last executing test programs: 2m10.706260668s ago: executing program 0 (id=1429): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) acct(0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040', @ANYBLOB, @ANYBLOB='\x00']) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents(r5, 0x0, 0x20000) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001240)=""/47, 0x2f}, {&(0x7f0000000080)=""/177, 0xb1}], 0x2}, 0x10002) 2m9.743684201s ago: executing program 0 (id=1433): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_int(r1, 0x0, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x4) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000a00)) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r4, 0x29, 0x1e, 0x0, &(0x7f0000000980)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r5) sendmsg$NFC_CMD_GET_SE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0xd0b2e175b015db11, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) 2m8.42865288s ago: executing program 0 (id=1438): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) (async) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) (async) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f00007dd000/0x3000)=nil, 0x3000) (async, rerun: 64) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) (async, rerun: 64) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) (async) r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, 0x0, 0x0) (async) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) (async) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 2m8.343647651s ago: executing program 0 (id=1439): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[], 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7fffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000045c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x1}}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fstat(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r5, r6, r7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = dup(r9) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@cache_loose}]}}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f00000002c0)={'veth0_vlan\x00', @random='D\x00\x00\x00(E'}) 2m8.098829652s ago: executing program 0 (id=1441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x18, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0xa}, 0x28) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r6, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) 2m7.625742642s ago: executing program 0 (id=1443): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) acct(0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040', @ANYBLOB, @ANYBLOB='\x00']) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents(r5, 0x0, 0x20000) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001240)=""/47, 0x2f}, {&(0x7f0000000080)=""/177, 0xb1}], 0x2}, 0x10002) 2m7.138039546s ago: executing program 32 (id=1443): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) acct(0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040', @ANYBLOB, @ANYBLOB='\x00']) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents(r5, 0x0, 0x20000) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001240)=""/47, 0x2f}, {&(0x7f0000000080)=""/177, 0xb1}], 0x2}, 0x10002) 12.798422421s ago: executing program 5 (id=1810): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = fsopen(&(0x7f0000000780)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) (async) syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109028a00030100000009040000000101ffff0924010000030201020b240800000000822c81fb05240400000c240200000006000000000009040100000102000009040101010102000009050109000000000007250100090000090402000001020000090402010101020000082402010011ca00072401fd00010009058209000210fe00072501820000005c652aef629f85a1bf7c94d238c4d3d2f126b0a112b87c57def739be5e284b3d3e211485fa50a5de873c344921ccdc40371147c55091c32b21121aca26272e6ee0b1c6408ee54775cd59febea3505aace343ee35e2509d5208b511daf7c6f219135a9a"], 0x0) 9.558536598s ago: executing program 5 (id=1824): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') fcntl$setstatus(r2, 0x4, 0x40800) r3 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x1, 0x201, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x792, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r3, 0x567, 0x1000a387, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011db790ec244094060100c9340102030109021200010910204871a5a7005451de53a269b3ce54d6a744d2df26295a0fae96a2647b57cebe7144159e682fded1f6fb79fed98ef567f5e67d519870d0f7520dd82a899c67e3538d53237a6ffef9a8aba4be"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x6, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x2010, 0x4000002, 0x8d54, 0x2, 0x2, 0x1}) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r9, 0x400) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mprotect(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x100000e) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x189}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9.120711149s ago: executing program 1 (id=1827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x4e84, 0xc, 0xa, 0x3, 0x0, 0x0, {0x7a88e3a1b7a92403, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4e50, 0x3, 0x0, 0x1, [{0x284, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x1b4, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x800}, @NFTA_QUEUE_SREG_QNUM={0x8}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xe7}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xe}]}}}, {0x1c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x108, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xf8, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xf1, 0x3, "0039c544cb938e5e88ebe81dc4b45c9528b732d79c5a6cdc922f7702700d62ba9389f7939edb20d2f6cd8c02bb88831b6f0134c272d1baaab2d1d5ee62c70867836089653e58eb3f9d3e4739b9b336bf145e5da3686468e9441da02861895c2c81c1a79d894f3f2fd17c30074bb647df14dfd0b9c36dfd8cc538f6225a7d7717cfd59a9b4ca3dd6d0e7775c563e772ae5c14966dc01e3f87a50080840783735ffc00f7c1bb30923baae7cbf885fc0c9b0ad382d512e9d47ebd52fef029f151daa60f7a7b9d682a0a9dc2b058eeadd1280f4f24fa45056550e8d11260bfdb42118dd9ed3eb1dab89d0b8b2ec8f9"}]}}}]}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_USERDATA={0x78, 0x6, 0x1, 0x0, "4844c54a416fd61f000d51ca462dbc7f9f13d3e9b767d3d6c2d4252d472c8bdef78be00910cb87af81022f466fa36dd98bea3414d476c974b181f8aaa537234c4ae2c94124b81f9a167d4b0327e0f0c1edc9c9fd504d47146ead270533bec381606ea38872ebe10d0466ad075c1ee4b36da56fdb"}]}, {0x44c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0xc0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", ""]}}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x64, 0x1, "5dc4481d2025c8d30c72b609813566f00933dddf8b50f6f4ae0a1a160442cafba875c6f2104cde36998995b2b708cf5b8637c571887ed919023b376697c6fa3dcba50e8e94f0e9c118ddc7cf809c8da56633e66541afeabc109e2b212591c66a"}, @NFTA_DATA_VALUE={0x62, 0x1, "f262b9ff7350e3182b1959c0c2e9c2ead8b08c900d14bae18d334843bc53ba64978163ccc413a1870f2d932b5ed34904d417eb3b307a6d5717196d6bf293fc4c773a090c6abff4356c92bf43ef1733b803d07849573bdb8da1d6a8fc8fe1"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_USERDATA={0x24, 0x6, 0x1, 0x0, "9e542b111a128ac3b5318bf185aafdbd754ab68ba05036819cd406f5f3c2f68a"}, @NFTA_SET_ELEM_KEY={0x240, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe4, 0x1, "8cf915d81c10c44f647355a88a502715ac05d2e3d7fa658a8365ad5faca0b76b75850ac924d48fc7853b75a1df99133cf216205a51a830c83554d3836627875e5148d66950834cd445ed0071896990ee0293713404bed4d4e649940285179ad2e71fc505ab7166a06af25d1c13a8c96509faf03233c059c6c1274b0ff5afa575380ea6da7bb30eac103a84e5c2413f7c5d3deda332ccdc99c47be317f8754c02d58336982494c9bcdb4be445e42a7b737531f8f007f193c11b3d53ae988b5d527b198a41ca53dfda6205bc83ac92f833dcec2cffda8c35d1f59aa4aeef6d1c5a"}, @NFTA_DATA_VALUE={0x96, 0x1, "8615814c9a637bcad054e21ab0aa0bae855a4fa585b0a829f9f0c39a0ccda3934f3b45ea16fbd1e9aaed4b335b5d196fcbb8d6edf518176e0fdda89352b887d3f8177c93f7ae62d90524953cdaf294682a05348fb83cb618f121f8a69a0c31db9db8417aa83e2ea6a1ad8a73fd1356dc129afca54bc5baa78ab5b6d5a0e4eb0e400a3ad653c8df65a3ebc9dcced020c175a9"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "83d56738244e5111e112e14bd4a74d052af350d62f651f56ca6a014c782669e116fe5eb6fcec9294d4c345ba5b83454b4c7a2e6bd966d7ebf76358d4acec34971470814e472b2ca61b4fde0dc067954dff40ff4c5cca5d4ff8c4ee2ebde1232ed00dc3b6212eddf9182b1bffdd2d9bba06560fc61ccb1c23bd15caa3bac7e264c99fc05db1f394135525de6fdcdc1c92138bb34a999f6fcc596b9b131642b4e3076e50f6ea1c7e44a6b07e2d97"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, {0x8d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x30c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x58, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xb5}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x224, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x214, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x1d4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x66, 0x1, "5ef4449374d4560a1fb8bd1f95d337448dc316f78656d10621ce5d8a1dfbec7a10417f7ba99ab80182c5a087f238c43a264559c68ba565751dadf5d7da2912e09e30d2823b4ec30c2aaea88cbef81b90fd55fd13d8cb7ed5dda904b8d1e199a03ea5"}, @NFTA_DATA_VALUE={0x73, 0x1, "a7e6a06c09b1e763d3748baabbf8fa79e5383694aee4060b21dc91427fd506cb380e21ed7545d69bc28186dc5d2802cd40211e63aa8aa981d6141145d26202fc6489efd302640469654325be65c90e41404bd7681558679699d86ebb66554ac63a5bceb5bd8a9d1cbe935d183950c6"}, @NFTA_DATA_VALUE={0xf3, 0x1, "285fa8ceba4c0951fd6a39113d77f9b2360d6d79351e38f6ae63bb3e69c949100914824bccd283fa7aea82b801bcd3518be9b44563ac5ad7b467d0d305301fb5b281bb19f5fc3a46d767b318021a32326b00166e6118afe0c9f0826b831118ae5c1adb3885fc56b31e3a39396367515b20755e5bcd9bace9133abb7083835578f38f2f017fa3443e05729924bcb7c520672f99e03ef2e0b184d5c43395145d4e2cdfb770962aadd998f113a5003714c2499e0c6230a2ae0d9bf9c3e003b1dbb557a99f3a83de37d0f13b58f21e91fb40c71dbc0c8a5eabe4422e5c67ff9c0616b7470cd8b5390fdbe30eb5f1bf786f"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x29}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x3c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x68}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x49}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1b}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY={0xc0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "70d4d0e8a7f53796b7034fc71802f7d762ddd9675c6290708531b0b1d643086ca5b7fd1a1a806460f508d65df3ed27532754dcc91e55e8c9f4ff1752bab884b9f6b4dc43677730878a1411062d755e57d0ebeef6049e216c14ddb3edad0e4d006c520d6de926a919571e02c0a82772f818e61f8ed9ed599d03403e955a39f61e4742554e51f87e54dea74eab1b0db2"}, @NFTA_DATA_VALUE={0x26, 0x1, "50b27f0c8311a4a30690706ae00147a4c4c82a96a0d6735bb4d6f4694defeb144ddb"}]}, @NFTA_SET_ELEM_KEY_END={0x324, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x62, 0x1, "7c7eeb5667587c5069f84c065a989708ab028efdcc51570b1055adaa5316239a19469f60b9f53a2cb7b268a0e1cdd6e498e5606383ae8ac3e8f727ba6424f0e64bf8fc266a631895a2ea0f3213c31834bed849922d30fdcd9601d0707f78"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x8a, 0x1, "246be861dc10910045490e07b89b81f3019cc317e6c809516f1b8e7e04ac4d4da954f0eb8b905ffeb9895ffccd399eb1550f6266799c09aa9dcb377aea9a2f266102d593a9381c4dbc4dda343f360571b6820e6ba744696bf023693771ff640d92ff83fd0208e2535e1a500b143eb49aab0055c1cb9820a5dabbc735a9a002eecd2a5883c6dd"}, @NFTA_DATA_VALUE={0x1d, 0x1, "00344ec32884b17f741ec218496603feb10e395df9b5a70ae4"}, @NFTA_DATA_VALUE={0xe0, 0x1, "d186dc4f0b74190e3b21d6b1da80e3cf4accf067f23195ee088715907405f64c35451afce78e59bbfed01d2e42b53cb688563f41908447dafa0bcc37d26d0cb90daa9a1014966bd9845ac6dd6acf909f2cb720417fd4c6f4aaf25ffb8135e256cd145e7dbf871fa3ac49ec02f0a492a0dab224ec93e35359c41aaaec9fd42395cf3f26fcef40b9ef555678823a99a655c3adbbd929ab762038f3f1e47cd389fe6a2d1d203afe419fc7cb3651c4429b553d983f202b093257cae190313e25ad1b3344e448ff6103218e0477ed4eabc4d423a2c9c96646be3ae4bbb59a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_KEY_END={0x18c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x2b, 0x1, "738f6610ccb38aef8d0dd5c821333d01babcf7386a9b0f74e02d6fd38628d12278036f819cdea0"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "e83b8ff43d32253d42d70d711f70786d89efdfb44a6c400b97c4faea8f3889146d1fb4a444a5e7a37cd75c36970d50a20ed8193322c7cc4a3d92eae2a05ab32b1fdf9231f15351efad1e6376a6d80ac1a25c407b1e75a824b380c56038de0390bbd258b92d55bbf8aa2199eecc89e4118f357cee68bb28fb8472394a073288dc709a6b69a3c7dec30906f8489e42a0adfc3e2039cfeec2efdae1887e62d442985a463153a3f2ad380a5649108998df831c706a553a7dbe7831f2568a52a478c6b1ddf6721140c9bc5dc24145"}, @NFTA_DATA_VALUE={0x7, 0x1, "c29adb"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x38, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x3c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x134, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xf7, 0x1, "6317c350c507877f8d29a6ab907c9c4978a67ac1ed12833908f395b4ac66851a66e7ddfb9923a46fca5aec48100964a9f6a313cd0deebeced747c7d352026a94bfc0202aaa27b00709382357844e5763b85c96ad6fc6e903de12d26e069727d0e0e50f7ba84f6cf7f7982b71e33c2a356cfc876b2070c4a42d73121af91b98fbe218cf8205e95d703d33fc37a5de7d9874ed1160e1a169ca2321d5cb2a6693024842b1ce2c3b1e100a055e526a589a5001dec6244729780d6fc3a2ea4b6f0679b78fd7bffa3a19b498e8857e5397c00f89bab7bd4e1280d767a02ca41290f479bdd64a8c727e37389e12715a2018096a820aed"}]}, @NFTA_SET_ELEM_USERDATA={0xaf, 0x6, 0x1, 0x0, "f743d123e06d9bb386d4be1d96978c2bf79b20fe25b91f914026fd28b2dc2770f0b47b4c09624d19a640d9f5019eb74d9b330fff77771277878c6098c6df5f815a119731d313ae39779286ac9b51cecc9aa1ac356cbd5f4be4f69fc9f91304e003b12ca651b6dcdfc36adbb1161d28b81721c0af640180e6fd8ae9b670c91ec76e8ecead33ae64619382046ee9d0d45c3f38711ba123d344a0c4874a2cdfc2768e332989f2f802818fca37"}, @NFTA_SET_ELEM_USERDATA={0x9d, 0x6, 0x1, 0x0, "5ed5a759ef42163af968e77591402bfc9709b0e91e5ec9a47349c31bf07b03659a21c7065a0c9ec4c2c042808e34cad8701f2fe060eeae9a9137529e23648eaf650813ff1628e5aa9c8032ffda346df33218ad601fbf6e19ed90564a380551ad07c1a74bb37735f87f01c4ddbd2dca08e84dcc941854fc67bc9209ca828cb1257658bac63b40ac5eb0ce78c47f29aacc9bee212146681e7f27"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_SET_ELEM_USERDATA={0x74, 0x6, 0x1, 0x0, "6f1a63d2c2138e05c3f8bc8267d36384c96fa4a4807c4c2ad32112a4ef63fd72cf47cbc98e3e3288a88d5f9ba38a6d5544a2b9da282c188572c001bb5320615a4c36bd22d7c6d4f7323ccbcefaf5a7cdc06d846411cef2ec851f9f68c96b93a949f635bff7639dbc44e523023eaf0e32"}, @NFTA_SET_ELEM_DATA={0xa4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6d, 0x1, "94911b0a8f236ed1e65bdd150c13ff47b3f0490c43690e02f6bc7a256cb1634c5e308fc1025878beb20d1dc88af891f8a8bae22c5246f6b4a1de856932cebdf411dfd2a748387c89b1334195a80bca6597986745ed90e9916886433055eed991a2048ae32ad4d3ce5d"}, @NFTA_DATA_VALUE={0x2f, 0x1, "e24da34638ba78e4fdc23fd3e59832154fa6db1ce349df8e440dc41169eb46caeea75289a7ee656260d007"}]}]}, {0x3ae8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x144c, 0xb, 0x0, 0x1, [{0x142c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x141c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RANGE_FROM_DATA={0x1408, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd8, 0x1, "726567c2fb983d3cfc7f2c334744bf671eeed619234d2046650900c999c4a25bb21fc75c390d9d42f67d9d1228ddbab6303a5544851be8d6c48eac07f1592fd67ff1b39fdaed3f57331151cd8f9c856a6c5995665767a001a925438d405e9b166fc5952f65c7a4fafe3071ecabc54ccc23bc990da6eb2c9df273e4b253a9d4e81477fb2d5ff9c083657991c5660b21fbe3126bc2e533f64dba6f1e6514642fc21907528b652efd06fadb5262cd1e9a57fd16ba994e8c96f30500dce7e56424adc4d35ad2468159bf956c4a2a4a6295012822c6ba"}, @NFTA_DATA_VALUE={0xb3, 0x1, "d7a8e00a6b38ee27c3315d3b53216508f5a1575e91be1704340000a8374deeffde761e16285970c79d4a7e3601217102ea16755fe06a78f3e2b4ecceb94fe0ebe229a6168b8b30ad2c08a1cbda80e109946e1edd675b36da4ce0e1abce9efe499efe6c751378d808002a3cb757b4a5bf8454d4b1c7b43a90bfa58c600cdebffd7ce576d992bb2964bd32239b4cc304e8d451bfd1f2f3703d30f599f959c0048e54e0bd92212ae22fd0995559dc76a9"}, @NFTA_DATA_VALUE={0x6a, 0x1, "4f0e80295f7abd29504568d10a8418183fc46d0bfcba8deed8790cb51419b543b42b4cd61080760dcfad4314cfeb7e51dbeda52285ffe524fd39f390c6794eea67de1ac13364e986e3a3c0411df9a72243dd3aa3f19cf9f39a332b27bca5a3493e1d8659d880"}, @NFTA_DATA_VALUE={0xec, 0x1, "83e56422a227034bfeeea8fac0f4dd6541d6ef1dcee83a25d1d7a9b4196f3590baa2ab05777f0e29da4d2003287b2a1c1e1b1a8589a3946f7a39a1eb7b5703387e73390069966b14102a3a313cd8312e450d6212180195827333a0a7f3cc57b01ac59b863919a153ba3ec99c095eeb31c3293640b1a9ff7de18044e1b2cc04b26e16612da41338996903363c503ea2a07dbd78495264377455b53e30a004563dce4ce31fe540c120044cb9155d61963561a60983859859d462645b8f98fdbc99f573b5ccb37ac07c3bd825700c001f30bf94374b759887b3c9702b8217701da5e36f4d36ffded947"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "698e0c0f231d8d575d3242e975597946ed7eb5bd4b366790f808d86e2bf7a9a2d22e6eb0ce6b02495d27441222bdb8e0991ce59252a47f0d945135d385d53bfa70db2eb63f1b6f645ebc124bceaf701fca0251bbda93973a2355003833cea1f6983b35d109a8237e5b244490e9776139a5c9f5a7fed88d398040cb6cd9d6e327ff434d0aa48fd0b883172074405b45102c2e6bfe5af4b42baaee7294b4ad77de0887dd6da89fddf0340c197fae"}]}]}}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0xe9, 0x6, 0x1, 0x0, "8c919a3a0ad4b738717f6bb1573f61dfa128f2996ee2081294b34f5f41c9afa04d700628a4f743d8704a19655c1621a65c84c80ca187458976a4f4008e67605da90cfd0b868d45ca901b528ae5b24273e5e7baed95db329f3fd0f6d309a688dd23332dc9b5ddf23d58c2e5297297107bb4ae6b2be7a32a97254c64c8caf8d57ceb8ed15a34fa4b464642782c3242447d92aa6b590deb127d93da0be83b171407f12957e54c9dab9fd8a103a8f8948e8eb92a006491339b74b21de89c7037f294c0ac4a4ca90f5047b6c9646172976a261220a627c384ac8fdfc9a63811059927e73e9cb64a"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x39, 0x6, 0x1, 0x0, "af08b775795369aa99e4769d42858b6e9cae0330a6699012164f36ffb7d546ced60f036505d69ff9beab091b2e41880c9f551493a2"}, @NFTA_SET_ELEM_EXPRESSIONS={0x190, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x5c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x5ae}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6ec}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x738a}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xde}]}}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_KEY_END={0x2094, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x71, 0x1, "2ad0ad95e66333cada878f6b59126615340ccc3159b66a5fe14cf5a58ef0ce34fa3004c3870524327ae15c4b32d11bafd27d1111819f7db133debd5047c08c151964fa58897e68ce7ad5162464a279e875fc777d5134a3002e21fa62273c234db5a1984afa1c5a7083ffcc0d83"}, @NFTA_DATA_VALUE={0x1004, 0x1, "c046287132f57f8404198a53b0a273b1d201274e094d1457531eb6df98ce4677127eb7e8e6e19c8604006e88fc21d92204a1ed9b8b2b669033b7275efbf369a26c37da7b0d5920ebe3214806027e089f62b3bd07b85b18bfaf954aaafd05c534de73ffffa317598502cf123dafd254852acdee205c7987434cda92894e7c4d0187662d75bb17c5601369912bb07412e8a4c70ab453c6426e1f9b9bf3afae990004011e039edb0a4d734e84be23e4584259f4fe7646bc54f4ba2ea678a7ef6987f9298c54bf560ae64ff9f739ff685749c7ded7d123680e2ad58068d7fe5ee1445faa0a947c94335ac264b1a62f62cc9424c59790e4db0778c98925eb38fe820ddca4a977dd15f2c52b1a835320d9ec244a2284b3af79e35b5aff0f9f459e91512d55fee01c219dc4ebeb7fd9d5e758eb616c6d00e7dec13b02a7a4eebd679e1a1f3e0fe0253df7ffebcfc0bc21df61f854a434d58903df03ad5d528e97266256a73d452ebc85e56819919650f590b99ee48d077250e8843a0cfb45ecd4fe8074ae92b196566b20d1676447fb5c30c567806c1a7626ebf9d536dffe6902f3cc3824497fe3e2a648e64a761fc95280c37e877777dba9b3ef10c36ec327c3ee755512d1086cfc67601721287d6421d9fd48060401afd4c28f95d3a7a1812bcbe7f2e684e4574c67087b408c23d602ce0c762bc3ddd56f03239fb4d4cbc7db3b2ffdeddb30f77231d0ac07ba5859e568024694e2c8dcf2bf723df8fd3633269debfda6e99f36e68d3634a21a8c25b8a998e9daabbecc5af137c2298e65674fd15fd53d96106e2e09d923633ecbf1a35effe8143c988064240a0583db08993c566c213e7c1566ca0888e41c37b102300ad83457cf8c4f7bd0dc3987cf702e1f3b07cb1c9c76ee54ec6e893a7a83410ead2085169b2e3cc2bcfb54888fc243efc5d2319f5ae828cf47d7ddf77fe501e70a932febe150383efb65f87b94201ccf17b5a1f286771bf20339f2e0d5ac72f91874a02201f165e683aaadf2b4b2cbe16fdb84af337abdc69a22a2ff65d351f53eb38cbaf039371e8ed62717dc80d3849ccf107849c67cb0795097ee3893eeac347d89f2ec5276b4c7258bdaad32ff494eeffc6f21378832fca5c237ef36359b7de7b2dc7dbbc39ff4b70cb40bf28a839aedf894e4403a608e4bf927db3594ca1c65849bd426f4493581a3ad882903f0266bdc8dbdb4759556ea361f072f2873297bb643c330c5e0ae64e2e32cd6f6a1c25c058a55b0a8701995c82507a94515782769388a9c5ecd15287030df6841a8acc840c3257c547ab9bbe723484be42250be26d6d32f712baf4a853b490d7c2849603a6d31100dbd24647f8912e515ad88b5992ffaf9c703773d45ed25c280717a8c2232d39848d00755121139b00efca6d65bf0caaaa0a9c06f5981fdced545c276d7d539d41bdd6774209e36a6d353471a5688f0247030a08a1405b25f57dd2189905afb584edd14df47b3571254d94697f60071d00c4ac192796ad87162008370ce37c0d5082aa870f899d8e1f4598f1118bb72baaf3e842effcef2a210d0fa1a535fcccc99261ae2895e05e20f6cf36c00bf5699a7350893e333553a55c65e27219fe3fa165216e207fd6f518f9f3aac36b148220b9aa8dbbf568a6ff917744e64ff48f8cb67a7398baefbd10c9fa894dc7d5ba6e07985bf3fc22ce2883b8e72fda3ec3afa7ab39367bcec4c3e87007eb80af9808cde9a5dec4ffa400451b454d236a6e94db4720078c07167d02e91ffa3be61105b04cc5bdda1d37d9fd4ced875b6d9f27ae8809e66d866ffb5dfd8f162b826721217435ff0b5bf5275ea08e90dddff0c177369926beab125586f52c1ac914c603fd288c2d1fc6523f3c3b4cb472a7a2e97a76d6391df3d2a67a0b40f2abe70f8f39600cf87d51aab659028a0896282ef6a298f1b1c3862e14f444e830c3fb14280614ba5bc3690052b5d5cefdc21f7decca3dbcacbd36a8bd6d3ae10049e5ba79a0b0a239713effad42a8d33401bf2828399e6a1039a8c1f3a157df9e939263d4201e94ae613d8fec2320b85229a31d13b3764bbde46f25555b1b645b6c0d3b11aa8df95779393e2ee00e306080ebaa2f1a5746382f3f93f567d791e8d5dd304b663dce2315728b20f7cf6d1c3c83ab58b15c0b37f26ecb89ff092f5ae49e54a1d293305d9b0e6e327ff40135e94c9332f377bc3e9039bd500fea0a21908d7c60f8fb0af7f90ac3296d2fc74f4802a943046279ad30aac741f99990fbc11d41bd75716c7e58fad126f29178be464928cd65a0b216dbd7bedfeadab7e287a87f21f0ab4a321ce97b9be71cedede08980020954093581448e5de72f552f04df103288e355534a344cd8c5a447c48c57363d1427b02bc6ff4e353643ba6eeb2d5a1c107c8e670f53c9cef342fd058b505c0635ce372a8ebf6e76bb59f0c447834d80744cb47ef3481481bb3d9d7e59abbea03318be693e6e4228228ac1ab75030c53c998133b90d62f257cbcbdd1dd6569e6b5d9c67912c283452b811d34e1f6f1b2e10d4ff76ab0874f32e6290989a83e0c4d0bd9ac2c5fd246a277df81d58145512ca956712e3439f26b55273d8bff1257a8290286ff1f77c6027d29f3255908598fca2053ba7884c48ee720fc595034e0458f57d9f4b8e63f2471b7a440ad6a5a419bafcd72c10f1d80696b85c28869e65899c1f8dd2f3f02910327a702a69d8d2a857118fbd373ba8923d3c7d6b7b89aa95f1c73471cdab6e40696e3bb8bd67fad21203d7d71b5a737c05c50871a240cb5023e41ed2d78ce13eb83c100af88621af019fa839f02145c7a57b2d3c56007ce20f961a5abf581bcac4dd76404155f50d5522f982e1b94c105bed35a9d3b45f233b84cd462c9c07d4c4b4174414989f54a8827b6a2bea675e3d336d80f0ab5392ccb24568005e26a97318506c4b9d89a466342d56a8eb244e2d8506d8fb06fa872d185b0b239a1c9fd3e0d1abc4a7885764c18098a307f857f995686d0b1c9a58b0212c285f283cdbe32058abdf2078375ecf2e862fb562325a790e0d3e06dd1fdda3ff720111ef79a9b0c033ef962d16381caf3a0589c3258527fa9abe991ffa432b1c3c3256d542a2f94d518753e0c15cd756e2843cd586cb4ed3ce4593c106f47fc153c419071ffb2e3f8f63c14a7ff344b3b68c96fdaf1c9644a90a181c61435ab4f11fcf933b1a96c81f3f7e8eb238433a5e274bb25f460ca2eaa4129871101192ee66341e88b64a9f0b4b94bc2709ab7a0ae21cd137a51d6a1d0478f583c7516e715296a0066a81aba159f8ef1edabbe7c6b01c11ff8058b30c574fcf148bf91b11782b14d168e5d6379e389f7cbae725bdfd7a66e87df0b6274a300524bef6eda9cdf5bf0a2a48b4d7893a2d6e5726cd359d53569e6b7cbadc8ca4f135d120952caa9adde02a77d2236351d17287ef86431228c642ec816fb2586a18be3fa70da7b666b195c5b87d8b205796c1ff7fd3a4887b444751688e51a08babd63ffc23e4457684f0000f59aa74e9ad7b03cbacd2449c209ed75756c62ec94ae79e8117a6a6b5a7302a8dc1ad82ddc07372d218eb2cc762d177970144a8ea1480796db5080a958b1cce81c560519fe5aa75e8e8ad48dab0234dbfbb424b16e4df0c277e5296c45a8973b62762a32527f7236f8b5f93975e468297bd01a2d5dbfeb5f415a61ecce7d6ddf799f4614d5d2437847cfccbc53b70be9e8faaecfd5bda01882d525a054f2a9c9534cac0e985ada73a6019943454fc3d98c9a582dccdf9219d8ece93c4fccab7bce9067a15485869fe763d18cfe80b66314fcd295dd8ff8ae2faaadd2fc89923bd2d335ae0c17d7fbf3fb1aeafbdab2b2e2689a7bab047e32ca732ccc4572868aa146e7119c209a66e83529aa8a8de6a0e1d97b051098a1e023daee33415c94e988a455c5cdf83034ebb1d306adb2c5724288047a1d7039f8f0f4a42020904cac5e9889789ac7157cf4f3945df1c576aa1500bf312a6d92a363badc750f9ab528d4f1f049596d824bfdd0be894737720b860327ac0866a51d760aa2f26d278dc4bb6fd8030881342ef533df2d12c2de380e13e07f9bf6d36c973e230e94df2bb5ea9da3fa82564867b92106e2b3df54706b23942b56d4cff16abb2b0353bbe7ee83a229d72fba8b508643feaa4c47d236ac840554929d3518410ef692ca051f03d69ed05c8da93e6b0a0f8254317468ad9e577645f0580746d690da66eb9e8f3e005afc3d529086db06145862363c2a42286a013624e942a3b9a2dec7788d3563c3180e982c39179a5454fd7a977024bbe4be2b0751a1e2a10f57283e200a1e4d5b048d7de63d783723397c5874a5b6c59168914425fec6d7ab494b0c9cf1c67c34cc4f5a18ea9a4d608804ae7efd003a8537ee84e7c355a3c6684c18fc49d05e266e20f3b34f93d69c38d7191f74a10dd8f5fe894b10180f7f75ed37eedfaafa8e032deeca434551f76bcbce10d9bb277a0f4f12388318b05cd29d4c9b5b0ab6f69565e6aac90bb8a763f4a0e7bbd553ceadcf77970b09ccbae830bd17ba174bd5e2a8db36e6058cd81dbb5a49d5fef7fe755eb60a3db1b1402fafe746eb3dbbfa4a561e90dadbad586fd41fa6bf781bc86888c91cf4aa5fc7ef40982ee1a7f8d2900b55cbbb892a178b2fdd583ef05a60a5bdec2814e73744f237e9f439ac078f2a5c371f399de6ac1a422408d2bcf0b5e5803882547032aa5005b1cafb20580c888a2d74c065bf0cc4e3d58a73a2b855bfc15fe2badace185ecb45fb13e698deeb0dac7d18083155997ee9dbb1cc22e62ae84e73fd3884cb405907b95c210f96627e8950608d1d0313c3eefd5589cffb4d44584c5ce6b91cc3d0db58d5f280196a48a88fcacf16911b6bd4841d6690ca1e316e5d5fe671c34a5661d8757080c3a6a0d808cb2a0f008a15437ff5e2255fc65244d20a42accafb1c5039658bd995a26fd11c52a57ae2571263b69b6ba8ef8e75bce350cc4668736327db9e9dfbbde24fa87398452093b6999ce00128548ce7f49df300c3da391e1df9e26742c6e941024b95568fe146d756795e6cd74a5ef5604c9f1670647776813dc29810cd5ba212d2c9093f864702b24bedf54d58b20dbebf16b7641f61eb9c6c52cfe765d05457ed990a553f2315c952c62fcfdb4709e25f5e6fc917988dd79ee3ea0f172763a8de8bfc245bce4798ddad6021c27837b6a488274838564e2060e0b3c1be8c4a975d42e6aa474111625fc8690087c7f7ef307bd56e958edd24582e646b8d0efb11f4ade13672baaa6365d689835986c23ffbe810daa974fdc1f4232af070288da52c88176c3a0886b93d29e48cf5d8d4c4a8543512f25d8fa3bdcec152524e45652075ef1973aa5d245ae3a0f26c998d69d6b38d650018c473b146f74d0e4725c32b74089dabe7f46867dfd16f413c37f71c794717c010f6be9d649c18c194a503f1277ac3c8d45b9637ed3aa3d935d47b3fc77358f775979ae12d95fe2fe8cd638a6aafe18b9a91c8f49b531a481b8e407ff27041aa315affbd8c72275f0593410198ec467531eab1e071a0dab4fca7ac2b330c3edebbc40963c8cdb83e4af2652b64edd6550d4a13bae4837c177e5d9a8a181da4c2960c676d63bef1ef72d5a45c587406c43efdb70019ea8741a7e74985e1e67601b303a21cc2078919cbf54b805c753dddcd48dcbf49aceafbbd6cd5f1896ec0790de95212032c74a650218d4463234ba41db96427cb25521c707"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_ELEM_KEY_END={0x31c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x95, 0x1, "36f1eb20a27336a6538c034f8500a51f741e3b12c4c478361c68b3661cb858cfec81c93fcbe1f247ae255fa7b07dd5b568b3e8a1a99b88bab5bde19f3891dc9d5c68261887187d45e1a63cc765465efe0280950cdebb3188478826e26671f8a7524628285d16e0ff75916167a4c09a18be2d8fd384099a6767acbf94c7bd64b23847d4cc7d86f6f2d9d338a48f96534f2c"}, @NFTA_DATA_VALUE={0x6d, 0x1, "c9aea28f1beb540c5c572164234495bd15f7ce3d9f15172a9c3a794ad942bedb9bd731b6b773654ca18d823b6018a70492a7b13b44cae4f51f919c1c8da713201828c36b25107827451a3b6df1b872166958653bdc88833365d837c8701635c223b1ea799452a69c5f"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7fffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xa4, 0x1, "81d7c5f2d8d47360f37af841c3bc45497ca098e41c9850404dacc464da3d6177e22d81cfbafb4928fec4a66cdef0296bd7a03e70e4bc4edee66617bf8d1a0e4fdf842bfaa1d351214f3b69e1eb17de9bade4f989e30ef32d9c4c0eed2367cf65c1de1edbcd96d03271242abaa6d1095f7c838322b6d13885a484118664819b8922f294e28ad1f7d79cdc3c382c2c15a545a300b7bd8099356b2006b4f517d0b1"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}]}], {0x14}}, 0x4eac}}, 0x20000800) syz_open_dev$ptys(0xc, 0x3, 0x0) 9.054589497s ago: executing program 1 (id=1828): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2279, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f000001b700)=""/102392, 0x18ff8) msgrcv(0x0, 0x0, 0x0, 0x2, 0x5800) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x2000000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffffffffffee0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="16862f1aa99fb1e7baa236fe37f1bb2009b22a855bdc4dfc19b103f8c1c94e0a45771ab7a20251", @ANYBLOB="2a4ae66a1d6223adff2359912ba4db5f6ba2b36c95ee41ee4ce721a480fbb658323a8363e9fc61d8a835408b98a0c96373949c988ecf0676bb776057119abcd5ff55a5002461c18fbbde1e387fda3eed392f1c767a12fafb0b5e0cee82ad9d2b372f70dbbfd5c9df98d7bec8e60915342b6e79366a8fbc8dce"], 0xf8}}, 0x84) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000380)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r6, &(0x7f0000000180)='./file0/file0\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r8, @ANYBLOB="0a0006000802110000000000060066008e880000200033"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8.68755117s ago: executing program 4 (id=1830): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000000)={0x178, 0x1411, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0xfffffffffffffd3b, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}, {{0x6, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'tunl0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}, {{0x0, 0x2, 'syz1\x00'}, {0x0, 0x41, 'siw\x00'}, {0x0, 0x33, 'veth0_vlan\x00'}}, {{0x0, 0x2, 'syz0\x00'}, {0x0, 0x41, 'siw\x00'}, {0x0, 0x33, 'rose0\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x48845}, 0x48000) 8.597343414s ago: executing program 4 (id=1831): keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x20, 0x13, 0x331, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x24604, 0x46001}}, 0x20}}, 0x20040850) mount$cgroup2(0x0, 0x0, &(0x7f0000000080), 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB='pids_localevents']) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) lchown(&(0x7f0000000440)='./file0\x00', r0, r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000000206010800000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe80000000000000004a0e00000000aa1800148014000240fc000000000000000000000000000000060004404e1f000005fa0b76cc6b8dc46b0d2134"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000005800)={0x0, 0x0, 0x0}, 0x804) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1100}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x3) syz_pidfd_open(0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000480), 0x0) sendmmsg$alg(r5, &(0x7f000001ea00)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001c00)="5985d20392a438a11875d0e83101f02653a3", 0x12}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x400c4}], 0x1, 0x804) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x100) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc0bc5351, &(0x7f0000000300)={0xf, 0x1, 'client1\x00', 0x80000004, "48474196d75985e1", "b3dd5b714cee2c979551b28f37a4819119dc09b431e422253d95f73c29e7ca5f", 0x5, 0x5}) 7.975293593s ago: executing program 1 (id=1833): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x20, 0x8, 0x0, 0x0, 0x80000001}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x80000) r9 = eventfd(0xfffffff3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000000c0)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000001c0)={0x10000014}) r10 = getpid() getpgid(r10) kcmp$KCMP_EPOLL_TFD(r10, r10, 0x7, r7, &(0x7f0000000180)={r8, r7, 0x6}) 7.654607389s ago: executing program 4 (id=1835): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b3"], 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$hidraw(&(0x7f0000000600), 0x0, 0x202) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x8800) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r4, 0x0) shutdown(r4, 0x2) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES16=0x0], 0xd0}, 0x1, 0x0, 0x0, 0x8081}, 0xc243daee1b27c24c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0xfffffffc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x0, 0xffe0}, {0x2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4840) socket$packet(0x11, 0x2, 0x300) 6.901446886s ago: executing program 2 (id=1840): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xfffffffb}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008800) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000850}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async, rerun: 64) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) (rerun: 64) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r8, &(0x7f0000000180)="282fa8c2", 0x4, 0x5, 0x0, 0x0, r8}]) (async) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYRES32=0x0, @ANYRESDEC=r6, @ANYRES32=r8], 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) 6.681990513s ago: executing program 3 (id=1841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x0, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "b14c"}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1}}}, {{@ipv6={@private0, @local, [0xff000000, 0xff, 0xff, 0xffffff00], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'veth0_to_bridge\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x87, 0x8, 0x0, 0xc}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv6=@mcast2, @ipv4=@empty, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@remote, 0x2}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x3, 0x9, 0xff, 0xbda, 0x4, 0xff, 0xfffc, 0x0, 0x9d55, 0x2, 0x4, 0x7ff, 0x0, 0xc877, 0x0, 0xae], 0x7}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@ipcomp={{0x30}, {[0x4d6, 0x4d5]}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x3) r2 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000100)=0x21) 6.578749761s ago: executing program 3 (id=1842): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002c00090027bd7000000000000400000008001a8004000480bf3b190f2221e2690e519c22b6613958157202b085d545cd35eac8e671367b6b87c06a4f1dad59"], 0x1c}, 0x1, 0x0, 0x0, 0x20042804}, 0x24000094) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x41, 0x18) bind$packet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x3fffffffffffcde, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r2], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7}, 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES64], 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb']}) r7 = getpid() syz_pidfd_open(r7, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000006c0)=ANY=[@ANYBLOB="060d00000000000007500000000112050000030000000000000004000000000000000d00000000000000800000000000000001040000000000000200004000000000070000000000000081000000000000000600000000000000c204000000000103000000c9100000000000000000000000000000000100"], 0x78) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000300)=""/119, 0x77}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/158, 0x9e}], 0x4, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x0, 0x91) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) syz_open_procfs(r7, &(0x7f00000003c0)='net/softnet_stat\x00') 6.468980574s ago: executing program 5 (id=1843): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfe3b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c0, 0x11e0, 0xc8, 0x8, 0x4000000, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1420) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x201, 0x5}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x9, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0x8, 0x8, 0x6a, 0x2, 0x4, "00200004"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x400, 0x6, {0x4}, 0x1}, {0xffffffff, 0x39, {0x4}, 0x80ffd}]}, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x3, 0x79, &(0x7f0000000340)=""/121}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r8, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 6.136404466s ago: executing program 2 (id=1844): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) 5.998638818s ago: executing program 2 (id=1845): mkdir(&(0x7f0000000000)='./file0\x00', 0x4a) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x36b78000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) 5.396511843s ago: executing program 3 (id=1846): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) syz_open_dev$MSR(&(0x7f0000000100), 0x8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 5.382654101s ago: executing program 5 (id=1847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200005}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001040)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x94}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 5.114935151s ago: executing program 1 (id=1848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) 4.949193483s ago: executing program 3 (id=1849): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_pressure(r9, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) (async) r11 = openat$cgroup_procs(r9, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000005c0), 0x12) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.877173354s ago: executing program 3 (id=1850): socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000440)='4', 0x1}, {0x0}], 0x2) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xf) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 4.826620097s ago: executing program 2 (id=1851): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x102, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000700)={0x279, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffe}, 0x81010000, 0x8, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x181, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\x06\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0@\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$\\_NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\xb4\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\xf3\xa6\x1d\x958\x83`z\x15\x0et\xc39\xb8\xbfy`\x9c\xb0\x9d\xb7\xf8*\xad\x05\xdf+\xe8\x95?\x16L\xdcE\xd4\xc8\xc8\x12\xa9b\xe0\r\x9a\x1c\xd1f\xe7\x04\xe9s\'\x05\xd3t\xee\xf9\xa0rk\x1apxG^\xb8|K\x83{\xefox\xcfv\xfbk\\\xcb\xae\x86\"\xb5'}}, 0x279) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @tail_call, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x80000001}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a00", @ANYRES32=0x0, @ANYRES64], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffee8}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) 4.783270216s ago: executing program 5 (id=1852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000000580)=""/102392, 0x18ff8) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) (async) fcntl$setlease(r1, 0x400, 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa) ioctl$sock_ifreq(r2, 0x8929, &(0x7f0000000280)={'bond0\x00', @ifru_flags=0x8000}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff030406090221072501"], 0x0) 4.782276811s ago: executing program 1 (id=1853): r0 = syz_open_procfs(0x0, &(0x7f0000002480)='net/raw6\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}]) fsmount(0xffffffffffffffff, 0x0, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000024c0), 0xffffffffffffa19a, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r3, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x4}, {&(0x7f0000000200)="f697", 0x2}], 0x2, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x64}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x32, 0x0, 0x2}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "9a96944a5e6a8e8b9a61fd102c2bf04c688d7ddf41d61d869cda17d692990b6d05c7b559aeaf3180ba4095a5786bfd130e6118a2cd9b95d40448502d3b4cf5e9569c00998dcdb4e976f6368ea17bc56c463b9a909c8da23befb494e91c96066d8ff0cfbee66853696640d1d9c40e076276d68a1d5c3ab1941417d0b07c649e54ea9d78e5f06b072de9912b7e548c35e3f20180b3d71cc783252131b984e559126f72fc35137bc368571509b819bdf8645581bac4233ed104e2381e0760e479a9f0821e3acfa31d8ef625fcdabb9515e71a88fcaee1c18e39cca29ae42c227d2013ccc7627dd55ed98410ae506ac910fbd68688f797f9206542e6683f4374d9b1"}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x4, 0x36, [0x7, 0x2, 0x0, 0x2, 0x80000000, 0xfffffffffffffffb], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000080)=""/54}, &(0x7f0000000140)=0x78) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x10017, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, &(0x7f0000000380)) 3.155858345s ago: executing program 4 (id=1854): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) sendmmsg$inet6(r7, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x6}, &(0x7f0000000200)=0x7fffffff, 0x0, 0x10000, 0x7, 0x8, 0xcebc, 0x11, 0x9}}], 0x58, 0x40845}, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='sched\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$P9_RUNLINKAT(r10, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) 2.367423368s ago: executing program 1 (id=1855): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setscheduler(r1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r6) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x8001021, 0xffffffffffffffff, 0x0) fcntl$dupfd(r7, 0x406, 0xffffffffffffffff) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x155, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r8, 0xc01864cd, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[0x9], 0x0, 0x1}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x0, 0x3f33d4f109f409b6}, 0x0, 0x0, 0x0, 0x0}) 2.36514604s ago: executing program 2 (id=1856): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffffffffffffff01, 0x88}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e01b398adda16e"], 0x1000f) r3 = dup(r1) socket(0xb, 0x80000, 0xd) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000300)=""/196, 0xc4, 0x0, &(0x7f0000000400)=""/191, 0xbf}}, 0x10) 2.201247619s ago: executing program 4 (id=1857): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = io_uring_setup(0x3ac3, &(0x7f00000000c0)={0x0, 0x240a, 0x10000, 0x2, 0x8d}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[0xffffffffffffffff, r0, r0, r0, r0, r0], 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0xe, 0xfffffff7, {0x0}, {}, 0xc692, 0xffffffffa6d3a0b9}) sched_setaffinity(r2, 0x8, &(0x7f0000000380)=0x8000000000000001) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1892f84d7dc03", 0x1c, 0x0, 0x0, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "6ddb21ec", {0x1, 0x12, 0x6, 0xc, 0xbd}}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xfffffffffffffd8c, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "7dd019e3", {0x3, 0x100, 0x0, 0x2, 0x2, 0x10, 0x8}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) close(0x3) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000280)={0x0, @raw_data="fda45823260b6f12ea8a8828a2309db6e0ebb93d02ea04fcbe000b8a1d1c6dbb05cb23d78c1a10c2c0b21a98a8b2ef3ccd1ea80eb8777cca2f81a47e2abc44c76ca741b6cf8d86c11f4afe548af20100752187506f793b7ca5eda9af2e191ab1c750083094aa5e65d5d8ce271010f5c9c3d1aa9d58bd89a5d1482e276b4b317a639b87c79f939f40706d9f40fdcc0235c0e9d3593d3f32c75b63a1dfd57339096b413099a055b33825695962f70dbbfa3bb6958b79ce89c0de483dc2755e73b6c336ddd98e28306e"}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0xc8182, 0x0) ioctl$UFFDIO_POISON(r5, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f00006be000/0x3000)=nil, 0x3000}}) 1.453344376s ago: executing program 3 (id=1858): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xffff, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xf9}}}}}]}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r2, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "b56c94e1"}]}}, 0x0}, 0x0) 790.577082ms ago: executing program 5 (id=1859): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00010002"], 0x8) syz_usb_control_io(r2, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000001c0)) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f0000000240)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="4f64eaeb46d54cd47f83307ae3ae3b1bd445d8a61b7b047097b2284da8b192954f725c1b75361accc7a8"], 0x0, 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000440)={@loopback, 0xc8, 0x2, 0x3, 0xd, 0x8000, 0xb}, 0x20) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) socket$nl_rdma(0x10, 0x3, 0x14) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) connect$unix(r5, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x140000) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000400)='.log\x00', 0x1, 0x2) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r6, 0xc0086421, &(0x7f0000000200)={0x0, 0x3}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, &(0x7f0000000440)}) close_range(r9, 0xffffffffffffffff, 0x200000000000000) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 744.221703ms ago: executing program 2 (id=1860): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x800000100}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000600)="f30f22a2f2363e0f300fc79a590a0bc8b8edc6aa86ef66bafc0cb0afee673e360f73d41cd3dd0f01c966baf80cb8ca2dca87ef66bafc0c66ed670f38c87332653e36650f350f32", 0x47}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x76, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$unix(0x1, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) bind$unix(r7, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x5, 0x0, 0x0, 0x5, 0x40, 0x0, 0xfffffffffffffffd}) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)={0x4c, 0x14, 0x1, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0x12, 0xc3], [0x6, 0xe, 0x40000000, 0x7], 0x0, [0x1, 0x4]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x18c, 0x203, 0x110, 0x19030000, 0x1f8, 0x2e0, 0x2e0, 0x1f8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x7, 0xff80, 0x7fff, 0x4, 'pptp\x00', 'syz1\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x38, 0x5, 0x2, 0x3ced, 0x7, 0x6a6b, 0x9, 0x8]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 0s ago: executing program 4 (id=1861): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x0, 0x54a8}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) mkdir(&(0x7f00000001c0)='./cgroup/../file0\x00', 0x20) r1 = socket(0x2b, 0x80801, 0x1) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9071, 0xffffffffffffffff, 0x0) getitimer(0x2, &(0x7f00000001c0)) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r4, 0x5, 0x8, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) sendto(r1, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000140)=@nfc_llcp={0x27, r6, 0xffffffffffffffff, 0x2, 0xa, 0x3, "bd753ab26383e365b886ef63da753b8ae83e5bbb9eb5a399d0e7d25a4a3d14721c324007ff319fac9f5b0aeb0c5d64990f979389ebd1b588d43ea9f0da2edc", 0x21}, 0x80) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x4e24, @private=0xa010102}}) write$cgroup_int(r8, &(0x7f0000000040)=0xaa4, 0x12) kernel console output (not intermixed with test programs): family 0 port 8472 - 0 [ 495.450413][ T8491] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.462778][ T8491] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 49320 - 0 [ 495.556847][ T8491] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.562760][T11792] overlayfs: conflicting lowerdir path [ 495.577921][ T8491] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.597015][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 495.606259][T11787] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 495.625769][ T8491] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 49320 - 0 [ 495.642145][ T5141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 495.650341][ T5141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 495.658992][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 495.682281][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 495.741275][T11793] lo speed is unknown, defaulting to 1000 [ 495.761738][ T6001] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 495.991675][ T6001] usb 2-1: config index 0 descriptor too short (expected 65069, got 45) [ 496.124654][ T6001] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 496.185607][ T6001] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 496.208204][ T6001] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.234609][ T6001] usb 2-1: config 0 has no interfaces? [ 496.235232][ T8491] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.255441][ T8491] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.260593][ T6001] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 496.271224][ T8491] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 49320 - 0 [ 496.336057][ T6001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.401107][ T6001] usb 2-1: config 0 descriptor?? [ 496.853118][T11816] netlink: 'syz.1.1445': attribute type 13 has an invalid length. [ 496.861157][T11816] netlink: 'syz.1.1445': attribute type 17 has an invalid length. [ 497.348947][T11816] net_ratelimit: 47 callbacks suppressed [ 497.348958][T11816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.399534][T11831] netlink: 'syz.4.1452': attribute type 10 has an invalid length. [ 497.452440][T11793] chnl_net:caif_netlink_parms(): no params data found [ 497.648827][ T8491] gretap0: left allmulticast mode [ 497.658774][ T8491] gretap0: left promiscuous mode [ 497.669001][ T8491] bridge0: port 3(gretap0) entered disabled state [ 497.714540][ T8491] bridge_slave_1: left allmulticast mode [ 497.721079][ T8491] bridge_slave_1: left promiscuous mode [ 497.735461][ T6001] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 497.748637][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.753405][ T5141] Bluetooth: hci2: command tx timeout [ 497.799107][ T8491] bridge_slave_0: left allmulticast mode [ 497.819398][ T8491] bridge_slave_0: left promiscuous mode [ 497.826721][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.896992][ T6001] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 497.915891][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.936645][ T6001] usb 5-1: Product: syz [ 497.940840][ T6001] usb 5-1: Manufacturer: syz [ 497.965833][ T6001] usb 5-1: SerialNumber: syz [ 497.981481][ T6001] usb 5-1: config 0 descriptor?? [ 498.034870][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 498.217948][ T6001] hso 5-1:0.0: Failed to find BULK IN ep [ 498.227021][ T10] usb 4-1: config index 0 descriptor too short (expected 65069, got 45) [ 498.235797][ T10] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 498.245779][ T6001] usb-storage 5-1:0.0: USB Mass Storage device detected [ 498.252003][ T10] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 498.268328][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.280020][ T10] usb 4-1: config 0 has no interfaces? [ 498.286619][ T10] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 498.295907][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.316749][ T10] usb 4-1: config 0 descriptor?? [ 498.423976][T11822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.433133][T11822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.433411][ T6806] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 498.446166][ T10] usb 5-1: USB disconnect, device number 74 [ 498.500677][ T8491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.511713][ T8491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.521595][ T8491] bond0 (unregistering): Released all slaves [ 498.634390][ T6806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.675484][ T6806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.685769][T11859] netlink: 'syz.3.1454': attribute type 13 has an invalid length. [ 498.687200][ T8491] bond1 (unregistering): Released all slaves [ 498.694036][T11859] netlink: 'syz.3.1454': attribute type 17 has an invalid length. [ 498.711574][ T6806] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 498.750461][ T6806] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 498.770837][ T6806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.960407][ T6806] usb 3-1: config 0 descriptor?? [ 499.095102][ T8491] bond2 (unregistering): Released all slaves [ 499.126036][T11859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.191076][ T6806] hid_parser_main: 1 callbacks suppressed [ 499.191096][ T6806] kovaplus 0003:1E7D:2D50.001D: unknown main item tag 0x6 [ 499.209075][ T6806] kovaplus 0003:1E7D:2D50.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 499.232857][ T5937] usb 2-1: USB disconnect, device number 76 [ 499.345855][T11793] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.353516][T11793] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.360790][T11793] bridge_slave_0: entered allmulticast mode [ 499.369435][T11793] bridge_slave_0: entered promiscuous mode [ 499.380676][ T5859] usb 4-1: USB disconnect, device number 67 [ 499.381493][T11793] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.405194][T11793] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.413149][ T5926] usb 3-1: USB disconnect, device number 60 [ 499.431574][T11793] bridge_slave_1: entered allmulticast mode [ 499.446162][T11793] bridge_slave_1: entered promiscuous mode [ 499.509231][T11875] overlayfs: conflicting lowerdir path [ 499.517009][T11875] overlayfs: failed to resolve './file1': -2 [ 499.547456][T11793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.566372][T11793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.608391][T11793] team0: Port device team_slave_0 added [ 499.623789][ T5937] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 499.648926][ T8491] hsr_slave_0: left promiscuous mode [ 499.658470][ T8491] hsr_slave_1: left promiscuous mode [ 499.665632][ T8491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.673233][ T8491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.681897][ T8491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.689784][ T8491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.708781][ T8491] batadv_slave_1: left promiscuous mode [ 499.715024][ T8491] veth1_macvtap: left promiscuous mode [ 499.720543][ T8491] veth0_macvtap: left promiscuous mode [ 499.726604][ T8491] veth1_vlan: left promiscuous mode [ 499.732288][ T8491] veth0_vlan: left promiscuous mode [ 499.804487][ T5141] Bluetooth: hci2: command tx timeout [ 499.809943][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 499.818446][ T5937] usb 2-1: config 2 has an invalid interface number: 194 but max is 0 [ 499.826920][ T5937] usb 2-1: config 2 has no interface number 0 [ 499.833629][ T5937] usb 2-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 499.845237][ T5937] usb 2-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 499.862169][ T30] audit: type=1400 audit(1766366459.718:983): avc: denied { create } for pid=11882 comm="syz.4.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 499.864709][ T5937] usb 2-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 499.892163][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.913232][T11870] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 500.145818][ T5937] usb 2-1: string descriptor 0 read error: -71 [ 500.162746][ T5937] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 500.419200][ T5937] usb 2-1: USB disconnect, device number 77 [ 501.007546][T11892] input: syz0 as /devices/virtual/input/input54 [ 501.279522][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.310858][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.410776][ T8491] team0 (unregistering): Port device team_slave_1 removed [ 501.504006][ T8491] team0 (unregistering): Port device team_slave_0 removed [ 501.725326][ T30] audit: type=1400 audit(1766366461.558:984): avc: denied { append } for pid=11896 comm="syz.1.1463" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 501.883922][ T5141] Bluetooth: hci2: command tx timeout [ 502.276857][T11793] team0: Port device team_slave_1 added [ 502.447093][T11899] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1463'. [ 503.178765][T11903] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 503.389833][ T10] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 503.703421][ T10] usb 5-1: device descriptor read/64, error -71 [ 503.771787][T11937] overlayfs: conflicting lowerdir path [ 503.800082][T11931] overlayfs: failed to resolve './file1': -2 [ 503.832392][T11904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.886611][T11904] batadv0: mtu less than device minimum [ 503.914938][T11904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 503.926686][T11904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 503.938150][T11904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 503.949549][T11904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 503.960970][T11904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 503.971835][T11904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 503.982636][T11904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 503.993505][T11904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 504.016498][ T5141] Bluetooth: hci2: command tx timeout [ 504.022064][ T10] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 504.035731][T11904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.130109][T11904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.140382][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'. [ 504.153417][ T5896] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 504.161113][ T10] usb 5-1: device descriptor read/64, error -71 [ 504.180409][T11904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.198364][T11904] batman_adv: batadv0: Interface deactivated: dummy0 [ 504.207983][T11904] batman_adv: batadv0: Removing interface: dummy0 [ 504.273735][ T10] usb usb5-port1: attempt power cycle [ 504.311358][T11793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.314807][ T5896] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 504.319071][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.334291][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.361501][T11793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.367128][T11793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.440171][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.471449][ T5896] usb 3-1: config 0 descriptor?? [ 504.486327][T11793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.486985][ T5896] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 504.600887][T11793] hsr_slave_0: entered promiscuous mode [ 504.624576][T11793] hsr_slave_1: entered promiscuous mode [ 504.668433][ T10] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 504.691955][ T5896] gspca_sn9c2028: read1 error -32 [ 504.697791][ T10] usb 5-1: device descriptor read/8, error -71 [ 504.723892][ T5896] gspca_sn9c2028: read1 error -32 [ 504.944050][ T6001] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 504.957576][ T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 505.048730][ T10] usb 5-1: device descriptor read/8, error -71 [ 505.057178][T11941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.078316][T11941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.112943][ T5859] usb 3-1: USB disconnect, device number 61 [ 505.134202][ T6001] usb 4-1: Using ep0 maxpacket: 32 [ 505.145107][ T6001] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 505.166011][ T6001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.173778][ T10] usb usb5-port1: unable to enumerate USB device [ 505.335513][ T6001] usb 4-1: Product: syz [ 505.339766][ T6001] usb 4-1: Manufacturer: syz [ 505.352335][ T6001] usb 4-1: SerialNumber: syz [ 505.366321][ T6001] usb 4-1: config 0 descriptor?? [ 505.375719][ T6001] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 505.482086][T11970] input: syz0 as /devices/virtual/input/input55 [ 505.875839][ T5859] usb 4-1: USB disconnect, device number 68 [ 505.941136][T11793] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 505.953920][T11793] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 505.969412][T11793] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 505.995178][T11793] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 506.308839][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 506.406731][T11793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.479587][T11793] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.520051][ T8491] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.527154][ T8491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.585765][ T8491] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.592897][ T8491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.662755][T11793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.134075][T12010] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 507.348798][ T30] audit: type=1400 audit(1766366467.058:985): avc: denied { map } for pid=12008 comm="syz.3.1481" path="/proc/1112/smaps_rollup" dev="proc" ino=36461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 507.778062][T11793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.968087][ T5937] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 507.985904][ T5937] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 510.049482][T11793] veth0_vlan: entered promiscuous mode [ 510.060096][T11793] veth1_vlan: entered promiscuous mode [ 510.084765][T11793] veth0_macvtap: entered promiscuous mode [ 510.124178][T11793] veth1_macvtap: entered promiscuous mode [ 510.176108][T11793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.187328][T12058] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 510.209369][T11793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.267340][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1487'. [ 510.293415][ T30] audit: type=1400 audit(1766366470.138:986): avc: denied { accept } for pid=12057 comm="syz.3.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 510.639928][ T8491] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.683611][ T8491] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.736270][ T8491] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.838641][ T8491] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.993478][ T5926] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 511.406320][ T30] audit: type=1400 audit(1766366470.868:987): avc: denied { bind } for pid=12075 comm="syz.4.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 511.439931][T12079] netlink: 'syz.4.1492': attribute type 13 has an invalid length. [ 511.553452][ T5896] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 511.573651][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 511.581348][ T5926] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 511.597626][ T5926] usb 4-1: can't read configurations, error -61 [ 512.034819][ T5926] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 512.065616][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.076921][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.087705][ T5896] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 512.097120][ T5896] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 512.105287][ T5896] usb 3-1: Manufacturer: syz [ 512.112780][ T5896] usb 3-1: config 0 descriptor?? [ 512.193418][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 512.202369][ T5926] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 512.213485][ T5926] usb 4-1: can't read configurations, error -61 [ 512.220239][ T5926] usb usb4-port1: attempt power cycle [ 512.607327][ T5926] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 512.620828][ T30] audit: type=1326 audit(1766366472.408:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 512.834791][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 512.886491][ T5926] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 512.906070][ T5926] usb 4-1: can't read configurations, error -61 [ 512.919778][ T30] audit: type=1326 audit(1766366472.408:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 512.945583][ T30] audit: type=1326 audit(1766366472.418:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 512.969833][ T30] audit: type=1326 audit(1766366472.418:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 512.994782][ T5896] uclogic 0003:256C:006D.001F: failed retrieving string descriptor #100: -71 [ 513.007262][ T5896] uclogic 0003:256C:006D.001F: failed retrieving pen parameters: -71 [ 513.018610][ T5896] uclogic 0003:256C:006D.001F: failed probing pen v1 parameters: -71 [ 513.027166][ T30] audit: type=1326 audit(1766366472.418:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 513.051092][ T5896] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 513.053573][ T30] audit: type=1326 audit(1766366472.418:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 513.058856][ T5896] uclogic 0003:256C:006D.001F: probe with driver uclogic failed with error -71 [ 513.082205][ T30] audit: type=1326 audit(1766366472.418:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 513.092494][ T5926] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 513.121127][ T30] audit: type=1326 audit(1766366472.428:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 513.128348][ T5896] usb 3-1: USB disconnect, device number 62 [ 513.153055][ T30] audit: type=1326 audit(1766366472.428:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 513.153153][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 513.184338][ T5926] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 513.191977][ T5926] usb 4-1: can't read configurations, error -61 [ 513.201270][ T30] audit: type=1326 audit(1766366472.428:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 513.202689][ T5926] usb usb4-port1: unable to enumerate USB device [ 513.304660][ T5931] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 513.369671][ T997] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.469101][ T5931] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 513.483856][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.512397][ T5931] usb 2-1: config 0 descriptor?? [ 513.536890][ T5931] cp210x 2-1:0.0: cp210x converter detected [ 513.584944][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 513.597337][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 513.607007][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 513.614859][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 513.622194][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 513.684908][T12108] lo speed is unknown, defaulting to 1000 [ 513.833411][ T6001] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 513.983996][ T6001] usb 5-1: Using ep0 maxpacket: 8 [ 513.992734][ T997] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.013690][ T6001] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 514.026728][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.058249][ T6001] usb 5-1: Product: syz [ 514.065245][ T6001] usb 5-1: Manufacturer: syz [ 514.070446][ T6001] usb 5-1: SerialNumber: syz [ 514.107712][T12123] sp0: Synchronizing with TNC [ 514.212479][T12108] chnl_net:caif_netlink_parms(): no params data found [ 514.214959][ T6001] usb 5-1: config 0 descriptor?? [ 514.380367][ T997] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.518655][T12131] netlink: 'syz.3.1503': attribute type 1 has an invalid length. [ 514.660181][ T6001] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 514.877121][T12114] [U] è [ 515.010571][T12137] input: syz0 as /devices/virtual/input/input56 [ 515.307314][ T6001] gspca_sunplus: reg_w_riv err -110 [ 515.403037][ T6001] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 515.422339][ T997] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.661781][ T5141] Bluetooth: hci2: command tx timeout [ 515.781208][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1505'. [ 515.815691][T12141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1505'. [ 515.971911][T12108] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.995339][ T5931] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 516.013078][ T5931] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 516.025175][T12108] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.032364][T12108] bridge_slave_0: entered allmulticast mode [ 516.045432][ T5931] usb 2-1: cp210x converter now attached to ttyUSB0 [ 516.075114][T12108] bridge_slave_0: entered promiscuous mode [ 516.082633][ T5931] usb 2-1: USB disconnect, device number 78 [ 516.110996][ T5931] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 516.138537][T12108] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.158305][ T5931] cp210x 2-1:0.0: device disconnected [ 516.167073][T12108] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.193702][T12108] bridge_slave_1: entered allmulticast mode [ 516.794373][T12108] bridge_slave_1: entered promiscuous mode [ 517.282026][ T6001] usb 5-1: USB disconnect, device number 79 [ 518.201949][ T5141] Bluetooth: hci2: command tx timeout [ 518.657877][T12108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.680591][T12185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.726067][T12108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.729033][T12185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.783297][ T997] bridge_slave_1: left allmulticast mode [ 518.797474][ T997] bridge_slave_1: left promiscuous mode [ 518.812609][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.840823][ T997] bridge_slave_0: left allmulticast mode [ 518.869524][ T997] bridge_slave_0: left promiscuous mode [ 518.889913][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.215234][ T5896] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 519.401590][ T6806] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 519.408902][ T5896] usb 2-1: config 0 has an invalid interface number: 182 but max is 1 [ 519.427727][ T5896] usb 2-1: config 0 has no interface number 1 [ 519.441290][ T5896] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 519.461275][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.489483][ T5896] usb 2-1: config 0 descriptor?? [ 519.726460][T12198] net_ratelimit: 31 callbacks suppressed [ 519.726483][T12198] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 519.740030][T12198] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 519.747892][T12198] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 519.755759][T12198] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 519.763635][T12198] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 519.771440][T12198] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 519.779287][T12198] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 519.787129][T12198] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 519.795004][T12198] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 519.802796][T12198] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 520.270766][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 520.270798][ T30] audit: type=1400 audit(1766366480.108:1010): avc: denied { audit_read } for pid=12186 comm="syz.1.1514" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 520.373677][ T5141] Bluetooth: hci2: command tx timeout [ 520.399258][ T997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.410333][ T997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.420224][ T997] bond0 (unregistering): Released all slaves [ 520.441200][T12108] team0: Port device team_slave_0 added [ 520.500535][T12108] team0: Port device team_slave_1 added [ 520.593032][ T30] audit: type=1400 audit(1766366480.438:1011): avc: denied { append } for pid=12218 comm="syz.3.1517" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 520.680780][T12108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.695227][T12108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.753401][T12108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.790834][ T997] hsr_slave_0: left promiscuous mode [ 520.804581][ T997] hsr_slave_1: left promiscuous mode [ 520.810639][ T997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.818230][ T997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.827963][ T997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.835625][ T997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.862067][ T997] veth1_macvtap: left promiscuous mode [ 520.873475][ T997] veth0_macvtap: left promiscuous mode [ 520.883928][ T997] veth1_vlan: left promiscuous mode [ 520.889409][ T997] veth0_vlan: left promiscuous mode [ 521.313907][ T6806] usb 4-1: device descriptor read/64, error -71 [ 521.372213][T12240] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 521.381192][T12240] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 521.459292][ T997] team0 (unregistering): Port device team_slave_1 removed [ 521.515573][ T997] team0 (unregistering): Port device team_slave_0 removed [ 521.564685][ T6806] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 521.645586][ T5896] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 521.743660][ T6806] usb 4-1: Using ep0 maxpacket: 16 [ 521.755302][ T6806] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 521.771144][ T6806] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 521.817609][ T6806] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 521.827463][ T5896] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 521.840966][ T5896] usb 5-1: config 0 has no interface number 0 [ 521.847563][ T5896] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 521.886195][ T5896] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 521.921221][ T6806] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 521.936341][ T6001] usb 2-1: USB disconnect, device number 79 [ 521.947516][ T5896] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 521.958333][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.967200][ T5896] usb 5-1: Product: syz [ 521.970023][ T6806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 521.982463][ T5896] usb 5-1: Manufacturer: syz [ 522.022466][ T5896] usb 5-1: SerialNumber: syz [ 522.038191][ T5896] usb 5-1: config 0 descriptor?? [ 522.044888][T12243] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 522.052967][ T5896] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 522.077084][ T6806] usb 4-1: SerialNumber: syz [ 522.102751][T12219] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 522.179817][ T5896] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 522.270183][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 522.450210][ T5141] Bluetooth: hci2: command tx timeout [ 522.753200][T12108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.761380][T12108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.807898][T12108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.900536][T12245] bridge1: entered promiscuous mode [ 523.062788][T12108] hsr_slave_0: entered promiscuous mode [ 523.086837][T12108] hsr_slave_1: entered promiscuous mode [ 523.333534][ T5896] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 524.034944][ T5896] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 524.045898][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.064689][ T5896] usb 2-1: Product: syz [ 524.074935][ T5896] usb 2-1: Manufacturer: syz [ 524.089876][ T5896] usb 2-1: SerialNumber: syz [ 524.262806][ T5926] usb 5-1: USB disconnect, device number 80 [ 524.289685][ T5926] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 524.317680][ T5926] cyberjack 5-1:0.69: device disconnected [ 524.324874][ T5896] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 524.350981][ T5896] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 524.372466][ T5896] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 524.431642][ T5896] usb 2-1: USB disconnect, device number 80 [ 525.347576][T12108] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 525.405146][T12108] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 525.440452][T12108] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 525.449441][T12287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12287 comm=syz.1.1530 [ 525.764482][T12108] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 525.788096][ T30] audit: type=1400 audit(1766366485.638:1012): avc: denied { bind } for pid=12283 comm="syz.1.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 526.970087][T12108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.553770][ T6806] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 528.031560][T12281] net_ratelimit: 45 callbacks suppressed [ 528.031573][T12281] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 528.045189][T12281] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 528.053054][T12281] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 528.060919][T12281] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 528.068749][T12281] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 528.076536][T12281] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 528.084330][T12281] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 528.092125][T12281] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 528.099937][T12281] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 528.107823][T12281] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 529.245681][T12108] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.263355][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.270473][ T8489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.395839][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.402968][ T8489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.781374][ T6001] usb 4-1: USB disconnect, device number 74 [ 529.892272][T12329] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 529.999813][ T30] audit: type=1326 audit(1766366489.848:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12327 comm="syz.2.1536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe694d8f749 code=0x0 [ 530.580901][T12108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.828013][ T30] audit: type=1400 audit(1766366490.678:1014): avc: denied { bind } for pid=12346 comm="syz.2.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 530.990159][ T30] audit: type=1400 audit(1766366490.838:1015): avc: denied { connect } for pid=12346 comm="syz.2.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 531.556590][ T30] audit: type=1400 audit(1766366491.378:1016): avc: denied { mounton } for pid=12346 comm="syz.2.1538" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 532.029570][T12374] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 532.041455][ T30] audit: type=1400 audit(1766366491.728:1017): avc: denied { getopt } for pid=12350 comm="syz.4.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 532.120094][T12108] veth0_vlan: entered promiscuous mode [ 532.152438][T12108] veth1_vlan: entered promiscuous mode [ 532.268877][ T30] audit: type=1400 audit(1766366492.108:1018): avc: denied { setopt } for pid=12360 comm="syz.1.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 532.392951][T12108] veth0_macvtap: entered promiscuous mode [ 532.458975][T12108] veth1_macvtap: entered promiscuous mode [ 532.533583][ T5937] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 532.576935][T12108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.646163][T12108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.716660][ T8489] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.725678][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 532.745829][ T5937] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 532.773617][ T5937] usb 3-1: config 0 has no interface number 0 [ 532.780454][ T5937] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 532.805483][ T5937] usb 3-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 532.822369][ T8489] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.853729][ T5937] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 532.864742][T12396] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 532.871268][T12396] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 532.880378][ T8489] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.935795][ T8489] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.967245][ T5937] usb 3-1: config 0 interface 126 has no altsetting 0 [ 532.996169][T12396] vhci_hcd vhci_hcd.0: Device attached [ 532.997323][ T5937] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 533.012974][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.103360][ T5937] usb 3-1: Product: syz [ 533.107534][ T5937] usb 3-1: Manufacturer: syz [ 533.158303][T12396] bridge_slave_0: left allmulticast mode [ 533.164270][ T5937] usb 3-1: SerialNumber: syz [ 533.201291][T12396] bridge_slave_0: left promiscuous mode [ 533.209001][ T5937] usb 3-1: config 0 descriptor?? [ 533.225116][T12387] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 533.273447][ T5926] usb 40-1: SetAddress Request (2) to port 0 [ 533.280163][T12396] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.300236][ T5926] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 533.350020][T12396] bridge_slave_1: left allmulticast mode [ 533.402176][T12396] bridge_slave_1: left promiscuous mode [ 533.443601][ T6806] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 533.451466][T12396] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.514008][T12396] bond0: (slave bond_slave_0): Releasing backup interface [ 533.592714][T12396] bond0: (slave bond_slave_1): Releasing backup interface [ 533.652801][T12396] team0: Port device team_slave_0 removed [ 533.794342][ T6806] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 533.824843][ T6806] usb 4-1: config 0 interface 0 has no altsetting 1 [ 533.832610][T12396] team0: Port device team_slave_1 removed [ 533.856596][T12396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.874219][T12396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.874493][ T6806] usb 4-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 533.901598][T12396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.925981][T12396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.933220][ T6806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 533.942035][ T6806] usb 4-1: Product: syz [ 533.961928][ T6806] usb 4-1: Manufacturer: syz [ 534.051097][T12396] net_ratelimit: 44 callbacks suppressed [ 534.051116][T12396] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 534.057760][ T6806] usb 4-1: SerialNumber: syz [ 534.081075][ T8494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.089438][ T8494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.145724][ T6806] usb 4-1: config 0 descriptor?? [ 534.172648][ T5937] ir_usb 3-1:0.126: IR Dongle converter detected [ 534.190190][ T5937] usb 3-1: IRDA class descriptor not found, device not bound [ 534.237340][ T8491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.252326][ T5937] usb 3-1: USB disconnect, device number 63 [ 534.272638][ T8491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.444231][T12397] vhci_hcd: connection reset by peer [ 534.461417][ T997] vhci_hcd vhci_hcd.3: stop threads [ 534.490719][ T997] vhci_hcd vhci_hcd.3: release socket [ 534.495090][ T6806] usb 4-1: USB disconnect, device number 75 [ 534.522720][ T997] vhci_hcd vhci_hcd.3: disconnect device [ 534.564503][T12443] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1444'. [ 534.565103][ T6538] udevd[6538]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.910390][ T6806] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 535.093017][ T6806] usb 5-1: device descriptor read/64, error -71 [ 535.343486][ T6806] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 535.453246][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1554'. [ 535.485688][ T6806] usb 5-1: device descriptor read/64, error -71 [ 535.671777][ T6806] usb usb5-port1: attempt power cycle [ 536.225924][T12487] program syz.5.1553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.433677][ T6806] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 536.502231][ T6806] usb 5-1: device descriptor read/8, error -71 [ 536.774022][T12502] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 536.774051][ T30] audit: type=1400 audit(1766366496.618:1019): avc: denied { mounton } for pid=12501 comm="syz.1.1558" path="/314/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 536.781577][ T6806] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 536.808942][T12502] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 536.822144][ T6806] usb 5-1: device descriptor read/8, error -71 [ 536.917214][T12507] xt_CT: You must specify a L4 protocol and not use inversions on it [ 536.974795][ T6806] usb usb5-port1: unable to enumerate USB device [ 537.453941][ T30] audit: type=1400 audit(1766366497.308:1020): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 537.753466][ T5896] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 537.786032][T12531] sp0: Synchronizing with TNC [ 538.013437][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 538.020539][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.048454][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.075363][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 538.107433][ T5896] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 538.133288][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.191176][ T5896] usb 3-1: config 0 descriptor?? [ 538.363587][ T5926] usb 40-1: device descriptor read/8, error -110 [ 538.555298][T12525] [U] è [ 538.730015][T12548] IPv6: sit1: Disabled Multicast RS [ 538.980873][ T5926] usb usb40-port1: attempt power cycle [ 538.994477][ T5896] hid (null): global environment stack underflow [ 539.017406][ T5896] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0020/input/input57 [ 539.099748][ T5896] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0020/input/input58 [ 539.128742][ T30] audit: type=1400 audit(1766366498.968:1021): avc: denied { getattr } for pid=12546 comm="syz.5.1564" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 539.218472][ T5896] kye 0003:0458:5011.0020: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 539.245827][ T30] audit: type=1400 audit(1766366499.048:1022): avc: denied { mounton } for pid=12546 comm="syz.5.1564" path="/5/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 539.545284][ T5926] usb usb40-port1: unable to enumerate USB device [ 539.695731][T12555] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1565'. [ 540.115149][T12558] 9p: Bad value for 'rfdno' [ 540.145219][ C1] kye 0003:0458:5011.0020: usb_submit_urb(ctrl) failed: -1 [ 540.261356][ T5926] usb 3-1: USB disconnect, device number 64 [ 540.464688][T12572] bridge_slave_0: entered promiscuous mode [ 540.613602][ T6806] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 541.055239][T12578] sp0: Synchronizing with TNC [ 541.153493][ T6806] usb 4-1: device descriptor read/64, error -71 [ 541.591931][ T6806] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 541.733439][ T6806] usb 4-1: device descriptor read/64, error -71 [ 541.838488][T12574] [U] è [ 541.952496][ T6806] usb usb4-port1: attempt power cycle [ 542.303448][ T6806] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 542.323940][ T6806] usb 4-1: device descriptor read/8, error -71 [ 543.041519][ T6806] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 543.095952][ T6806] usb 4-1: device descriptor read/8, error -71 [ 543.178555][ T30] audit: type=1400 audit(1766366503.028:1023): avc: denied { getopt } for pid=12611 comm="syz.5.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 543.223813][ T6806] usb usb4-port1: unable to enumerate USB device [ 543.425303][ T30] audit: type=1400 audit(1766366503.278:1024): avc: denied { append } for pid=12618 comm="syz.5.1582" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 543.924690][ T5896] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 544.633388][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 544.651836][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.698215][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.747183][ T5896] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 544.770313][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.794217][ T5896] usb 6-1: config 0 descriptor?? [ 545.003435][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 545.029630][ T5926] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 545.117787][ T30] audit: type=1400 audit(1766366504.948:1025): avc: denied { append } for pid=12646 comm="syz.3.1590" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 545.263458][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 545.286191][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.297428][ T5926] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 545.317734][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.368095][ T5926] usb 3-1: config 0 descriptor?? [ 545.783153][ T5926] mcp2221 0003:04D8:00DD.0021: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 545.804146][ T5931] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 546.045119][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 546.055657][T12639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.227351][T12639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.237534][ T5931] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 546.246760][ T5931] usb 2-1: can't read configurations, error -61 [ 546.263174][ T30] audit: type=1400 audit(1766366506.108:1026): avc: denied { module_load } for pid=12652 comm="syz.3.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 546.345153][ T5876] usb 3-1: USB disconnect, device number 65 [ 546.383530][ T5931] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 546.402200][ T5896] usbhid 6-1:0.0: can't add hid device: -71 [ 546.416676][ T5896] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 546.441769][ T5896] usb 6-1: USB disconnect, device number 2 [ 546.600893][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 546.620348][ T5931] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 546.638913][ T5931] usb 2-1: can't read configurations, error -61 [ 547.134244][ T5931] usb usb2-port1: attempt power cycle [ 547.557247][ T5931] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 547.583869][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 547.590652][ T5931] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 547.598483][ T5931] usb 2-1: can't read configurations, error -61 [ 548.098576][ T5931] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 548.126435][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 548.133187][ T5931] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 548.141169][ T5931] usb 2-1: can't read configurations, error -61 [ 548.150708][ T5931] usb usb2-port1: unable to enumerate USB device [ 548.483974][ T6806] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 549.148651][ T5931] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 549.323744][ T6806] usb 4-1: Using ep0 maxpacket: 16 [ 549.375181][ T6806] usb 4-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 549.397334][ T6806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.433162][ T6806] usb 4-1: config 0 descriptor?? [ 549.464068][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1597'. [ 549.633444][ T5859] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 549.740937][ T5931] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 549.749690][ T5931] usb 5-1: can't read configurations, error -71 [ 549.810707][ T5859] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 549.822697][ T5859] usb 6-1: config 0 has no interface number 0 [ 550.137239][ T5859] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 550.150098][ T5859] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 550.274387][ T5859] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 550.384763][T12717] input: syz1 as /devices/virtual/input/input59 [ 550.417823][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.457988][ T5859] usb 6-1: Product: syz [ 550.462208][ T5859] usb 6-1: Manufacturer: syz [ 550.466894][ T5859] usb 6-1: SerialNumber: syz [ 550.475605][ T5859] usb 6-1: config 0 descriptor?? [ 550.481454][T12702] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 550.490651][ T5859] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 550.504139][ T5859] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 550.768582][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 550.979720][ T5859] usb 6-1: USB disconnect, device number 3 [ 551.430900][ T5859] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 551.455963][ T5859] cyberjack 6-1:0.69: device disconnected [ 551.458819][T12736] sp0: Synchronizing with TNC [ 551.469913][ T6806] pegasus 4-1:0.0: can't locate MII phy, using default [ 551.539070][ T6806] pegasus 4-1:0.0: eth5, D-Link DSB-650TX, be:50:88:e8:bd:43 [ 551.601545][ T6806] usb 4-1: USB disconnect, device number 80 [ 551.944048][T12729] [U] è [ 553.308424][T12764] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 553.348218][ T30] audit: type=1400 audit(1766366513.198:1027): avc: denied { relabelto } for pid=12763 comm="syz.2.1616" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 553.433484][ T30] audit: type=1400 audit(1766366513.198:1028): avc: denied { associate } for pid=12763 comm="syz.2.1616" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 553.732393][ T6806] IPVS: starting estimator thread 0... [ 553.853856][T12779] IPVS: using max 77 ests per chain, 184800 per kthread [ 554.823451][ T5937] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 554.831398][ T6806] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 554.930206][ T30] audit: type=1400 audit(1766366514.778:1029): avc: denied { mounton } for pid=12803 comm="syz.1.1624" path="/328/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 554.983402][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 554.990493][ T5937] usb 3-1: unable to get BOS descriptor or descriptor too short [ 554.993537][ T30] audit: type=1400 audit(1766366514.808:1030): avc: denied { getattr } for pid=12803 comm="syz.1.1624" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 555.030069][ T5937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.059623][ T6806] usb 6-1: Using ep0 maxpacket: 8 [ 555.082385][ T6806] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.106208][ T5937] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 555.132003][ T6806] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 555.141282][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.182930][ T6806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.191329][ T5937] usb 3-1: Product: syz [ 555.202559][ T5937] usb 3-1: Manufacturer: syz [ 555.217202][ T6806] usb 6-1: Product: syz [ 555.225160][ T5937] usb 3-1: SerialNumber: syz [ 555.255249][ T6806] usb 6-1: Manufacturer: syz [ 555.270418][ T5937] usb 3-1: config 0 descriptor?? [ 555.283992][ T6806] usb 6-1: SerialNumber: syz [ 555.312223][ T6806] usb 6-1: config 0 descriptor?? [ 555.323699][ T5937] comedi comedi5: Wrong number of endpoints [ 555.337901][ T5937] ni6501 3-1:0.0: driver 'ni6501' failed to auto-configure device. [ 555.348316][ T6806] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 555.544732][ T5926] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 555.616301][ T5937] usb 3-1: USB disconnect, device number 66 [ 555.884088][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 556.018081][ T5876] usb 6-1: USB disconnect, device number 4 [ 556.030819][ T5926] usb 5-1: config 0 has an invalid interface number: 199 but max is 0 [ 556.053139][ T5926] usb 5-1: config 0 has no interface number 0 [ 556.075059][ T5926] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=49.f8 [ 556.105192][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.136637][ T5926] usb 5-1: Product: syz [ 556.147897][ T5926] usb 5-1: Manufacturer: syz [ 556.152544][ T5926] usb 5-1: SerialNumber: syz [ 556.170249][ T5926] usb 5-1: config 0 descriptor?? [ 556.200754][ T30] audit: type=1400 audit(1766366516.048:1031): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 556.407875][T12816] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1625'. [ 556.948366][ T5926] usb 5-1: USB disconnect, device number 87 [ 557.578095][T12852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1632'. [ 558.096180][T12844] IPVS: set_ctl: invalid protocol: 0 172.30.1.6:20004 [ 558.185639][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'. [ 558.514679][ T6806] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 558.674764][ T6806] usb 3-1: Using ep0 maxpacket: 32 [ 558.681459][ T6806] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.692256][ T6806] usb 3-1: config 0 has no interfaces? [ 558.697950][ T6806] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 558.707352][ T6806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.722460][ T6806] usb 3-1: config 0 descriptor?? [ 558.913422][ T6806] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 559.499238][ T6806] usb 4-1: Using ep0 maxpacket: 16 [ 559.578040][ T6806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.596009][ T6806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.621032][ T6806] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 559.765263][ T6806] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 559.809625][ T6806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.830766][ T6806] usb 4-1: config 0 descriptor?? [ 560.601020][ T6806] input: HID 0955:7214 Haptics as /devices/virtual/input/input60 [ 560.648355][T12841] delete_channel: no stack [ 560.720450][ T6806] shield 0003:0955:7214.0022: Registered Thunderstrike controller [ 560.734238][ T6806] shield 0003:0955:7214.0022: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 560.870175][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'. [ 561.016914][ T5931] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 561.032120][ T6806] usb 4-1: USB disconnect, device number 81 [ 561.048568][ T5931] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 561.065318][ T5931] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 561.090995][ T5931] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 561.208850][T12893] bridge1: entered promiscuous mode [ 561.214166][T12893] bridge1: entered allmulticast mode [ 561.603890][ T5926] usb 3-1: USB disconnect, device number 67 [ 561.989267][T12903] tipc: Started in network mode [ 561.995072][T12903] tipc: Node identity , cluster identity 4711 [ 562.118658][T12903] tipc: Failed to obtain node identity [ 562.127526][T12903] tipc: Enabling of bearer rejected, failed to enable media [ 562.554045][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.562724][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.128437][T12922] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 563.273418][ T5926] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 563.433470][ T5896] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 563.446723][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 563.477194][ T5926] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 563.513508][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 563.558016][ T5926] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 563.599219][ T5926] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 563.613456][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 563.630741][ T5896] usb 2-1: config 159 interface 0 has no altsetting 0 [ 563.639898][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.655821][ T5896] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=80.b9 [ 563.674488][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.692823][ T5896] usb 2-1: Product: syz [ 563.697474][ T5896] usb 2-1: Manufacturer: syz [ 563.702144][ T5896] usb 2-1: SerialNumber: syz [ 563.711230][ T5926] usb 5-1: config 0 descriptor?? [ 563.911930][T12931] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1652'. [ 564.195597][T12938] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1651'. [ 564.794305][T12936] vivid-002: ================= START STATUS ================= [ 564.802219][T12936] vivid-002: Radio HW Seek Mode: Bounded [ 564.807977][T12936] vivid-002: Radio Programmable HW Seek: false [ 564.814185][T12936] vivid-002: RDS Rx I/O Mode: Block I/O [ 564.819731][T12936] vivid-002: Generate RBDS Instead of RDS: false [ 564.826332][T12936] vivid-002: RDS Reception: true [ 564.831262][T12936] vivid-002: RDS Program Type: 0 inactive [ 564.837018][T12936] vivid-002: RDS PS Name: inactive [ 564.842210][T12936] vivid-002: RDS Radio Text: inactive [ 564.847711][T12936] vivid-002: RDS Traffic Announcement: false inactive [ 564.854500][T12936] vivid-002: RDS Traffic Program: false inactive [ 564.861090][T12936] vivid-002: RDS Music: false inactive [ 564.866590][T12936] vivid-002: ================== END STATUS ================== [ 564.932365][ T5896] snd-usb-audio 2-1:159.0: probe with driver snd-usb-audio failed with error -22 [ 564.978307][ T5896] usb 2-1: USB disconnect, device number 85 [ 564.979554][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:159.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.455843][T12950] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1657'. [ 565.586117][ T5926] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 565.600348][ T5926] hdpvr 5-1:0.0: device init failed [ 565.606579][ T5926] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 565.614307][ T5896] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 565.646188][ T5926] usb 5-1: USB disconnect, device number 88 [ 565.773444][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 565.779547][T12960] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1658'. [ 565.790684][ T5896] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 565.801458][ T5896] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.829796][T12960] libceph: resolve '0..' (ret=-3): failed [ 565.841956][ T5896] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.864852][ T5896] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 565.882098][ T5896] usb 2-1: config 7 interface 0 has no altsetting 0 [ 565.981561][ T5896] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 566.000682][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.945965][ T5896] hid (null): unknown global tag 0x24 [ 566.970235][ T5896] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0023/input/input61 [ 567.111354][ T6806] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 567.141389][ T5896] kye 0003:0458:5010.0023: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 567.260581][ T5896] usb 2-1: USB disconnect, device number 86 [ 567.303920][ T6806] usb 5-1: Using ep0 maxpacket: 32 [ 567.364388][ T6806] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 567.387532][ T6806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.388579][T12978] fido_id[12978]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 567.441722][ T6806] usb 5-1: config 0 descriptor?? [ 567.478008][ T6806] gspca_main: sq930x-2.14.0 probing 041e:403c [ 567.669388][T12987] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 567.698253][ T30] audit: type=1400 audit(1766366527.548:1032): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 568.448931][T12969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.557569][T12969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.723387][ T6806] gspca_sq930x: reg_w 0105 bf00 failed -110 [ 568.788951][ T6806] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 568.875868][T13000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1668'. [ 568.895941][ T5937] usb 5-1: USB disconnect, device number 89 [ 568.896293][T13000] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1668'. [ 569.413676][ T5925] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 570.104731][ T5925] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 570.133638][ T5925] usb 5-1: config 0 has no interface number 0 [ 570.155543][T13027] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 570.167831][ T5925] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 570.188770][ T5925] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 570.232982][ T5925] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 570.258189][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.274543][ T5925] usb 5-1: Product: syz [ 570.284106][ T5925] usb 5-1: Manufacturer: syz [ 570.306840][ T5925] usb 5-1: SerialNumber: syz [ 570.322359][ T5925] usb 5-1: config 0 descriptor?? [ 570.338419][T13008] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 570.354906][ T5925] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 570.391432][T13044] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20007 [ 570.401931][ T5925] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 570.564996][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 570.596517][T13053] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 570.607475][T13053] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 570.863752][ T5876] usb 5-1: USB disconnect, device number 90 [ 571.663924][ T5876] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 571.828497][ T5876] cyberjack 5-1:0.69: device disconnected [ 572.104819][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1683'. [ 572.977989][T13097] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 573.383482][T13102] netlink: 'syz.1.1689': attribute type 27 has an invalid length. [ 573.693443][ T6806] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 573.844447][ T6806] usb 3-1: Using ep0 maxpacket: 8 [ 573.866411][ T6806] usb 3-1: unable to get BOS descriptor or descriptor too short [ 573.885512][ T6806] usb 3-1: config 160 has an invalid interface number: 218 but max is 0 [ 573.922548][ T6806] usb 3-1: config 160 has no interface number 0 [ 573.932656][ T6806] usb 3-1: config 160 interface 218 has no altsetting 0 [ 573.952950][ T6806] usb 3-1: string descriptor 0 read error: -22 [ 573.963442][ T6806] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=3b.da [ 573.983861][ T6806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.618794][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 575.276571][T13146] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 576.363336][ T6806] f81534a_ctrl 3-1:160.218: failed to set register 0x116: -5 [ 576.370761][ T6806] f81534a_ctrl 3-1:160.218: failed to enable ports: -5 [ 576.403086][ T6806] f81534a_ctrl 3-1:160.218: probe with driver f81534a_ctrl failed with error -5 [ 576.415358][ T6806] usb 3-1: USB disconnect, device number 68 [ 577.419249][ T5876] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 577.444289][ T30] audit: type=1326 audit(1766366537.298:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13165 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf338f749 code=0x7ffc0000 [ 577.513670][ T30] audit: type=1326 audit(1766366537.318:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13165 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f7cf338f749 code=0x7ffc0000 [ 577.571413][ T30] audit: type=1326 audit(1766366537.318:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13165 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf338f749 code=0x7ffc0000 [ 577.573429][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 577.615098][ T30] audit: type=1326 audit(1766366537.318:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13165 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7cf338f749 code=0x7ffc0000 [ 577.639877][ T30] audit: type=1326 audit(1766366537.318:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13165 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf338f749 code=0x7ffc0000 [ 577.673426][ T5876] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 577.683937][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.692268][ T30] audit: type=1326 audit(1766366537.318:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13165 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7cf338f749 code=0x7ffc0000 [ 577.729999][ T5876] pvrusb2: Hardware description: Terratec Grabster AV400 [ 577.738619][ T5876] pvrusb2: ********** [ 577.755075][ T5876] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 577.772101][ T30] audit: type=1326 audit(1766366537.318:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13165 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf338f749 code=0x7ffc0000 [ 577.814686][ T5876] pvrusb2: Important functionality might not be entirely working. [ 577.829963][ T5876] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 577.849606][ T30] audit: type=1326 audit(1766366537.318:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13165 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7cf338f749 code=0x7ffc0000 [ 577.850047][ T5876] pvrusb2: ********** [ 577.913494][ T30] audit: type=1326 audit(1766366537.318:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13165 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf338f749 code=0x7ffc0000 [ 577.963113][ T30] audit: type=1326 audit(1766366537.318:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13165 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f7cf338f749 code=0x7ffc0000 [ 577.990680][ T2338] pvrusb2: Invalid write control endpoint [ 578.148789][T13180] binder: BINDER_SET_CONTEXT_MGR already set [ 578.158378][T13180] binder: 13170:13180 ioctl 4018620d 200000004a80 returned -16 [ 578.399638][T13160] sch_tbf: burst 19872 is lower than device lo mtu (65525) ! [ 578.452150][ T2338] pvrusb2: Invalid write control endpoint [ 578.469028][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 578.509024][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 578.538269][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 578.573567][ T2338] pvrusb2: Device being rendered inoperable [ 578.599880][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 578.618233][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 578.622751][ T5923] usb 5-1: USB disconnect, device number 91 [ 578.642977][ T2338] pvrusb2: Attached sub-driver cx25840 [ 578.663275][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 578.696279][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 579.029070][T13192] overlayfs: missing 'workdir' [ 579.884035][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1710'. [ 581.309534][T13222] sp0: Synchronizing with TNC [ 581.329045][T13224] syz.3.1719 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 581.454048][T13224] xt_CT: You must specify a L4 protocol and not use inversions on it [ 582.113848][T13212] [U] è [ 583.020156][T13242] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1721'. [ 583.373554][ T5931] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 583.540168][ T5931] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 583.550451][ T5931] usb 3-1: config 0 has no interface number 0 [ 583.557052][ T5931] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 583.571857][ T5931] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 583.589037][ T5931] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 583.607214][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.615996][ T5931] usb 3-1: Product: syz [ 583.620367][ T5931] usb 3-1: Manufacturer: syz [ 583.625335][ T5931] usb 3-1: SerialNumber: syz [ 583.636236][ T5931] usb 3-1: config 0 descriptor?? [ 583.641947][T13239] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 583.659722][ T5931] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 583.681904][ T5931] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 584.047394][T13255] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1723'. [ 584.173296][ T5931] usb 3-1: USB disconnect, device number 69 [ 584.193426][ T5931] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 584.205883][ T5931] cyberjack 3-1:0.69: device disconnected [ 584.623415][ T5923] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 584.689673][T13262] binder: 13260:13262 ioctl 4018620d 0 returned -22 [ 584.910563][T13267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'. [ 584.930555][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.942237][ T5923] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 584.953599][ T5923] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 584.971164][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.987156][ T5923] usb 2-1: config 0 descriptor?? [ 585.004910][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 585.004925][ T30] audit: type=1400 audit(1766366544.858:1057): avc: denied { create } for pid=13269 comm="syz.2.1728" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 585.210346][T13273] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 585.221703][ T30] audit: type=1400 audit(1766366544.878:1058): avc: denied { read } for pid=13269 comm="syz.2.1728" name="file0" dev="tmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 585.244584][ T30] audit: type=1400 audit(1766366544.878:1059): avc: denied { open } for pid=13269 comm="syz.2.1728" path="/147/file0" dev="tmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 585.324229][ T30] audit: type=1400 audit(1766366545.168:1060): avc: denied { unlink } for pid=10026 comm="syz-executor" name="file0" dev="tmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 585.575722][T13281] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1731'. [ 585.613523][ T5925] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 585.776322][ T5925] usb 3-1: too many configurations: 175, using maximum allowed: 8 [ 585.798363][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 585.819426][ T5925] usb 3-1: can't read configurations, error -61 [ 585.963516][ T5925] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 586.125156][ T5925] usb 3-1: too many configurations: 175, using maximum allowed: 8 [ 586.148430][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 586.163672][ T5925] usb 3-1: can't read configurations, error -61 [ 586.177761][ T5925] usb usb3-port1: attempt power cycle [ 586.896485][ T5925] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 586.925449][ T5925] usb 3-1: too many configurations: 175, using maximum allowed: 8 [ 586.945096][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 586.960952][ T5925] usb 3-1: can't read configurations, error -61 [ 587.086724][T13306] xt_nat: multiple ranges no longer supported [ 587.103637][ T5925] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 587.124282][ T5925] usb 3-1: too many configurations: 175, using maximum allowed: 8 [ 587.133277][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 587.165445][ T5925] usb 3-1: can't read configurations, error -61 [ 587.172002][ T5925] usb usb3-port1: unable to enumerate USB device [ 587.576997][ T5923] usb 2-1: USB disconnect, device number 87 [ 587.731471][T13317] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 588.043473][ T5923] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 588.710556][ T30] audit: type=1400 audit(1766366548.558:1061): avc: denied { ioctl } for pid=13275 comm="syz.2.1729" path="socket:[42979]" dev="sockfs" ino=42979 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 588.768134][ T5876] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 588.794842][ T5923] usb 2-1: config index 0 descriptor too short (expected 65069, got 45) [ 588.803840][ T5923] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 588.821120][ T5923] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 588.835413][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.846007][ T5923] usb 2-1: config 0 has no interfaces? [ 588.851487][ T5923] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 588.861073][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.870885][ T5923] usb 2-1: config 0 descriptor?? [ 588.938168][ T5876] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 588.946824][ T5896] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 588.962097][ T5876] usb 5-1: config 0 has no interface number 0 [ 588.970569][ T5876] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 588.986092][ T5876] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 589.018758][ T5876] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 589.028869][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.039602][ T5876] usb 5-1: Product: syz [ 589.044161][ T5876] usb 5-1: Manufacturer: syz [ 589.049343][ T5876] usb 5-1: SerialNumber: syz [ 589.067903][ T5876] usb 5-1: config 0 descriptor?? [ 589.078514][T13323] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 589.115132][ T5896] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 589.125114][ T5876] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 589.136856][ T5896] usb 4-1: config 0 has no interface number 0 [ 589.142972][ T5896] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 589.165966][ T5876] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 589.203913][ T5896] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 589.245781][ T5896] usb 4-1: config 0 interface 255 has no altsetting 0 [ 589.267668][ T5896] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 589.302923][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.351174][ T5896] usb 4-1: config 0 descriptor?? [ 589.387539][ T5896] cp210x 4-1:0.255: cp210x converter detected [ 589.485415][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 589.615568][T13341] netlink: 'syz.1.1738': attribute type 13 has an invalid length. [ 589.623662][T13341] netlink: 'syz.1.1738': attribute type 17 has an invalid length. [ 589.833606][ T5896] cp210x 4-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 589.847213][ T5896] cp210x 4-1:0.255: failed to get vendor val 0x3711 size 2: -121 [ 589.857159][ T5896] cp210x 4-1:0.255: GPIO initialisation failed: -121 [ 589.884184][T13341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.910482][ T5896] usb 4-1: cp210x converter now attached to ttyUSB1 [ 589.917699][ T5923] usb 5-1: USB disconnect, device number 92 [ 589.933098][ T5923] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 589.991295][ T5923] cyberjack 5-1:0.69: device disconnected [ 592.675479][ T5937] usb 4-1: USB disconnect, device number 82 [ 592.699714][ T5937] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 592.727031][ T5937] cp210x 4-1:0.255: device disconnected [ 592.833668][ T5923] usb 2-1: USB disconnect, device number 88 [ 593.003500][ T5876] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 593.272045][ T30] audit: type=1400 audit(1766366553.038:1062): avc: denied { shutdown } for pid=13367 comm="syz.1.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 593.340480][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 593.358265][ T5876] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 593.367514][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.375872][ T5876] usb 3-1: Product: syz [ 593.381939][ T5876] usb 3-1: Manufacturer: syz [ 593.390336][ T5876] usb 3-1: SerialNumber: syz [ 593.404455][ T5876] usb 3-1: config 0 descriptor?? [ 593.412684][ T5876] gspca_main: sq905-2.14.0 probing 2770:9120 [ 593.613755][ T5876] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 593.622723][ T5876] sq905 3-1:0.0: probe with driver sq905 failed with error -32 [ 593.843409][ T5937] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 593.962526][ T30] audit: type=1326 audit(1766366553.808:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.4.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 593.988667][ T30] audit: type=1326 audit(1766366553.808:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.4.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 594.013439][ T30] audit: type=1326 audit(1766366553.808:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.4.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 594.038224][ T30] audit: type=1326 audit(1766366553.848:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.4.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 594.063712][ T30] audit: type=1326 audit(1766366553.848:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.4.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 594.065162][ T5937] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 594.104912][ T5937] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 594.121296][ T5937] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 594.129994][ T30] audit: type=1326 audit(1766366553.848:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.4.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 594.137462][ T5937] usb 4-1: config 0 interface 0 has no altsetting 0 [ 594.159415][ T30] audit: type=1326 audit(1766366553.848:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.4.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 594.182657][ T5937] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 594.192659][ T30] audit: type=1326 audit(1766366553.848:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.4.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 594.210359][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.222259][ T30] audit: type=1326 audit(1766366553.848:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.4.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd127f8f749 code=0x7ffc0000 [ 594.256938][ T5937] usb 4-1: config 0 descriptor?? [ 594.262646][T13380] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 594.689555][ T5937] magicmouse 0003:05AC:0324.0024: hidraw0: USB HID vff.ff Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0 [ 594.704752][ T5937] magicmouse 0003:05AC:0324.0024: magicmouse input not registered [ 594.726602][ T5937] magicmouse 0003:05AC:0324.0024: probe with driver magicmouse failed with error -12 [ 594.775664][T13400] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 595.172128][ T5925] usb 4-1: USB disconnect, device number 83 [ 595.191172][T13401] fido_id[13401]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 595.896794][ T5925] usb 3-1: USB disconnect, device number 74 [ 595.959679][T13407] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 596.293457][ T5925] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 596.306503][ T5931] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 596.473535][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 596.478783][ T5937] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 596.506010][ T5925] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 596.539960][ T5925] usb 3-1: config 0 has no interface number 0 [ 596.551386][ T5931] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 596.569496][ T5925] usb 3-1: config 0 interface 109 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 596.583530][ T5931] usb 2-1: config 0 has no interface number 0 [ 596.589801][ T5931] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 596.600245][ T5931] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 596.613636][ T5925] usb 3-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=7e.b6 [ 596.622946][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.631171][ T5925] usb 3-1: Product: syz [ 596.635604][ T5925] usb 3-1: Manufacturer: syz [ 596.640219][ T5925] usb 3-1: SerialNumber: syz [ 596.644975][ T5931] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 596.654061][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.662107][ T5931] usb 2-1: Product: syz [ 596.667611][ T5931] usb 2-1: Manufacturer: syz [ 596.672878][ T5925] usb 3-1: config 0 descriptor?? [ 596.678152][ T5931] usb 2-1: SerialNumber: syz [ 596.687773][ T5925] HFC-S_USB 3-1:0.109: probe with driver HFC-S_USB failed with error -5 [ 596.697255][ T5931] usb 2-1: config 0 descriptor?? [ 596.702431][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.715093][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.725344][T13412] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 596.726154][ T5937] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 596.742493][ T5931] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 596.751438][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.762576][ T5937] usb 4-1: config 0 descriptor?? [ 596.767896][ T5931] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 596.919689][T13410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.930636][T13410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.950721][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1762'. [ 596.964509][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 597.009322][T13421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.045747][T13421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.157858][ T5931] usb 3-1: USB disconnect, device number 75 [ 597.166177][ T5876] usb 2-1: USB disconnect, device number 89 [ 597.192986][ T5876] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 597.224663][ T5876] cyberjack 2-1:0.69: device disconnected [ 597.718774][ T5937] hid-led 0003:27B8:01ED.0025: probe with driver hid-led failed with error -71 [ 597.747500][ T5937] usb 4-1: USB disconnect, device number 84 [ 597.841940][T13436] overlayfs: conflicting lowerdir path [ 597.855102][T13436] overlayfs: missing 'lowerdir' [ 598.034554][T13442] xt_hashlimit: max too large, truncated to 1048576 [ 598.276671][T13446] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 598.833373][ T5876] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 598.986288][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.156299][ T5876] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 599.233587][ T5876] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 599.242735][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.254386][ T5876] usb 3-1: config 0 descriptor?? [ 599.826230][ T30] audit: type=1400 audit(1766366559.678:1072): avc: denied { bind } for pid=13468 comm="syz.1.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 600.925030][T13495] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 601.023541][ T5937] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 601.113547][ T5931] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 601.189270][ T5925] usb 3-1: USB disconnect, device number 76 [ 601.220639][ T5937] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 601.259493][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.276639][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.287796][ T5937] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 601.302737][ T5937] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 601.313165][ T5937] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 601.322243][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 601.329549][ T5937] usb 5-1: Manufacturer: syz [ 601.335988][ T5931] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 601.346863][ T5937] usb 5-1: config 0 descriptor?? [ 601.353795][ T5931] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 601.363286][ T5931] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 601.373518][ T5931] usb 4-1: Product: syz [ 601.377698][ T5931] usb 4-1: Manufacturer: syz [ 601.382292][ T5931] usb 4-1: SerialNumber: syz [ 601.595908][T13494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.606605][T13494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.614811][ T5925] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 601.624430][ T5931] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 601.633154][ T5931] visor 4-1:1.0: probe with driver visor failed with error -71 [ 601.648960][ T5931] usb 4-1: USB disconnect, device number 85 [ 601.765566][ T5937] appleir 0003:05AC:8243.0026: unknown main item tag 0x0 [ 601.775442][ T5937] appleir 0003:05AC:8243.0026: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 601.786665][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 601.793583][ T5925] usb 3-1: config 0 has an invalid descriptor of length 245, skipping remainder of the config [ 601.805984][ T5925] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 601.815185][ T5925] usb 3-1: New USB device found, idVendor=05c6, idProduct=920c, bcdDevice=a9.e4 [ 601.825264][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.837813][ T5925] usb 3-1: config 0 descriptor?? [ 601.953412][ T5937] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 602.066925][T13497] overlay: Unknown parameter 'obj_user' [ 602.104816][ T5937] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 602.113218][ T5937] usb 2-1: config 0 has no interface number 0 [ 602.119872][ T5937] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 602.131195][ T5937] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 602.145601][ T5937] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 602.162279][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.180832][ T5937] usb 2-1: Product: syz [ 602.191404][ T5937] usb 2-1: Manufacturer: syz [ 602.197257][ T5937] usb 2-1: SerialNumber: syz [ 602.208177][ T5937] usb 2-1: config 0 descriptor?? [ 602.214760][T13500] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 602.224207][ T5937] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 602.236785][ T5937] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 602.265248][T13505] wg2: entered promiscuous mode [ 602.270184][T13505] wg2: entered allmulticast mode [ 602.522599][T13516] 9p: Bad value for 'rfdno' [ 602.538316][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 602.853563][ T5926] usb 2-1: USB disconnect, device number 90 [ 602.987761][ T5926] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 603.004819][ T5926] cyberjack 2-1:0.69: device disconnected [ 604.107043][ T5923] usb 5-1: USB disconnect, device number 93 [ 604.398142][ T5937] usb 3-1: USB disconnect, device number 77 [ 604.423697][ T6806] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 604.513534][T13539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1798'. [ 604.665361][ T30] audit: type=1400 audit(1766366564.358:1073): avc: denied { search } for pid=13536 comm="syz.3.1798" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 604.906797][ T30] audit: type=1400 audit(1766366564.358:1074): avc: denied { search } for pid=13536 comm="syz.3.1798" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 604.948499][ T30] audit: type=1400 audit(1766366564.358:1075): avc: denied { read open } for pid=13536 comm="syz.3.1798" path="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 605.024661][ T6806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.038939][ T6806] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 605.057613][ T6806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.080465][ T6806] usb 2-1: config 0 descriptor?? [ 605.408814][ T8496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.535819][ T5937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.544096][ T8496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.736465][ T5937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 606.773016][ T5937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 607.582349][ T6806] usbhid 2-1:0.0: can't add hid device: -71 [ 607.623032][T13555] Process accounting resumed [ 607.655752][ T5937] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 607.674564][ T6806] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 607.691377][ T6806] usb 2-1: USB disconnect, device number 91 [ 607.911893][ T5937] usb 5-1: config index 0 descriptor too short (expected 64548, got 36) [ 608.059313][ T5937] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 608.071872][ T5937] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 608.081505][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.115711][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.153899][ T5937] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 608.183518][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.208387][ T5937] usb 5-1: config 0 descriptor?? [ 608.813484][ T6806] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 608.870814][T13554] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1802'. [ 608.954185][T13576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.972842][T13576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.035374][ T6806] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 609.051125][ T6806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.062543][ T6806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.072831][ T6806] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 609.195141][ T6806] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 609.205832][ T6806] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 609.215548][ T6806] usb 4-1: Manufacturer: syz [ 609.236884][T13581] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 609.325086][ T6806] usb 4-1: config 0 descriptor?? [ 609.563585][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 609.802224][ T6806] appleir 0003:05AC:8243.0027: unknown main item tag 0x0 [ 609.823165][ T6806] appleir 0003:05AC:8243.0027: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 609.969327][T13596] FAULT_INJECTION: forcing a failure. [ 609.969327][T13596] name failslab, interval 1, probability 0, space 0, times 0 [ 610.000152][T13596] CPU: 1 UID: 0 PID: 13596 Comm: syz.2.1811 Tainted: G L syzkaller #0 PREEMPT(full) [ 610.000183][T13596] Tainted: [L]=SOFTLOCKUP [ 610.000190][T13596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 610.000201][T13596] Call Trace: [ 610.000207][T13596] [ 610.000215][T13596] dump_stack_lvl+0x16c/0x1f0 [ 610.000243][T13596] should_fail_ex+0x512/0x640 [ 610.000271][T13596] ? fs_reclaim_acquire+0xae/0x150 [ 610.000297][T13596] should_failslab+0xc2/0x120 [ 610.000320][T13596] __kmalloc_noprof+0xeb/0x910 [ 610.000347][T13596] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 610.000377][T13596] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 610.000399][T13596] tomoyo_realpath_from_path+0xc2/0x6e0 [ 610.000425][T13596] ? tomoyo_profile+0x47/0x60 [ 610.000452][T13596] tomoyo_path_number_perm+0x245/0x580 [ 610.000471][T13596] ? tomoyo_path_number_perm+0x237/0x580 [ 610.000492][T13596] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 610.000514][T13596] ? find_held_lock+0x2b/0x80 [ 610.000561][T13596] ? find_held_lock+0x2b/0x80 [ 610.000586][T13596] ? hook_file_ioctl_common+0x144/0x410 [ 610.000618][T13596] ? __fget_files+0x20e/0x3c0 [ 610.000643][T13596] security_file_ioctl+0x9b/0x240 [ 610.000668][T13596] __x64_sys_ioctl+0xb7/0x210 [ 610.000689][T13596] do_syscall_64+0xcd/0xf80 [ 610.000713][T13596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.000729][T13596] RIP: 0033:0x7fe694d8f749 [ 610.000743][T13596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.000757][T13596] RSP: 002b:00007fe695b50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.000774][T13596] RAX: ffffffffffffffda RBX: 00007fe694fe5fa0 RCX: 00007fe694d8f749 [ 610.000785][T13596] RDX: 0000200000000140 RSI: 000000004400ae8f RDI: 0000000000000005 [ 610.000796][T13596] RBP: 00007fe695b50090 R08: 0000000000000000 R09: 0000000000000000 [ 610.000806][T13596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.000816][T13596] R13: 00007fe694fe6038 R14: 00007fe694fe5fa0 R15: 00007ffd7153e4a8 [ 610.000841][T13596] [ 610.001334][T13596] ERROR: Out of memory at tomoyo_realpath_from_path. [ 610.196915][ T5923] usb 4-1: USB disconnect, device number 86 [ 610.359299][T13599] netlink: 'syz.1.1813': attribute type 10 has an invalid length. [ 610.367844][T13599] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1813'. [ 610.583412][ T5923] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 610.667140][ T5937] usbhid 5-1:0.0: can't add hid device: -71 [ 610.675016][ T5937] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 610.686230][ T5937] usb 5-1: USB disconnect, device number 94 [ 610.724114][ T5926] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 610.736001][ T5923] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 610.764283][ T5923] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 610.786360][ T5923] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 610.807048][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 610.814413][ T5923] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 610.825036][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.839231][ T5923] usb 3-1: config 0 descriptor?? [ 610.856674][T13600] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 610.904972][ T5926] usb 2-1: config index 0 descriptor too short (expected 65069, got 45) [ 610.924352][ T5926] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 610.957004][ T5926] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 610.987450][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.017811][ T5926] usb 2-1: config 0 has no interfaces? [ 611.036221][ T5926] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 611.076184][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.110523][ T5926] usb 2-1: config 0 descriptor?? [ 611.133785][T13613] xt_connbytes: Forcing CT accounting to be enabled [ 611.155569][ T30] audit: type=1400 audit(1766366570.998:1076): avc: denied { setattr } for pid=13608 comm="syz.4.1817" name="[io_uring]" dev="anon_inodefs" ino=45626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 611.183866][T13613] xt_NFQUEUE: number of total queues is 0 [ 611.312660][ T5923] magicmouse 0003:05AC:0324.0028: hidraw0: USB HID vff.ff Device [HID 05ac:0324] on usb-dummy_hcd.2-1/input0 [ 611.338082][ T5923] magicmouse 0003:05AC:0324.0028: magicmouse input not registered [ 611.357664][ T5923] magicmouse 0003:05AC:0324.0028: probe with driver magicmouse failed with error -12 [ 611.541567][T13625] netlink: 'syz.1.1814': attribute type 13 has an invalid length. [ 611.549745][T13625] netlink: 'syz.1.1814': attribute type 17 has an invalid length. [ 611.563642][ T5925] usb 3-1: USB disconnect, device number 78 [ 611.750551][T13625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 611.880910][ T5937] usb 2-1: USB disconnect, device number 92 [ 612.063556][ T5925] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 612.291642][ T5925] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.302043][ T5925] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 612.311334][ T5925] usb 4-1: config 1 has no interface number 0 [ 612.317878][ T5925] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.329098][ T5925] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 612.338386][ T5925] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 612.350229][ T5925] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x88 has invalid maxpacket 14 [ 612.360482][ T5925] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.376314][ T5925] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 612.385591][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.394967][ T5925] usb 4-1: Product: syz [ 612.399760][ T5925] usb 4-1: Manufacturer: syz [ 612.404538][ T5925] usb 4-1: SerialNumber: syz [ 612.614360][T13627] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 612.734927][T13639] FAULT_INJECTION: forcing a failure. [ 612.734927][T13639] name failslab, interval 1, probability 0, space 0, times 0 [ 612.747646][T13639] CPU: 1 UID: 0 PID: 13639 Comm: syz.1.1823 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.747672][T13639] Tainted: [L]=SOFTLOCKUP [ 612.747678][T13639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.747686][T13639] Call Trace: [ 612.747692][T13639] [ 612.747698][T13639] dump_stack_lvl+0x16c/0x1f0 [ 612.747726][T13639] should_fail_ex+0x512/0x640 [ 612.747749][T13639] ? fs_reclaim_acquire+0xae/0x150 [ 612.747771][T13639] should_failslab+0xc2/0x120 [ 612.747793][T13639] __kmalloc_noprof+0xeb/0x910 [ 612.747814][T13639] ? tomoyo_encode2+0x100/0x3e0 [ 612.747841][T13639] ? tomoyo_encode2+0x100/0x3e0 [ 612.747861][T13639] tomoyo_encode2+0x100/0x3e0 [ 612.747892][T13639] tomoyo_encode+0x29/0x50 [ 612.747912][T13639] tomoyo_realpath_from_path+0x18f/0x6e0 [ 612.747933][T13639] ? tomoyo_profile+0x47/0x60 [ 612.747950][T13639] tomoyo_path_number_perm+0x245/0x580 [ 612.747961][T13639] ? tomoyo_path_number_perm+0x237/0x580 [ 612.747975][T13639] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 612.747988][T13639] ? find_held_lock+0x2b/0x80 [ 612.748016][T13639] ? find_held_lock+0x2b/0x80 [ 612.748032][T13639] ? hook_file_ioctl_common+0x144/0x410 [ 612.748051][T13639] ? __fget_files+0x20e/0x3c0 [ 612.748068][T13639] security_file_ioctl+0x9b/0x240 [ 612.748083][T13639] __x64_sys_ioctl+0xb7/0x210 [ 612.748096][T13639] do_syscall_64+0xcd/0xf80 [ 612.748111][T13639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.748122][T13639] RIP: 0033:0x7fa27a78f749 [ 612.748131][T13639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.748141][T13639] RSP: 002b:00007fa27b557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.748151][T13639] RAX: ffffffffffffffda RBX: 00007fa27a9e5fa0 RCX: 00007fa27a78f749 [ 612.748158][T13639] RDX: 0000200000000140 RSI: 000000004400ae8f RDI: 0000000000000005 [ 612.748164][T13639] RBP: 00007fa27b557090 R08: 0000000000000000 R09: 0000000000000000 [ 612.748170][T13639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.748176][T13639] R13: 00007fa27a9e6038 R14: 00007fa27a9e5fa0 R15: 00007fffa2b3f7b8 [ 612.748190][T13639] [ 612.971213][T13639] ERROR: Out of memory at tomoyo_realpath_from_path. [ 613.097874][T13649] netlink: 'syz.1.1825': attribute type 22 has an invalid length. [ 613.425692][T13627] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 613.447947][ T5925] cdc_ncm 4-1:1.1: bind() failure [ 613.642339][T13627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.659111][T13627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.671847][ T5925] usb 4-1: USB disconnect, device number 87 [ 613.769205][T13668] sp0: Synchronizing with TNC [ 613.926587][T13673] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1830'. [ 614.031364][T13675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1831'. [ 614.061459][T13675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1831'. [ 614.426800][T13680] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 614.666583][T13663] [U] è [ 614.783069][T13684] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 615.133430][ T5937] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 615.283392][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 615.295185][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.320052][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.341815][ T5937] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 615.369796][ T5937] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 615.388876][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.415760][ T5937] usb 5-1: config 0 descriptor?? [ 615.707711][ T30] audit: type=1400 audit(1766366575.548:1077): avc: denied { map } for pid=13704 comm="syz.2.1840" path="socket:[46152]" dev="sockfs" ino=46152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 615.742715][ T30] audit: type=1400 audit(1766366575.548:1078): avc: denied { read accept } for pid=13704 comm="syz.2.1840" path="socket:[46152]" dev="sockfs" ino=46152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 615.871979][ T5937] hid-multitouch 0003:0457:07DA.0029: unknown main item tag 0x0 [ 615.898956][ T5937] hid-multitouch 0003:0457:07DA.0029: unknown main item tag 0x0 [ 615.917061][ T5937] hid-multitouch 0003:0457:07DA.0029: unknown main item tag 0x0 [ 615.933388][ T5937] hid-multitouch 0003:0457:07DA.0029: unknown main item tag 0x0 [ 615.951265][ T5937] hid-multitouch 0003:0457:07DA.0029: unknown main item tag 0x0 [ 615.963422][ T5937] hid-multitouch 0003:0457:07DA.0029: unknown main item tag 0x0 [ 615.981272][ T5937] hid-multitouch 0003:0457:07DA.0029: unknown main item tag 0x0 [ 615.999191][ T5937] hid-multitouch 0003:0457:07DA.0029: unknown main item tag 0x0 [ 616.014744][ T5937] hid-multitouch 0003:0457:07DA.0029: unknown main item tag 0x0 [ 616.032670][ T5937] hid-multitouch 0003:0457:07DA.0029: unknown main item tag 0x0 [ 616.057161][ T5937] hid-multitouch 0003:0457:07DA.0029: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 616.192250][T13719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 616.252416][ T30] audit: type=1400 audit(1766366576.098:1079): avc: denied { getopt } for pid=13687 comm="syz.4.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 616.630013][ T30] audit: type=1400 audit(1766366576.418:1080): avc: denied { relabelfrom } for pid=13717 comm="syz.5.1843" name="" dev="pipefs" ino=46169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 617.259839][T13734] netlink: 'syz.3.1846': attribute type 1 has an invalid length. [ 617.279985][T13735] netlink: 'syz.5.1847': attribute type 1 has an invalid length. [ 617.311609][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1846'. [ 617.332912][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1846'. [ 617.348404][T13734] bond3: entered promiscuous mode [ 617.357604][T13734] 8021q: adding VLAN 0 to HW filter on device bond3 [ 617.419786][T13734] bond3: (slave bridge3): making interface the new active one [ 617.427460][T13734] bridge3: entered promiscuous mode [ 617.433778][T13734] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 617.573517][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 618.697253][ T30] audit: type=1400 audit(1766366578.548:1081): avc: denied { module_request } for pid=13751 comm="syz.2.1851" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 618.720319][ T30] audit: type=1400 audit(1766366578.568:1082): avc: denied { read } for pid=13752 comm="syz.5.1852" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 618.747139][ T30] audit: type=1400 audit(1766366578.568:1083): avc: denied { open } for pid=13752 comm="syz.5.1852" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 618.773913][ T30] audit: type=1400 audit(1766366578.578:1084): avc: denied { write } for pid=13750 comm="syz.1.1853" name="raw6" dev="proc" ino=4026533113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 618.796949][ T30] audit: type=1400 audit(1766366578.598:1085): avc: denied { sys_module } for pid=13751 comm="syz.2.1851" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 618.820050][ T30] audit: type=1400 audit(1766366578.608:1086): avc: denied { create } for pid=13750 comm="syz.1.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 618.898705][ T30] audit: type=1400 audit(1766366578.608:1087): avc: denied { write } for pid=13750 comm="syz.1.1853" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 619.048653][ T30] audit: type=1400 audit(1766366578.618:1088): avc: denied { ioctl } for pid=13745 comm="syz.3.1850" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 619.234041][ T5926] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 619.386867][ T5925] usb 5-1: USB disconnect, device number 95 [ 619.557511][ T5926] usb 4-1: unable to get BOS descriptor or descriptor too short [ 619.683667][T13765] atomic_op ffff88803595c998 conn xmit_atomic 0000000000000000 [ 620.163399][ T5926] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 620.192496][ T5926] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 620.212298][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.228398][ T5926] usb 4-1: Product: syz [ 620.233925][ T5926] usb 4-1: Manufacturer: syz [ 620.238907][ T5926] usb 4-1: SerialNumber: syz [ 620.443476][ T5925] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 620.623429][ T5937] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 620.643430][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 620.651433][ T5925] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 620.660573][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.668975][ T5925] usb 2-1: Product: syz [ 620.673133][ T5925] usb 2-1: Manufacturer: syz [ 620.677967][ T5925] usb 2-1: SerialNumber: syz [ 620.690045][ T5925] usb 2-1: config 0 descriptor?? [ 620.698180][ T5925] gspca_main: se401-2.14.0 probing 047d:5003 [ 620.786477][ T5937] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 620.795679][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.803710][ T5937] usb 5-1: Product: syz [ 620.807966][ T5937] usb 5-1: Manufacturer: syz [ 620.812587][ T5937] usb 5-1: SerialNumber: syz [ 620.824044][ T5937] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 620.845607][ T5931] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 621.311369][ T5926] usb 4-1: USB disconnect, device number 88 [ 621.521262][T13772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.532394][T13772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.547883][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 621.547899][ T30] audit: type=1400 audit(1766366581.398:1133): avc: denied { read write } for pid=13771 comm="syz.4.1857" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 621.582911][ T5926] usb 5-1: USB disconnect, device number 96 [ 621.609690][ T30] audit: type=1400 audit(1766366581.438:1134): avc: denied { open } for pid=13771 comm="syz.4.1857" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 621.623465][ T5925] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input62 [ 621.633809][ T30] audit: type=1400 audit(1766366581.438:1135): avc: denied { ioctl } for pid=13771 comm="syz.4.1857" path="/dev/video3" dev="devtmpfs" ino=934 ioctlcmd=0x5604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 621.733534][ T30] audit: type=1400 audit(1766366581.438:1136): avc: denied { create } for pid=13771 comm="syz.4.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 621.816062][ T30] audit: type=1400 audit(1766366581.588:1137): avc: denied { read } for pid=5175 comm="acpid" name="event4" dev="devtmpfs" ino=4022 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 621.897710][ T30] audit: type=1400 audit(1766366581.588:1138): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4022 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 621.930244][ T30] audit: type=1400 audit(1766366581.588:1139): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4022 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 621.955993][ T30] audit: type=1400 audit(1766366581.638:1140): avc: denied { create } for pid=13777 comm="syz.5.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 621.976439][ T30] audit: type=1400 audit(1766366581.648:1141): avc: denied { ioctl } for pid=13777 comm="syz.5.1859" path="socket:[44802]" dev="sockfs" ino=44802 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 622.053879][ T30] audit: type=1400 audit(1766366581.648:1142): avc: denied { setopt } for pid=13777 comm="syz.5.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 622.153062][T13786] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 622.313614][ T5923] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 622.518472][ T5931] usb 5-1: Service connection timeout for: 257 [ 622.524743][ T5931] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 622.532996][ T5931] ath9k_htc: Failed to initialize the device [ 622.551379][ T5926] usb 5-1: ath9k_htc: USB layer deinitialized [ 622.590116][T13788] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI [ 622.602199][T13788] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 622.610597][T13788] CPU: 1 UID: 0 PID: 13788 Comm: syz.4.1861 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.621517][T13788] Tainted: [L]=SOFTLOCKUP [ 622.625817][T13788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 622.635862][T13788] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 622.641560][T13788] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 622.661154][T13788] RSP: 0018:ffffc9000d457ae0 EFLAGS: 00010202 [ 622.667231][T13788] RAX: dffffc0000000000 RBX: ffff88805b198000 RCX: ffffc9000cc09000 [ 622.675212][T13788] RDX: 0000000000000007 RSI: ffffffff82494a6f RDI: 0000000000000038 [ 622.683185][T13788] RBP: ffff88805b198098 R08: 0000000000000005 R09: 0000000000000000 [ 622.685002][ T5923] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 622.691151][T13788] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff92001a8af6b [ 622.691168][T13788] R13: 0000000000000000 R14: ffff8881426c6c20 R15: 0000000000000038 [ 622.691181][T13788] FS: 00007fd1261ee6c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 622.691201][T13788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 622.702637][ T5923] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 622.710241][T13788] CR2: 000000110c351645 CR3: 0000000055895000 CR4: 00000000003526f0 [ 622.710259][T13788] Call Trace: [ 622.710266][T13788] [ 622.710274][T13788] __kernfs_new_node+0x7b4/0x990 [ 622.710302][T13788] ? __pfx___kernfs_new_node+0x10/0x10 [ 622.710323][T13788] ? find_held_lock+0x2b/0x80 [ 622.710347][T13788] ? kernfs_root+0xee/0x2a0 [ 622.778257][T13788] kernfs_new_node+0x13c/0x1e0 [ 622.783011][T13788] ? kasan_save_track+0x14/0x30 [ 622.787843][T13788] kernfs_create_dir_ns+0x4c/0x1a0 [ 622.792937][T13788] cgroup_mkdir+0x40f/0x12e0 [ 622.797510][T13788] ? __pfx_cgroup_mkdir+0x10/0x10 [ 622.802522][T13788] kernfs_iop_mkdir+0x111/0x190 [ 622.807356][T13788] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 622.812366][T13788] vfs_mkdir+0x731/0xb60 [ 622.816594][T13788] do_mkdirat+0x442/0x5e0 [ 622.820910][T13788] ? __pfx_do_mkdirat+0x10/0x10 [ 622.825766][T13788] ? strncpy_from_user+0x203/0x2e0 [ 622.830870][T13788] ? getname_flags.part.0+0x1c5/0x550 [ 622.836221][T13788] __x64_sys_mkdir+0xef/0x140 [ 622.840879][T13788] do_syscall_64+0xcd/0xf80 [ 622.845365][T13788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.851244][T13788] RIP: 0033:0x7fd127f8f749 [ 622.855637][T13788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.875223][T13788] RSP: 002b:00007fd1261ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 622.883705][T13788] RAX: ffffffffffffffda RBX: 00007fd1281e5fa0 RCX: 00007fd127f8f749 [ 622.891658][T13788] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 00002000000001c0 [ 622.899607][T13788] RBP: 00007fd128013f91 R08: 0000000000000000 R09: 0000000000000000 [ 622.907559][T13788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.915512][T13788] R13: 00007fd1281e6038 R14: 00007fd1281e5fa0 R15: 00007ffea390da18 [ 622.923470][T13788] [ 622.926476][T13788] Modules linked in: [ 622.931561][T13788] ---[ end trace 0000000000000000 ]--- [ 622.963392][ T5923] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 622.976535][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 622.983241][ T5923] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 623.017100][T13788] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 623.023483][T13788] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 623.036587][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.043747][T13788] RSP: 0018:ffffc9000d457ae0 EFLAGS: 00010202 [ 623.086516][T13788] RAX: dffffc0000000000 RBX: ffff88805b198000 RCX: ffffc9000cc09000 [ 623.087414][ T5923] usb 4-1: config 0 descriptor?? [ 623.102405][T13788] RDX: 0000000000000007 RSI: ffffffff82494a6f RDI: 0000000000000038 [ 623.103950][T13784] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 623.126140][T13788] RBP: ffff88805b198098 R08: 0000000000000005 R09: 0000000000000000 [ 623.140056][T13788] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff92001a8af6b [ 623.151569][T13788] R13: 0000000000000000 R14: ffff8881426c6c20 R15: 0000000000000038 [ 623.161492][T13788] FS: 00007fd1261ee6c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 623.172305][T13788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 623.179055][T13788] CR2: 00007fa27a9b6ad8 CR3: 0000000055895000 CR4: 00000000003526f0 [ 623.187873][T13788] Kernel panic - not syncing: Fatal exception [ 623.194232][T13788] Kernel Offset: disabled [ 623.198540][T13788] Rebooting in 86400 seconds..