command tx timeout [ 412.552066][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.472215][ T31] task:syz.2.681 state:D stack:25600 pid:8608 tgid:8606 ppid:5814 task_flags:0x400548 flags:0x00080005 [ 414.470144][ T31] Call Trace: [ 414.521886][ T31] [ 414.524859][ T31] __schedule+0x1190/0x5de0 [ 414.529383][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 414.535982][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 414.541237][ T31] ? __pfx___schedule+0x10/0x10 [ 414.546431][ T31] ? find_held_lock+0x2b/0x80 [ 414.551128][ T31] ? schedule+0x2d7/0x3a0 [ 414.555846][ T31] schedule+0xe7/0x3a0 [ 414.559936][ T31] schedule_timeout+0x257/0x290 [ 415.511989][ T5820] Bluetooth: hci7: command tx timeout [ 415.517760][ T5820] Bluetooth: hci9: command tx timeout [ 415.530553][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 415.536221][ T31] ? rcu_is_watching+0x12/0xc0 [ 415.551931][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 415.557188][ T31] __wait_for_common+0x2fc/0x4e0 [ 417.173685][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 417.179117][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 417.186953][ T31] ? find_held_lock+0x2b/0x80 [ 417.211844][ T31] ? io_wq_put_and_exit+0x22a/0x8a0 [ 417.297273][ T31] io_wq_put_and_exit+0x271/0x8a0 [ 417.321903][ T31] ? __pfx_xa_find_after+0x10/0x10 [ 417.392881][ T31] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 417.412824][ T31] ? __pfx___might_resched+0x10/0x10 [ 417.418152][ T31] ? io_uring_del_tctx_node+0x279/0x350 [ 420.416679][ T31] io_uring_clean_tctx+0x10d/0x190 [ 420.423765][ T31] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 420.502332][ T31] ? percpu_counter_add_batch+0x180/0x200 [ 420.532151][ T31] io_uring_cancel_generic+0x69c/0x9a0 [ 420.602960][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 420.612130][ T31] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 420.623939][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 420.642318][ T31] ? rcu_is_watching+0x12/0xc0 [ 420.721966][ T31] ? io_uring_unreg_ringfd+0xbc/0x130 [ 420.742088][ T31] do_exit+0x2ce/0x2bf0 [ 421.051909][ T31] ? __pfx___might_resched+0x10/0x10 [ 421.072108][ T31] ? __pfx_do_exit+0x10/0x10 [ 421.122433][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 421.291834][ T31] ? find_held_lock+0x2b/0x80 [ 421.333004][ T31] do_group_exit+0xd3/0x2a0 [ 421.340488][ T31] get_signal+0x2671/0x26d0