last executing test programs: 5m40.927371055s ago: executing program 4 (id=70): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xffffffffffffffff, 0x0) 5m39.888624568s ago: executing program 4 (id=77): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x5], 0x0, 0xfff2, 0x1}}, 0x40) 5m39.724344946s ago: executing program 4 (id=79): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x40) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000080)) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x861e, 0x0) 5m39.720489614s ago: executing program 4 (id=80): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x20, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./control\x00') chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='bfs\x00', 0x10008, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x1214551, 0x4) 5m39.665055819s ago: executing program 4 (id=81): syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc1600e00}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="740100001b00030825bd7000fedbdf25ac141422000000000000000000000000200100000000000000000000000000014e2100004e2300000a004b202b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000030000000000000004000000000000000002000000000000763f0000000000000500000000000000360100000000000002000000000000000300000000000000090000000000000009000000000000008265000000000000feffffffb66b6e0001010001000000000600000000000000080018000000000010000a0025bd70002abd7000400000002400090007000000000000007f00000000000000ca03000000000000080000000000000008001f"], 0x174}}, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000180)={{0x21, @empty, 0x4e23, 0x1, 'lblcr\x00', 0x4, 0xffffffff, 0xb}, {@multicast1, 0x4e22, 0x1, 0x4, 0x10000005, 0x8}}, 0x44) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) 5m39.396358615s ago: executing program 4 (id=82): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000019c0)=[{0x10, 0x29, 0x4}], 0x10}}], 0x1, 0x4000000) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x44) 5m39.331248518s ago: executing program 32 (id=82): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000019c0)=[{0x10, 0x29, 0x4}], 0x10}}], 0x1, 0x4000000) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x44) 5m2.519618407s ago: executing program 2 (id=270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUOTA_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x87a}, @NFTA_SET_USERDATA={0x2a, 0xd, 0x1, 0x0, "8332c913a75b557bc4690cba35d9254948252e42225ca61a569067b83409ee579ff69e1c3f8b"}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_USERDATA={0x18, 0x7, 0x1, 0x0, "dbe52796d911e24f6995d4455b40d7c1593a2b8c"}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x503, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFT_MSG_DELSETELEM={0x8bc, 0xe, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x884, 0x3, 0x0, 0x1, [{0x31c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_ELEM_EXPR={0x5c, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x515f}, @NFTA_DYNSET_EXPR={0x24, 0x7, 0x0, 0x1, {{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xe}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY_END={0x268, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa2, 0x1, "bbfbd9b27125477562f59d1d258268aa2a52c5007dab63b12510822bf0e580d2dd1a5f8b22dbc27f2c2acb4d72e7e1ede4ed9930bb09c8f8a7d96098f056b03ebcd86fa2ffdf4c38666ed33bf62ee92b619769c02d61fc0bb03320e98d984ea4fcaebb74d2c9e0936296a66b3c5310d19d1f604a3f58e8b5f8d2c550d32443f437aed7e7dfc82c9e29494e42974890895c5b881c80044fe5996fb007583a"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_USERDATA={0x28, 0x6, 0x1, 0x0, "a79b3665d36b3b3270d9e457df2e00e12f61b98b821d8f93f49360ed894c655e9ad6879a"}]}, {0x1cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xb4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0x34, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x40, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0xf0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x71, 0x1, "6fd483552e80c6422e1896dd1b38764233bd63e90f4135e596f590f53325017cecba666eee7f60edf6f50d59c2b9e0299d6b5f2480b1e344dbb3b49e9371ce324bb3db1a41813f1c3cf16b5b465fa15b3084c5a1be1f10e2644f73a29acde6d5e6dd9b4c603f8168a0d2c19b05"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x370, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x534}, @NFTA_SET_ELEM_KEY={0x318, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6c, 0x1, "c6dee8f8d25eba3c52fa6f9f1ae31ef65cabd088ff13fb947a3281aa5c2051d93f0df3e4a06ed9aef827ea5c2dee5dba366a6b3bd1ee096184c03edf37ca6e92054915ee8b6f84afd38f64bd601af39ea8c6ac40f3ad59d3d99b3624cb099289493456e981f5c4c3"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "ed54f3da374c602e40ea09d94f55cda33b2c392e1e5479b15ba2fb443296ac49ab173219857db965065a683eb60e55b6a552af2b11269603f9f59bb2f591e126e167724208c1a904d8d73896305c4f8691e539ec534f1ae621e2237b6cea8984b42647cd9b2476fd084fc74c5413247315644d956f49e4d2adc91b55b67909f6d67bbafff4183c421216d215c34abcf621307b502824dd33e8b6b14d78b188277e97ec33886962d8519f5ac597623e5ba6b9ee0e7c2252"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xfc, 0x1, "37950974b0e843288168d099ce8eeceaf4a00f1c548c2b700e257b4975208ab0bf10fcfd2bc9f7386b69bcf99768f81f5332ed304e1b525bb6f627bb4ffed3c29c8934ef0ef272b0870d78f11b0186b1dd170a8b57fd002c408d4f2aa90e257bbcff36b3009c33791023d918649978de6b07ac2f4f078156d7a1b59920429ef87b416b2d75ec56f234815f88c869bd62aa056b9294eaaa98583f952462d3e89ad5580df22e2d05bd3316215663353c3b35b79dc205e94cfcb54af2ed277904952022841f2ccacb8e2da6020808c95bf1db9d63ff304e91ff50026d3a0f5c3f87e83c746db71051b12af343f6301ac6927a6ed7ee8f7dcbde"}, @NFTA_DATA_VALUE={0x13, 0x1, "f466480046d4c890228ce512a80970"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x46, 0x6, 0x1, 0x0, "e4dbadcaa4686dc67e49fd87d6d75efa7ae597487d252756f29ee252dde4c56febe65e5d38fb2951e1aa47d9a2f171dc1e2306cd7dd39bf4a2918a13c13a813e01c3"}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x4d38, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x433c, 0x3, 0x0, 0x1, [{0x2bcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x11ac, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4eb5407f36f9fc5b}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "0caf0e8f472f0fb77a66713917565096e5c3922d9920d8a29e87660f440aa3422da52fc45a0ae9a1a49eb3f943c93b275bec7bbc23511fcc2f49fb4df1528440e510a743ca615ae9101938b389a2afc102b0e82f5dfa1d32a16e8e6f368e56609c8a4291d7eff03a591f12"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}, @NFTA_DATA_VALUE={0x42, 0x1, "faf4fc112dd32af2e44243ab7429ea0b4944e9fb7ce20624dcfece63496d9a35408d4ca956512cb927c844f3a6f6f777060fb82a9ccbd1442f4d81fa020a"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x10b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_SET_ELEM_DATA={0x304, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VALUE={0xf6, 0x1, "7c175edf31fe7544477ddc4c69cfbdc929de3c940266ee18074de37df00ece7b35660229cf6106540116bcf44931e5496ba3fed2a31cba63d6d15424e4db34a8c50bd13478d8adfe407d73bc5f1bf08316b157084b1c30e33e06ab40fb21f609409b3cba2b45e4cbb1dd79d557636df1cfd1b24496127ddc750940f00edb57995080e05373d9c85a562793d43eb42b30d60c9dfe7235cbde5c77adce1d3a2dc9a8b49bccf979d7cbf00f2f7abc3f71c503b3108d9ffdd029b879c712f032235860bef79b274377c3c5b53d3fc1aed95569effa20fff40cba704512ed090a044b3f4f8bc04456febe8fcde1f94d294fce23dc"}, @NFTA_DATA_VALUE={0x8e, 0x1, "336e353f1c2ba5ba89d772185eb9fd3dcb5be8c6fefde9d507f33d59f742d748f8c79335480a6a9696719e1ae68b667820ff18d28b0e1b79ab06e3e1f1916cea2d6f99b313e95a6269a11d4ade23e593b216518f010a8d8d8d5701499dcba973f6c4ac761a0516aff93e0819973dcb22ebe00b726daaf3c7e7a2c9ce398e4399c96306388f83e37a55de"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x58, 0x1, "f1aa73192190dea2c1be4f94b953afc8515fa4332eac0bb23bea6ae321e0bbd1221e580508918001852b6fbda4baf912214ab3a212e7c5453acc26b0ba1346a5e66159e353de734e27789cb265033ea0f1d3863d"}]}, @NFTA_SET_ELEM_KEY_END={0x1f4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "6348f80a37fdacf1cdabb50a715f40f9fc88f1cebb3c740fffbb4714d8d58e3cfc5f07fcc5404a922666da6fec"}, @NFTA_DATA_VALUE={0xb9, 0x1, "eaa185c50c16d94f4b3a7941e8c19a62cb8c3217b8d9f51ad0249ba18e3ec1c47f253f5bfd09a5eb3633471310f0f1d2101545d8ce3f8d36d30a808555d36fce5dfb813c26282deacb983040e245b085584f6a74cc4e1d53b047e23d90aab9d07a7c5e4a234f15b2eae8481c3c9243869ce566b2af5c190ec256a63bf0fa5a9deb6f3b17991e3dfe797ad99e1e61a5cb34fb979b9ddb83ee2e01f59ebc30da620f66e05f2ad082667fe3976c145039b51ef2573d18"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xc9b49fef3c0f71a2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x5d, 0x1, "20af6e65b12c51b996e6fd75d388a0e80a9cb6d22f11ccbc299d2a10b549386b39c5d735f03b9d8e6ac8d042c00b5f7c87ecd8b0a716fc87b3f1903256effcb6ea7d61a99b22275993715ddcda660f581a2edf81c006ccb208"}]}, @NFTA_SET_ELEM_KEY={0x434, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf7, 0x1, "b927b3b02ec986388772e525e16b690b86f1d6ed21e9332730bf00e01e9da6cf575b61d5a6a2dbe44d91ad5107fb2269da5257fee9dc05218e54547bef880b5e3a8ab43cd33ba40e043414138cea238a7dfb60f5ecaee92508646944782f5a04451566222813872f0f9c5548e44393be4b12a500b78230bff8acfe9694164154be48feb46e5ad613143b079f94a9a47df8bbd9916fd795674b6964c7f23228ec4c11bb1abcb21bbb10b44a48a4b2d6d53f2019e1ca2c3fdc2bbd2926ae16b38f217a4b45fd125fc57281d66a82f29ecd4fc05f3930f906910640319fd784f57d9bdd4a449bc3e181056705418fb9bdefe06e2d"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "446f05ba7ebe70da1e095d7c76adcca46792cefabfdd19b10710969c35813800e969a019606754cd319d073dabecc34feb178d638e4c698baadb8f6b7e71139bf572b6bba5f0fcdef86200ff23da2657c18190ccacdd10af4da91ab5a4c33f1372c98c5f978090a9d23e86b1e0e045f07aefb7676126d93b7d875940b3231f3671c099fb302049ed8f687395472e7df9cedcbbab18a2b42588fc05605d2d05bb1a8d3a854bc8dad45c719951669edaf4f4fb4246a70bd42678b8c92e909414698e415434503582ef3dd20e52a03b91bd55c80988f360e00cc063f7cc9a050dc125f1fe1e6e1b3128c38edc5e18564c"}, @NFTA_DATA_VALUE={0x8a, 0x1, "1e3748c89a1dfb1832a58834331080ba6ee4f8d95ebe02344b677e763047b66295baf88d10998fd266a9838fe4f47796e2057345796e72779c91901b174821da673407d64fd5ef0156f187cd662d801cb60019ba7362c8f3f157387d60dcc24197c7eaffe195282fe2db06755f285f23073ee655ef84fe033571911a6eecf63aead88f92ae44"}, @NFTA_DATA_VALUE={0xe3, 0x1, "03fa15a1ebda160fb92c6844e83832c25ce424782b813ed93e51989dac97c172fe37c0f12e09d74d9b833570f9824e9f5d21f8d05e6ddb8bdfa15949129c70880b3c9704ef0a8994d28fdd42cb9cb4fe37e6d22c0b0f135e1468769e09a059b087f1f6d5041cfbc9737eb2dd4e4f5665d8c8d35e8e3413f2efceb989d58072cf83e0da35016a7c46dafae26e99080f0b26d2ddd07bce1e28d2645009747c0756fa26c4523fe0fe9451f21a943a6beb1249a1e358040fad522dbe3c1eb0fe22255c6f558d650632fac1b2be5c1e5260c0182f61c78624960779e6a2d0f5e09b"}, @NFTA_DATA_VALUE={0xb6, 0x1, "71e5f35c5d0cd5fc8742984359e83d3db946f6ec8cba803b365afbbb874d5e8eb7092c9aebef94038420d96c6689620a7784f29f24aada57832ea579178915750979a1da3d7573c303594302cae39d02dd5780685128f8af0cf5182cbdb87960073f1a129182398f03175f40729dbddd2a8811ee12430062010d75973216f276f99e7cd1aaafa41b036f356b330999892aa4f7cfd4dcdfe30969e39f5d149b396391858b41345764ca746d11c987e60928e2"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x175c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa0, 0x6, 0x1, 0x0, "a0618b1e8c1fa2fb91dd10670fff892dd33c2f8cd7926ad16b4f7070f573c5aececc17bdcaf001a78794d098eacfab7efef4c57c1aed387357ccef397df03aabfff58cec30727f7f16278cbbefca42b0febf645f045611cc517243dd61b492958e58028aed46858b528607ed833f622432f85467179c3190008e813b5921dc5f095a36026d574ec978b86b62edebdce832460567545d6a4127630422"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_DATA={0x98, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_USERDATA={0x15, 0x6, 0x1, 0x0, "4050e8a7816bde6b925fc97014f4daf003"}, @NFTA_SET_ELEM_DATA={0x10ac, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x47, 0x1, "dd0b5e9520783750c92715f9e0e190a3fdf3e35749d685be118d7a492f0002a91e1a4a0c3392f24766aba178a4acc808edae5722ad99004e25fe28c1e29bcb0952df12"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1a0, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xf327}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3c}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xe9a}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x58, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x60, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x11}]}}}, {0x34, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2ca3}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_DATA={0x39c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8e, 0x1, "1d85ce243b9045ac1efbae7c7e070fbb3e0e926e9416632131b1d215a69d27ce12dc8f38f516781cb8723e88f1070e1f8aa7daa40c314d90b283c465a0cdbd9a12fa262775841e9eaa6991fdf66f3a163473fcdad4b8c6f3f08930d55083e35758984a843126f2d2b95b1b9d490959f3476ce326cdbb516d04c687acb4a2ab12e7b7a2a8476ec920dcba"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xde, 0x1, "6de184a9b54a6388bbcfec126f6f29d789969285236080e911d213a15f3a80c518b0b70309770cccc00dbb568fa7595a00255cd52c46015ee50a905cf5cbf526f7b7e9a594b839eb727410e6335afc22af7c92c357d0ce2c89ad1e3308497bcc00c90f3020de1c8191c403de4ac76d7bad54c876be007c8c159d5a9cd5c650f873512333c4365315eac86df1838d4f8eef2fa1288420a4951b6ee146fbd410f3e36c0563c2b3afbad5952c090de654dfedc09166493fed8309ef913e844c2c11db35e7c475ff50dee50d7c4b0d247384857f902d55168eab5cac"}, @NFTA_DATA_VALUE={0x6e, 0x1, "e3e8d33de05ed398ee60883a2b535a170da8d1d2fee29f02509ffe5c37d80e1b123f4df31a9d5e7781b12e754583c65c45ccd971a6401156827477358d7b7ed01bfa554b8c04284aed267dbcab8a6605a6a8fcca5c4bdbf37ef598b572705c9668c036ce5e2fe50f8f5a"}, @NFTA_DATA_VALUE={0xcb, 0x1, "d862332a86856f10d0d8c3e041cce7c7021ba45a499a897958c2feb8e49241443a666d07d99f089bfb2ca9f2842ff8795c1243a529d2ebe2d8dd411b906f8fb0e367cf5046ea0c2117a5a98b43a1a8b6faf8eca8edd10b8db8a2ea8ae1c74e4c6aab6d5ed25da83dadab3d39575e8135e07cbd4f40067aaf0e27746062bfdc71bdf9309641f306609a241c0fbaa23bd7a6b7306343fcb3b6796e89adf4f3c6f5869c5a12c6d165e2b8780762df3885a7a8c02c95389eaf5c9d62992584ac5d2db9bda8dff0110d"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x86, 0x1, "3899de89f89fb8e76feb2a31d0ec683a36e686958667cd0c64097fd57e95288bdce63fc357338dbc4478bbfe943ad7d6f3d45c934f167adc8d3defdf3901b08a8801c5d92e8aa8f27c50bc928f4c68c44a27b3b74fc2e12cf5cd9508f02807159f9c09302a0647e0b583e791ce255ab4848104e7aa628cff1dc5758c3b78e4821449"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x9e8, 0x3, 0x0, 0x1, [{0x420, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc, 0x6, 0x1, 0x0, "62a1811dde41eff2"}, @NFTA_SET_ELEM_KEY={0x140, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc5, 0x1, "0ce064ab20d5a321a1cb960b7238298458761235cfbc6efce2c66fbeb53d915361457d6e6516133d2504c3e4136dd4f1640538950a0e99099f3f151f704e0cc4d282ceb2298640909f57f278adcf3abf6bb3df2ccde41470c1c9280fe85a6afd03f1bcc6c25ad9ebbe416cf4a9f574f2b8d587469fd13ac12a60752dda7f4d6de89bf792e97890a6565909cca9cd07c573d7e706de02345656398fba8515a0ceb68481b62c458ada65aba20fb7f93e3641cd4e1b4f3b9e6a6d8d8454b9b6639bb7"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x3b, 0x1, "c311e5a18917c219bcd48a9b44783d43a7a7d38c1c902a788bfe392db020b388d807359e2675e9294ef63ae539148ddbb50c1573b0a0bf"}]}, @NFTA_SET_ELEM_KEY={0x21c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaa, 0x1, "17a627bfc4696638acdb5cfa288c15a9ed7bed6bac1aad374f3fdd95c123c802db6652a5542b0b882e12dda8727433d7b0e0df516c7ccbae881a2c373341376826bf4b60044dfdde5885f5caf4846d7df6a37063418c59374d3e645914a0a3d1629d80c2ba97821fdd7095c01ffbff9c980e3392e8e43bed41f1ddef283d3a46800b8bd3a7c46ada4e3dcb69c3f63bf3b5584c4821ae7998039df2b8df3768898524af214703"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xfc, 0x1, "fe72820dac4d723b03b0db2fcebfdf41dc9af84fa9fd2e302bc36a950a4d32c1f6b82ad76de73d5ed3acea4c0f1cb902b78de561d39854a7f7f38471d748181512e0481982732225e0d949eaee06e314519039827a7f3170c94b4502305e8a7623be4beb1c587899a6adf3bd8742c856ba3928710daa1739416d87e6d35f4aeac980dd8adb73867de6bd597683cd74ffdd8d306234aab2766edc0b804136eb49d59ee927bc26676056dfb4835cafa551ed57469fc811caa0e6166abedc7be8b10289cf93aed5eb4de98a6e4b350c5f8c81f518dd833ac0eefcf114c2784baf1cf9c46c1b3154778fd267de0e3a6c9b2385a3fb8530d7947a"}, @NFTA_DATA_VALUE={0x18, 0x1, "c15ddafacae137395f28f24cbc00cc58cc29d271"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x36}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x58, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x6, 0x1, "cbcb"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x47}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xdf}]}}}]}]}, {0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x34, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x544, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPR={0x534, 0x7, 0x0, 0x1, @range={{0xa}, @val={0x524, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x42c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd6, 0x1, "04aeb51cbd7c7ad0a2a75432abd13e5ab7d804056d3a5cb219ad0633d80d847654b1999daa8b64f5a66fe8535d01a44a632e86b52036518ec6563e6b31638aa8c6d4faa85c4139ea8b81030d91cbbfdca740f4da322956195df8919e14c89621c199c1905d9abc15ab6bd496b2301c5b66d7cb9d4c678989ff0011ac42b3afecdca4a7fca649f3c6d1d1f8d06bb46ee9d2d934c3b3563a95c81271fccfcf4dfa6e4e804979e600d47ba1e3bd70aa42889ee34d6edcf69c575e4ee66089c033515647beffdb6f14424bff614f41719e947a06"}, @NFTA_DATA_VALUE={0x19, 0x1, "4e4e911880da78b70e804a5b92ea71d4d316fdc801"}, @NFTA_DATA_VALUE={0xa3, 0x1, "993936ea3ebef0f7ffd2e403760869e7ce5ef006cd17a1f2d11b63f0c07683ae657c6dfbe9165c9070fc8761a44ef48011248f4aa830e5efcc4fbf32057cd031110749d296835b36fb64524e81ca6256a94d6d6893f1ce716cbdc8648883b4c3b743eb0646466e83d71dba57d57616a3e005234c4af5b963b7e62c499bd01234303b50899f189df43de6549b575daa20b9d6c51bff7e51af0014c599ab9d99"}, @NFTA_DATA_VALUE={0xe9, 0x1, "915de8445fd7926298a9dcff8f569073db7b0ae11a57ea38c84224d73d38d73180a04669c192cfaccc555c55ad7b2c1c8b81b52689f9b61a9edc6a3a7ea2645809ba376b0bb3d49bbcbd7809d8521df59c23613bff1bf2e783d49d81b61577bb71f1bd9740ea86c80516921a4cdf92af548ccbe147d651c0c6bc104a8315ba1016895f29afc0e105943d118c3774c2860e14ac167024c37a0f9a4cffe7d5ddbdaa73b6e733f7fe4a4d11855439e82dc7c2a1f7e19fb2676cad98f4efe3f1b39848d7e539e9829b693638d18133bebba9ee9ba02ea95b140fad7b1c111b62d566f7fced3cc5"}, @NFTA_DATA_VALUE={0xb3, 0x1, "dfbca0452f0f01f0523e8a9eff86e35f40ef2853e155bcbde1639e6e5f7f97426f238c660e67946a790f1eb43aa38c840f29e56fee6b6d191ea9b078acd28ad38272fa4e829d5437f899deee368498f3a8bd36042b1d9c2ef7d939e692bf46d9118472693629028ba220799da675f1802c5f13e7e6080e1f310b4c166135031d1768b7eaf35d54af2d41837225ab52846f10e936f1fd3bed55a27b27a70885bbebba9757061078d9a09a4d545b0c7d"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RANGE_FROM_DATA={0xd4, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x80, 0x1, "c179850ffd502d74167e23b57902cefb35f942be30f3d1b49f5756f86b82279c070bf9b90155cc6f9e61f0041d950012fd45315d29e5c5824516d3c1491c1815e34876a1a76d5888eb07dc2661950beb6bed9198b36de677af182baa670fe4d0a9eb34bc2f40e641f2c2b98a403aae01e12bd2641a6e414cb8f415be"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x69, 0x6, "3ab035eb550d5d8344acf75519634bea045ef2165f0299b2e6b450bbb8345468e8795e450563c4af4363de54716f52be81001462a27100de18e1d40fd0b666d93d64c8bf6b75e7d19981bfa10a4d2e3affa515daeb551715298f4bc38a5814e086669d4b7f"}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14}}, 0x58b4}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 5m2.493746705s ago: executing program 2 (id=272): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2, 0xe4}, 0x18) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x1b, &(0x7f0000000c00)=@ringbuf={{}, {}, {}, [@cb_func, @func, @printk={@lx}, @func]}, &(0x7f0000000d40)='GPL\x00', 0xa}, 0x90) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) readv(r8, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) preadv(r10, &(0x7f0000001cc0), 0x0, 0x0, 0xa3) write(r9, &(0x7f0000000000)="fa", 0xfffffdef) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r12, 0x0, 0x40000000000002, 0x2) fcntl$setstatus(r12, 0x4, 0x46800) vmsplice(r11, &(0x7f0000000180), 0x0, 0x8) 5m1.772946799s ago: executing program 2 (id=276): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af00, &(0x7f0000000280)=0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xfffffffd, @local, 0xfffffffd}, r2}}, 0x30) 5m1.680370233s ago: executing program 2 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1a1011, 0x0) (fail_nth: 7) 5m1.360608447s ago: executing program 2 (id=279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f040000000000000000008500000005000000850000007d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x18) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) keyctl$invalidate(0x15, r2) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r2) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 5m1.033624236s ago: executing program 2 (id=282): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, 0x0, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2f7fffbff}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x1000, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) r9 = socket$tipc(0x1e, 0x5, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r10, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0xc) bind$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r11 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) fcntl$F_SET_FILE_RW_HINT(r11, 0x40e, &(0x7f0000000100)=0x5) (async) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) (async) sendmsg$tipc(r11, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) unlinkat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a01e7168da0dc0000000004000400000000000000000800"}}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) 5m0.818848715s ago: executing program 33 (id=282): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, 0x0, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2f7fffbff}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x1000, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) r9 = socket$tipc(0x1e, 0x5, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r10, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0xc) bind$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r11 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) fcntl$F_SET_FILE_RW_HINT(r11, 0x40e, &(0x7f0000000100)=0x5) (async) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) (async) sendmsg$tipc(r11, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) unlinkat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a01e7168da0dc0000000004000400000000000000000800"}}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) 1m30.683682329s ago: executing program 1 (id=1421): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000200)=ANY=[@ANYBLOB="68000000000000004b0000000000000020000000001100"/32, @ANYRES8=r0, @ANYRES8=r1, @ANYRES16=r0], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x0, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x10, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dri(0x0, 0x8, 0x2c2080) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 1m29.657842769s ago: executing program 1 (id=1428): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="04000100"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}], 0x20) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x9, 0x800, 0x0) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) sync_file_range(r4, 0x2, 0xda38, 0x1) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0) fcntl$dupfd(r6, 0x0, r6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000d4a1ce4e9de42536000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 1m28.69084136s ago: executing program 1 (id=1432): syz_init_net_socket$ax25(0x3, 0x5, 0xcb) (async) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x2, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x9) (async) r3 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, &(0x7f0000000200)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) (async) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4040040) (async) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4040040) close_range(r6, 0xffffffffffffffff, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r7, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200448e4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 1m28.221229628s ago: executing program 1 (id=1433): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @private=0xa010102}, 0x10) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) 1m28.088358141s ago: executing program 1 (id=1434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r2], 0x24}}, 0x0) 1m27.920873978s ago: executing program 1 (id=1435): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) r0 = socket$inet(0x2, 0x4000000805, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff0500050002000000050001f00f000000"], 0x60}}, 0x0) (async) listen(r0, 0x5) 1m27.77887074s ago: executing program 34 (id=1435): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) r0 = socket$inet(0x2, 0x4000000805, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff0500050002000000050001f00f000000"], 0x60}}, 0x0) (async) listen(r0, 0x5) 7.35993689s ago: executing program 3 (id=1870): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2}, 0xc5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x10}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x4000000a, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fanotify_init(0x0, 0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x110, 0x2, 0x5398}}], 0x18}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x11, &(0x7f0000000280)="2c088334e85eece341fd4b042ec9306cf884010431f2e22989b4b7e4c646e371b62aa29cbfcac76ee3f5c07d4b30fca62af3ecb1e34d88c7f7de7c354dd3ec40e5c07f780419e5ef2d2a9bad5dcf825cc44290cfbd0207755b0afb770334c4f1f47ca99af91f8f66604aa8764b289a61b59cc1e87e230c64ee27abfc20f7500764d3f534de5d6f0efdd53cfdad34b3117712f71f5d54069bed13ef95b98db318e4c7a05e8d27d33e", 0xa8) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000500)={0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="4010260000000add1aab1a4d6f07279b5dfe455e8c69b1f64e031fc53af6182b0e3daf0658b18af85a984400"], &(0x7f00000004c0)=ANY=[@ANYBLOB="ffd65771266c8dec894d6000005b105dadfd8100100fd8990be203a29f0000000000d7c20b"]}, &(0x7f00000007c0)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="20164e000000d6f36f012db919306bbc296655f19658e6f371a60fd28845b7023b9b4c2a337474fcd99ee7c2757588db8e61bc02267fffffffa3d8f5b884e53758abdb617061e885b8625545a1c1c3aafb128271673845402a66aa0e475458a09aba9b766e4f570957c1ffa97ca9a5b5e0b042"], &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000640)=ANY=[@ANYBLOB="2000db00000000d9a769278a023be5cf5652c99038d11b1a2713efb5ce2a7d9552880b0d58494fb4202a90bf1559168144ae0347c1ece666d7dea4369f1423b10f3bc6d38a38bcc6a8f6b6a2270aa92001691b5c2f52d1bcff3f10747998d647d8e61a852964d25cbddae449e38fea5967d6caf2a5e6b518db8315587155c519f0cc67570348aec6b027337ff3110543490800b9bae886996c9483feb668a72fa9946b2aeed042eaa93fa1017b323d49d540ac3ce0c47602ebf6c8fc6c376c6970fd510115d30a4c524189715f3c573e5576a38d1ff2"], &(0x7f0000000740)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x1d}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 4.696191466s ago: executing program 0 (id=1879): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0xe7edd000) getrandom(&(0x7f0000000240)=""/278, 0x12c, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0xf51) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x24044014) 4.564378691s ago: executing program 0 (id=1880): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4820, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x2002c014}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = gettid() r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x808, @null, @bpq0, 0x25, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r8, 0xfffffffffffffc01, 0x0) tee(r4, r8, 0x60000000000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f0000000500)={r4}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5}}]}, {0x0, [0x30]}}, 0x0, 0x33, 0x0, 0x1, 0x200}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.464534952s ago: executing program 5 (id=1881): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r4, &(0x7f0000000040)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x8}, 0xfff, 0x0, 0x34, 0x3, 0x1, 0x0, "", [{0x2, 0x5, 0x2, 0x5961}, {0x1, 0x7fffffff, 0x7, 0x8}, {0x6, 0x8, 0x1, 0x7fffffff}]}, 0x60) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3282b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x30, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 4.039903223s ago: executing program 3 (id=1882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x28000000, 0x42800}, 0x4004040) 3.956328597s ago: executing program 3 (id=1883): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x2}, 0x3, 0x2, 0x0, 0x6, 0xfff9}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b32, &(0x7f0000000040)) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000680)={0x40, 0x14, 0x49, "a83907c412bb287c857d1b058f855d5a5f102429e033dd8b1c03a0c863be524c776e78b4074c0dd3231157d6de0e0334fb1fbbe2fd63fe578716d7af358ac641d3d69c7952ee0b25d8"}, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @private=0xa010102}, 0x2, 0x0, 0x4}}, 0x26) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x20, 0x9, 0xf5, {0xf5, 0x6, "0aad9365b9c08f587895d6ee12da1fce106afe750a8ede39b8f9bf559a0b1b853fb01f4c798b74efb56f95c7865bdf62dc6b412f4f818e98fb9d1ab85dea94fb993f5beb4616b776fade5d5bfc7b97f7ef67b0be335bd8be5c22d8648079ee572cb752cd2dd9acb1297b552e39f04150061a71479569c1aad86f3476f3751880a8a28824c8434ced086d8c89ede4351978e13cdda1e45e0ae72d18a4eaebab50abe2e5b1ce3c34d4a991146e1339e05ab205302da0a2ab18aea821eb03d6cc984fc1fab9e4d6b83425b2e3d901e7abad2bb51d44f6fcda3e9c6de2d8b7f73275d2b6b9d90131f4aacbc2a47e49653ab4b2ec0c"}}, &(0x7f0000000240)={0x0, 0x3, 0x3e, @string={0x3e, 0x3, "4dff3bb603b11fa6c6fcc2f1b78920783843d6d2cbf94edf2100e33dfa532ce27ea5e1bbbdcf69a8e1e345da7be0d80ffe133550b960459cd74e6db6"}}, &(0x7f00000002c0)={0x0, 0xf, 0x56, {0x5, 0xf, 0x56, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0xb, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "5e729e40916e94a511637a5d3dde28e5"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x9, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2a, "e4f70e054cb50495258a8b858749c0cc"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x2, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "4ed68e4a23742a51d55cf3137ac72ba8"}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x10, 0x0, 0x5, "ee45ea15", "af8478a6"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x2, 0x7, 0xc3, 0xf77e, 0x6}}}, &(0x7f0000000880)={0x84, &(0x7f0000000380)={0x40, 0xf, 0x10, "0fc2cdd46330cbb8707557f71f164dfe"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000940)=ANY=[@ANYBLOB="200004000000400089bda197000000000000"], &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000500)={0x40, 0x9, 0x1}, &(0x7f0000000540)={0x40, 0xb, 0x2, "6902"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x507}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, 'BX'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x34}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xa}}) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0x15, 0x0, &(0x7f00000000c0)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3.627373111s ago: executing program 0 (id=1887): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) socket(0x1e, 0x3, 0x8) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000040)) r1 = socket(0x10, 0x3, 0x401) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b000)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff2, 0x3}, {0x0, 0xfff0}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x40, 0x2, [@TCA_MATCHALL_ACT={0x3c, 0x2, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x2, 0x16, "0066a1000af4d81dfa4c6a00f300"}) r8 = syz_open_pts(r0, 0x0) r9 = dup3(r8, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, 0x0, 0x24c1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x400, 0x200000400000000, 0x1000000004, 0x344, 0x3}, 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(r9, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) 3.40411283s ago: executing program 6 (id=1888): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="f7f200"/20, @ANYRES32=r1], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff11}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10) 3.375413844s ago: executing program 6 (id=1890): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0xffffb1dd, @local}, 0x80, &(0x7f0000000380)=[{&(0x7f00000003c0)="80b5aa5518c4f87a4a52d2173c4066", 0xf}], 0x1}, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_mr_vif\x00') read$FUSE(r1, &(0x7f0000000d40)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth1_vlan\x00', 0x0}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x43c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x410, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x40, 0x8, 0x8, 0x2, 0x6, 0x796, 0x10, 0x7887, 0x5, 0x10, 0xffffffff, 0x5, 0xebb6, 0x6, 0x1459, 0xfffff9ac, 0x7fff, 0x7, 0x401, 0x1, 0xd1, 0x10000, 0x3, 0x4, 0x4, 0x0, 0x0, 0x9, 0x401, 0x4, 0x0, 0x2, 0x9, 0x4, 0x101, 0x404c, 0xe, 0x7, 0x55, 0x5, 0x4e94, 0xf, 0x3, 0x8, 0x200, 0x0, 0x54, 0x6, 0x627, 0x3, 0x80000001, 0x0, 0x6, 0x8b, 0x1, 0xff, 0xe48, 0x3, 0x2, 0x5, 0x9, 0x1, 0x7fffffff, 0x0, 0xffffffff, 0x5, 0x0, 0x10, 0x8, 0x10001, 0x8, 0x52a, 0x9, 0x1, 0x1db, 0x0, 0xb, 0x0, 0xff, 0x13, 0x5, 0xd998, 0x8, 0x7, 0x2, 0x2, 0x0, 0x0, 0xb, 0x8, 0x4, 0xf, 0x7fff, 0x8, 0x7fff, 0x0, 0x100000, 0x6, 0xc, 0x1, 0x2, 0xf, 0x0, 0x2, 0xfffffe00, 0x98, 0x7, 0x8, 0x3, 0x0, 0x6, 0x3, 0xb, 0x5, 0x10000, 0x9, 0x4, 0xbfe3, 0x100, 0x0, 0xffffffff, 0x8, 0x4b5, 0x0, 0xb1, 0x2, 0x4, 0x6, 0x4, 0x28c0, 0xfcf4, 0x200, 0x0, 0xc, 0x2, 0x1c8, 0x9, 0x7, 0x9, 0x7fff, 0x10000, 0x0, 0xfffffff9, 0x7, 0x6a, 0x8, 0x501f3cfd, 0x8ea9, 0x7, 0x6, 0x4, 0x6, 0x7f, 0x3, 0x2, 0x699825d, 0x1, 0x7, 0x3, 0x81, 0x5, 0x0, 0x6, 0x530, 0x27f, 0x10000f, 0x0, 0x3ff, 0xfffffff8, 0x3, 0x6, 0x1, 0x80000000, 0x8, 0x5, 0x1, 0x5, 0xd, 0x7f, 0x10001, 0x101, 0x5, 0x8001, 0x7, 0x1000, 0x3, 0x99f, 0xffff8000, 0x7, 0x800, 0x7ff, 0x3, 0x0, 0x4, 0xca, 0x10000, 0x6, 0xb, 0x6, 0xe, 0x200, 0x0, 0x7, 0x8000, 0xfff, 0xa, 0x7, 0x0, 0x7, 0x7fff, 0x7f, 0x2, 0xfc2, 0x7fffffff, 0x7ff, 0x27a016e3, 0x0, 0x5, 0x8, 0x0, 0x7, 0x0, 0xd, 0x7ff, 0xe, 0x6, 0xca05, 0x7fffffff, 0x5, 0x3, 0x9, 0x1, 0x0, 0xffffff01, 0x5b33, 0x6, 0x10, 0xfffffffe, 0x0, 0x2, 0xec, 0x3c, 0x4, 0x1, 0x40, 0x3, 0x0, 0xc, 0xed3, 0x4, 0x0, 0x800, 0x8, 0x9]}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x47, 0x1, 0x3, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000580)="660feb93f700660fc731440f20c066350d000000440f22c036660ff531660f3806a9faffbaf80c66b8487fb98a66efbafc0cecdcc7650fc7340fc7ba0300ba4000ec"}], 0x1, 0xe8, 0x0, 0x30) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000240)={[0x2, 0x3, 0x8000000000000001, 0x3, 0x4, 0xffffffff7fffffff, 0xfff, 0x3, 0x9b9, 0xfff, 0xe, 0x3, 0x2b5f7546, 0xfffffffffffffc00, 0x400, 0xffff], 0x100000, 0x20106}) r11 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r11, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r11, 0x5000943f, &(0x7f0000003b80)={{r11}, 0x0, 0x1c, @unused=[0x1, 0x78b, 0x400, 0x7fff], @devid}) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r12 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r12, 0x80005520, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) 2.935897564s ago: executing program 6 (id=1891): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fffffff, 0x2) io_uring_enter(0xffffffffffffffff, 0x2c20, 0xb103, 0x22, &(0x7f0000000100)={[0x400]}, 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000280)=0xb5, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x28, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x100}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x508}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x20000080) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) setsockopt$sock_int(r9, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r9, &(0x7f0000001140), 0x700, 0x2, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000380)=ANY=[@ANYBLOB="e10931d8640abbbbbbbbbbbb86dd60ea0c00004d1100fe880000000000000000000000000001fc000000000000000000004787aa344cdadb705e7c000000000100000000004d9078020000"], 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r10, 0x29, 0x18, &(0x7f0000000100)=0x807d3, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELSET={0xe48, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_DESC={0xe4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff98}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}]}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}]}, @NFTA_SET_EXPR={0xc6c, 0x11, 0x0, 0x1, @immediate={{0xe}, @val={0xc58, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_IMMEDIATE_DATA={0x1c4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_IMMEDIATE_DATA={0x3cc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "34832b25b2cc8851656b311bcd3153a04e25545189e3500c20ecd816fb1c3bbb6b3dc258264977401ce9829bc1ae53e5c3db0f00134a17a761ae0577d3b46ad1ed6f4494e7d7b564570f8ed40424b06ee05a9aba473626b1b2942914bccca3e52ab4b84d68ac8aa1345cf93125438a1d1e81281d963fefa89b0e12bf1493fb18fe731f3701b5e1c94a500d4896ce9eae006abb9e32d5b8a1fd21030ed8c10b26f936649a95dbeac9d9033ad3bb15a773422af16e26a547f7"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xb7, 0x1, "2b3e0da0ad7e27a48816e56d3eb40baf6f23cd77d0343c844a5ff1e81b11059ca99349c63fccdf73c559a3cb3ec792b7873f17d457d0006064e6223b36a180545067023390d58cfe654cf460c6eb52d60e52945e93b9d352c74d7d459dd9e288ebab205cda8b05ae102b4465528b9ef1ea6533dd0efaef6bb3978b2773ed7ee7bfe3c88be7705726286e9bcb137d77881e9005711f6fe401e4c5abd66dfc4d8c89852b70f9c7d8a46a92b395883b9ade00d6cd"}, @NFTA_DATA_VALUE={0xa8, 0x1, "5e1be21b30368b14f43917d79d95ad3603d517d20d62083c12bf60fdf0b868e1daaea5a964beaf48ed5f21c720211224f9566c4737ae6795f3533ce46fd858fd37dc7858785d1f89372e3315f69ec4666530dd56ad7ff465d7cdc936f5660320b5d1868a2c506b8043357c2d09a8bc6404df1d716027243be9f503322d76acdc3666d55a8722ce99595629964992359c98accd131702a5daa47632358c1a4433e9771a12"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xf2, 0x1, "a9d7843657f7c6c0194ded9d8c9b02df0dd4e7ce9ebc4dd42f8fa78b3bbd0425486ee93f5e9cdb291497b330b3eb33dbdf2e1eda76442053e23f5f661da322fe3e1eae402cc56abecf1f4a00fd34c63c135ccffec01e31b9d6258638795b20de262207f82c6a99adaca9230c1888ef2c538d2007f7cb8f66694b954cd77e1d60ac6af06ef9882b480c5b5ef00123227741982e27f7f9164b9a28294b9efdbf55bcaaf265b6ec87493135c85176e2784872a357fb39b8a6911bb10bf13f3c168426f93efc500df6b0311d35ab8e83ba2645de1262019b201b456690028d86a69cadd6148b4405a8c5946278343586"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DATA={0x20, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x308, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7d, 0x1, "1c05c1412d748cb2934996e7a16084fd3f002c0daa5e7a89cc31737be913859c8b9c26b1a1463addf8af8ae450614cf925f742dfc2eeaeee698491c11b4775378a90100dbc59ff4076dbcd742c15210348240aa7e5d8dae935d22d96dabff1e62b9c02234d0e3308cd94b1bba9b50a447bd589d349f5c1ca03"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffff8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x31fb26b868809ab6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x80, 0x1, "34858915d9994584ba74f7ed87b72a1d8b4eac2e0c8b45aea659ce782822be6bf03cdb337684962fb0b38c7b3fa76a2348c5931906aea090fcb525bfef1bf1d916801d0df327fe4d87e030ee84a09bb3aff651eeee359df94667701466224d043e437b39fb217c588ad301152e32735d98c962f4148e48ba2c770878"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x75, 0x1, "c15c5fd43d282e3538d28be782a3f1294f756f06ad050820c1f891c9a90010289b3c71c983f39808ea1e0d4ae23d423e6718b8cd1f962a480004162f8b199b592ec9b578b6f73f0c3ed51a43c97fa9d6ef2643f7268624ae5148942ee4009964c98dc7bf1b7ed011388abb3fd478cea740"}, @NFTA_DATA_VALUE={0x7e, 0x1, "0f3bc14b8b42a37b5cbafa06a3b2e39ee92d29137ce37b769ea43f5872c65e148ddda79ff6335bc09742bbb0d7eff0859ff5045e533d1a4271a44b29e6bbde94ec68efa427a229013b1c508ea6a2a3ce4451c1e9526e0e8a579c90440cb1c77902918e758e9c10591fd8b099dd544813465a1873db0a581536d8"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x13, 0x1, "40222f5a927e0be0f260f686b94244"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_IMMEDIATE_DATA={0x2c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9f, 0x1, "cbb93f46069fa3121b35acc87786e0d68aabfac977b794b9ab580b9601b8a91e4910788cf42a84fe32d66185061e04db468ac5e105f72ee916f7b1c392da53d458d3d11636de1c145c884be739a322772aedfc5e0379e8f156dfae482de210919863b794f5ed7764b808203a4b0064bdb58b3a8ba20b8516451043d809cec6bca371ec03ed128d8dd564827eb462d1056563f8b9d49b3ae4a3b7ba"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xa6, 0x1, "c6600f1cfb1351b5a4619f74e0f1d41b879638fbc656d67c86f3a4d056ce270c4a436778956cf1f9abbc4344b94811a9f223451b0a2b9a34ae5dfb89612992795ac4d6b0dc9cd6748041462d20f370e31de5f1c7d07bf7e34d397c1563194fb32a6f9213b228455244017cbda91b9efd8c4019850c91b5eee51e5371968f08aac006bb7e1219badc88017c14c6c353d4b73d976551e1fa0751712e1e2ce2260a5938"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "c6d81c0e7498fef0b578c4210e59ba850fa3b3373b9d6135f098817584d1e6d457ed6680bf0b8f194612e22efbf6ad17eaf168a5fba32b9e446a3390e80ecdc944881c76d1ecc3618287f7ad9bdb96c729ea670983ebb2cb9f8b5ae73c1ef9f8fc8b125b135009b6ef3d4fce4fb060aace9947c583530e"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x54}, @NFTA_SET_EXPRESSIONS={0xd0, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x40, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x24}]}}}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe70}, 0x1, 0x0, 0x0, 0x24044800}, 0x800) r11 = syz_open_dev$mouse(&(0x7f0000000140), 0x3, 0x80) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r11, 0x84, 0x16, &(0x7f0000000180)={0x2, [0x2, 0x1000]}, &(0x7f00000001c0)=0x8) syz_kvm_setup_cpu$x86(r0, r11, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, &(0x7f0000000300)="0f01c4b9870500000f320fc76f0bc4c3b56dea0b3e0f01cb0f78a7000800000f01c90f32660f38800d00480000660fc73548000000", 0x35}], 0x1, 0x4, &(0x7f0000000540), 0x0) 2.676287403s ago: executing program 0 (id=1892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0xfffffff5, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 2.675728985s ago: executing program 0 (id=1893): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64d1, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xfffd, 0x2000, 0x1ff, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000100)={r5, 0x8, 0x4cc, 0x0, 0x1, [], [0x6, 0x0, 0x1, 0xfffffffb], [0x2, 0x1, 0x7ff], [0x6, 0x5, 0x4, 0xffffffffffffff04]}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x3f, 0x2, 0xb7, 0x40, 0x502, 0x16e3, 0xaa21, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x63, 0x0, 0x0, 0x89, 0x97, 0x35}}]}}]}}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, 0x0) 2.509071113s ago: executing program 7 (id=1894): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000001, 0xfffffc00, 0x9, 0x400, 0x10001, 0x200}}}}]}, 0x4c}}, 0x44080) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x700, 0x4c88b}, 0x0) 2.489897057s ago: executing program 7 (id=1895): ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x800018f1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0x7) r2 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f00000000c0)=0xc, 0x4) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, &(0x7f0000000040), 0x4003) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) 2.324388935s ago: executing program 7 (id=1896): syz_usb_connect(0x1, 0x65, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x62, 0x9c, 0x4c, 0x8, 0x157e, 0x3013, 0xcd6a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x68, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2c, 0x9, 0x3, 0xd, 0xf4, 0xbf, 0x42, [], [{{0x9, 0x5, 0x9, 0x2, 0x8, 0x3, 0x30, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x8}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0xa, 0xf, 0x5, [@generic={0xa, 0xf, "09aa184103d91293"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x4b, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x7ff}]}}]}}]}}]}}, 0x0) 2.026208196s ago: executing program 6 (id=1897): socket$inet6(0xa, 0x3, 0x3c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x802, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.330459965s ago: executing program 3 (id=1898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="edff", @ANYRES16=r4, @ANYBLOB="000b2cbd7000fedbdf25010000000000000002410000001000137564703a73797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc044) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000300)) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100b11b700000feffff1a000000180001801400020064756d6d7930"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESOCT=r2], 0x7c}, 0x1, 0x0, 0x0, 0x895}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f616400340002800800044000000000080008400800000008000240000000000800054000000000080003"], 0x9c}}, 0x0) 1.247826383s ago: executing program 0 (id=1899): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) listen(0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r2 = eventfd2(0x8, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) writev(r2, &(0x7f00000000c0), 0xc) sched_setaffinity(0x0, 0x16, &(0x7f00000002c0)=0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ptys(0xc, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x0, {0x6, 0x9, 0x1, 0x7}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x4, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002008208582005109bc10000000109021200010000000009048f0000bf575a00"], 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000300)={0x301, 0x1, &(0x7f0000000180)=[r6], &(0x7f0000000340), &(0x7f0000000580), &(0x7f0000000040), 0x0, 0x2000000000}) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, 0x0, "2634784b05261d387c9201200000000000000080000000000600", 0x1ff, 0x800, 0xfb, 0xf6}, 0x3c) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000e00)="8ad298fcb593a9d70552bc45e7c83dd4d181b5064f7c80efffb324658bf857e82dbcf21e194b800185b2b71914c0f74e1656b88f9e7aa3a3c4018899101cf33105c0fc6ef893fdca679c1c3d70879a7da2a3d124d9d3770b3bdd2472ea3db69570b7df8d9eb925b9dae22fbda382a5b25e328d281784ad5e526001a683c61b2d57bc848e99562f624ed3c88262862833035ff942203276dab1738acda67e72b2fff97f752da3c32a549feb02d43c01ac16c565f5fbe856c97ae67fbb2113eb62ab57ff0818e40e2028dcdc5d712f42aff0fa0aa0b7ff0560180e2719a94d515ed6d749858045888f4ec1d64580756fa008acb1429afeefe3e58bebdeb4ee91ab5cda250551fd3454284acbde8f727d5f81bc93c8466d64363052a860fffb57c0910e615ad8f795cf74d6b847241472ad05a188179dc117b95698919f07a1e9a4a2716eb291c564a430b616721a2d24255ad9417ad82ffdb44a7ae41e67f30cc6aaad653cd4d0407d153529fc8d8fdc4c1e4db0170ab341f75c2a9526ae5d1f38d84b908eacae2068f2964e454ff0fb8f824fd9931f915961f8f1c4195156c74daac6907fa0ba99295cab8abaf74a19c02bdd909fcf4a4ccf21cc9cb8b4f573760dd66115ce01f2a7a5d964e147546f3a46d1fc6db4c3266a1d962ad3a07a3c3ab0b0ca1b05717e439b0abc331a6a045dc7d86f41829acac975d890569486bbcd53029533da73f2f111ebba3afbf88ceb807f79f47fe59c1ac76a058123d16d7b8a73aad834e7f955b92e31a3b7ee1fbb5b8e0d991c8d6969b539fc380d5746fd332ea6650a7ceeea3554440dcda023f802d7d4165b98fdb7e23a61a82e5f22aff8f2d5f60e8207020706c0cbe7a4c7dd4860b4b5b854c03f30399bb5f5e4780a09106cca638ab4c7aa1444aae7a5ab368e90da2f084f52e5697a305f61432101507fbdd1271d5bc0fd142f34a1ecd469f07beb6a5218c5d507811d75f7aee08a770b6b2f59f50327b1508a403b5aa8d2a89bff789a7b5f4408a680e7a86281c6f6ca5f96c3e326753ee6198d59c8ae3f99aaf3ea4e7c4b2fb625d862b28d1c0356474e9ce446c41f6861db65929533d293b8f7901b313c6cd890a7db4de75b37427f8791d88d06c4f6a3c777b065805e76941461d739481263e148daf0084df693a5138edea51db82a8b7e7cad7cf84ea9e4704064fa60d4762032f9fb5e4b7fd227dd26148fec2501ae19f01babbea36b8bba1c6473b83754af67bfc73f6459ebaaba8cac4d233415e880bfca67927dac9227098b7b440b603cb34b4bd14a4da8fc436cf46cf3829b80ec4a8c86697bdb91f9960125d2a63be2329627adb27f1756b7bf3a9295db0b317eaa05d4fbfed7272375e39aed60514777389d5a92801d3929ab27bbe351db57ecd0d7a4f20416cf5e7f281c441e6702ff6be4211558062a2994a5e8a6a8da40dfd0adcb4e48e1e6e71ee73115e6ec0519905b050b40a8f4cec5910ed9e2463c72ee2fbd21a1093fec3b55fff8235b217768f2ed9f310e40b01ad2567de31d1f156345f46515ce02e69628a96e9290bbe1120269494b513e184bb456ec71bf305a2ef28849ccff4c1b5c0cb0aab490072f3cc2882749171563ef035ec8716585521eade7fbc0e8f943d71915b6d86e12208d161064c6ac52f732857a66795fa54a80eb6ec94c257c129f04f223d6bdfc281baaaf35616eb08808180827d9acfbad1a3bef8bfadfcb0c7013fad2c514a7e6738f7ddf040f43f186009862977495f15fde49912011f76832fa79a04dcc0bb64e13f9a54283d4a1859d83dd42329637a157b98a06d3f1947cac6bbdad29f8b6d77e8e56c5544c164113ea58c736764554ea03d7b4dba76c6841f153e188c6241a51b184176b68d5b01f7b75360975afd031a02c38db012bfe961e853309f582c7f062f8bc5d1c9ecbddedc8d7f46b2074a8353cdd0448cf347df0c3c401660ba8164ec08c4c87ddf4ea1275a057587fe0a242e69ddd2b773b294c702b53ad604327fbdd8e66fc87227d37cde164ec8ece090e5f0eab1d935c2ce54edc9a929f46df37ee9c7402a3262ff1172585d6ed44c76952a1ed29ccec7bd03f7c8913ba755aa04976a49a57b9be372fe7ae9566b0db22fa8c96364d7d0244a3c2d327e03d302897391d54635c9eeefc3cceb95642d47c7580d47d6aa2aa70291824652d5f4f0a38a15d8bb0cf0e4246c9dea7a2bbac798d2dec77c2f9db004aa90eadafe2af7c84f5ed0553932425432e387597fcbe44b59be7c9e8fdcd6499dc3909e193f246f933620496d0e63cc65f74e8c52f933eaad9a3453a85fcf2d3b4dc0dfb7b7ab476e5d1d20d614256d3090174553b6537efc9cb38c332f3e336d0c1cec071cd4273f5dd8d464991a62f8d4a6810a5388c11ab904d93b0cbebca5e9d45ff9138535ab04dc36947b218560e0cf4c091ce2903eee9905fafd6d9a5a72cb413b0cceeb26ab65019d04a4342a402dc32685c55603270e87171ce75109df9cf237dc13fe9a7de8e68d2f868be02681ea8ccacfa75bcb62ff3684fc2c5b939f7d400f109dde3315c8683aad24ad614d27f684fda05186d6afcc4cae1085b70c51a32388b7e9c71defec2913e98bf3f000d8d2c409d95ed55374e0dc4720f3aeec3aaf66487396f884f8681aaa7cc7371ab394d7c4dcd24f780423ca4eaf0572ac044bde904fe25b9864e7054ba0a2b2261e67f5269528d3e3b4e5295385bd0268fa7ecea4f5b32a0e9e3ae68194046709ff112f97b4ff7098cdc6817da3883cd30010730496ec82f18709d94c3bec9bebaa8c775315ef81cf7e63875dd5875189cd6df8fb54f75c68449c24b79fd00ab94b5f2b38c90962e8c431cbb6f95526220596339e3c62ef80aefa89c56748a889e2d8b204e94c472ea95b847445895076488039a97e9bf5a56225966e74a90273b9c6a44aaca0dfd490153e94fd3eace48da099951aab2c523bafbf9c9b6f0d775f655331715d2be5c000735016ce6203e3db6c37abae951b2d63c0a0041c8913197276be55bb7d92bfaf6aac3cc31a0d0fa43861eab58d5c68f84826ec997fae66cbe4a17f176e7b3624fbbfec9b7da05116303475657e0d25f7395c470d167234deba28536251b9eb6474845534a270491380b2dde538dda72192f774f2149fcc340b20aecb303b515637048a0cbc53a345d3e5a0230067d3a3d0b7fdfcdca53020ecf58818839f9782cf81c3bcbc01d61f766a8691ddc781eea4c48b9fe620858e675e57313c1a8d6da72fbf3b9891ad781e5d19b582db99dae0f55514d559832b1068980791e092cfbff0e13ffa3d7088a1caf611b26ce9345968e52b01c37a42f6acbc1922436f22f0b96c286135437353edaf6a33b915569c537698a8fecea382b7f31eaddb9019802c43a389d9223a1044f16b83d5cd5cd4081d79fb10920d4489e8c15549a91708cdede8eb22d1ef73de689d074aa44a0e77a3ec9c5683152009834ac8f2edf24e6a5ff5f941219b272dcf4bf74a11f61ef14b9c4f560520e86d852d5d4d01617041fce7ae28ebaad44b12fa53951266a1d7b73c22dabb987c690e7406c55cfd0756750055c7240ec5d2a8b22711ca7e1463863ac6bb22f5b72b6a073aab8e035c485cc872e640f892fe3aea32c32466a9e30c4b27432e24cb244c9b75014f2128c68cb69e92c78c26755ff47fd68cb7875fc0ebf9358cabb16ac458fa869eb4fb42be0b4d0769bde1230f9ba9d13df8f8680204b2440e05784d39f688dd1499cad1ecd70ee17ef85cf143e8b400013687f4c54617439fc684ccf5c14013fb0bf1d146ba6e78b13b925f35051390f968a3943ceb604a882510f52b9482c75b17aa154615e08021ff4ccbb82855f656bea25276d91912c398497ce93ceeb6f97ca25bb465995efa4d82c3231279c63549985cdb7c9604e4c05c4352717599ca1e168e6324ec73e0ebcce1de8c813cbc96595e638b828aa5de271944fa6c02764f0279a828ab1fdeb3b8950092d4d1cd20fac14a71583f1a4c1931b97b1584195b7b33efc8aeca89020a6b475d0358a52fd926b3595bceb3b481ae8dd38407694c495b0c8cfdcf550316480ca2108c65338986e2942bd295c10c38644bb6374ee528a7a39aa66fbc1c6291f2bcc222a8059f2fe6b230921c8f50e508e5d946dfc1277934cf7387cc41817aeeb83e29584464d6fc488dd8cbb7d85e78675882c3ea120fcc9e20a3bdec12c05f5f5d981de77b20bdef04bf23b4a74fda5603f61fd6dae5f600a23b4ce3ed3ad86d02ac13cd84bfc5af863b6c4ed76b84886c22dd4e177645b6af67f4689ec4e059cc29e3c895ca7b0f8b6f9900f5503ca78f6f3efaf0b9546cdca415cd0bf6654c447e0895304e05f78eb030b7114db26ddfe6434d62f7b8f89a33e9fe873c3c1d1027eabb23227012935a53057b18ef5e125055bc865e3719108fdd89972a60a4f55e857dbfcf85c33810c51c3e705f474dae8fb18bd64f557a7ccb38bf3712971eda9de8c834f2caedd4848730af3d77be1143d0cc1bd68554f82e32f4b0e978bc560e6710e8552df500338dbc55c3e93edcee438722e2495fe786aceae7ea2238867bbc4214148ee23ea936294cb6d83c7231e8b967f7bcd073a780a5fb288e66052c97dba02c0d4441f1d1a0e30c1880fdb8059ecb7a341847770eae0c70a819558b70e25461a601379d155dca59632117318deddbd06b9fad5ed5dcad88829dd61dd14d77826d7fa03c6f39e52343f33dfaaae0e4b3af4688fdc38a44503c24152fdb9a4e745efd7f043641e9adb1a6da46014996576c9674462fe74995609acee6af1ae9d9b993b65e0492dc24cca77bad87e757f830d306d47da13f1334191adf8a82d647a79494b8e46a78a2382b2836092cb7fd918576d69ef287fc30c063412d078f65324408bcafe182947d70159247b22d6552ed5a0349d5b907e465a40067ca79b71e1bf5a882e54f23a059877ba453e5becaeeae4b0bc82bf9890ae477c108a02a285eed030875aed0f1d535d64411006faf951083834c8f9b3a41d9321cec8b13f81cd3ff4f5d2663d92add4fad80bee28249cf23afd5bd19b6fb4efebcae9bcae51ab3620615a7038c78bdbcf8b743783498cc8429aa124225f0070b7f6ab69439dab2c7d52f1ecccc5ef1634751dff513b6f1e7a2fb223369db8a92dbcbb4a5d2cc2f854b7013f114dfc9c9e7686f56b65db98359fb0828794ab000ddd5ed4f86f113bde5cb539cf31a5c5832823bced1eb7e834020a685b26015e3692bacca90fbd87c41a7d1e60e91161fc77b3e9885b2218243ca422789cc0593521747f0ad73b27631ca24f04582f5559c3e19cf318ad72e67ca07e6428ae77043d946b0ac9f73258bbb0593a79a4eb543ecef257f207d2007c95f279d47e39ce73c663e64bfc8ae3fe91078da07202cc94fcec473ef9380da274748ac6f968981c1a53dd4b0f2f55cec8c9546293d27b81496589b68c24408014e356991955588a8e340cc769a9e350ca63ac323a81caa4ae4eabc7151b175d1afb6d611ea72459bc376065b5407456d548554811d1880a7ac2035802b0551f908a69efaed9b175eeaccc6569a28bd4f1e4c1ba7356ae1c2898c960ffed7482a1b8fc1084a37f270f68acc50efa4c529ce583c9ca6172d0f830951054208539b4d4270dd77b52ab144f83c4c1026251fff1edef5699d7aaa1f88d3a448201770dd691960527fd87285b163d633cb98d07c30116ab0f09cfbd6e8361376021813a7365", 0x1000, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) write$nci(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="6103020701011001df42c0af80aa8ac7cfe627ac3ff346f62885076f149144c1c03527cb09025323bb79315a3057e5b2ece8801723e65e6746b5cf9308fd601d030664c52a7054f3cde3504dca8f93687c3d3b3c6011dcb37ee424857b797fff07e0f9d6299941f1434282cff9f9b114ac845e4d1e8684ce35da83897b9c31c9dafdeffe4fb1f9dbddf14a873a408ee7f980e4c5f25dcc77d42be8b3a070b3d81e7acd93f04c"], 0xa) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x109400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000400)={'c6xdigio\x00', [0xb011, 0x5, 0xfffffff6, 0x4, 0x88d7, 0x8f, 0x1007, 0x4, 0x1002, 0xffffffff, 0x203, 0x7, 0x10000, 0x2, 0x2, 0xf, 0x8, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0x2000a, 0x9, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) 1.245353994s ago: executing program 3 (id=1900): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd02d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000001}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x103381) r3 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) 1.08276806s ago: executing program 6 (id=1901): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES32], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r1, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x3b, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x0, 0x0, 0xfffffffc, 0x9}}) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)={'veth0_to_bridge\x00'}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @empty}}]}, 0x110) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="89", 0x0}, 0x50) 1.052689424s ago: executing program 5 (id=1902): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r8, 0x300000b, 0x11, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg$alg(r1, &(0x7f0000001b40)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="4991", 0x2}], 0x1, 0x0, 0x0, 0x10000001}, {0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="2b5fecc602d040f7ac498786914bcc562fcf67a75f9ae96f3bfdefa692551eb030c4a56ca48795d6e234b968e7c42c9b80b18059da508f16710522bf3d15daf905c1c57931caaafb61a3029e0ce9711cf6cacd6a2f2d5a640ff1bfc4d5043275a4a991aa3ed744e0300699edf7ccf15053b9c3a3d4ace43af22f00831c60ee4df07a3c30836796bbc4ebb1c97e3937af0ebe4fc19171001bd42b22f1df26b4ebd6f91003d0e4337755b5a03745310dd7f0ced09769cbf2a0f8049cefc7c0a0dd413aa5d3540775e765a66f88923b2c49526ffaabcccd27de4d803d14436ac8c6730e962a789c17bd8290833476927a75fa08", 0xf2}, {&(0x7f0000000180)="fd7c16d5542acd6edb01b0636056c651", 0x10}, {&(0x7f0000000400)="bdf24e5b2e40a11d9d01b6487ab26798e421916372e8c0364747c1fe846c1436198b9d148697a51b2085cac0a1337fd768fec40646660b6e201159b2882b1ffea7116f4bbc1fb10f50bbf8f869fbf61ad028d459d2d5d5172d4ba6a934b0d174822f1b8ffdf0c3ed80fca23c4d755834df2ce85536e4295ac1703b28e6141657cdcb7a71a4fb0006537f0e01067083427a101d339ba6032115df97a6d3568da40b0d4712", 0xa4}], 0x3, &(0x7f0000000540)=[@assoc={0x18, 0x117, 0x4, 0xf50}], 0x18, 0x4000004}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="242a374602533b94f5ad27b7b8ec9dd5b8bdaba992b98f1ebe38f4bdd98495ceb588200d486e8d78ce47acd54317aaeedb421269c531b9f26e2e119c395fdae1fe2c4851d8da7ec3bc", 0x49}], 0x1}, {0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)="551fe813ea2ff1f4051690bdb2b3633bf554036c372f911a121d9845e7e4e906f3bee655833626fba75fc1305c1d553284f27c1e1dc596f7aaf37466e6a4a1b303511e0bc0d5a812dd6e3c", 0x4b}, {&(0x7f00000007c0)="aaf3a36457af65a49f2c05e695f305441e1f0c7171d6ade41ca0f4b2256846c3e34b3b699994cf196380a90c41ca1579762b875df08bb8867ef405c718f93fcbb16ce5e57cae2a1c0dc2f9ece34ac6d42dba9c95cad21c1719b1e3936161f28d7410093aaffb1ab79c6a3105a3deebc42d5f1d6646856f9b82439da1f4e870056b7382975b5b38c9556d47b20c9a1607cfd05c4b2f394eb42cb91da6e547e88f215397c809fd76eb00451fe06dd1c8a5d49e254deec8a23f639accf5569d04cb2f7ab1fc8f71a526", 0xc8}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="6f65e8565ccd61362c64447b13d4fb73d44e76fa1389799898069c8d69a65537c066dc37f3ea54c99e5cd70e488a8d0952660f48a9cf6e7b576e81a2245de905e5b6b84343308c91c9e6a515d965270b20950b945f648583e1116507f08e9a4f23e8d517951486209f8ec66e6fe5d97322daa8bfabb5c7c3b415fd25bee8ed53e34d5d45e7a89b7dde5f047816e0f3455469fde9081780e3a9c49a65237b28149298254244a3f6656cbbb8a958f635bc981c", 0xb2}, {&(0x7f00000006c0)="669db665cbb4f7803f98ae5ad38cee8a2c30390371c7b0da2b68e4616607277f165310e679b55feea849cbe1642ae8655485446546be555e02ef43a2bb86338429b291807003e2133e5c40238e08e39ede1cdc4ed08740972ec874b0f52ab9d54356", 0x62}, {&(0x7f0000001980)="47a7cc35c91474ba1ab722e155b43c4b74b63d9bac4e5e9a4f03ed00a06ff27003875fb595683175bc7a9a85b66065c6f5e117775f11ad9a8867cc46c79a6381712a1028c13d840aaa483ecc21562d5d5d7855b673683b07d357518544ba366cb0fbecd27aab0dd05d4855e438cf9a2f04a917cc60ae28052c695a8a68be5d2ff76bc7c652941dd518510b0361e9786b188e33ede1e721a788aca3c878c7104fcd55289851f77302bb898347e3cf87f9d5b6f7c0be68cf358475b1c2f89ac9ab1755aa33991d6f64184744ef5998e72a66e193e89d4e38", 0xd7}], 0x6, &(0x7f0000001b00)=[@assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x80}], 0x4, 0x840) 1.008023746s ago: executing program 3 (id=1903): r0 = socket(0x1d, 0x80000, 0x2) syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x8a480) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000380)={0x0, 0x80000000, 0x1, {0x1, @win={{}, 0x0, 0xffffffff, 0x0, 0x0, 0x0}}}) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x311002, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {}, 0x2}, 0x18) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='wchan\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x0, 0x1, {0x10, 0x8e, 0x2, 0x0, {0x4e20, 0x4e22, [0x0, 0xffffffff], [0x0, 0x3, 0x0, 0xfffffffd], 0x0, [0x8001, 0x6]}}}, 0x4c}}, 0x20004010) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x280000) r7 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) pidfd_getfd(r6, r7, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000680)=ANY=[@ANYBLOB="400a060000006e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = semget$private(0x0, 0x4000000009, 0x0) semop(r8, &(0x7f0000000080)=[{0x0, 0xec7b, 0x1000}], 0x1) semop(r8, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1) semtimedop(r8, &(0x7f00000001c0)=[{0x3, 0x5903, 0x1000}, {0x3, 0x0, 0x1000}], 0x2, &(0x7f0000000200)) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000280)={0x20, 0x8, 0x6a, "e4104c676168cb516cdfdc06c0f7da8b8fdb2f386b7a012d95bd014e7116e8a4991beac3c6ee237fb09bdbf7884a4ac4b661f4507ea72d49f3803578ff6153176be669c03983c4b91770a3f3e7608ebc2a71809b5f45feeeb295c1ea2c7224a4759a6bab59dca1b309e2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x40000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780080008400000009c050015006600000005000100060000000900020073797a3200000000050004000000000011000300686173683a69702c6d61726b000000000500050002"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 812.252125ms ago: executing program 5 (id=1904): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@deltaction={0x0, 0x31, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ipt\x00'}}, {0x0, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}, {0x0, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'mirred\x00'}}, {0x0, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ife\x00'}}, {0x0, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}, {0x0, 0x17, 0x0, 0x0, @TCA_ACT_INDEX}, {0x0, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'nat\x00'}}, {0x0, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x3d26, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1}}, {0x0, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x3}}, {0x0, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'tunnel_key\x00'}}, {0x0, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'tunnel_key\x00'}}, {0x0, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x97fd}}, {0x0, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x4}}, {0x0, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'sample\x00'}}, {0x0, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x30}}, {0x0, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}, {0x0, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xfff}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x20, 0x0, 0x0, @TCA_ACT_INDEX}, {0x0, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'mirred\x00'}}, {0x0, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'sample\x00'}}, {0x0, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'csum\x00'}}, {0x0, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x4cf}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}, {0x0, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ipt\x00'}}, {0x0, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'pedit\x00'}}, {0x0, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'xt\x00'}}, {0x0, 0x1, 0x0, 0x0, @TCA_ACT_INDEX}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1000}}, {0x0, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'nat\x00'}}, {0x0, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbmod\x00'}}, {0x0, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}]}]}, 0xc3}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 751.792655ms ago: executing program 5 (id=1905): r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r2, &(0x7f00000000c0)=r1, 0x12) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc, 0x20000000}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x15) 686.952515ms ago: executing program 7 (id=1906): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0xf400}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) 685.916683ms ago: executing program 6 (id=1907): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000006100)=[{{&(0x7f0000000200)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/45, 0x2d}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x2, &(0x7f00000003c0)=""/219, 0xdb}, 0x1}, {{&(0x7f00000004c0)=@tipc=@name, 0x80, &(0x7f0000000e40)=[{&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000b80)=""/172, 0xac}, {&(0x7f0000000c40)=""/227, 0xe3}, {&(0x7f0000000600)=""/111, 0x6f}, {&(0x7f0000000d40)=""/201, 0xc9}], 0x7}, 0x8}, {{&(0x7f0000000ec0)=@x25={0x9, @remote}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f40)=""/184, 0xb8}, {&(0x7f0000001000)=""/136, 0x88}], 0x2, &(0x7f00000022c0)=""/4096, 0x1000}, 0xba82}, {{&(0x7f0000001100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000001180)=""/80, 0x50}], 0x1}, 0x4db}, {{&(0x7f0000003300)=@nl, 0x80, &(0x7f0000004540)=[{&(0x7f0000003380)=""/155, 0x9b}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/245, 0xf5}], 0x3, &(0x7f0000004580)=""/121, 0x79}, 0x1}, {{&(0x7f0000004600)=@ieee802154, 0x80, &(0x7f0000004740)=[{&(0x7f0000004680)=""/155, 0x9b}], 0x1, &(0x7f0000004780)=""/178, 0xb2}, 0x80000000}, {{&(0x7f0000004840)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000059c0)=[{&(0x7f00000048c0)=""/95, 0x5f}, {&(0x7f0000004940)=""/122, 0x7a}, {&(0x7f0000006380)=""/4096, 0x1000}], 0x3, &(0x7f0000005a00)=""/51, 0x33}, 0x3}, {{0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f0000005a40)=""/56, 0x38}, {&(0x7f0000005a80)=""/97, 0x61}, {&(0x7f0000005b00)=""/162, 0xa2}, {&(0x7f0000005bc0)=""/8, 0x8}, {&(0x7f0000005c00)=""/63, 0x3f}, {&(0x7f0000005c40)=""/32, 0x20}, {&(0x7f0000005c80)=""/85, 0x55}], 0x7}, 0x81}, {{&(0x7f0000005d80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005e00)=""/118, 0x76}], 0x1, &(0x7f0000005ec0)=""/137, 0x89}, 0x8}, {{&(0x7f0000005f80)=@caif, 0x80, &(0x7f00000060c0)}, 0xfffffffb}], 0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500001c00000020fc0290780000001ce000030000009078006700055f37de8c4884715c27"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000300)={'pcl816\x00', [0x2f00, 0x5, 0xd097, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x7fff, 0x4, 0xfffe, 0x8, 0x5, 0x7, 0x830, 0x30000, 0x10000, 0x9, 0x800, 0x100101, 0x2, 0xffffffff, 0x7, 0x3, 0x4, 0x4, 0x70f]}) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x40000000000001e9, &(0x7f0000000080)=[0x9, 0xfff, 0x4, 0xb, 0x662, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x200, 0x3, 0x6], 0x0, 0x7}) r7 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x430}, 0x1, 0x0, 0x0, 0x4008080}, 0x20) 664.954904ms ago: executing program 5 (id=1908): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x2000c051}, 0x4004000) r0 = semget$private(0x0, 0x4000000009, 0x42a) semop(r0, &(0x7f0000000200), 0x53) r1 = semget$private(0x0, 0x4, 0x401) semop(r1, &(0x7f00000011c0)=[{0x0, 0x7fff, 0x1800}], 0x1) semtimedop(0x0, &(0x7f0000000380)=[{0x3, 0x4, 0x1000}], 0x1, 0x0) syz_emit_ethernet(0xc7, 0x0, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="00008e226e6f3d", @ANYRESHEX=r5, @ANYBLOB=',cache=readahead,k']) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0xe23, 0x32}, 0x9c) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x1, 0x100000005, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 384.799664ms ago: executing program 7 (id=1909): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0xffffffffffffffff, 0x10, 0xe, @scatter={0x1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/139, 0x8b}]}, &(0x7f0000000140)="72fd2aa76b0583bcba25a18835270ce8", &(0x7f00000002c0)=""/18, 0x9, 0x0, 0x0, &(0x7f0000000300)}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x1, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_WASH={0x66}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044004) syz_open_procfs(0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, 0x0, 0x40080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x22000010) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0xfff}, 0x1b) (async) r7 = dup2(r4, r4) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) 52.348744ms ago: executing program 7 (id=1910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000032c0004802800018007000100637400001c0002800500032401000000080002400000000d08000440000000150900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 0s ago: executing program 5 (id=1911): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000005efe527c151b5ea37020d77f6a245e51a21e6b27b4f4de4e9e88746734475fa0380366bd87ec7fc5e1e3d1af29ff5785c594d79c392e7e59bb86da96d82c6a4ef60a259b50ae542b88c4cfee04e64d844a907583e93162f53bec7bcb24507550e8b8382dd45cd14b610d6e297c43caff2afdc611cf6596fba161a76626f8df8ed44157bb6e1ce775ee090875dbaca36e5dacf3fe303f0462dea6a3bd0be05a4b25842b648246ab4ea7ae9b9455ef14b20f6f937a70e429cd48b0bc", @ANYRES16=r0, @ANYBLOB="01002dbd7000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="080026006c09000008009f0007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) kernel console output (not intermixed with test programs): ][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.396745][ T5969] usb 2-1: config 0 descriptor?? [ 300.439515][ T5922] usbhid 7-1:0.0: can't add hid device: -71 [ 300.451339][ T5922] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 300.468275][ T5922] usb 7-1: USB disconnect, device number 27 [ 300.489921][ T5906] hid-led 0003:1294:1320.0023: hidraw0: USB HID vff.fe Device [HID 1294:1320] on usb-dummy_hcd.5-1/input0 [ 300.521864][ T5906] hid-led 0003:1294:1320.0023: Riso Kagaku Webmail Notifier initialized [ 300.544485][T10916] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1348'. [ 300.622000][ T5969] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 300.630283][ T5969] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 300.646185][ T5969] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 300.653731][ T5969] usb 2-1: media controller created [ 300.670484][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.732886][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 300.765082][ T9] usb 4-1: device descriptor read/8, error -71 [ 301.470071][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 301.492612][ T9] usb 4-1: device descriptor read/8, error -71 [ 301.609488][ T9] usb usb4-port1: unable to enumerate USB device [ 302.382247][ T5949] usb 6-1: USB disconnect, device number 45 [ 302.394648][ T49] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 302.404494][T10883] Process accounting resumed [ 302.416430][ T49] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 302.436149][ T49] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 302.676033][T10944] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1354'. [ 302.698130][T10944] bond0 (unregistering): Released all slaves [ 302.728213][ T5969] az6027: usb out operation failed. (-71) [ 302.966878][ T5969] az6027: usb out operation failed. (-71) [ 302.972728][ T5969] stb0899_attach: Driver disabled by Kconfig [ 302.981029][ T5969] az6027: no front-end attached [ 302.981029][ T5969] [ 302.994185][ T5969] az6027: usb out operation failed. (-71) [ 303.020082][ T5949] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 303.027744][ T5969] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 303.054840][ T5969] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 303.088267][ T5969] dvb-usb: schedule remote query interval to 400 msecs. [ 303.109970][ T5969] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 303.113351][ T5969] usb 2-1: USB disconnect, device number 57 [ 303.241247][ T5949] usb 6-1: device descriptor read/64, error -71 [ 303.252824][ T5969] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 303.364582][T10954] geneve2: entered promiscuous mode [ 303.763243][ T5949] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 303.928807][ T5949] usb 6-1: device descriptor read/64, error -71 [ 304.047093][ T5949] usb usb6-port1: attempt power cycle [ 304.171962][T10974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.260194][ T5969] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 304.311770][ T30] audit: type=1400 audit(1755456648.105:818): avc: denied { accept } for pid=10977 comm="syz.0.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 304.420588][ T5949] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 304.429114][ T5969] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.441056][ T5969] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 304.451453][ T48] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 304.459214][ T5949] usb 6-1: device descriptor read/8, error -71 [ 304.466485][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.474470][ T5969] usb 7-1: Product: syz [ 304.478846][ T5969] usb 7-1: Manufacturer: syz [ 304.483427][ T5969] usb 7-1: SerialNumber: syz [ 304.489683][ T5969] usb 7-1: config 0 descriptor?? [ 304.602345][ T48] usb 2-1: device descriptor read/64, error -71 [ 304.714960][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1362'. [ 304.723980][ T5949] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 304.752290][ T5949] usb 6-1: device descriptor read/8, error -71 [ 304.869638][ T5949] usb usb6-port1: unable to enumerate USB device [ 304.890931][ T48] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 305.029919][ T48] usb 2-1: device descriptor read/64, error -71 [ 305.148993][ T48] usb usb2-port1: attempt power cycle [ 305.521762][ T48] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 305.565796][ T48] usb 2-1: device descriptor read/8, error -71 [ 305.842421][ T48] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 305.865733][ T48] usb 2-1: device descriptor read/8, error -71 [ 305.963884][T11004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1818 sclass=netlink_route_socket pid=11004 comm=syz.0.1372 [ 305.979823][ T30] audit: type=1400 audit(1755456649.658:819): avc: denied { read } for pid=11002 comm="syz.0.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 306.069035][ T48] usb usb2-port1: unable to enumerate USB device [ 306.910433][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1375'. [ 306.924279][ T30] audit: type=1400 audit(1755456650.556:820): avc: denied { create } for pid=11018 comm="syz.0.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 307.126347][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 307.238283][ T5969] usb 7-1: bad CDC descriptors [ 307.446573][ T5969] usb 7-1: unsupported MDLM descriptors [ 307.469365][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 307.480490][T10974] Process accounting resumed [ 307.494536][ T9] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 307.502805][ T9] usb 6-1: config 0 has no interface number 0 [ 307.508928][ T9] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 307.519558][ T9] usb 6-1: config 0 interface 196 has no altsetting 0 [ 307.583219][ T5969] usb 7-1: USB disconnect, device number 28 [ 307.586074][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 307.615756][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.624348][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1376'. [ 307.642955][ T9] usb 6-1: Product: syz [ 307.784555][ T9] usb 6-1: Manufacturer: syz [ 307.789256][ T9] usb 6-1: SerialNumber: syz [ 307.797520][ T9] usb 6-1: config 0 descriptor?? [ 308.389602][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 308.589040][T11013] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 308.932006][ T5969] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 309.092354][ T5969] usb 1-1: Using ep0 maxpacket: 32 [ 309.098699][ T5969] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.111583][ T5969] usb 1-1: config 0 interface 0 has no altsetting 0 [ 309.118256][ T5969] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 309.127332][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.140053][ T5969] usb 1-1: config 0 descriptor?? [ 309.240342][ T9] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 309.250893][ T9] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached [ 309.368746][T11044] Bluetooth: MGMT ver 1.23 [ 309.491828][T11013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.504675][T11013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.515104][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1373'. [ 309.525531][T11013] bond0: option miimon: invalid value (18446744071970231559) [ 309.534610][T11013] bond0: option miimon: allowed values 0 - 2147483647 [ 309.544554][ T24] usb 6-1: USB disconnect, device number 50 [ 309.627499][ T24] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected [ 309.672951][ T5969] hid-retrode 0003:0403:97C1.0024: unknown main item tag 0x6 [ 309.682942][ T5969] hid-retrode 0003:0403:97C1.0024: item fetching failed at offset 4/5 [ 309.702906][ T5906] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 309.710732][ T5969] hid-retrode 0003:0403:97C1.0024: probe with driver hid-retrode failed with error -22 [ 309.883502][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 309.889986][ T5922] usb 1-1: USB disconnect, device number 42 [ 309.900933][ T5906] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 309.909226][ T5906] usb 2-1: config 0 has no interface number 0 [ 309.919225][ T5906] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 309.928319][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.936303][ T5906] usb 2-1: Product: syz [ 309.940581][ T5906] usb 2-1: Manufacturer: syz [ 309.945165][ T5906] usb 2-1: SerialNumber: syz [ 309.951507][ T5906] usb 2-1: config 0 descriptor?? [ 309.957637][ T5906] usb 2-1: selecting invalid altsetting 2 [ 309.963446][ T5906] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 310.118718][ T24] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 310.141934][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.148228][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.184961][ T36] Bluetooth: hci5: Frame reassembly failed (-90) [ 310.199104][ T5969] usb 2-1: USB disconnect, device number 62 [ 310.227755][T11095] fuse: Bad value for 'fd' [ 310.308429][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 310.649453][ T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 310.661903][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 310.672556][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.685965][T11079] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 310.797581][ T30] audit: type=1800 audit(1755456654.138:821): pid=11102 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1391" name="bus" dev="overlay" ino=1529 res=0 errno=0 [ 310.825585][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 310.843916][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 310.918290][T11079] lo speed is unknown, defaulting to 1000 [ 310.924288][T11079] lo speed is unknown, defaulting to 1000 [ 310.930213][T11079] lo speed is unknown, defaulting to 1000 [ 310.937057][T11079] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 310.945810][T11079] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 310.958166][T11079] lo speed is unknown, defaulting to 1000 [ 310.964343][T11079] lo speed is unknown, defaulting to 1000 [ 310.970457][T11079] lo speed is unknown, defaulting to 1000 [ 310.976617][T11079] lo speed is unknown, defaulting to 1000 [ 310.982756][T11079] lo speed is unknown, defaulting to 1000 [ 311.340494][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 312.363687][ T5849] Bluetooth: hci5: command 0x1003 tx timeout [ 312.363928][ T5168] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 312.406439][ T5969] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 312.567837][ T5969] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 312.576017][ T5969] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 312.586133][ T5969] usb 1-1: config 0 interface 0 has no altsetting 0 [ 312.594601][ T5969] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 312.603705][ T5969] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 312.611891][ T5969] usb 1-1: Product: syz [ 312.616053][ T5969] usb 1-1: Manufacturer: syz [ 312.620968][ T5969] usb 1-1: SerialNumber: syz [ 312.626819][ T5969] usb 1-1: config 0 descriptor?? [ 312.632663][ T5969] hub 1-1:0.0: bad descriptor, ignoring hub [ 312.638745][ T5969] hub 1-1:0.0: probe with driver hub failed with error -5 [ 312.647109][ T5969] usb 1-1: selecting invalid altsetting 0 [ 312.652858][ T5949] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 312.812766][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 312.819220][ T5949] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 312.832174][ T5949] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 312.841265][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.855617][ T5949] usb 2-1: config 0 descriptor?? [ 312.949490][ T5906] usb 7-1: USB disconnect, device number 29 [ 312.960268][T11162] netlink: 'syz.0.1399': attribute type 20 has an invalid length. [ 313.227612][T11165] netlink: 'syz.6.1402': attribute type 11 has an invalid length. [ 313.354095][T11128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.362576][T11128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.774970][ T5969] usb 1-1: USB disconnect, device number 43 [ 314.492789][T11179] tipc: Enabled bearer , priority 0 [ 314.504123][T11179] syzkaller0: entered promiscuous mode [ 314.515215][T11179] syzkaller0: entered allmulticast mode [ 314.633538][T11189] fuse: Bad value for 'fd' [ 314.662048][ T30] audit: type=1400 audit(1755456657.786:822): avc: denied { create } for pid=11190 comm="syz.3.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 314.747756][ T5969] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 314.769140][ T5922] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 314.909846][ T5969] usb 6-1: Using ep0 maxpacket: 32 [ 314.924101][ T5969] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 314.934255][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.942502][ T5922] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 314.954949][T11194] pim6reg: entered allmulticast mode [ 314.960254][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.960322][ T5969] usb 6-1: Product: syz [ 314.977035][ T5969] usb 6-1: Manufacturer: syz [ 314.982454][ T5969] usb 6-1: SerialNumber: syz [ 314.983328][ T5922] usb 1-1: config 0 descriptor?? [ 314.988446][ T5969] usb 6-1: config 0 descriptor?? [ 315.003827][ T5922] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 315.298850][ T5906] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 315.570249][ T5969] airspy 6-1:0.0: Board ID: 00 [ 315.780151][T11197] syz.5.1407: attempt to access beyond end of device [ 315.780151][T11197] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 315.793101][T11197] efs: cannot read volume header [ 315.939697][ T5922] gp8psk: usb in 146 operation failed. [ 315.939713][ T5922] gp8psk: failed to get FW version [ 315.982762][ T5969] airspy 6-1:0.0: Firmware version: [ 316.054022][ T5922] gp8psk: usb in 149 operation failed. [ 316.054038][ T5922] gp8psk: failed to get FPGA version [ 316.055882][ T5901] tipc: Node number set to 2154581870 [ 316.065063][ T5922] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 316.065079][ T5922] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 316.103428][ T5969] airspy 6-1:0.0: usb_control_msg() failed -71 request 11 [ 316.173973][ T5949] usbhid 2-1:0.0: can't add hid device: -71 [ 316.183462][ T5949] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 316.201933][ T5949] usb 2-1: USB disconnect, device number 63 [ 316.228098][ T5969] airspy 6-1:0.0: Registered as swradio24 [ 316.234848][ T5969] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 316.244574][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 316.247306][ T5969] usb 6-1: USB disconnect, device number 51 [ 316.273182][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.299547][T11179] tipc: Resetting bearer [ 316.309783][ T9] usb 1-1: USB disconnect, device number 44 [ 316.316479][T11177] tipc: Resetting bearer [ 316.326235][ T5906] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 316.399772][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.408376][ T5906] usb 4-1: Product: syz [ 316.408600][T11177] tipc: Disabling bearer [ 316.412799][ T5906] usb 4-1: Manufacturer: syz [ 316.424287][ T5906] usb 4-1: SerialNumber: syz [ 316.461159][ T5906] usb 4-1: config 0 descriptor?? [ 316.478789][ T5906] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 316.488929][ T5906] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -22) [ 316.509319][T11205] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 316.546434][ T5906] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 316.729666][T11194] pim6reg: left allmulticast mode [ 317.137427][ T30] audit: type=1400 audit(1755456660.106:823): avc: denied { bind } for pid=11218 comm="syz.0.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 317.305396][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1418'. [ 317.552234][T11229] binder: 11228:11229 ioctl c0306201 200000000540 returned -14 [ 317.565992][T11231] fuse: Bad value for 'fd' [ 318.113910][ T5949] usb 4-1: USB disconnect, device number 53 [ 318.265648][T11248] syzkaller1: entered promiscuous mode [ 318.271565][T11248] syzkaller1: entered allmulticast mode [ 318.367716][ T30] audit: type=1400 audit(1755456661.257:824): avc: denied { map } for pid=11249 comm="syz.5.1426" path="socket:[32735]" dev="sockfs" ino=32735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 318.532146][ T5949] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 318.705057][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.716945][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 318.728703][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 318.745058][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.760830][ T5949] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.772766][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.786509][ T5949] usb 4-1: config 0 descriptor?? [ 318.793766][T11244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 319.236271][ T5949] plantronics 0003:047F:FFFF.0025: reserved main item tag 0xd [ 319.246707][ T5949] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 319.661530][T11274] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.1431'. [ 319.905657][ T5949] usb 4-1: USB disconnect, device number 54 [ 319.955239][ T5969] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 320.135855][ T5969] usb 6-1: Using ep0 maxpacket: 8 [ 320.146601][ T5969] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 320.167194][ T5969] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 320.177797][ T5969] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 320.187788][ T5969] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.201828][ T5969] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 320.210875][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.453453][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.512791][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.565875][ T30] audit: type=1400 audit(1755456663.305:825): avc: denied { write } for pid=11287 comm="syz.3.1439" name="mouse0" dev="devtmpfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 320.611092][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.664962][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.849099][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.857211][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.865457][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.872940][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.882744][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.271464][ T59] bond0 (unregistering): Released all slaves [ 321.279958][ T59] bond1 (unregistering): Released all slaves [ 321.346842][ T59] tipc: Left network mode [ 321.365510][T11295] caif0 speed is unknown, defaulting to 1000 [ 321.389779][ T59] IPVS: stopping master sync thread 9925 ... [ 321.591637][T11295] lo speed is unknown, defaulting to 1000 [ 321.992114][ T30] audit: type=1400 audit(1755456664.643:826): avc: denied { remount } for pid=11322 comm="syz.3.1447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 322.142713][T11295] chnl_net:caif_netlink_parms(): no params data found [ 322.242159][ T5906] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 322.357475][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 322.448434][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 322.459679][ T59] hsr_slave_0: left promiscuous mode [ 322.509842][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.529560][ T59] hsr_slave_1: left promiscuous mode [ 322.606202][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.667402][ T59] veth1_macvtap: left promiscuous mode [ 322.717572][ T5969] usb 6-1: usb_control_msg returned -71 [ 322.761209][ T5969] usbtmc 6-1:16.0: can't read capabilities [ 322.764324][ T59] veth0_macvtap: left promiscuous mode [ 322.774747][ T5906] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 322.780682][ T5969] usb 6-1: USB disconnect, device number 52 [ 322.795915][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=17 [ 322.805657][ T5906] usb 4-1: SerialNumber: syz [ 322.818988][ T5906] usb 4-1: config 0 descriptor?? [ 323.034756][ T36] smc: removing ib device syz1 [ 323.055073][ T5168] Bluetooth: hci0: command tx timeout [ 323.064739][T11295] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.157618][T11295] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.182731][T11295] bridge_slave_0: entered allmulticast mode [ 323.216041][T11295] bridge_slave_0: entered promiscuous mode [ 323.228950][T11295] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.242988][T11295] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.271760][T11295] bridge_slave_1: entered allmulticast mode [ 323.285454][T11295] bridge_slave_1: entered promiscuous mode [ 323.337425][ T30] audit: type=1400 audit(1755456665.906:827): avc: denied { watch watch_reads } for pid=11362 comm="syz.6.1454" path="pipe:[34098]" dev="pipefs" ino=34098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 323.394568][T11366] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 323.395660][T11363] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 323.465915][T11295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.474106][T11361] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1453'. [ 323.548578][T11295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.600944][T11368] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1453'. [ 323.795191][T11295] team0: Port device team_slave_0 added [ 323.820817][T11295] team0: Port device team_slave_1 added [ 323.834143][ T5906] usbhid 4-1:0.0: can't add hid device: -71 [ 323.841431][ T5906] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 323.854623][T11366] netlink: 'syz.6.1454': attribute type 13 has an invalid length. [ 323.859815][ T5906] usb 4-1: USB disconnect, device number 55 [ 323.918611][T11295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.933849][T11295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.992178][T11295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.037029][T11366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.047365][T11366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.076240][T11363] lo speed is unknown, defaulting to 1000 [ 324.077181][T11295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.107335][T11295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.139321][T11295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.160219][ T5969] lo speed is unknown, defaulting to 1000 [ 324.233267][T11295] hsr_slave_0: entered promiscuous mode [ 324.245936][T11295] hsr_slave_1: entered promiscuous mode [ 324.258011][T11295] debugfs: 'hsr0' already exists in 'hsr' [ 324.263951][T11295] Cannot create hsr debugfs directory [ 324.632037][T11400] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1460'. [ 324.678316][T11295] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 324.693732][T11295] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 324.713154][T11295] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 324.723433][T11295] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 324.873889][T11295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.922005][T11295] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.953279][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.960388][ T2994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.095703][T11148] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.102788][T11148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.181877][ T30] audit: type=1400 audit(1755456667.636:828): avc: denied { ioctl } for pid=11430 comm="syz.3.1466" path="socket:[33161]" dev="sockfs" ino=33161 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 325.278779][ T5168] Bluetooth: hci0: command tx timeout [ 325.280782][T11295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.812613][ T5906] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 325.984828][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 325.997814][T11295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.010348][T11459] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1470'. [ 326.023927][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.044602][ T5906] usb 7-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 326.056082][T11459] bond0: entered promiscuous mode [ 326.062747][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.077425][T11459] bond_slave_1: entered promiscuous mode [ 326.083695][T11459] bond0: entered allmulticast mode [ 326.088850][T11459] bond_slave_1: entered allmulticast mode [ 326.101155][ T5906] usb 7-1: config 0 descriptor?? [ 326.308214][T11478] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 326.322709][T11478] FAULT_INJECTION: forcing a failure. [ 326.322709][T11478] name failslab, interval 1, probability 0, space 0, times 0 [ 326.336611][T11478] CPU: 0 UID: 0 PID: 11478 Comm: syz.3.1475 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 326.336637][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.336651][T11478] Call Trace: [ 326.336656][T11478] [ 326.336662][T11478] dump_stack_lvl+0x16c/0x1f0 [ 326.336684][T11478] should_fail_ex+0x512/0x640 [ 326.336705][T11478] should_failslab+0xc2/0x120 [ 326.336726][T11478] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 326.336744][T11478] ? getname_flags.part.0+0x4c/0x550 [ 326.336770][T11478] ? rcu_is_watching+0x12/0xc0 [ 326.336792][T11478] getname_flags.part.0+0x4c/0x550 [ 326.336817][T11478] getname_flags+0x93/0xf0 [ 326.336835][T11478] do_sys_openat2+0xb8/0x1d0 [ 326.336858][T11478] ? __pfx_do_sys_openat2+0x10/0x10 [ 326.336881][T11478] ? __fget_files+0x20e/0x3c0 [ 326.336903][T11478] __x64_sys_open+0x153/0x1e0 [ 326.336925][T11478] ? __pfx___x64_sys_open+0x10/0x10 [ 326.336950][T11478] ? rcu_is_watching+0x12/0xc0 [ 326.336972][T11478] do_syscall_64+0xcd/0x4c0 [ 326.336991][T11478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.337009][T11478] RIP: 0033:0x7f2a5a18ebe9 [ 326.337022][T11478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.337050][T11478] RSP: 002b:00007f2a5b0d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 326.337067][T11478] RAX: ffffffffffffffda RBX: 00007f2a5a3b5fa0 RCX: 00007f2a5a18ebe9 [ 326.337084][T11478] RDX: 766c618eb221465a RSI: 00000004001410c2 RDI: 0000200000000080 [ 326.337095][T11478] RBP: 00007f2a5b0d9090 R08: 0000000000000000 R09: 0000000000000000 [ 326.337106][T11478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.337116][T11478] R13: 00007f2a5a3b6038 R14: 00007f2a5a3b5fa0 R15: 00007ffe4d24f388 [ 326.337132][T11478] [ 326.344963][T11295] veth0_vlan: entered promiscuous mode [ 326.453905][ T5922] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 326.525359][T11486] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1477'. [ 326.559729][ T5906] wacom 0003:056A:0217.0026: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 326.645894][T11295] veth1_vlan: entered promiscuous mode [ 326.671763][ T30] audit: type=1400 audit(1755456669.011:829): avc: denied { setattr } for pid=11491 comm="syz.3.1476" path="/proc/928/task" dev="proc" ino=33292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 326.734722][T11295] veth0_macvtap: entered promiscuous mode [ 326.746491][T11295] veth1_macvtap: entered promiscuous mode [ 326.759359][T11295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.771840][T11295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.793605][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1478'. [ 326.829873][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.830825][ T5922] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 326.860878][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.866165][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.873040][ T5906] usb 7-1: USB disconnect, device number 30 [ 326.905366][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.244900][ T2994] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.337787][ T2994] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.451468][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 327.469282][ T5922] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 327.480481][ T5922] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 327.488623][ T5922] usb 1-1: Manufacturer: syz [ 327.500247][ T5922] usb 1-1: config 0 descriptor?? [ 327.505567][ T5168] Bluetooth: hci0: command tx timeout [ 327.523892][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.536135][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.557364][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.565291][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.581538][ T30] audit: type=1400 audit(1755456669.872:830): avc: denied { mount } for pid=11295 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 327.607501][ T30] audit: type=1400 audit(1755456669.891:831): avc: denied { mounton } for pid=11295 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 327.769366][T11518] dvmrp0: entered allmulticast mode [ 327.802347][T11518] dvmrp1: entered allmulticast mode [ 327.807631][T11525] usb usb9: usbfs: process 11525 (syz.3.1482) did not claim interface 1 before use [ 327.823209][T11515] dvmrp0: left allmulticast mode [ 327.839406][ T30] audit: type=1400 audit(1755456670.115:832): avc: denied { connect } for pid=11514 comm="syz.6.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 327.884606][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 327.893853][T11525] openvswitch: netlink: nsh attr 0 has unexpected len 124 expected 0 [ 327.909900][T11525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.948563][ T5922] appleir 0003:05AC:8243.0027: unknown main item tag 0x0 [ 327.968904][ T5922] appleir 0003:05AC:8243.0027: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 327.978157][T11534] netlink: del zone limit has 4 unknown bytes [ 328.208973][T11471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.220394][T11471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.564088][ T24] usb 1-1: USB disconnect, device number 45 [ 328.594698][T11553] FAULT_INJECTION: forcing a failure. [ 328.594698][T11553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.607911][T11553] CPU: 0 UID: 0 PID: 11553 Comm: syz.6.1488 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 328.607934][T11553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 328.607944][T11553] Call Trace: [ 328.607950][T11553] [ 328.607956][T11553] dump_stack_lvl+0x16c/0x1f0 [ 328.607978][T11553] should_fail_ex+0x512/0x640 [ 328.607999][T11553] _copy_from_user+0x2e/0xd0 [ 328.608021][T11553] vhost_vring_ioctl+0x939/0x1520 [ 328.608046][T11553] ? __pfx_vhost_vring_ioctl+0x10/0x10 [ 328.608068][T11553] ? vhost_dev_ioctl+0x16c/0xe20 [ 328.608096][T11553] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 328.608117][T11553] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 328.608139][T11553] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 328.608168][T11553] vhost_vsock_dev_ioctl+0x8a9/0xb30 [ 328.608188][T11553] ? hook_file_ioctl_common+0x145/0x410 [ 328.608207][T11553] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 328.608229][T11553] ? selinux_file_ioctl+0xb4/0x270 [ 328.608254][T11553] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 328.608275][T11553] __x64_sys_ioctl+0x18b/0x210 [ 328.608300][T11553] do_syscall_64+0xcd/0x4c0 [ 328.608319][T11553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.608336][T11553] RIP: 0033:0x7facbb18ebe9 [ 328.608349][T11553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.608366][T11553] RSP: 002b:00007facbbf70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.608383][T11553] RAX: ffffffffffffffda RBX: 00007facbb3b5fa0 RCX: 00007facbb18ebe9 [ 328.608395][T11553] RDX: 0000200000000300 RSI: 000000004008af13 RDI: 0000000000000003 [ 328.608406][T11553] RBP: 00007facbbf70090 R08: 0000000000000000 R09: 0000000000000000 [ 328.608417][T11553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.608427][T11553] R13: 00007facbb3b6038 R14: 00007facbb3b5fa0 R15: 00007ffc3dee6cc8 [ 328.608444][T11553] [ 328.829904][T11556] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 329.094474][ T5922] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 329.256779][ T5922] usb 7-1: config 0 has no interfaces? [ 329.262343][ T5922] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 329.272220][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.284877][ T5922] usb 7-1: config 0 descriptor?? [ 329.514277][ T5922] usb 7-1: USB disconnect, device number 31 [ 329.575657][ T5855] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 329.725216][ T5168] Bluetooth: hci0: command tx timeout [ 329.735928][ T5855] usb 1-1: Using ep0 maxpacket: 16 [ 329.742880][ T5855] usb 1-1: config 0 has an invalid interface number: 206 but max is 0 [ 329.751498][ T5855] usb 1-1: config 0 has no interface number 0 [ 329.760705][ T5855] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 329.769779][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.777750][ T5855] usb 1-1: Product: syz [ 329.782103][ T5855] usb 1-1: Manufacturer: syz [ 329.786695][ T5855] usb 1-1: SerialNumber: syz [ 329.792390][ T5855] usb 1-1: config 0 descriptor?? [ 329.799670][ T5855] radioshark2 1-1:0.206: Invalid radioSHARK2 device [ 329.806960][ T5855] radioshark2 1-1:0.206: probe with driver radioshark2 failed with error -22 [ 329.816071][ T5855] usbhid 1-1:0.206: couldn't find an input interrupt endpoint [ 330.215743][T11576] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 330.222257][T11576] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 330.229794][T11576] vhci_hcd vhci_hcd.0: Device attached [ 330.230895][ T5855] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 330.431016][ T5922] vhci_hcd: vhci_device speed not set [ 330.441515][ T5855] usb 6-1: Using ep0 maxpacket: 8 [ 330.447839][ T5855] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 330.456269][ T5855] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 330.465270][ T5855] usb 6-1: config 0 has no interface number 0 [ 330.471355][ T5855] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 330.482941][ T5855] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 330.494186][ T5855] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 330.494938][ T974] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 330.507293][ T5855] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 330.512994][ T5922] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 330.529926][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 330.538209][ T5949] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 330.545703][ T5855] usb 6-1: Product: syz [ 330.550851][ T5855] usb 6-1: config 0 descriptor?? [ 330.556174][T11570] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 330.609264][ T24] usb 1-1: USB disconnect, device number 46 [ 330.688662][ T974] usb 7-1: config 0 has no interfaces? [ 330.694474][ T974] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 330.709631][ T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.717885][ T5949] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.728998][ T5949] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.729628][ T974] usb 7-1: config 0 descriptor?? [ 330.742218][ T5949] usb 8-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 330.757409][ T5949] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.769676][ T5949] usb 8-1: config 0 descriptor?? [ 330.981626][T11577] vhci_hcd: unknown pdu 2 [ 331.097836][T11585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.131393][T11585] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 331.142435][T11585] qnx6: wrong signature (magic) in superblock #1. [ 331.148888][T11585] qnx6: unable to read the first superblock [ 331.212026][T11585] openvswitch: netlink: IP tunnel dst address not specified [ 331.234678][ T5922] vhci_hcd: vhci_device speed not set [ 331.263241][ T6099] vhci_hcd: stop threads [ 331.271764][ T5855] usb 6-1: USB disconnect, device number 53 [ 331.279889][ T6099] vhci_hcd: release socket [ 331.284456][ T5949] hid-led 0003:1294:1320.0028: hidraw0: USB HID vff.fe Device [HID 1294:1320] on usb-dummy_hcd.7-1/input0 [ 331.296881][ T6099] vhci_hcd: disconnect device [ 331.298944][ T5949] hid-led 0003:1294:1320.0028: Riso Kagaku Webmail Notifier initialized [ 331.310045][ T5922] usb 45-1: device descriptor read/64, error -71 [ 331.340213][ T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 331.414155][T11592] batadv_slave_0: entered promiscuous mode [ 331.495105][ T5855] usb 8-1: USB disconnect, device number 2 [ 331.510553][ T5922] vhci_hcd: vhci_device speed not set [ 331.565343][ T6099] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 331.573765][ T6099] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 331.581930][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 331.588716][ T13] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 331.599691][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 331.612925][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 331.622625][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.930570][ T24] usb 1-1: config 0 descriptor?? [ 333.079241][T11624] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 333.105590][T11624] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 333.356729][ T5855] usb 7-1: USB disconnect, device number 32 [ 333.461835][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1513'. [ 333.475814][T11638] dummy0: entered promiscuous mode [ 333.486286][T11638] dummy0: left promiscuous mode [ 333.788945][T11645] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 333.811306][T11645] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 333.889598][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 333.916799][T11655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1519'. [ 333.959637][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 333.984754][ T24] usb 1-1: USB disconnect, device number 47 [ 334.000082][T11659] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1520'. [ 334.119338][ T5901] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 334.155527][T11660] team0: Device gtp0 is of different type [ 334.192256][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1519'. [ 334.310967][T11671] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1523'. [ 334.313812][ T5901] usb 7-1: unable to get BOS descriptor or descriptor too short [ 334.331066][ T5901] usb 7-1: not running at top speed; connect to a high speed hub [ 334.341082][ T5901] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.352442][ T5901] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 334.366025][T11671] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11671 comm=syz.5.1523 [ 334.379829][ T5901] usb 7-1: config 1 has no interface number 1 [ 334.433813][ T974] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 334.503297][ T5901] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 334.525582][ T5901] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 334.545210][ T24] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 334.546063][ T5901] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.562323][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.570682][ T5901] usb 7-1: Product: syz [ 334.574921][ T5901] usb 7-1: Manufacturer: syz [ 334.579729][ T5901] usb 7-1: SerialNumber: syz [ 334.653668][ T974] usb 4-1: Using ep0 maxpacket: 16 [ 334.660658][ T974] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 334.673992][ T974] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 334.683235][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.695665][ T974] usb 4-1: config 0 descriptor?? [ 334.730072][ T24] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 334.738542][ T24] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 334.747362][ T24] usb 1-1: config 0 has no interface number 0 [ 334.755022][ T24] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 334.765198][ T24] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.776482][ T24] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 334.786452][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.808399][ T24] usb 1-1: config 0 descriptor?? [ 334.828938][ T5901] hub 7-1:1.0: Invalid hub with more than one config or interface [ 334.839779][ T5901] hub 7-1:1.0: probe with driver hub failed with error -22 [ 334.851065][ T5901] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 334.875461][ T5901] usb 7-1: USB disconnect, device number 33 [ 334.929112][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.791071][ T24] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input40 [ 335.829948][ T24] input: failed to attach handler kbd to device input40, error: -5 [ 336.473107][ T5901] usb 1-1: USB disconnect, device number 48 [ 336.597319][T11690] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 336.621284][T11690] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 336.630523][T11690] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 336.641171][T11690] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 336.650990][T11690] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 336.661866][T11690] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 336.669799][T11690] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 336.680980][T11690] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 336.681083][T11693] afs: Unknown parameter 'dynv/kvm' [ 336.703093][T11690] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 336.705711][T11693] overlayfs: failed to resolve './file0/file0': -2 [ 336.711912][T11690] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 336.862299][T11716] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1532'. [ 336.920132][ T24] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 337.101715][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 337.199775][ T24] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 337.208320][ T24] usb 6-1: config 0 has no interface number 0 [ 337.216471][ T974] usbhid 4-1:0.0: can't add hid device: -71 [ 337.241014][ T24] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 337.269324][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.397448][ T24] usb 6-1: config 0 descriptor?? [ 337.403900][ T974] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 337.413191][ T974] usb 4-1: USB disconnect, device number 56 [ 337.447409][ T30] audit: type=1326 audit(1755456679.099:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.3.1537" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a5a18ebe9 code=0x0 [ 337.519022][ T24] viperboard 6-1:0.143: version 0.00 found at bus 006 address 054 [ 337.534402][ T24] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 337.545054][ T24] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 337.635376][T11699] batman_adv: batadv0: Adding interface: gretap0 [ 337.641808][T11699] batman_adv: batadv0: Interface activated: gretap0 [ 337.658783][ T974] usb 6-1: USB disconnect, device number 54 [ 337.810233][ T30] audit: type=1400 audit(1755456679.445:834): avc: denied { connect } for pid=11745 comm="syz.6.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 338.160171][ T974] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 338.320475][ T974] usb 7-1: Using ep0 maxpacket: 32 [ 338.332801][ T974] usb 7-1: config index 0 descriptor too short (expected 4388, got 36) [ 338.341139][ T974] usb 7-1: config 219 has too many interfaces: 163, using maximum allowed: 32 [ 338.399707][ T974] usb 7-1: config 219 has an invalid interface number: 196 but max is 162 [ 338.408405][ T974] usb 7-1: config 219 has 1 interface, different from the descriptor's value: 163 [ 338.417700][ T974] usb 7-1: config 219 has no interface number 0 [ 338.424086][ T974] usb 7-1: config 219 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 338.434267][ T974] usb 7-1: config 219 interface 196 has no altsetting 0 [ 338.442715][ T974] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 338.451881][ T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.463465][ T974] usb 7-1: Product: syz [ 338.469223][ T974] usb 7-1: Manufacturer: syz [ 338.476730][ T974] usb 7-1: SerialNumber: syz [ 338.495177][T11749] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 338.623311][T11761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.732541][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 338.768794][ T974] ipheth 7-1:219.196: ipheth_get_macaddr: usb_control_msg: -71 [ 338.784044][ T974] ipheth 7-1:219.196: probe with driver ipheth failed with error -71 [ 338.810915][ T974] usb 7-1: USB disconnect, device number 34 [ 338.919269][ T5901] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 339.094468][ T5901] usb 8-1: Using ep0 maxpacket: 16 [ 339.117015][ T5901] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.151848][ T5901] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 339.188941][ T5901] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 339.208971][ T5901] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.233563][ T5901] usb 8-1: config 0 descriptor?? [ 339.255808][ T5901] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 339.716403][ T30] audit: type=1326 audit(1755456681.213:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbb18ebe9 code=0x7ffc0000 [ 339.739946][ T5901] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 339.876993][ T30] audit: type=1326 audit(1755456681.213:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7facbb18ebe9 code=0x7ffc0000 [ 339.943538][ T30] audit: type=1326 audit(1755456681.213:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbb18ebe9 code=0x7ffc0000 [ 339.980286][ T30] audit: type=1326 audit(1755456681.213:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7facbb18ebe9 code=0x7ffc0000 [ 340.020315][ T30] audit: type=1326 audit(1755456681.213:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbb18ebe9 code=0x7ffc0000 [ 340.043854][ T30] audit: type=1326 audit(1755456681.213:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbb18ebe9 code=0x7ffc0000 [ 340.067192][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.075586][ T30] audit: type=1326 audit(1755456681.213:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7facbb18ebe9 code=0x7ffc0000 [ 340.106556][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 340.115085][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 340.130124][ T5901] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 340.130162][ T30] audit: type=1326 audit(1755456681.213:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facbb18ebe9 code=0x7ffc0000 [ 340.166764][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.204863][ T5901] usb 4-1: config 0 descriptor?? [ 340.670994][T11824] kernel profiling enabled (shift: 9) [ 340.769292][T11846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11846 comm=syz.0.1554 [ 340.894267][T11852] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 341.819069][T11760] Process accounting resumed [ 341.826331][ T9] usb 8-1: USB disconnect, device number 3 [ 342.511107][ T5901] usbhid 4-1:0.0: can't add hid device: -71 [ 342.518027][ T5901] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 342.531188][ T5168] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 342.539590][ T5901] usb 4-1: USB disconnect, device number 57 [ 342.703833][ T5855] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 342.846400][ T5855] usb 1-1: device descriptor read/64, error -71 [ 343.335095][ T5855] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 343.473347][ T5855] usb 1-1: device descriptor read/64, error -71 [ 343.489758][T11934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.592576][ T5855] usb usb1-port1: attempt power cycle [ 343.804762][ T24] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 343.957127][ T5855] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 343.998297][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 344.005382][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.017801][ T5855] usb 1-1: device descriptor read/8, error -71 [ 344.027351][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.041870][ T24] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 344.051203][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.060642][ T24] usb 7-1: config 0 descriptor?? [ 344.076545][ T24] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 344.264505][ T974] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 344.275139][ T5855] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 344.297195][ T5855] usb 1-1: device descriptor read/8, error -71 [ 344.425803][ T5855] usb usb1-port1: unable to enumerate USB device [ 344.446272][ T974] usb 6-1: Using ep0 maxpacket: 8 [ 344.454371][ T974] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 344.463514][ T974] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 344.471701][ T974] usb 6-1: Product: syz [ 344.475895][ T974] usb 6-1: Manufacturer: syz [ 344.480505][ T974] usb 6-1: SerialNumber: syz [ 344.485837][ T974] usb 6-1: config 0 descriptor?? [ 344.707396][T11966] netlink: 'syz.5.1577': attribute type 2 has an invalid length. [ 344.868347][T11966] lo speed is unknown, defaulting to 1000 [ 345.008712][T11966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.018470][T11966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.055279][T11984] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1579'. [ 345.070047][ T974] usb 6-1: USB disconnect, device number 55 [ 345.119448][ T7135] udevd[7135]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.465878][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 345.465893][ T30] audit: type=1400 audit(1755456686.601:920): avc: denied { read } for pid=11999 comm="syz.3.1583" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 345.498077][T11998] kAFS: No cell specified [ 345.695311][T12009] fuse: Bad value for 'fd' [ 346.248820][ T30] audit: type=1326 audit(1755456687.331:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12013 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 346.274660][ T30] audit: type=1326 audit(1755456687.331:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12013 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 346.298276][T12002] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 346.304194][T12002] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 346.310606][T12002] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 346.316500][T12002] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 346.322919][T12002] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 346.328851][T12002] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 346.335737][T12002] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 346.341751][T12002] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 346.348367][T12002] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 346.375496][ T30] audit: type=1326 audit(1755456687.331:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12013 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 346.399174][ T30] audit: type=1326 audit(1755456687.331:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12013 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 346.422776][ T30] audit: type=1326 audit(1755456687.331:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12013 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbed78d550 code=0x7ffc0000 [ 346.446372][ T30] audit: type=1326 audit(1755456687.331:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12013 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 346.470246][ T30] audit: type=1326 audit(1755456687.331:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12013 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 346.499478][ T30] audit: type=1326 audit(1755456687.331:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12013 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 346.758334][T12001] Process accounting resumed [ 346.763641][ T30] audit: type=1326 audit(1755456687.331:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12013 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 346.777688][ T5855] usb 7-1: USB disconnect, device number 35 [ 347.771097][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 348.540756][ T5168] Bluetooth: hci4: command 0x0406 tx timeout [ 348.546776][ T5168] Bluetooth: hci3: command 0x0406 tx timeout [ 348.552790][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 348.673355][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1602'. [ 348.713530][T12064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.751139][T12066] 9pnet_fd: Insufficient options for proto=fd [ 348.914737][T12078] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1607'. [ 349.203083][ C1] ICMPv6: NA: ba:f0:f0:7d:8c:a2 advertised our address fe80::b8f0:f0ff:fe7d:8ca2 on gretap0! [ 349.492276][ T24] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 349.557871][ T5855] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 349.664477][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.674693][ T24] usb 6-1: config 0 has no interfaces? [ 349.700566][ T24] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 349.710603][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.732299][ T24] usb 6-1: config 0 descriptor?? [ 349.738936][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 349.745888][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.756681][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 349.769927][ T5855] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 349.779737][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.788421][ T5855] usb 4-1: config 0 descriptor?? [ 349.796520][ T5855] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 349.952673][ T974] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 349.964798][ T5855] usb 6-1: USB disconnect, device number 56 [ 349.994598][ T5168] Bluetooth: hci1: command 0x0406 tx timeout [ 350.113566][ T974] usb 8-1: Using ep0 maxpacket: 16 [ 350.124662][ T974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.137157][ T974] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 350.150233][ T974] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 350.160865][ T974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.174075][ T974] usb 8-1: config 0 descriptor?? [ 350.662215][ T974] shield 0003:0955:7214.0029: unknown main item tag 0x0 [ 350.669374][ T974] shield 0003:0955:7214.0029: unknown main item tag 0x0 [ 350.676471][ T974] shield 0003:0955:7214.0029: unknown main item tag 0x0 [ 350.683706][ T974] shield 0003:0955:7214.0029: unknown main item tag 0x0 [ 350.691256][ T974] shield 0003:0955:7214.0029: unknown main item tag 0x0 [ 350.698864][ T974] input: HID 0955:7214 Haptics as /devices/virtual/input/input42 [ 350.709416][ T974] shield 0003:0955:7214.0029: Registered Thunderstrike controller [ 350.717440][ T974] shield 0003:0955:7214.0029: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 350.798651][T12101] dlm: non-version read from control device 8224 [ 350.813367][ T5168] Bluetooth: hci4: command 0x0406 tx timeout [ 350.819462][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 350.826128][ T5168] Bluetooth: hci0: command 0x0c1a tx timeout [ 350.998692][ T974] usb 8-1: USB disconnect, device number 4 [ 351.004766][ T5901] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 351.036711][ T5901] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 351.049419][ T5901] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 351.060732][ T5901] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 351.116507][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 351.126143][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 351.421383][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 352.673452][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 352.723387][T12100] Process accounting resumed [ 352.729801][ T974] usb 4-1: USB disconnect, device number 58 [ 352.780864][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 352.780879][ T30] audit: type=1400 audit(1755456693.439:973): avc: denied { listen } for pid=12115 comm="syz.7.1615" lport=12 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 353.009383][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 353.214712][T12122] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 353.221324][T12122] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 353.228960][T12122] vhci_hcd vhci_hcd.0: Device attached [ 353.235133][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 353.241154][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 353.262904][ T5848] Bluetooth: hci1: unknown advertising packet type: 0x6b [ 353.262924][ T5848] Bluetooth: hci1: Dropping invalid advertising data [ 353.276991][ T5848] Bluetooth: hci1: Malformed LE Event: 0x02 [ 353.283402][ T30] audit: type=1400 audit(1755456693.916:974): avc: denied { map } for pid=12127 comm="syz.3.1618" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 353.307572][ T30] audit: type=1400 audit(1755456693.916:975): avc: denied { execute } for pid=12127 comm="syz.3.1618" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 353.331717][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.407441][T12105] ceph: No mds server is up or the cluster is laggy [ 353.447811][ T5949] vhci_hcd: vhci_device speed not set [ 353.490506][ T24] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 353.572414][ T5949] usb 43-1: new full-speed USB device number 5 using vhci_hcd [ 353.909082][ T24] usb 6-1: config 0 has no interfaces? [ 353.914562][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 353.923620][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.933624][ T24] usb 6-1: config 0 descriptor?? [ 354.121172][ T5855] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 354.157353][T12123] vhci_hcd: cannot find a urb of seqnum 89 max seqnum 3 [ 354.175431][T11148] vhci_hcd: stop threads [ 354.175498][T12119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1616'. [ 354.188773][T11148] vhci_hcd: release socket [ 354.194251][T11148] vhci_hcd: disconnect device [ 354.292266][ T5855] usb 8-1: Using ep0 maxpacket: 8 [ 354.298830][ T5855] usb 8-1: unable to get BOS descriptor or descriptor too short [ 354.309229][ T5855] usb 8-1: config 8 has an invalid interface number: 48 but max is 0 [ 354.319217][ T5855] usb 8-1: config 8 has no interface number 0 [ 354.325692][ T5855] usb 8-1: too many endpoints for config 8 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 354.336943][ T5855] usb 8-1: config 8 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 354.350333][ T5855] usb 8-1: config 8 interface 48 has no altsetting 0 [ 354.358659][ T5855] usb 8-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 354.367959][ T5855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.375954][ T5855] usb 8-1: Product: Ј [ 354.380076][ T5855] usb 8-1: Manufacturer: â¦à«¾îš‡ìœ˜ê“…å»…ê¦ç‡œå¶…锋齰礱뭉çˆêˆ½ë¤¡ì¥©é¿¢ã¡†àµšë­³ç£¿é’›ç©ìš’ᒜ뛯轒庌鸿䘩孂࠙뇓뚰笾纞嗤ﺋﭩ抸к࿃땤í彉岇툂┢淠崥枋抌뤌 [ 354.399594][ T5855] usb 8-1: SerialNumber: ႚ햭璳ꚺ狛쮞⡼쮴æžæœ›á™´ä¸µç›žé¹Žä ­è–ƒã¯‹à¾Œí§å¹½î‹ªæ°«â¼ŽíŠ§âŒŽã–«è®‹ì¼í‰€êŸ°çŽ½î©Ÿä‚ƒæ¼£ë±šçƒµé‚Žá‚¸â»±æ¬’押ğî„ᕫᓉ좴댋᧻긨쮞ဒ刈ï¬é€é½•í‘ℛ㺟阥î¤è­Ÿá°«ë»²æ‚ƒèŠ [ 354.526685][T12157] fuse: Bad value for 'group_id' [ 354.533952][T12157] fuse: Bad value for 'group_id' [ 355.447067][ T974] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 355.543320][ T30] audit: type=1400 audit(1755456696.030:976): avc: denied { map } for pid=12166 comm="syz.0.1627" path="socket:[35778]" dev="sockfs" ino=35778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 355.591509][T12168] mkiss: ax0: crc mode is auto. [ 355.676247][ T974] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.909308][ T974] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 355.922283][ T974] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 355.932111][ T974] usb 7-1: config 1 interface 1 has no altsetting 0 [ 355.983713][ T974] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.009237][ T5922] usb 6-1: USB disconnect, device number 57 [ 356.027830][ T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.064656][ T974] usb 7-1: Product: syz [ 356.069600][ T974] usb 7-1: Manufacturer: syz [ 356.074199][ T974] usb 7-1: SerialNumber: syz [ 356.097937][ T974] cdc_ncm 7-1:1.0: skipping garbage [ 356.108980][ T974] cdc_ncm 7-1:1.0: NCM or ECM functional descriptors missing [ 356.123321][ T974] cdc_ncm 7-1:1.0: bind() failure [ 356.227245][ T5901] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 356.315174][T12165] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 356.370697][ T5901] usb 4-1: device descriptor read/64, error -71 [ 356.427129][T12193] netlink: 'syz.5.1636': attribute type 3 has an invalid length. [ 356.437173][T12193] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1636'. [ 356.447710][T12193] netlink: 'syz.5.1636': attribute type 1 has an invalid length. [ 356.633548][ T5901] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 356.977034][ T5901] usb 4-1: device descriptor read/64, error -71 [ 357.001114][ T5855] usb 8-1: selecting invalid altsetting 1 [ 357.006912][ T5855] catc 8-1:8.48: Can't set altsetting 1. [ 357.012874][ T5855] catc 8-1:8.48: probe with driver catc failed with error -5 [ 357.021919][ T5855] usb 8-1: USB disconnect, device number 5 [ 357.067272][ T5848] Bluetooth: hci0: unexpected event for opcode 0x203e [ 357.127565][ T5848] Bluetooth: hci0: unexpected event for opcode 0x204e [ 357.148992][ T5901] usb usb4-port1: attempt power cycle [ 357.520830][ T5901] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 357.560880][T12223] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1640'. [ 357.670853][ T5901] usb 4-1: device descriptor read/8, error -71 [ 358.073413][T12231] lo speed is unknown, defaulting to 1000 [ 358.134871][ T24] usb 7-1: USB disconnect, device number 36 [ 358.173478][T12236] dlm: non-version read from control device 8224 [ 358.248003][ T5901] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 358.389477][ T5901] usb 4-1: device descriptor read/8, error -71 [ 358.519673][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'. [ 358.536523][ T5901] usb usb4-port1: unable to enumerate USB device [ 358.570609][T12243] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1644'. [ 358.655997][T12245] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1646'. [ 359.190219][T12252] netlink: 'syz.0.1648': attribute type 9 has an invalid length. [ 359.210044][ T5949] vhci_hcd: vhci_device speed not set [ 359.213072][T12252] netlink: 'syz.0.1648': attribute type 9 has an invalid length. [ 360.022066][T12264] veth1_macvtap: left promiscuous mode [ 360.046422][T12264] macsec0: entered allmulticast mode [ 360.316139][T12270] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 360.919121][T12280] input: syz1 as /devices/virtual/input/input43 [ 361.131292][T11141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.139876][T11141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.316399][T12279] netlink: 'syz.0.1656': attribute type 1 has an invalid length. [ 361.328801][T12279] nbd: error processing sock list [ 361.333936][T12279] block nbd1: shutting down sockets [ 361.455234][ T6099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.463359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.224944][T11148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.310295][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.606992][T12304] Invalid logical block size (43862) [ 362.612890][T12304] kAFS: No cell specified [ 362.834554][T11141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.842944][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.851403][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.859484][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.872289][T12318] dlm: non-version read from control device 8224 [ 362.925309][T12322] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1668'. [ 363.118023][T12328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1670'. [ 363.454165][ T5949] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 363.625273][ T5949] usb 1-1: Using ep0 maxpacket: 16 [ 363.634044][ T5949] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.695585][ T5949] usb 1-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b0.ea [ 363.717160][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.725650][ T5949] usb 1-1: Product: syz [ 363.730209][ T5949] usb 1-1: Manufacturer: syz [ 363.734822][ T5949] usb 1-1: SerialNumber: syz [ 363.741917][T12343] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 363.747142][ T5949] usb 1-1: config 0 descriptor?? [ 363.760416][ T5949] gl620a 1-1:0.0: probe with driver gl620a failed with error -22 [ 363.900975][T12348] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 363.908104][T12349] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 363.935222][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 363.937688][ T5168] Bluetooth: hci5: command 0x1003 tx timeout [ 364.262270][T12360] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 364.268774][T12360] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 364.276813][T12360] vhci_hcd vhci_hcd.0: Device attached [ 364.469971][ T5949] vhci_hcd: vhci_device speed not set [ 364.491501][ T5922] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 364.533958][ T5969] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 364.541442][ T5949] usb 45-1: new full-speed USB device number 4 using vhci_hcd [ 364.651929][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 364.659514][ T5922] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 364.668682][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.676880][ T5922] usb 6-1: Product: syz [ 364.681067][ T5922] usb 6-1: Manufacturer: syz [ 364.685693][ T5922] usb 6-1: SerialNumber: syz [ 364.691257][ T5922] usb 6-1: config 0 descriptor?? [ 364.697980][ T5922] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 364.706126][ T5969] usb 7-1: config 0 has no interfaces? [ 364.713124][ T5969] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 364.722438][ T5969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.731899][ T5969] usb 7-1: config 0 descriptor?? [ 364.916725][T12359] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 365.085650][T12370] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 365.096632][T12370] qnx6: wrong signature (magic) in superblock #1. [ 365.103090][T12370] qnx6: unable to read the first superblock [ 365.275153][ T5922] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 365.284335][T12361] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 365.286826][T12368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.298310][T11141] vhci_hcd: stop threads [ 365.308102][T12359] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 365.308719][T11141] vhci_hcd: release socket [ 365.314603][T12359] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 365.330147][T11141] vhci_hcd: disconnect device [ 365.330644][T12359] vhci_hcd vhci_hcd.0: Device attached [ 365.348076][T12359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.356628][T12359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.403983][ T30] audit: type=1400 audit(1755456705.253:977): avc: denied { name_bind } for pid=12358 comm="syz.5.1678" src=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 365.430180][T12371] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 365.444253][ T13] vhci_hcd: stop threads [ 365.451575][ T5969] usb 6-1: USB disconnect, device number 58 [ 365.458150][ T13] vhci_hcd: release socket [ 365.462695][ T13] vhci_hcd: disconnect device [ 365.528050][ T5922] vhci_hcd: vhci_device speed not set [ 366.196079][ T5901] usb 1-1: USB disconnect, device number 53 [ 366.435210][ T30] audit: type=1400 audit(1755456706.217:978): avc: denied { setopt } for pid=12390 comm="syz.7.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 366.554351][ T5901] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 366.647212][T12393] netdevsim netdevsim7: Direct firmware load for . [ 366.647212][T12393] failed with error -2 [ 366.658348][T12393] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 366.658348][T12393] [ 366.717949][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 366.733481][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.747336][ T5901] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 366.756384][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.765885][ T5901] usb 1-1: config 0 descriptor?? [ 366.771466][ T2994] net_ratelimit: 11 callbacks suppressed [ 366.771478][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.785941][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.795397][ T5901] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 367.426109][ T9] usb 7-1: USB disconnect, device number 37 [ 367.482858][ T30] audit: type=1400 audit(1755456707.180:979): avc: denied { listen } for pid=12404 comm="syz.5.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 367.513712][ T30] audit: type=1400 audit(1755456707.180:980): avc: denied { listen } for pid=12404 comm="syz.5.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 367.517850][T12410] loop2: detected capacity change from 0 to 7 [ 367.543408][ T7135] Dev loop2: unable to read RDB block 7 [ 367.618020][T11141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.626246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.655242][ T7135] loop2: unable to read partition table [ 367.687703][ T7135] loop2: partition table beyond EOD, truncated [ 367.696894][T12410] Dev loop2: unable to read RDB block 7 [ 367.704799][T12410] loop2: unable to read partition table [ 367.733666][T12410] loop2: partition table beyond EOD, truncated [ 367.750747][T12410] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 367.935035][T11141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.955211][T11141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.607192][ T5922] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 368.756651][ T5922] usb 6-1: device descriptor read/64, error -71 [ 368.827705][T12438] fuse: root generation should be zero [ 368.976264][T12443] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 368.982769][T12443] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 368.990375][T12443] vhci_hcd vhci_hcd.0: Device attached [ 368.999775][T11141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.007931][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.016536][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.025116][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.056029][ T5922] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 369.301904][ T24] usb 7-1: new low-speed USB device number 38 using dummy_hcd [ 369.309919][ T5922] usb 6-1: device descriptor read/64, error -71 [ 369.563795][T12415] Process accounting resumed [ 369.570537][ T5969] usb 1-1: USB disconnect, device number 54 [ 369.627763][ T24] usb 7-1: config 0 has no interfaces? [ 370.219852][ T5922] usb usb6-port1: attempt power cycle [ 370.225314][ T24] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 370.235920][ T30] audit: type=1400 audit(1755456709.771:981): avc: denied { listen } for pid=12452 comm="syz.3.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.265998][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.285770][ T24] usb 7-1: config 0 descriptor?? [ 370.506957][T12444] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 370.654796][T12458] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 370.672743][T12458] qnx6: wrong signature (magic) in superblock #1. [ 370.679168][T12458] qnx6: unable to read the first superblock [ 370.847033][T11148] vhci_hcd: stop threads [ 370.858698][T12457] 8021q: adding VLAN 0 to HW filter on device bond3 [ 370.873227][T11148] vhci_hcd: release socket [ 370.885078][T11148] vhci_hcd: disconnect device [ 370.907566][ T5922] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 370.948244][ T5949] vhci_hcd: vhci_device speed not set [ 370.956283][ T5922] usb 6-1: device descriptor read/8, error -71 [ 371.108685][ T30] audit: type=1400 audit(1755456710.519:982): avc: denied { cmd } for pid=12463 comm="syz.7.1707" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=io_uring permissive=1 [ 372.189475][ T5901] usb 7-1: USB disconnect, device number 38 [ 372.206873][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'. [ 372.215902][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1708'. [ 372.225045][T12472] netlink: 'syz.3.1708': attribute type 7 has an invalid length. [ 372.327496][ T974] net_ratelimit: 9 callbacks suppressed [ 372.327510][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.658716][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.939931][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.063725][T12500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.425509][T12501] syz.6.1712 (12501): drop_caches: 2 [ 373.478987][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1718'. [ 373.490747][T12505] gtp0: entered promiscuous mode [ 373.532191][T12505] gtp0: entered allmulticast mode [ 373.738266][T12514] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 373.744770][T12514] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 373.752179][T12514] vhci_hcd vhci_hcd.0: Device attached [ 373.770801][T11148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.779168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.788455][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.798728][ T5969] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 373.941853][ T5901] vhci_hcd: vhci_device speed not set [ 373.989609][ T5969] usb 8-1: too many configurations: 67, using maximum allowed: 8 [ 374.006041][ T5922] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 374.011789][ T5969] usb 8-1: config index 0 descriptor too short (expected 155, got 106) [ 374.013580][ T5901] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 374.028027][ T5969] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.042536][ T5969] usb 8-1: config index 1 descriptor too short (expected 155, got 106) [ 374.052507][ T5969] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.063847][ T5969] usb 8-1: config index 2 descriptor too short (expected 155, got 106) [ 374.073356][ T5969] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.084477][ T5969] usb 8-1: config index 3 descriptor too short (expected 155, got 106) [ 374.094021][ T5969] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.105218][ T5969] usb 8-1: config index 4 descriptor too short (expected 155, got 106) [ 374.117312][ T5969] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.130078][ T5969] usb 8-1: config index 5 descriptor too short (expected 155, got 106) [ 374.132440][T12531] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1728'. [ 374.139489][ T5969] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.158526][T12531] netlink: zone id is out of range [ 374.158577][ T5969] usb 8-1: config index 6 descriptor too short (expected 155, got 106) [ 374.163623][T12531] netlink: zone id is out of range [ 374.163630][T12531] netlink: zone id is out of range [ 374.172159][ T5969] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.178375][T12531] netlink: zone id is out of range [ 374.183146][ T5969] usb 8-1: config index 7 descriptor too short (expected 155, got 106) [ 374.205853][ T5969] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.210169][ T5922] usb 1-1: config 0 has no interfaces? [ 374.217791][ T5969] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 374.224392][ T5922] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 374.230784][ T5969] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.243109][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.251158][ T5969] usb 8-1: Product: syz [ 374.257140][ T974] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 374.269443][ T5969] usb 8-1: Manufacturer: syz [ 374.270782][ T5922] usb 1-1: config 0 descriptor?? [ 374.274266][ T5969] usb 8-1: SerialNumber: syz [ 374.290693][ T9] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 374.443783][ T5969] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 374.451957][ T974] usb 6-1: Using ep0 maxpacket: 32 [ 374.506166][ T974] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.517144][T12515] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 374.565454][T11148] vhci_hcd: stop threads [ 374.569732][T11148] vhci_hcd: release socket [ 374.636256][T12534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.672031][T12534] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 374.683223][T12534] qnx6: wrong signature (magic) in superblock #1. [ 374.689652][T12534] qnx6: unable to read the first superblock [ 374.768299][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.844736][ T24] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 374.857080][T11148] vhci_hcd: disconnect device [ 374.903454][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.914264][ T974] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.928302][ T9] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 374.937731][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.951803][ T974] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 374.960959][ T974] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 374.969655][ T9] usb 7-1: config 0 descriptor?? [ 374.975857][ T974] usb 6-1: Product: syz [ 374.984530][ T974] usb 6-1: Manufacturer: syz [ 374.993579][ T974] usb 6-1: SerialNumber: syz [ 375.172176][T12541] XFS (nullb0): Invalid superblock magic number [ 375.212898][T12548] comedi comedi0: Minor -2147450880 is invalid! [ 375.223388][ T974] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input45 [ 375.246015][ T974] usb 6-1: USB disconnect, device number 63 [ 375.246068][ C1] appletouch 6-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 375.263687][ T974] appletouch 6-1:1.0: input: appletouch disconnected [ 375.309023][T12550] No control pipe specified [ 375.316929][T12550] vlan1: entered promiscuous mode [ 375.322503][T12550] vlan1: entered allmulticast mode [ 375.327692][T12550] veth0_vlan: entered allmulticast mode [ 375.425265][T12557] input: syz0 as /devices/virtual/input/input46 [ 375.438093][ T9] hid-led 0003:0FC5:B080.002A: unknown main item tag 0x0 [ 375.653196][T12527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.667241][T12527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.747601][ T9] hid-led 0003:0FC5:B080.002A: probe with driver hid-led failed with error -71 [ 375.776998][ T9] usb 7-1: USB disconnect, device number 39 [ 375.825052][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.831384][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.832284][T12562] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 375.881129][ T30] audit: type=1400 audit(1755456715.056:983): avc: denied { accept } for pid=12561 comm="syz.6.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 375.889424][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1734'. [ 375.912154][ T30] audit: type=1400 audit(1755456715.056:984): avc: denied { relabelto } for pid=12561 comm="syz.6.1734" name="file0" dev="tmpfs" ino=1533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:" [ 375.946085][ T30] audit: type=1400 audit(1755456715.056:985): avc: denied { associate } for pid=12561 comm="syz.6.1734" name="file0" dev="tmpfs" ino=1533 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 375.953527][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1734'. [ 375.990111][T12562] netlink: 'syz.6.1734': attribute type 1 has an invalid length. [ 375.998614][T12562] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1734'. [ 376.004919][ T24] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 376.015073][ T24] ath9k_htc: Failed to initialize the device [ 376.036349][ T24] usb 8-1: ath9k_htc: USB layer deinitialized [ 376.060070][T12562] nbd: socks must be embedded in a SOCK_ITEM attr [ 376.083886][T12562] block nbd1: shutting down sockets [ 376.210671][ T30] audit: type=1400 audit(1755456715.355:986): avc: denied { unlink } for pid=7056 comm="syz-executor" name="file0" dev="tmpfs" ino=1533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:" [ 376.615511][T12585] tipc: Started in network mode [ 376.621703][T12585] tipc: Node identity f, cluster identity 4 [ 376.624233][ T5949] usb 8-1: USB disconnect, device number 6 [ 376.646318][T12585] tipc: Node number set to 15 [ 376.701096][ T30] audit: type=1326 audit(1755456715.823:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12586 comm="syz.7.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 376.922009][ T9] usb 1-1: USB disconnect, device number 55 [ 377.083303][ T30] audit: type=1326 audit(1755456715.823:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12586 comm="syz.7.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 377.167690][T12596] sg_write: process 935 (syz.6.1746) changed security contexts after opening file descriptor, this is not allowed. [ 377.403593][ T30] audit: type=1326 audit(1755456715.823:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12586 comm="syz.7.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 377.437433][ T30] audit: type=1326 audit(1755456715.823:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12586 comm="syz.7.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 377.505188][ T30] audit: type=1326 audit(1755456715.823:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12586 comm="syz.7.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 377.530716][ T30] audit: type=1326 audit(1755456715.823:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12586 comm="syz.7.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 377.569451][ T30] audit: type=1326 audit(1755456715.823:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12586 comm="syz.7.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 377.605411][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1748'. [ 377.606742][ T30] audit: type=1326 audit(1755456715.823:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12586 comm="syz.7.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 377.638548][ T30] audit: type=1326 audit(1755456715.823:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12586 comm="syz.7.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 377.672787][ T30] audit: type=1326 audit(1755456715.823:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12586 comm="syz.7.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbed78ebe9 code=0x7ffc0000 [ 377.729713][T11141] net_ratelimit: 107 callbacks suppressed [ 377.729724][T11141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.790271][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.153698][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 378.315121][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 378.325293][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 378.336891][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 378.348735][ T24] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 378.357812][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.365974][ T24] usb 4-1: Product: syz [ 378.370168][ T24] usb 4-1: Manufacturer: syz [ 378.374808][ T24] usb 4-1: SerialNumber: syz [ 378.380353][ T24] usb 4-1: config 0 descriptor?? [ 378.385741][T12615] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 378.393024][T12615] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 378.401124][ T24] usb 4-1: ucan: probing device on interface #0 [ 378.559961][T11148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.817332][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.831754][T12615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.845980][T12615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.674521][ T24] ucan 4-1:0.0 can0: registered device [ 379.680485][T11148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.736053][ T5901] vhci_hcd: vhci_device speed not set [ 379.881985][ T24] ucan 4-1:0.0 can0: firmware string: unknown [ 379.889233][ T24] usb 4-1: USB disconnect, device number 63 [ 379.928572][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.936809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.944891][T11148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.783648][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.041277][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.062153][T12666] af_packet: tpacket_rcv: packet too big, clamped from 32820 to 3952. macoff=96 [ 381.798065][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1767'. [ 381.912565][T12683] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1769'. [ 381.952908][T12687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.005003][T12684] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.012302][T12684] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.056503][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 382.123058][T12684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.133432][T12684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.175602][T12684] macsec0: left allmulticast mode [ 382.201144][T11141] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.226421][T11141] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.284753][T11141] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.286800][T12704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1818 sclass=netlink_route_socket pid=12704 comm=syz.7.1774 [ 382.310600][ T2994] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.327321][T12705] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1775'. [ 382.340006][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1774'. [ 382.346110][T12705] vlan2: entered promiscuous mode [ 382.361774][T12706] netlink: 'syz.0.1773': attribute type 1 has an invalid length. [ 382.370332][T12705] macsec1: entered promiscuous mode [ 382.439692][T12709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1773'. [ 382.458556][T12706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.469457][T12706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1773'. [ 383.093719][ T59] net_ratelimit: 6 callbacks suppressed [ 383.093733][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.349494][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.470810][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 383.470826][ T30] audit: type=1400 audit(1755456722.156:1035): avc: denied { ioctl } for pid=12736 comm="syz.6.1785" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 383.541987][ T5901] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 383.702098][ T5901] usb 8-1: Using ep0 maxpacket: 32 [ 383.708464][ T5901] usb 8-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 383.717663][ T5901] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.726376][ T5901] usb 8-1: config 0 descriptor?? [ 383.733645][ T5901] usb 8-1: dvb_usb_v2: found a 'Anysee' in warm state [ 383.740549][ T5901] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 383.747034][ T5901] dvb_usb_anysee 8-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 383.953036][T12735] netlink: 'syz.7.1784': attribute type 16 has an invalid length. [ 383.960948][T12735] netlink: 'syz.7.1784': attribute type 17 has an invalid length. [ 384.155705][T12745] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 384.162236][T12745] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 384.170191][T12745] vhci_hcd vhci_hcd.0: Device attached [ 384.240048][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.293475][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.293828][ T30] audit: type=1400 audit(1755456722.923:1036): avc: denied { mount } for pid=12748 comm="syz.0.1788" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 384.474624][ T5949] usb 45-1: new high-speed USB device number 5 using vhci_hcd [ 384.488612][T11141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.573110][T12751] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1789'. [ 384.584239][T12751] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1789'. [ 384.977178][T12746] vhci_hcd: connection reset by peer [ 385.003728][ T59] vhci_hcd: stop threads [ 385.010081][ T59] vhci_hcd: release socket [ 385.014679][ T59] vhci_hcd: disconnect device [ 385.401927][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.644213][ T30] audit: type=1400 audit(1755456724.186:1037): avc: denied { ioctl } for pid=12764 comm="syz.6.1793" path="socket:[40060]" dev="sockfs" ino=40060 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 385.649354][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1793'. [ 385.669555][ T6099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.086369][ T6099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.094575][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.171617][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 386.177776][T12735] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 386.191930][ T5969] usb 8-1: USB disconnect, device number 7 [ 386.484799][T12783] Error: Driver 'c6xdigio' is already registered, aborting... [ 386.720472][ T6099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.874340][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1801'. [ 388.106763][T12798] vxfs: WRONG superblock magic 00000000 at 1 [ 388.112808][T12798] vxfs: WRONG superblock magic 00000000 at 8 [ 388.118837][T12798] vxfs: can't find superblock. [ 388.457654][T12815] net_ratelimit: 9 callbacks suppressed [ 388.457670][T12815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.481030][T12815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.490330][T12815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.498613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.525800][T12814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.534101][T12814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.542900][T12814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.551962][T12814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.560368][T12814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.568682][T12814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.881322][ T30] audit: type=1400 audit(1755456727.207:1038): avc: denied { create } for pid=12825 comm="syz.5.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 389.430905][T12840] netlink: 'syz.5.1816': attribute type 6 has an invalid length. [ 389.454432][T12840] netlink: 'syz.5.1816': attribute type 6 has an invalid length. [ 389.465848][T12840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12840 comm=syz.5.1816 [ 389.660073][T12856] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1819'. [ 389.674348][T12856] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1819'. [ 389.894220][T12866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.240193][ T5949] vhci_hcd: vhci_device speed not set [ 390.500371][ T30] audit: type=1400 audit(1755456728.722:1039): avc: denied { node_bind } for pid=12859 comm="syz.0.1821" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 390.619007][ T5922] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 390.823135][ T5922] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.851653][T12877] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1826'. [ 390.913953][ T5922] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.207826][ T5922] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.242534][ T5922] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.270387][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.288371][ T5922] usb 7-1: config 0 descriptor?? [ 391.375575][T12884] cgroup: noprefix used incorrectly [ 391.530749][ T5901] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 391.702737][ T5901] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 392.171297][T12871] vim2m vim2m.0: vidioc_s_fmt queue busy [ 392.198495][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.209538][ T5922] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 392.248210][ T5901] usb 4-1: config 0 has no interface number 0 [ 392.275142][ T5901] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 392.314073][ T5901] usb 4-1: config 0 interface 168 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 392.327708][ T5901] usb 4-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 392.336978][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.347235][ T5901] usb 4-1: config 0 descriptor?? [ 392.370120][ T5901] HFC-S_USB 4-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 392.582220][ T24] usb 4-1: USB disconnect, device number 64 [ 393.226068][T12905] 9pnet_fd: Insufficient options for proto=fd [ 393.378504][ T30] audit: type=1326 audit(1755456731.416:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.0.1835" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24a7f8ebe9 code=0x0 [ 393.549829][ T5901] usb 7-1: reset high-speed USB device number 40 using dummy_hcd [ 395.569759][ T30] audit: type=1400 audit(1755456733.455:1041): avc: denied { bind } for pid=12925 comm="syz.0.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 395.691016][T12935] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1842'. [ 395.705027][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1844'. [ 395.900173][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 396.063776][ T974] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 396.387408][ T5922] usb 7-1: USB disconnect, device number 40 [ 396.445373][ T974] usb 1-1: device descriptor read/64, error -71 [ 396.466673][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 396.799306][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.808811][ T974] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 397.470220][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.480128][ T24] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 397.489206][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.506374][ T24] usb 4-1: config 0 descriptor?? [ 397.582875][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1848'. [ 397.607278][T12951] dvmrp0: entered allmulticast mode [ 397.654624][ T974] usb 1-1: device descriptor read/64, error -71 [ 397.716377][T12959] net_ratelimit: 9 callbacks suppressed [ 397.716391][T12959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.743532][ T30] audit: type=1400 audit(1755456735.504:1042): avc: denied { getopt } for pid=12930 comm="syz.3.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 397.771428][ T974] usb usb1-port1: attempt power cycle [ 397.831372][T12956] netlink: 'syz.6.1850': attribute type 3 has an invalid length. [ 397.840229][T12956] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1850'. [ 397.911416][T12970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.927331][ T30] audit: type=1400 audit(1755456735.672:1043): avc: denied { write } for pid=12969 comm="syz.6.1853" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 397.951469][ T30] audit: type=1400 audit(1755456735.700:1044): avc: denied { unmount } for pid=7056 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 397.958380][T12933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.981984][T12933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.984849][ T5922] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 398.005146][T12933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.013740][T12933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.024723][T12933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.034037][T12933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.058120][ T24] cougar 0003:060B:700A.002C: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.3-1/input0 [ 398.134418][ T974] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 398.156011][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 398.161590][ T974] usb 1-1: device descriptor read/8, error -71 [ 398.170141][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.182451][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.195506][ T5922] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 398.204706][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.213934][ T5922] usb 6-1: config 0 descriptor?? [ 398.409700][T12933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.427666][ T974] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 398.439884][T12933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.467030][ T974] usb 1-1: device descriptor read/8, error -71 [ 398.594354][ T974] usb usb1-port1: unable to enumerate USB device [ 398.728952][ T5922] usbhid 6-1:0.0: can't add hid device: -71 [ 398.738220][ T5949] usb 4-1: USB disconnect, device number 65 [ 398.742661][ T5922] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 398.761052][ T5922] usb 6-1: USB disconnect, device number 64 [ 398.799757][T12983] netlink: 676 bytes leftover after parsing attributes in process `syz.7.1857'. [ 398.811276][T12983] netlink: 676 bytes leftover after parsing attributes in process `syz.7.1857'. [ 399.271798][ T5949] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 399.565996][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1863'. [ 399.586156][T12959] Process accounting resumed [ 399.645315][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1865'. [ 399.693215][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 399.704914][ T5949] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 399.713224][ T5949] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 399.723719][ T5949] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 399.732904][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.740936][ T5949] usb 4-1: Product: syz [ 399.745174][ T5949] usb 4-1: Manufacturer: syz [ 399.749997][ T5949] usb 4-1: SerialNumber: syz [ 399.755651][ T5949] usb 4-1: config 0 descriptor?? [ 399.823923][T13012] bond0: left promiscuous mode [ 399.828742][T13012] bond_slave_1: left promiscuous mode [ 399.847890][T13012] veth0_to_team: left promiscuous mode [ 399.874772][T13012] vxcan3: left promiscuous mode [ 399.914751][T13012] can0: slcan on ttyS3. [ 400.197000][ T5949] usb 4-1: USB disconnect, device number 66 [ 400.601528][T13016] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1867'. [ 400.892221][T13012] can0 (unregistered): slcan off ttyS3. [ 401.145322][T13036] netlink: 'syz.6.1873': attribute type 10 has an invalid length. [ 401.187715][T13036] team0: Device ipvlan1 failed to register rx_handler [ 401.280195][T13043] Invalid source name [ 401.284165][T13043] UBIFS error (pid: 13043): cannot open "/dev/sg0", error -22 [ 401.290118][T13039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.474210][T13049] block device autoloading is deprecated and will be removed. [ 403.615289][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1877'. [ 403.624368][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1877'. [ 403.809460][ T974] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 403.939860][T13026] Process accounting resumed [ 404.035665][ T974] usb 8-1: Using ep0 maxpacket: 16 [ 404.057782][ T974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.176847][ T974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.208456][ T974] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 404.271522][T13069] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 404.278021][T13069] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 404.285662][T13069] vhci_hcd vhci_hcd.0: Device attached [ 404.355485][ T974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.428195][ T974] usb 8-1: config 0 descriptor?? [ 404.445240][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1884'. [ 404.455581][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1884'. [ 404.486232][ T5949] vhci_hcd: vhci_device speed not set [ 404.506067][ T5969] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 404.538077][ T30] audit: type=1400 audit(1755456741.855:1045): avc: denied { ioctl } for pid=13077 comm="syz.7.1885" path="socket:[40808]" dev="sockfs" ino=40808 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 404.568021][ T974] usb 8-1: can't set config #0, error -71 [ 404.587022][ T5949] usb 43-1: new full-speed USB device number 7 using vhci_hcd [ 404.599089][ T974] usb 8-1: USB disconnect, device number 8 [ 404.690461][ T5969] usb 6-1: config 0 has no interfaces? [ 404.736850][ T5969] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 404.757771][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.769169][ T5969] usb 6-1: config 0 descriptor?? [ 404.916754][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1890'. [ 404.917599][ T30] audit: type=1400 audit(1755456742.211:1046): avc: denied { bind } for pid=13091 comm="syz.6.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 404.926542][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1890'. [ 404.953912][ T5922] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 404.983073][T13092] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 405.006528][T13070] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 405.181221][T13097] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 405.192486][T13097] qnx6: wrong signature (magic) in superblock #1. [ 405.198913][T13097] qnx6: unable to read the first superblock [ 405.242121][T13097] openvswitch: netlink: IP tunnel dst address not specified [ 405.301584][T13072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.337871][T13099] netlink: 'syz.6.1891': attribute type 12 has an invalid length. [ 405.345905][T13099] netlink: 'syz.6.1891': attribute type 29 has an invalid length. [ 405.347213][ T36] vhci_hcd: stop threads [ 405.354726][T13099] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1891'. [ 405.358001][ T36] vhci_hcd: release socket [ 405.358048][ T36] vhci_hcd: disconnect device [ 405.368254][T13099] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1891'. [ 405.426713][ T5922] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 405.435799][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.445688][ T5922] usb 4-1: config 0 descriptor?? [ 405.451894][ T5922] cp210x 4-1:0.0: cp210x converter detected [ 405.820991][ T5969] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 405.882076][T13108] Process accounting resumed [ 405.883598][ T5922] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 405.901461][ T5922] usb 4-1: cp210x converter now attached to ttyUSB0 [ 406.003944][ T5969] usb 1-1: config 0 has an invalid interface number: 99 but max is 0 [ 406.012077][ T5969] usb 1-1: config 0 has no interface number 0 [ 406.020085][ T5969] usb 1-1: New USB device found, idVendor=0502, idProduct=16e3, bcdDevice=aa.21 [ 406.029391][ T5969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.037386][ T5969] usb 1-1: Product: syz [ 406.041533][ T5969] usb 1-1: Manufacturer: syz [ 406.046124][ T5969] usb 1-1: SerialNumber: syz [ 406.051348][ T5969] usb 1-1: config 0 descriptor?? [ 406.123498][T13076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.132237][T13076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.142885][ T30] audit: type=1400 audit(1755456743.361:1047): avc: denied { getopt } for pid=13073 comm="syz.3.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 406.163062][ T5855] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 406.175059][ T5969] usb 4-1: USB disconnect, device number 67 [ 406.181999][ T5969] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 406.195795][ T5969] cp210x 4-1:0.0: device disconnected [ 406.275312][ T24] usb 1-1: USB disconnect, device number 60 [ 406.325832][ T5855] usb 8-1: config 104 has an invalid interface number: 44 but max is 0 [ 406.334590][ T5855] usb 8-1: config 104 has no interface number 0 [ 406.340874][ T5855] usb 8-1: config 104 interface 44 altsetting 9 endpoint 0x9 is Bulk; changing to Interrupt [ 406.351172][ T5855] usb 8-1: config 104 interface 44 altsetting 9 endpoint 0x4 has invalid maxpacket 32, setting to 8 [ 406.361985][ T5855] usb 8-1: config 104 interface 44 altsetting 9 endpoint 0x7 is Bulk; changing to Interrupt [ 406.662108][ T5855] usb 8-1: config 104 interface 44 has no altsetting 0 [ 406.669038][ T5855] usb 8-1: New USB device found, idVendor=157e, idProduct=3013, bcdDevice=cd.6a [ 406.678076][ T5855] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.687109][T13111] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 406.694413][T13111] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 406.701834][T13111] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 406.927562][ T5855] usb 8-1: string descriptor 0 read error: -71 [ 406.937056][ T5855] usb 8-1: USB disconnect, device number 9 [ 406.948928][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1898'. [ 407.211214][ T5855] usb 6-1: USB disconnect, device number 65 [ 407.339107][ T5922] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 407.510386][ T974] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 407.520753][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 407.552390][ T5922] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 407.568477][ T5922] usb 1-1: config 0 has no interface number 0 [ 407.581746][ T5922] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 407.658756][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.716639][T13150] 9pnet_fd: Insufficient options for proto=fd [ 407.844113][ T974] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 407.859265][ T974] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 407.869362][ T5922] usb 1-1: config 0 descriptor?? [ 407.889612][ T974] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 407.943578][T13156] comedi comedi0: pcl816: I/O port conflict (0x2f00,16) [ 408.014165][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.023705][ T974] usb 4-1: Product: syz [ 408.023972][ T5922] viperboard 1-1:0.143: version 0.00 found at bus 001 address 061 [ 408.058945][ T974] usb 4-1: Manufacturer: syz [ 408.162531][ T974] usb 4-1: SerialNumber: syz [ 408.184449][ T5922] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 408.195154][ T974] usb 4-1: config 0 descriptor?? [ 408.219772][T13120] comedi comedi0: c6xdigio: I/O port conflict (0xb011,3) [ 408.226970][ T5922] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 408.247938][T13133] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 408.256166][T13120] ================================================================== [ 408.264220][T13120] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 408.272202][T13120] Read of size 8 at addr ffff888078556230 by task syz.0.1899/13120 [ 408.280073][T13120] [ 408.282379][T13120] CPU: 1 UID: 0 PID: 13120 Comm: syz.0.1899 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 408.282401][T13120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.282411][T13120] Call Trace: [ 408.282417][T13120] [ 408.282423][T13120] dump_stack_lvl+0x116/0x1f0 [ 408.282443][T13120] print_report+0xcd/0x630 [ 408.282462][T13120] ? __virt_addr_valid+0x81/0x610 [ 408.282484][T13120] ? __phys_addr+0xe8/0x180 [ 408.282504][T13120] ? sysfs_remove_file_ns+0x63/0x70 [ 408.282527][T13120] kasan_report+0xe0/0x110 [ 408.282544][T13120] ? sysfs_remove_file_ns+0x63/0x70 [ 408.282564][T13120] sysfs_remove_file_ns+0x63/0x70 [ 408.282579][T13120] driver_remove_file+0x4a/0x60 [ 408.282600][T13120] bus_remove_driver+0x224/0x2c0 [ 408.282615][T13120] driver_unregister+0x76/0xb0 [ 408.282634][T13120] comedi_device_detach_locked+0x12f/0xa50 [ 408.282652][T13120] comedi_device_detach+0x67/0xb0 [ 408.282666][T13120] comedi_device_attach+0x43d/0x900 [ 408.282682][T13120] do_devconfig_ioctl+0x1b1/0x710 [ 408.282700][T13120] ? __mutex_lock+0x1c4/0x10b0 [ 408.282716][T13120] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 408.282742][T13120] comedi_unlocked_ioctl+0x165d/0x2f00 [ 408.282767][T13120] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 408.282790][T13120] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 408.282807][T13120] ? do_vfs_ioctl+0x128/0x14f0 [ 408.282828][T13120] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 408.282848][T13120] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 408.282872][T13120] ? rcu_is_watching+0x12/0xc0 [ 408.282891][T13120] ? __fget_files+0x204/0x3c0 [ 408.282908][T13120] ? hook_file_ioctl_common+0x145/0x410 [ 408.282924][T13120] ? selinux_file_ioctl+0x180/0x270 [ 408.282943][T13120] ? selinux_file_ioctl+0xb4/0x270 [ 408.282963][T13120] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 408.282984][T13120] __x64_sys_ioctl+0x18b/0x210 [ 408.283005][T13120] do_syscall_64+0xcd/0x4c0 [ 408.283021][T13120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.283038][T13120] RIP: 0033:0x7f24a7f8ebe9 [ 408.283051][T13120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.283066][T13120] RSP: 002b:00007f24a8ebc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.283080][T13120] RAX: ffffffffffffffda RBX: 00007f24a81b5fa0 RCX: 00007f24a7f8ebe9 [ 408.283090][T13120] RDX: 0000200000000400 RSI: 0000000040946400 RDI: 000000000000000e [ 408.283099][T13120] RBP: 00007f24a8011e19 R08: 0000000000000000 R09: 0000000000000000 [ 408.283108][T13120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.283116][T13120] R13: 00007f24a81b6038 R14: 00007f24a81b5fa0 R15: 00007ffd4476da58 [ 408.283130][T13120] [ 408.283136][T13120] [ 408.551801][T13120] Allocated by task 9868: [ 408.556107][T13120] kasan_save_stack+0x33/0x60 [ 408.560770][T13120] kasan_save_track+0x14/0x30 [ 408.565427][T13120] __kasan_kmalloc+0xaa/0xb0 [ 408.569995][T13120] bus_add_driver+0x92/0x690 [ 408.574564][T13120] driver_register+0x15c/0x4b0 [ 408.579305][T13120] c6xdigio_attach+0xa3/0x4b0 [ 408.583961][T13120] comedi_device_attach+0x3b3/0x900 [ 408.589137][T13120] do_devconfig_ioctl+0x1b1/0x710 [ 408.594144][T13120] comedi_unlocked_ioctl+0x165d/0x2f00 [ 408.599585][T13120] __x64_sys_ioctl+0x18b/0x210 [ 408.604333][T13120] do_syscall_64+0xcd/0x4c0 [ 408.608815][T13120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.614687][T13120] [ 408.616990][T13120] Freed by task 13127: [ 408.621029][T13120] kasan_save_stack+0x33/0x60 [ 408.625685][T13120] kasan_save_track+0x14/0x30 [ 408.630337][T13120] kasan_save_free_info+0x3b/0x60 [ 408.635343][T13120] __kasan_slab_free+0x60/0x70 [ 408.640084][T13120] kfree+0x2b4/0x4d0 [ 408.643960][T13120] kobject_put+0x1e7/0x5a0 [ 408.648352][T13120] bus_remove_driver+0x16e/0x2c0 [ 408.653261][T13120] driver_unregister+0x76/0xb0 [ 408.658001][T13120] comedi_device_detach_locked+0x12f/0xa50 [ 408.663796][T13120] do_devconfig_ioctl+0x555/0x710 [ 408.668803][T13120] comedi_unlocked_ioctl+0x165d/0x2f00 [ 408.674246][T13120] __x64_sys_ioctl+0x18b/0x210 [ 408.678992][T13120] do_syscall_64+0xcd/0x4c0 [ 408.683476][T13120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.689347][T13120] [ 408.691645][T13120] The buggy address belongs to the object at ffff888078556200 [ 408.691645][T13120] which belongs to the cache kmalloc-256 of size 256 [ 408.705674][T13120] The buggy address is located 48 bytes inside of [ 408.705674][T13120] freed 256-byte region [ffff888078556200, ffff888078556300) [ 408.719359][T13120] [ 408.721660][T13120] The buggy address belongs to the physical page: [ 408.728043][T13120] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078556800 pfn:0x78556 [ 408.738079][T13120] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 408.746552][T13120] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 408.755031][T13120] page_type: f5(slab) [ 408.758988][T13120] raw: 00fff00000000240 ffff88801b841b40 ffffea0000d35710 ffffea0000ca7c90 [ 408.767547][T13120] raw: ffff888078556800 0000000000100004 00000000f5000000 0000000000000000 [ 408.776118][T13120] head: 00fff00000000240 ffff88801b841b40 ffffea0000d35710 ffffea0000ca7c90 [ 408.784771][T13120] head: ffff888078556800 0000000000100004 00000000f5000000 0000000000000000 [ 408.793419][T13120] head: 00fff00000000001 ffffea0001e15581 00000000ffffffff 00000000ffffffff [ 408.802066][T13120] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 408.810706][T13120] page dumped because: kasan: bad access detected [ 408.817090][T13120] page_owner tracks the page as allocated [ 408.822777][T13120] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5906, tgid 5906 (kworker/0:4), ts 54551381571, free_ts 54525760905 [ 408.844024][T13120] post_alloc_hook+0x1c0/0x230 [ 408.848778][T13120] get_page_from_freelist+0x132b/0x38e0 [ 408.854300][T13120] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 408.860175][T13120] alloc_pages_mpol+0x1fb/0x550 [ 408.865005][T13120] new_slab+0x247/0x330 [ 408.869145][T13120] ___slab_alloc+0xcf2/0x1740 [ 408.873804][T13120] __slab_alloc.constprop.0+0x56/0xb0 [ 408.879160][T13120] __kvmalloc_node_noprof+0x3b1/0x620 [ 408.884510][T13120] bucket_table_alloc.isra.0+0x83/0x460 [ 408.890037][T13120] rhashtable_rehash_alloc+0x68/0x110 [ 408.895390][T13120] rht_deferred_worker+0x1a8/0x1fa0 [ 408.900566][T13120] process_one_work+0x9cc/0x1b70 [ 408.905484][T13120] worker_thread+0x6c8/0xf10 [ 408.910060][T13120] kthread+0x3c5/0x780 [ 408.914106][T13120] ret_from_fork+0x5d7/0x6f0 [ 408.918676][T13120] ret_from_fork_asm+0x1a/0x30 [ 408.923422][T13120] page last free pid 5840 tgid 5840 stack trace: [ 408.929719][T13120] __free_frozen_pages+0x7d5/0x10f0 [ 408.934905][T13120] qlist_free_all+0x4d/0x120 [ 408.939470][T13120] kasan_quarantine_reduce+0x195/0x1e0 [ 408.944909][T13120] __kasan_slab_alloc+0x69/0x90 [ 408.949741][T13120] __kmalloc_noprof+0x1d4/0x510 [ 408.954569][T13120] fib_create_info+0x53f/0x46b0 [ 408.959403][T13120] fib_table_insert+0x177/0x1c40 [ 408.964318][T13120] fib_magic+0x4d4/0x5c0 [ 408.968544][T13120] fib_add_ifaddr+0x4d2/0x580 [ 408.973201][T13120] fib_netdev_event+0x38a/0x710 [ 408.978033][T13120] notifier_call_chain+0xbc/0x410 [ 408.983041][T13120] call_netdevice_notifiers_info+0xbe/0x140 [ 408.988923][T13120] __dev_notify_flags+0x12c/0x2e0 [ 408.993933][T13120] netif_change_flags+0x108/0x160 [ 408.998938][T13120] do_setlink.constprop.0+0xb53/0x4380 [ 409.004377][T13120] rtnl_newlink+0x1446/0x2000 [ 409.009032][T13120] [ 409.011336][T13120] Memory state around the buggy address: [ 409.016947][T13120] ffff888078556100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 409.024989][T13120] ffff888078556180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 409.033032][T13120] >ffff888078556200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 409.041070][T13120] ^ [ 409.046678][T13120] ffff888078556280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 409.054718][T13120] ffff888078556300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 409.062755][T13120] ================================================================== [ 409.071764][T13133] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 409.100128][T13120] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 409.107334][T13120] CPU: 1 UID: 0 PID: 13120 Comm: syz.0.1899 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 409.119379][T13120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.129411][T13120] Call Trace: [ 409.132671][T13120] [ 409.135580][T13120] dump_stack_lvl+0x3d/0x1f0 [ 409.140155][T13120] vpanic+0x6e8/0x7a0 [ 409.144129][T13120] ? __pfx_vpanic+0x10/0x10 [ 409.148621][T13120] ? __pfx_vprintk_emit+0x10/0x10 [ 409.153632][T13120] ? sysfs_remove_file_ns+0x63/0x70 [ 409.158814][T13120] panic+0xca/0xd0 [ 409.162521][T13120] ? __pfx_panic+0x10/0x10 [ 409.166922][T13120] ? sysfs_remove_file_ns+0x63/0x70 [ 409.172101][T13120] ? preempt_schedule_common+0x44/0xc0 [ 409.177539][T13120] ? preempt_schedule_thunk+0x16/0x30 [ 409.182897][T13120] check_panic_on_warn+0xab/0xb0 [ 409.187813][T13120] end_report+0x107/0x170 [ 409.192123][T13120] kasan_report+0xee/0x110 [ 409.196523][T13120] ? sysfs_remove_file_ns+0x63/0x70 [ 409.201704][T13120] sysfs_remove_file_ns+0x63/0x70 [ 409.206708][T13120] driver_remove_file+0x4a/0x60 [ 409.211542][T13120] bus_remove_driver+0x224/0x2c0 [ 409.216459][T13120] driver_unregister+0x76/0xb0 [ 409.221212][T13120] comedi_device_detach_locked+0x12f/0xa50 [ 409.227005][T13120] comedi_device_detach+0x67/0xb0 [ 409.232038][T13120] comedi_device_attach+0x43d/0x900 [ 409.237220][T13120] do_devconfig_ioctl+0x1b1/0x710 [ 409.242237][T13120] ? __mutex_lock+0x1c4/0x10b0 [ 409.246994][T13120] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 409.252534][T13120] comedi_unlocked_ioctl+0x165d/0x2f00 [ 409.257986][T13120] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 409.263780][T13120] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 409.269653][T13120] ? do_vfs_ioctl+0x128/0x14f0 [ 409.274407][T13120] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 409.279421][T13120] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 409.286260][T13120] ? rcu_is_watching+0x12/0xc0 [ 409.291015][T13120] ? __fget_files+0x204/0x3c0 [ 409.295673][T13120] ? hook_file_ioctl_common+0x145/0x410 [ 409.301201][T13120] ? selinux_file_ioctl+0x180/0x270 [ 409.306383][T13120] ? selinux_file_ioctl+0xb4/0x270 [ 409.311477][T13120] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 409.317268][T13120] __x64_sys_ioctl+0x18b/0x210 [ 409.322018][T13120] do_syscall_64+0xcd/0x4c0 [ 409.326503][T13120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.332376][T13120] RIP: 0033:0x7f24a7f8ebe9 [ 409.336773][T13120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.356363][T13120] RSP: 002b:00007f24a8ebc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.364754][T13120] RAX: ffffffffffffffda RBX: 00007f24a81b5fa0 RCX: 00007f24a7f8ebe9 [ 409.372715][T13120] RDX: 0000200000000400 RSI: 0000000040946400 RDI: 000000000000000e [ 409.380670][T13120] RBP: 00007f24a8011e19 R08: 0000000000000000 R09: 0000000000000000 [ 409.388618][T13120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.396570][T13120] R13: 00007f24a81b6038 R14: 00007f24a81b5fa0 R15: 00007ffd4476da58 [ 409.404527][T13120] [ 409.407731][T13120] Kernel Offset: disabled [ 409.412035][T13120] Rebooting in 86400 seconds..