last executing test programs: 13.278058048s ago: executing program 2 (id=1819): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f0000000780)=""/139, 0x8b}], 0x4, 0x1fd, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd/3\x00') openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000640)=[{&(0x7f00000038c0)=""/102372, 0x18fe4}], 0x1, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x80000, 0x5) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e0000000000000001010000fffbffff00000000", @ANYRES32=r3, @ANYBLOB='\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r5 = accept4(r1, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, 0x0, 0x78) 10.949945508s ago: executing program 4 (id=1828): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x4, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x2, 0x0}]}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, r5, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x2c}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x43}, 0x8}], 0x1c) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000200}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00aea9cb2aa0befd3800fdff369cff704816ca2452867078f707a1978f2b0fa2756f3f319fb3a6c714bace795437d63c1506fbc0adea238d9bb27d12366d80f1a28f022feb6c03f8434c9910779d22a3aa3360ef11bb2217f5936ce631fb80aece24a61fbd2499f3d70563310d56d636224ab2916340219853066b48bcf236636cc633", @ANYRES16=r5, @ANYBLOB="100028bd7000fddbdf25310000000c009900050000007e0000000800010044000000"], 0x28}}, 0x40044) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @empty}], 0x10) r10 = socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(r9, &(0x7f00000003c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000400000000040000000000400009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x25, &(0x7f0000000100)=""/95, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0xe, "57dee2a603ae81f26908efea4644"}, &(0x7f0000000200)=0x16) setsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000240)={r11, 0x7}, 0x8) dup3(r3, r10, 0x0) mq_unlink(&(0x7f0000000180)='\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x22010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 9.574619545s ago: executing program 1 (id=1829): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0xbb) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010042) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000480)={0x0, 0x7, 0x2, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000880)={r4, 0x8, 0x1, [0x0, 0x7fff, 0xe898, 0xb5b, 0x7], [0xd, 0x3ff, 0x10000, 0xb, 0x3, 0x100000000, 0x5, 0x5, 0xfffffffffffffffa, 0x120000000000000, 0x4, 0x0, 0x21, 0x80, 0x100, 0x0, 0x2, 0x3, 0x6c91, 0x9, 0x5, 0x1, 0x4, 0xffffffffffff962a, 0x8, 0x6, 0xab56, 0xf, 0x43acf0b, 0xa2, 0x6, 0x4, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffe, 0x1ff, 0x3fff7ffffffffffe, 0x6, 0x2, 0xfffffffffffff801, 0x9, 0x7, 0x8, 0x5, 0xc, 0xfffffffffffffe01, 0x2b, 0x8000, 0x4, 0x1, 0x8, 0x7, 0x78, 0xbf6, 0x7174, 0x8, 0x7ff, 0x2, 0x10, 0x73d, 0x7, 0x80, 0x5, 0x8000000000000000, 0x6f18271b, 0x2, 0x1, 0x4, 0x80, 0x7, 0x6, 0xb, 0xc054, 0x100, 0x29f295f4, 0x9, 0x8, 0xf, 0x9, 0x3, 0x16aa8, 0xaef, 0x805, 0x1, 0x7, 0x7fff, 0x5, 0x0, 0xb11, 0x1000, 0x8, 0x5, 0x4, 0x2, 0x8, 0x7, 0xd, 0x1, 0x8, 0x6, 0x6, 0x8, 0x7, 0x4e98, 0x2, 0x3, 0x5, 0x5, 0x100, 0x8, 0xffff, 0x1, 0x5, 0x6, 0x0, 0x7fffffffffffffff, 0x7, 0x7fffffffffffffff, 0xef0, 0x4, 0x3ff]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000008200000095"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000003f, 0x0, 0x0, 0x3b5b74e9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) connect$qrtr(r3, &(0x7f0000000440)={0x2a, 0x0, 0x4001}, 0xc) connect$qrtr(r3, &(0x7f0000000000)={0x2a, 0x0, 0x1}, 0xc) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)) 9.405915339s ago: executing program 1 (id=1830): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = dup(r0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES16]) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc04c560f, &(0x7f00000001c0)=@userptr={0x3, 0x1, 0x4, 0x1000, 0x1c, {0x0, 0xea60}, {0x0, 0x1, 0x1, 0xb1, 0x5, 0x2, "9912b80a"}, 0x1, 0x2, {&(0x7f0000000180)}, 0xc00, 0x0, r5}) r6 = openat$bsg(0xffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$HIDIOCGREPORTINFO(r6, 0xc00c4809, &(0x7f0000000100)={0x2, 0x3, 0x4}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x85f, 0x0) mlock(&(0x7f0000399000/0x4000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = gettid() syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@country_functional={0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b0000010902"], 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000040)) 7.783710078s ago: executing program 0 (id=1831): memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\x00\x00\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW9\xfd\x00\x00\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3I|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG\x00\x00\x00\x00\x00\x00', 0x4) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x0, @loopback}], 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}]}, &(0x7f00000002c0)=0xc) 7.757198799s ago: executing program 4 (id=1832): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x4, 0x81, 0xfffffffffffffffe, 0x3, 0x7}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1021, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x1000000000000000}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1a) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="99000000", @ANYRESDEC=r4, @ANYBLOB="0100000000000000000007000000"], 0x14}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000004e40)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x7c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_USERDATA={0x68, 0x7, 0x1, 0x0, "c9c5cf5c900f21e267313db7567da81d14d61ae4fc10de3bd0fe593384855b1c26308cce1ae2d8265fb04836a9886c47a2952848dafbc68eae340b5171ed0a95a4b1abf4a62e13444822b836f905008dc99a31f71f9ef4183f33532e0033947025dda81e"}]}, @NFT_MSG_DELOBJ={0xb8, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x77, 0x8, "c4dd9be8e2d04dfc0be0362df46342024fe57af0e693e34230f4e2c92ac947e05e066223c3fd3af4f6da1784f89ce7286ef2a39914d4278fa3f0f2cdd38a76bb356b3a78888255a4764dd0dc564d3196c63218e058876366369e86c115cd4b7bde6db9e7ee92e1e7ed0e1ac45eddd3c853284e"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x948, 0xc, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x934, 0x3, 0x0, 0x1, [{0x378, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x108, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "61edf1d5fe"}, @NFTA_DATA_VALUE={0xf8, 0x1, "6eed8d02e0ea6b7f806b615b657395998d0e4c41adf4bfc547936f6dd09ad3024bdc310b882c72a520889df74839ddcb2e83ff84765339dc409fe90fe02c9bd9347fc2fb009d1b6bad2dc13fa47870ef004044d195fd49d70ea140c3d7c1903b636b0a421fdfdaf521bb765e1365165c2c62d259b7b9c2d4e1c543807c97f7b3119f887bacec0f1d2be1cd11894a891aa183049d6dabab9d67f50d72445219731f9aa3eb62e6bfb3a98a9717a219e0dd4e92a0b04a22b0e1dc091c6188697e0c2adc580c1a6792f461db4b771176cc0db3fa67a4dc1ba6eee4bb6844cf2ccf0c1bd4d3723026a49daa5d09279e1e4d42fcb9eb52"}]}, @NFTA_SET_ELEM_DATA={0x260, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xcc, 0x1, "3f613a5574ad6c61c6fb063511b869f41758e95bb0e55215359909e239a0b8c9fc06d27fc9099a49fcabd568896d84e1927f4f8b419810ef27bb0428ad960d7cca57eb99ea0cf0d41459b4a55a4016650b5fdb3e3c45d27e2b294af0f21f488537c15043f6f4db16bc83f5562970bda7095411c44f380723dc4e74b38afcb02b4b9d80e777171324df5902dc794f12ef6d0d4deee4915c3c413952da353aca48a8f142bc601343d60c295ae86941a433ab77c464fdfa2e146692756217a6d098a02f382206623272"}, @NFTA_DATA_VALUE={0x49, 0x1, "16cca89b455b26d0bc288f12592aef735e7150f509bd3998af58e7725e4269b3382a90348ae68529062183680f006ff6b94a8657139ac91c76c460151f5e79a4425922a866"}, @NFTA_DATA_VALUE={0x92, 0x1, "4a719482052757811938d3c73066be7691fe7c77d22ec6153db4c73e8e502db96a7c703b8bb861139d077bfee7b9998d1e043e0579c4917c4fcd3ed2c74c90be2339e04033759527065f785aa7f3ff3f6bcdc360e12088ca08564e8cce037d57805bb7e764d429b14c73f09f4559c29a3b62dac9e72813fda5553aa94cf8d8675fd59ad32c61b178e9ba3afe01bd"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}]}, @NFTA_DATA_VALUE={0x11, 0x1, "ede2e6a701f70e218b1f79b758"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x5ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1d8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x83, 0x1, "e8675443b5bcacd5130f9c8955e2431437bcd9d6971dbf846a93e85b2ae32bd480062030bf8af3204100b938f172e60b1e9490587a6031e4de0173a39a3e4a5874d1c6e2590ac145cf491bb03338a7fe89931a14aaccb7a97a85c26762abb9383af5a00d1ed51e4b93a36efa8881b27cbca1e088055204af8e43475334f247"}, @NFTA_DATA_VALUE={0x46, 0x1, "6abf84bd255be1c90a54a436f752accb5fdd68020f0937ccc7df637984acb6110894b5a56a74c1d9dd5cec446de9a7a4c8d52064ac5953e7a86eaab75efd5adb50c0"}, @NFTA_DATA_VALUE={0x2d, 0x1, "41c46b33b997c5c4da92dfc0594365c6aea755d06aa59d246fdccd5904b07cd69d4249c39f82dd6889"}, @NFTA_DATA_VALUE={0x2b, 0x1, "1107932bdf306bfd46634f7fb97370cc829d73d0bf543517a496dc34a01c65eb1623e6c06bb717"}, @NFTA_DATA_VALUE={0x3a, 0x1, "b706d8fb6f3dee6ebb69fafaa7b3061ee655f3e23e6bbe737e692a2ca7c1e25cc7bbada19cfb8861c7946346a9e60f9115a8091832b3"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x72d}, @NFTA_SET_ELEM_EXPRESSIONS={0x388, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x334, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x324, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x118, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "edf010527f77e3aa76eba970296dd6657c28d6372f32a9af220f8fab58797415f3603a2607b6904a98353cc169afef6e254e2befb5dff35e7a727b15b0affea3de1ac840b24be7a2486c4e7c68496ca81d6c1d499e3e1dc00c44345ba141ee50beecc507fdb46e6f45502fe6b5eacd2281fae704b4ff640656f3348193aeffc2ef9b8e5501cd66160e9c025207a36a33ea930b519036c56b92f69b5e42b46658a4f4685ef0ea8702a03bede8a82f359dcda93fa85c8dc9fc55"}]}, @NFTA_BITWISE_XOR={0x130, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3c, 0x1, "25cdaee1fc271f158419b420d21db2a3b34e9d94d7bd424f8f4168f98fa65589e1ffe3926d4953f1d630014da772ef5decc5bec414bb3b69"}, @NFTA_DATA_VALUE={0x19, 0x1, "0a5f45e538f173f215760a837b5d6dcdd31a53468d"}, @NFTA_DATA_VALUE={0xd4, 0x1, "97f9e9b4ee0c8e625e82bd7aa39475c92146e4d5e06b73c9f85d8b0d900a7fbb5df04092040a3cde380032ef93d02d0d31f5f02a9d7f2b79900a28d133d354f0220c5c435ffb42d47842e1bc152fb2473583d2ce4312f392f448f51dc3738ba131c9d444a6fd9db5a8ba51c3464702b72c38755339fb2c71443769637bfa13f2e8e273d8ae85935d48ae55fa82241c72b51665d93e087428975bb7cdda9785cf224286cd7360e4311223ba873101bc76e4a7a1a93cace3d961496b22f5eb5db9095cf25bb9074b44ae03c7d6314f79df"}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1ca}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFTA_BITWISE_MASK={0xc0, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x15, 0x1, "764c18c5f18524d194d85dfa5fb4630605"}, @NFTA_DATA_VALUE={0x8d, 0x1, "52654f8e7ce82bb58c2e26c5e3b750f5499039eae3e13beffea25d3a80147ba4fdc1c68888841a972b747e2865f14cc0882bbb4a7632096919a9223fe12b5984dc3a919fee236f96b27da90635c33f5cf8b2b5cf168f1b7aad7758e680d5b2f8635d5e91ffdff5f723d17a08bb9a2edec65d6005d5519f4506289706a108fdc04d709d44c380b57814"}]}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x20c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x1b0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd6f7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2100, 0xc, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x84c, 0x3, 0x0, 0x1, [{0x32c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb4, 0x6, 0x1, 0x0, "da4ee6097146c5bc2fbe1639d12c0f8439ace8a42b42b4ea37600dbeab083a6b3b3c8ce651191a8af0156acb3b83604b69d097f08fa3876782d4d41bfb808165ae045ab58f43a887c6ed562892eec4511bc2a5761c4db4b89c3f88861617c68c6e895c3e245edc911b2894b6ebfe5342425142bacae13eaebec2241da3cc96203360afa11216f9c5ae6cb20953badb53f9d1e051595277c86a09816ec2b9bb9578e3fb938aa40be0038ef07a0cd4f6f2"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x254, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xc5, 0x1, "ab5a0cd36acb9ab9f1e10b4673b6373260b48fae2b2b7e03ed813968a9ddcfec81c083c27695b75b967eafc47b7f12ccaf47ff5b1d842a2aa24dc2119746909c6172c473ce5c66faf192313957ef058e5a8dc04f1431ffe823fcfeb6deeb9b4d6ab04397c575fc72e2704cfb03b0291c2522e487f7f08e537336abc2c9d8ee630c8a6fcff3851279b86dfde47bb3505c44a23b8aa8412897c08e1050d718b6b0c9be57155c9dcc7a85ffd97462437550b317220d6b5aae41b2564cbda9be995249"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x5c, 0x1, "a1ab06817db38535fb280fcbbe7230b44dbc04aa01a2007b91c9494ac1265573e8974dd59cdfba7cbc91da631fb70af2a8e59a3fb58bb00ecbdb82803175fb55cf71ebb7593758b8021fc1385c664c19633f73ebf94e2400"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x55, 0x1, "a1d67f6219f341858b8cc0ea149f02873aa9353b5ab00458f2143076b2f94073c3af7184ecae25d41d7ff03738aaa3a2f3574e918a983db99b8060ecda76f8ed351530a4d4ef1cca527992a63431bbb6aa"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}]}, {0x42c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x41c, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '&%\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfff}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '[\xed\x00'}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}]}}}, {0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x4c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x43be6f27271b0c0}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x330, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x320, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x31c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb1, 0x1, "7d7169b3269c606268618ceef2570a8b96e1a6a27e43a49381e72aa4b2cfd143f9e77b46597218bfe7d572eec8c8e2dac61d5d5d1cc233bb3586e0f62383630bd2b45853e3b8db3f31057da529f6db6550443d70892c9f9c5789ce59e14fcc5147dabb75184151c5cca35d224441f6003a507d38f5a318b6745d285d53e2ec14af2854ab266e5ff485614c3211e7de81fb29c3225a04797cffd924314866009fb9ecd8b3d5c40d65e675e78346"}, @NFTA_DATA_VALUE={0xa4, 0x1, "10c85ef15563dabda0fae959d30ae15216c6e0cae0c169f782c6a2c952ec9ce6d716f9f77781b93b1dfbeab940e40eb7e4b44d135c72713136c216b6734f570b1fa89ee2290a3e654453958bd764bb138444f9dc1d5afcfb7c6fe016f2829bf05aeb5f4703055cb9da7f7cef47443162068e59b99c80b7fd5a4986bfee0e4b600ded8ea4d37692a31f7c00614294d50cdc783efd4cd5af5b4ae5fc3e730977cc"}, @NFTA_DATA_VALUE={0xc6, 0x1, "1e099de4c0650a076de3fbaf60b3c8855df6089b1a464e6ce6e820ce20353877c781f755a990e95378bce6c3e259ccdca4c516d445967fc886ddf91c8e762929da58e06843eb77863f5521050a3a10c467ddc01dba997438ff95e6acf9e4aa428b06a4444a69a9750f641374311649d3bf8b9f117cce38dcf4e26c02d1cfde57569c23e48b0c19b2ef3ee15dea13365cfd76f10fcfc92498676e809c49c29d8d9b7f30e5838cd5db03b91df79ac249fbb1e92a9c2398ec5a57aa6f76828ba6896729"}, @NFTA_DATA_VALUE={0xbe, 0x1, "63d238d8872ecf31f749fa89ba2dd80c2d0cec47427a8af73616f91d7b508b6d6d0aeb511510a88e84a9ddfa4e0c2b41e8a353bf56253798e09b4fb2b3aabce4732af389bec8a8de4e0cfbf4ef4bfcecad0f623f54f335afaf02a9d86d5e4035e82c4192e6e01d0eeab649c038835607b0d5d9a9f69d8f52bd9be8993851683320d9c1b2f7cda72ea67f81d643a93cbcc3afde4da5a7919a93c1be0fea0be04ef474ae28febfb04d9fad4be63a4aa3faf34759b78de78ba7fc1d"}, @NFTA_DATA_VALUE={0x35, 0x1, "c55540a489ae0bc20d0742751199e5d667130f802ebf580f6f8311711b4444aaafa813741ec5874e4720b67c14827be8f0"}]}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x4}, {0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x5b, 0x6, 0x1, 0x0, "e1d4f343495277d6f827abbd64878fabd88b0d3693c70edabfbdfc51f3453d089887ff339a3cf83d69978902934eae8891a41343f504324bdd69ee1bef663b8d4db1dff8543597f325a04e6830d10dce633eb3e1ac445a"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1878, 0x3, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x90, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x120, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x80, 0x1, "c62ab87f2189686e1f9af52ef039b0c83621cb38edc591be0830bc690a251a1da66693849354b285803e3cdb48f1e49766588286580600c2d66242b9da12fbf23d6e85a40591600f7cd6a578a0935323cf4dd2c25a5f4854ddd7e32b90ac4a02a18ff53c0cc488d979fb520b20fcba76b65ab87d61be0f5de9c170cb"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_USERDATA={0x57, 0x6, 0x1, 0x0, "0b3896357a5e0cbfb973a121f3f830d7adcf9f49a6a7255091f9da2f4199383e476b04383eead0e9abee25d3518976990baa67f8df681dc4fb99bc2e2339f89404be0c09ccdad46c680f29c8db2e823623c400"}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}]}, {0x214, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x19d0}, @NFTA_SET_ELEM_KEY_END={0x54, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10001}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_DATA={0x178, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "9adfd31fb4161eed3397e25575890e8e5365f416ca2a9b1bfa56d89b7fcf5c9cc60050d1fdfc282bc3f856f2f10d4ae31a3c34fa9f0f02fa5edf55043703c39896b83b50f7f1be15e5ef6efe942b1d281c3dc84a28d6b262106db46e4e120f948b6591abe4166be87459f9671a5b2f880a40878338fed657015320adbeb4a396b8f7aea5bc1252b2bc3b377ab7208eec2ce4d29e94748b648b6cad6bb7b1b16099f8464c6f78a8803459bb6e7a675b8d49be859f1343785409016019ee6a6c338b859a465191b5250b3d879d0b3b4c267eb740bb16b9530d92454ab3f42fc1f1f44c61ef3914c31bf37c95441e9d588430d322c680"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000002}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x1048, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY_END={0x1008, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @log={{0x8}, @void}}, @NFTA_SET_ELEM_USERDATA={0x23, 0x6, 0x1, 0x0, "a829a73f59c522582df32de60e4f6846c6bb58fa8bdd501ca1e3ff80941e9a"}]}, {0x310, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x2f0, 0x7, 0x0, 0x1, @cmp={{0x8}, @val={0x2e4, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x298, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xaf, 0x1, "43f46c272188c62f727962f0cd170292cd1bb51757d963326d5207a24eedc31919d736cb3fa33e3f3b39fcee8258cf67a241008276ae6a275be137550a78e74d2f3c1156e46c43f3f53ef93ceecbdee6a6d06ad50c50a0d7dbfaeb638d7d803abd075edf519e7276228c35767156fc5241bab8e010a6b44ad26b5df6ec73091a63e3e9b3969d774113e2ec72528b895cafc4f21a2afc4728087fff8de5b9bfd0e659f035142fa01ad3cb64"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "cfc278b29f2ab3d58a4a0b03c965f3473bdcdc98417239496640234bc5608a807d522cfb4b6aaeeb7537ab275b387af541a053977f36c7c4d752dfe516ea4e16882fddefa253b726bae5cfab8d7f0321d5108148db3676b4db558a8f567916b05add139c09f8bae12a60cda6e5b76f54e7260dd7e7ea3b342d0cd5294c84fce816ef13ab562a6533ecd5529ad43f770facc129002bbbf11905c51b95c4d3e08fcc48780ae7e4877228c4d05ba5ac0bcf2fe76ccaf091ccec36cff78e59d1d38fff72ba2d98041e937ac1a8596434d96351b85d08860696328211274659bf1b7656e48adfc7d431657dfa2233b4"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "d963153d44aa8b"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}]}, {0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x58, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3c, 0x1, "41a5aa4d1bfd6201db25a654a682455553cc32bfe16bbaee2c731afde37ec1239d5f65ece0d69bb69d5ceec2d9aad912f13dba86259de9fc"}, @NFTA_DATA_VALUE={0xa, 0x1, "4b04092827f3"}, @NFTA_DATA_VALUE={0x9, 0x1, "0523183bd0"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x194, 0x18, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x120, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe6f}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'gre0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3028}, 0x1, 0x0, 0x0, 0x5}, 0x200400c0) ioctl$TUNSETOFFLOAD(r4, 0x400c744d, 0x20000000) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) 7.499982029s ago: executing program 0 (id=1833): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x6c189000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r1, r1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045002, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) socket$unix(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0) (fail_nth: 10) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0xe) 6.962904674s ago: executing program 0 (id=1834): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) write(r1, &(0x7f0000000200)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f94266", 0x39) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b24a848cba666425220e717611d86e9d3db36770da6cef988892046f5ee717561f93dbaa49fbe4de8ed75b2c61d50e54863f57c563417f0efeac38cd655a162054171dbc7ce107f5ad", 0x49}], 0x1, 0x0, 0x0, 0x4004001}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe10859224ad54afac1f2875397bdb22d0000b445a1a93c01000000000000007d3d458dd4992861ac000000000000000000000000005244534b00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x2]}}) 6.648466107s ago: executing program 0 (id=1835): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async, rerun: 32) r0 = gettid() tkill(r0, 0xb) (async) ioprio_get$pid(0x2, r0) (async) r1 = socket(0x11, 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x107, 0x11, 0x0, 0x20000000) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) (async, rerun: 32) sendto$rxrpc(r1, &(0x7f0000000080)="dee222e6b7482dfb3753259ace8ee90ee374f7a8282d27543a51b2498d8845e7b35106ae29d11ca370d7", 0x2a, 0x2000c014, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @empty, 0x4}}, 0x24) (rerun: 32) 6.550196835s ago: executing program 1 (id=1836): sysinfo(&(0x7f0000000100)=""/254) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) sysinfo(&(0x7f0000000200)=""/255) sysinfo(&(0x7f0000000000)=""/58) 6.522251378s ago: executing program 1 (id=1837): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x1101}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setregid(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="34000000680001090000000000000000000000000000000006000300000000e2130002"], 0x34}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x140, 0x10, 0x1, 0x1, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r7, 0x7}}]}, 0x140}}, 0x0) sendto$packet(r2, &(0x7f0000000140)="ada4a07d23f3b95ec6ac7a8f3459fd8642fda24a0090c087524277a50b6139bc8638b0df4fc91626339272137f59295c1918250dabf069a2c3e29450c10139acae29252c318908e7b87a4692c657ae749764e165457151b8be0c8ac4bc90031e0a1b6a3ac9cfceca6196adb08135ba631fdb6796d3be87e0bf3200a8293497fcf783735c6aa546", 0x87, 0x800, &(0x7f00000000c0)={0x11, 0xf5, r7, 0x1, 0x9}, 0x14) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) listen(r5, 0x1ff) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r8, &(0x7f0000000000)="1080001cab6f967a8042a369a422f16cc0a4ad1fcd", 0x15, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 6.219525725s ago: executing program 0 (id=1838): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$iommufd(0xffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r3 = socket$inet6(0xa, 0x3, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0xf4, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc24}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ac9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x16}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x12}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@private2, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4810) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="00c744"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$iommufd(0xffffff9c, &(0x7f00000000c0), 0x400, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) (async) socket$inet6(0xa, 0x3, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0xf4, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc24}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ac9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x16}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x12}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@private2, 0x0, 0x4}}, 0xe8) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4810) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="00c744"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) 6.114193888s ago: executing program 4 (id=1839): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x6c189000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r1, r1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045002, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x7f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0x0, 0x20, 0xff, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x4, {{0xb, 0x24, 0x6, 0x0, 0x0, "2f89e81ab117"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x54c, 0xfc}, [@ncm={0x6, 0x24, 0x1a, 0x1, 0x22}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x0, 0x7, 0x1, 0xa76, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x9, 0xd6, 0x9, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x10}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x7, 0x38}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0xcf}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x1, 0x3}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x50, 0x2, 0xab, 0x58, 0x10, 0x1}, 0x26, &(0x7f0000000100)={0x5, 0xf, 0x26, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0xc, 0x9, 0x2a85}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "a0596331d64e6af39562b09d6eaa9283"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc8fa}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f00000000c0)={0x0, 0x0, "1ec4618f6538ecc26693065a2dcc26d92bb4f1030cd2c1011cdbf894a0839dc2"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x0, 0x1}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$inet(0x2, 0x1, 0x0) shutdown(r5, 0x0) ioctl$TIOCCONS(r4, 0x541d) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa}}, 0xffff}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009200)=ANY=[@ANYBLOB="140073001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @local, 0x6}], 0x1c) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r9 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x8}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) pause() 4.449896402s ago: executing program 3 (id=1840): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x4, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x2, 0x0}]}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, r5, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x2c}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x43}, 0x8}], 0x1c) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000200}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00aea9cb2aa0befd3800fdff369cff704816ca2452867078f707a1978f2b0fa2756f3f319fb3a6c714bace795437d63c1506fbc0adea238d9bb27d12366d80f1a28f022feb6c03f8434c9910779d22a3aa3360ef11bb2217f5936ce631fb80aece24a61fbd2499f3d70563310d56d636224ab2916340219853066b48bcf236636cc633", @ANYRES16=r5, @ANYBLOB="100028bd7000fddbdf25310000000c009900050000007e0000000800010044000000"], 0x28}}, 0x40044) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @empty}], 0x10) r10 = socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(r9, &(0x7f00000003c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000400000000040000000000400009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x25, &(0x7f0000000100)=""/95, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0xe, "57dee2a603ae81f26908efea4644"}, &(0x7f0000000200)=0x16) setsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000240)={r11, 0x7}, 0x8) dup3(r3, r10, 0x0) mq_unlink(&(0x7f0000000180)='\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x22010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.145912465s ago: executing program 1 (id=1841): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x3f) fsmount(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}]}, &(0x7f00000002c0)=0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="02030000170000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000e0ff05000500000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0xb8}}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003"], 0x0) syz_usb_control_io(r6, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000f40)=""/113, 0x71) close_range(0xffffffffffffffff, r4, 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 2.973305871s ago: executing program 4 (id=1842): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x6c189000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r1, r1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045002, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) socket$unix(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0) (fail_nth: 11) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0xe) 2.926134579s ago: executing program 0 (id=1843): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000080), 0x0, 0x404e085) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x23, &(0x7f00000001c0), 0x8) r1 = syz_usb_connect$cdc_ncm(0x0, 0x81, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026f0002010000000904000001020d0000052406000105240001000d240f0100000000000000000006241a0000000724140100000008241c0800e8d9000424020f090581030002ff00000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000c4b20710200e01015a7a0102030109021b00010000000009040000012e6d0a00090507"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0x0, 0xa0, 0x3}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000018000380140003800c000180080001000000000004000180"], 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="14876737dd61d468261ee20000001000010000000000006aeabea9e87ba6450000000000000a20000000000a030073797a3000000000b8000000090a010400000000000000000100ffff0000b9f654f63ef800273708000a40000000000900020087797a31000000000900010073797a3000000000080005400000002b7c0011800b00010074617267657400006ced01805900010041554449540000000400030008000240000000001495c900100001000000000700000000000000"], 0x100}}, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040), 0x4) r6 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc25c4110, &(0x7f0000000a40)={0x0, [[0x1], [0x0, 0x2], [0x9]], '\x00', [{}, {0x0, 0x3}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}]}) r7 = memfd_secret(0x0) ftruncate(r7, 0x5) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x6000)=nil, 0x6000, 0x7, 0x11, r7, 0x0) syz_io_uring_submit(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) dup3(r9, r7, 0x0) sendto$inet6(r2, &(0x7f0000000580)="03", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.925594701s ago: executing program 2 (id=1820): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="cf00000021000100000000a897700000000000fc0100000000000000000000200000007f00007134ff02e7740100000000000000000000000000000000000000000a00000000004ca1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffff000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac1e00010000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000fe8000000000000000000000000000bbff010000000000000000000000000001fe8800000000000000000000000000016c0000000000000000000200"], 0xec}}, 0x0) (async, rerun: 64) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf255200000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000100000800cb0008000000060048002e0000000a000600ffffffffffff000005008900000000000a0006000802110000010000"], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x20000012}) (rerun: 64) r3 = openat$iommufd(0xffffff9c, 0x0, 0x204c02, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 32) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000002c000480280001800e000100696d6d656469617465000000140002800800020073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/protocols\x00') pread64(r5, &(0x7f0000000400)=""/255, 0xff, 0x8) (async) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) setregid(0xffffffffffffffff, r8) (async, rerun: 64) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000002060000000000000000000000060000050004000000000011000300486173683a69702c706f5174000008001c100780050014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002", @ANYRES32], 0x44}}, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r10, &(0x7f0000000000), 0xfffffecc) (async) splice(r9, 0x0, r11, 0x0, 0x4ffe2, 0x0) (async) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100b, &(0x7f0000000500)=ANY=[@ANYBLOB="66653dc499bf711855386c4ede684f94ee119c0fef0dd5b7bf01abcd98b29c6990d06d13b775200fbf96662c2caba7ee04002137f83e80bb0f3503f87762e20386bd1936c90cf9cb5e48c02df9f5a51d5c28eea5a1e052839ea576558f28e6ece874c4feffd50af689270415e75ee213a88d066ec29977bba21bb952dadeab95bd3456b296f44d79b6934a9970415d55bba8c5fa89c67a4b817bf86739ad0d129a", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r6, @ANYBLOB=',group_id=', @ANYRESDEC=r8, @ANYBLOB="2c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030306530302c6d61785f726561643d3078303030303030303030303030303030302c616c6c6f775f6f746865722c6673757569643d38336335383661612d643636652d006136622d333332652d63626232386662032c666f776e65723d", @ANYRESDEC=r12, @ANYBLOB=',audit,\x00']) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000902, r6, &(0x7f0000000340)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) 2.399054592s ago: executing program 2 (id=1844): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) write(r1, &(0x7f0000000200)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f94266", 0x39) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b24a848cba666425220e717611d86e9d3db36770da6cef988892046f5ee717561f93dbaa49fbe4de8ed75b2c61d50e54863f57c563417f0efeac38cd655a162054171dbc7ce107f5ad", 0x49}], 0x1, 0x0, 0x0, 0x4004001}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe10859224ad54afac1f2875397bdb22d0000b445a1a93c01000000000000007d3d458dd4992861ac00000000000000000000000000e4b4615000", "90be8b1c551265406c7f306003d8a0f4bd00", [0x2]}}) 2.277983353s ago: executing program 4 (id=1845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$full(0xffffff9c, &(0x7f0000000000), 0x80500, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef8cd8d80000800034000000001"], 0xf0}}, 0x0) 2.13001515s ago: executing program 4 (id=1846): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='cachefiles_read\x00'}, 0xffffffe0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) futex(0x0, 0x8, 0x1, &(0x7f0000000440), 0x0, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r3, &(0x7f0000000580)=[{&(0x7f00000003c0)="c5edf16532a2031ad109e3e5cea0529db5ed27b2364ebfb54668768e58", 0x1d}, {&(0x7f0000001100)="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", 0xffe}, {0x0}], 0x3, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d383030303030c47f30303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1a010300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.11881671s ago: executing program 2 (id=1847): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x4, 0x81, 0xfffffffffffffffe, 0x3, 0x7}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1021, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x1000000000000000}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1a) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="99000000", @ANYRESDEC=r4, @ANYBLOB="0100000000000000000007000000"], 0x14}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000004e40)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x7c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_USERDATA={0x68, 0x7, 0x1, 0x0, "c9c5cf5c900f21e267313db7567da81d14d61ae4fc10de3bd0fe593384855b1c26308cce1ae2d8265fb04836a9886c47a2952848dafbc68eae340b5171ed0a95a4b1abf4a62e13444822b836f905008dc99a31f71f9ef4183f33532e0033947025dda81e"}]}, @NFT_MSG_DELOBJ={0xb8, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x77, 0x8, "c4dd9be8e2d04dfc0be0362df46342024fe57af0e693e34230f4e2c92ac947e05e066223c3fd3af4f6da1784f89ce7286ef2a39914d4278fa3f0f2cdd38a76bb356b3a78888255a4764dd0dc564d3196c63218e058876366369e86c115cd4b7bde6db9e7ee92e1e7ed0e1ac45eddd3c853284e"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x948, 0xc, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x934, 0x3, 0x0, 0x1, [{0x378, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x108, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "61edf1d5fe"}, @NFTA_DATA_VALUE={0xf8, 0x1, "6eed8d02e0ea6b7f806b615b657395998d0e4c41adf4bfc547936f6dd09ad3024bdc310b882c72a520889df74839ddcb2e83ff84765339dc409fe90fe02c9bd9347fc2fb009d1b6bad2dc13fa47870ef004044d195fd49d70ea140c3d7c1903b636b0a421fdfdaf521bb765e1365165c2c62d259b7b9c2d4e1c543807c97f7b3119f887bacec0f1d2be1cd11894a891aa183049d6dabab9d67f50d72445219731f9aa3eb62e6bfb3a98a9717a219e0dd4e92a0b04a22b0e1dc091c6188697e0c2adc580c1a6792f461db4b771176cc0db3fa67a4dc1ba6eee4bb6844cf2ccf0c1bd4d3723026a49daa5d09279e1e4d42fcb9eb52"}]}, @NFTA_SET_ELEM_DATA={0x260, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xcc, 0x1, "3f613a5574ad6c61c6fb063511b869f41758e95bb0e55215359909e239a0b8c9fc06d27fc9099a49fcabd568896d84e1927f4f8b419810ef27bb0428ad960d7cca57eb99ea0cf0d41459b4a55a4016650b5fdb3e3c45d27e2b294af0f21f488537c15043f6f4db16bc83f5562970bda7095411c44f380723dc4e74b38afcb02b4b9d80e777171324df5902dc794f12ef6d0d4deee4915c3c413952da353aca48a8f142bc601343d60c295ae86941a433ab77c464fdfa2e146692756217a6d098a02f382206623272"}, @NFTA_DATA_VALUE={0x49, 0x1, "16cca89b455b26d0bc288f12592aef735e7150f509bd3998af58e7725e4269b3382a90348ae68529062183680f006ff6b94a8657139ac91c76c460151f5e79a4425922a866"}, @NFTA_DATA_VALUE={0x92, 0x1, "4a719482052757811938d3c73066be7691fe7c77d22ec6153db4c73e8e502db96a7c703b8bb861139d077bfee7b9998d1e043e0579c4917c4fcd3ed2c74c90be2339e04033759527065f785aa7f3ff3f6bcdc360e12088ca08564e8cce037d57805bb7e764d429b14c73f09f4559c29a3b62dac9e72813fda5553aa94cf8d8675fd59ad32c61b178e9ba3afe01bd"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}]}, @NFTA_DATA_VALUE={0x11, 0x1, "ede2e6a701f70e218b1f79b758"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x5ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1d8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x83, 0x1, "e8675443b5bcacd5130f9c8955e2431437bcd9d6971dbf846a93e85b2ae32bd480062030bf8af3204100b938f172e60b1e9490587a6031e4de0173a39a3e4a5874d1c6e2590ac145cf491bb03338a7fe89931a14aaccb7a97a85c26762abb9383af5a00d1ed51e4b93a36efa8881b27cbca1e088055204af8e43475334f247"}, @NFTA_DATA_VALUE={0x46, 0x1, "6abf84bd255be1c90a54a436f752accb5fdd68020f0937ccc7df637984acb6110894b5a56a74c1d9dd5cec446de9a7a4c8d52064ac5953e7a86eaab75efd5adb50c0"}, @NFTA_DATA_VALUE={0x2d, 0x1, "41c46b33b997c5c4da92dfc0594365c6aea755d06aa59d246fdccd5904b07cd69d4249c39f82dd6889"}, @NFTA_DATA_VALUE={0x2b, 0x1, "1107932bdf306bfd46634f7fb97370cc829d73d0bf543517a496dc34a01c65eb1623e6c06bb717"}, @NFTA_DATA_VALUE={0x3a, 0x1, "b706d8fb6f3dee6ebb69fafaa7b3061ee655f3e23e6bbe737e692a2ca7c1e25cc7bbada19cfb8861c7946346a9e60f9115a8091832b3"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x72d}, @NFTA_SET_ELEM_EXPRESSIONS={0x388, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x334, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x324, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x118, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "edf010527f77e3aa76eba970296dd6657c28d6372f32a9af220f8fab58797415f3603a2607b6904a98353cc169afef6e254e2befb5dff35e7a727b15b0affea3de1ac840b24be7a2486c4e7c68496ca81d6c1d499e3e1dc00c44345ba141ee50beecc507fdb46e6f45502fe6b5eacd2281fae704b4ff640656f3348193aeffc2ef9b8e5501cd66160e9c025207a36a33ea930b519036c56b92f69b5e42b46658a4f4685ef0ea8702a03bede8a82f359dcda93fa85c8dc9fc55"}]}, @NFTA_BITWISE_XOR={0x130, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3c, 0x1, "25cdaee1fc271f158419b420d21db2a3b34e9d94d7bd424f8f4168f98fa65589e1ffe3926d4953f1d630014da772ef5decc5bec414bb3b69"}, @NFTA_DATA_VALUE={0x19, 0x1, "0a5f45e538f173f215760a837b5d6dcdd31a53468d"}, @NFTA_DATA_VALUE={0xd4, 0x1, "97f9e9b4ee0c8e625e82bd7aa39475c92146e4d5e06b73c9f85d8b0d900a7fbb5df04092040a3cde380032ef93d02d0d31f5f02a9d7f2b79900a28d133d354f0220c5c435ffb42d47842e1bc152fb2473583d2ce4312f392f448f51dc3738ba131c9d444a6fd9db5a8ba51c3464702b72c38755339fb2c71443769637bfa13f2e8e273d8ae85935d48ae55fa82241c72b51665d93e087428975bb7cdda9785cf224286cd7360e4311223ba873101bc76e4a7a1a93cace3d961496b22f5eb5db9095cf25bb9074b44ae03c7d6314f79df"}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1ca}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFTA_BITWISE_MASK={0xc0, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x15, 0x1, "764c18c5f18524d194d85dfa5fb4630605"}, @NFTA_DATA_VALUE={0x8d, 0x1, "52654f8e7ce82bb58c2e26c5e3b750f5499039eae3e13beffea25d3a80147ba4fdc1c68888841a972b747e2865f14cc0882bbb4a7632096919a9223fe12b5984dc3a919fee236f96b27da90635c33f5cf8b2b5cf168f1b7aad7758e680d5b2f8635d5e91ffdff5f723d17a08bb9a2edec65d6005d5519f4506289706a108fdc04d709d44c380b57814"}]}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x20c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x1b0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd6f7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2100, 0xc, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x84c, 0x3, 0x0, 0x1, [{0x32c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb4, 0x6, 0x1, 0x0, "da4ee6097146c5bc2fbe1639d12c0f8439ace8a42b42b4ea37600dbeab083a6b3b3c8ce651191a8af0156acb3b83604b69d097f08fa3876782d4d41bfb808165ae045ab58f43a887c6ed562892eec4511bc2a5761c4db4b89c3f88861617c68c6e895c3e245edc911b2894b6ebfe5342425142bacae13eaebec2241da3cc96203360afa11216f9c5ae6cb20953badb53f9d1e051595277c86a09816ec2b9bb9578e3fb938aa40be0038ef07a0cd4f6f2"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x254, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xc5, 0x1, "ab5a0cd36acb9ab9f1e10b4673b6373260b48fae2b2b7e03ed813968a9ddcfec81c083c27695b75b967eafc47b7f12ccaf47ff5b1d842a2aa24dc2119746909c6172c473ce5c66faf192313957ef058e5a8dc04f1431ffe823fcfeb6deeb9b4d6ab04397c575fc72e2704cfb03b0291c2522e487f7f08e537336abc2c9d8ee630c8a6fcff3851279b86dfde47bb3505c44a23b8aa8412897c08e1050d718b6b0c9be57155c9dcc7a85ffd97462437550b317220d6b5aae41b2564cbda9be995249"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x5c, 0x1, "a1ab06817db38535fb280fcbbe7230b44dbc04aa01a2007b91c9494ac1265573e8974dd59cdfba7cbc91da631fb70af2a8e59a3fb58bb00ecbdb82803175fb55cf71ebb7593758b8021fc1385c664c19633f73ebf94e2400"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x55, 0x1, "a1d67f6219f341858b8cc0ea149f02873aa9353b5ab00458f2143076b2f94073c3af7184ecae25d41d7ff03738aaa3a2f3574e918a983db99b8060ecda76f8ed351530a4d4ef1cca527992a63431bbb6aa"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}]}, {0x42c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x41c, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '&%\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfff}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '[\xed\x00'}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}]}}}, {0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x4c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x43be6f27271b0c0}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x330, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x320, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x31c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb1, 0x1, "7d7169b3269c606268618ceef2570a8b96e1a6a27e43a49381e72aa4b2cfd143f9e77b46597218bfe7d572eec8c8e2dac61d5d5d1cc233bb3586e0f62383630bd2b45853e3b8db3f31057da529f6db6550443d70892c9f9c5789ce59e14fcc5147dabb75184151c5cca35d224441f6003a507d38f5a318b6745d285d53e2ec14af2854ab266e5ff485614c3211e7de81fb29c3225a04797cffd924314866009fb9ecd8b3d5c40d65e675e78346"}, @NFTA_DATA_VALUE={0xa4, 0x1, "10c85ef15563dabda0fae959d30ae15216c6e0cae0c169f782c6a2c952ec9ce6d716f9f77781b93b1dfbeab940e40eb7e4b44d135c72713136c216b6734f570b1fa89ee2290a3e654453958bd764bb138444f9dc1d5afcfb7c6fe016f2829bf05aeb5f4703055cb9da7f7cef47443162068e59b99c80b7fd5a4986bfee0e4b600ded8ea4d37692a31f7c00614294d50cdc783efd4cd5af5b4ae5fc3e730977cc"}, @NFTA_DATA_VALUE={0xc6, 0x1, "1e099de4c0650a076de3fbaf60b3c8855df6089b1a464e6ce6e820ce20353877c781f755a990e95378bce6c3e259ccdca4c516d445967fc886ddf91c8e762929da58e06843eb77863f5521050a3a10c467ddc01dba997438ff95e6acf9e4aa428b06a4444a69a9750f641374311649d3bf8b9f117cce38dcf4e26c02d1cfde57569c23e48b0c19b2ef3ee15dea13365cfd76f10fcfc92498676e809c49c29d8d9b7f30e5838cd5db03b91df79ac249fbb1e92a9c2398ec5a57aa6f76828ba6896729"}, @NFTA_DATA_VALUE={0xbe, 0x1, "63d238d8872ecf31f749fa89ba2dd80c2d0cec47427a8af73616f91d7b508b6d6d0aeb511510a88e84a9ddfa4e0c2b41e8a353bf56253798e09b4fb2b3aabce4732af389bec8a8de4e0cfbf4ef4bfcecad0f623f54f335afaf02a9d86d5e4035e82c4192e6e01d0eeab649c038835607b0d5d9a9f69d8f52bd9be8993851683320d9c1b2f7cda72ea67f81d643a93cbcc3afde4da5a7919a93c1be0fea0be04ef474ae28febfb04d9fad4be63a4aa3faf34759b78de78ba7fc1d"}, @NFTA_DATA_VALUE={0x35, 0x1, "c55540a489ae0bc20d0742751199e5d667130f802ebf580f6f8311711b4444aaafa813741ec5874e4720b67c14827be8f0"}]}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x4}, {0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x5b, 0x6, 0x1, 0x0, "e1d4f343495277d6f827abbd64878fabd88b0d3693c70edabfbdfc51f3453d089887ff339a3cf83d69978902934eae8891a41343f504324bdd69ee1bef663b8d4db1dff8543597f325a04e6830d10dce633eb3e1ac445a"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1878, 0x3, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x90, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x120, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x80, 0x1, "c62ab87f2189686e1f9af52ef039b0c83621cb38edc591be0830bc690a251a1da66693849354b285803e3cdb48f1e49766588286580600c2d66242b9da12fbf23d6e85a40591600f7cd6a578a0935323cf4dd2c25a5f4854ddd7e32b90ac4a02a18ff53c0cc488d979fb520b20fcba76b65ab87d61be0f5de9c170cb"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_USERDATA={0x57, 0x6, 0x1, 0x0, "0b3896357a5e0cbfb973a121f3f830d7adcf9f49a6a7255091f9da2f4199383e476b04383eead0e9abee25d3518976990baa67f8df681dc4fb99bc2e2339f89404be0c09ccdad46c680f29c8db2e823623c400"}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}]}, {0x214, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x19d0}, @NFTA_SET_ELEM_KEY_END={0x54, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10001}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_DATA={0x178, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "9adfd31fb4161eed3397e25575890e8e5365f416ca2a9b1bfa56d89b7fcf5c9cc60050d1fdfc282bc3f856f2f10d4ae31a3c34fa9f0f02fa5edf55043703c39896b83b50f7f1be15e5ef6efe942b1d281c3dc84a28d6b262106db46e4e120f948b6591abe4166be87459f9671a5b2f880a40878338fed657015320adbeb4a396b8f7aea5bc1252b2bc3b377ab7208eec2ce4d29e94748b648b6cad6bb7b1b16099f8464c6f78a8803459bb6e7a675b8d49be859f1343785409016019ee6a6c338b859a465191b5250b3d879d0b3b4c267eb740bb16b9530d92454ab3f42fc1f1f44c61ef3914c31bf37c95441e9d588430d322c680"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000002}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x1048, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY_END={0x1008, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @log={{0x8}, @void}}, @NFTA_SET_ELEM_USERDATA={0x23, 0x6, 0x1, 0x0, "a829a73f59c522582df32de60e4f6846c6bb58fa8bdd501ca1e3ff80941e9a"}]}, {0x310, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x2f0, 0x7, 0x0, 0x1, @cmp={{0x8}, @val={0x2e4, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x298, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xaf, 0x1, "43f46c272188c62f727962f0cd170292cd1bb51757d963326d5207a24eedc31919d736cb3fa33e3f3b39fcee8258cf67a241008276ae6a275be137550a78e74d2f3c1156e46c43f3f53ef93ceecbdee6a6d06ad50c50a0d7dbfaeb638d7d803abd075edf519e7276228c35767156fc5241bab8e010a6b44ad26b5df6ec73091a63e3e9b3969d774113e2ec72528b895cafc4f21a2afc4728087fff8de5b9bfd0e659f035142fa01ad3cb64"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "cfc278b29f2ab3d58a4a0b03c965f3473bdcdc98417239496640234bc5608a807d522cfb4b6aaeeb7537ab275b387af541a053977f36c7c4d752dfe516ea4e16882fddefa253b726bae5cfab8d7f0321d5108148db3676b4db558a8f567916b05add139c09f8bae12a60cda6e5b76f54e7260dd7e7ea3b342d0cd5294c84fce816ef13ab562a6533ecd5529ad43f770facc129002bbbf11905c51b95c4d3e08fcc48780ae7e4877228c4d05ba5ac0bcf2fe76ccaf091ccec36cff78e59d1d38fff72ba2d98041e937ac1a8596434d96351b85d08860696328211274659bf1b7656e48adfc7d431657dfa2233b4"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "d963153d44aa8b"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}]}, {0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x58, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3c, 0x1, "41a5aa4d1bfd6201db25a654a682455553cc32bfe16bbaee2c731afde37ec1239d5f65ece0d69bb69d5ceec2d9aad912f13dba86259de9fc"}, @NFTA_DATA_VALUE={0xa, 0x1, "4b04092827f3"}, @NFTA_DATA_VALUE={0x9, 0x1, "0523183bd0"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x194, 0x18, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x120, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe6f}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'gre0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3028}, 0x1, 0x0, 0x0, 0x5}, 0x200400c0) ioctl$TUNSETOFFLOAD(r4, 0x400c744d, 0x20000000) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) 1.332966378s ago: executing program 3 (id=1848): sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="8b1bbeb3122997b3b7ed7c3e672bba90f60829db5a8d02656dfd804ecce98aa4fa72524eb9fd539f18eee10ec68b8bd08e7abd7103db4c7d1eacc0a62e810ff3ebfe9fde4ee65c6972541052b65c290097e14d0a1b8ee96f5acbab587a5db033957c2d23e673a2a216d13019200a04bbfb72120d5330cce7ae2230a6d7e6b6b7ddbc72a0d7ccdf34386b72a8c9e88b4190c94aac442a95d802f103b30d321b8780e2fce5e908ef8032d84bac0e4519665552abcef1f5ffdc62b7f45829aeaace486e7dc18d58dbf2df980c2f93f9e9d17539b3d8f5df60442b3cadd02ddce29c69d2", 0xe2, 0x40000, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe10859224ad54afac1f2875397bdb22d0000b445a1a93c01000000000000007d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000000000e400", [0x2]}}) 1.038164303s ago: executing program 3 (id=1849): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000e00)=@phonet={0x23, 0x0, 0x3, 0x37}, 0xfe7e, &(0x7f0000000080)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f0000000100)="88a8", 0x2}], 0x2}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b1bd25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.002194292s ago: executing program 3 (id=1850): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x1) add_key$user(&(0x7f00000002c0), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000800)="94c99a25cc28f6045000b7efe635f6387ccf78ca5b78d542db1bb2c22e24534a76df2aa79b2559f2c176cbc8d3491fa3ed9377915f114544b0a6529b017e7311b4c5d7db6cba2c02120c83653312ea62ba", 0x51, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x334, 0x0, 0x2b8, 0x0, 0x160, 0x6000000, 0x26c, 0x3a8, 0x3a8, 0x26c, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'gretap0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x0, 0x49}, 0x0, 0xf8, 0x160, 0x0, {0xd2030000}, [@common=@frag={{0x30}}, @common=@inet=@ecn={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x8005, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa4, 0x10c, 0x0, {0x200000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x390) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x3) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYRES32=r1, @ANYRES32=r5, @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0xc8c4) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xc2) r9 = socket$inet(0x2, 0x3, 0x4) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x278, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x9c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x0, 0x0, 0x5000000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffc}}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, {0x4}}]}, @TCA_STAB={0x18c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0x965, 0x8, 0x2, 0x28, 0x80000001, 0x1}}, {0x6, 0x2, [0xa]}}, {{0x1c, 0x1, {0xc9, 0xf, 0x19, 0x4, 0x1, 0x9, 0x5, 0x3}}, {0xa, 0x2, [0x8, 0xa839, 0x3]}}, {{0x1c, 0x1, {0x9, 0x6, 0xa, 0xb8, 0x0, 0x8001, 0x8001, 0x5}}, {0xe, 0x2, [0x3, 0x4, 0xd, 0x681, 0x1]}}, {{0x1c, 0x1, {0x4, 0xc6, 0x5, 0xc, 0x2, 0x800, 0x5, 0x3}}, {0xa, 0x2, [0x8001, 0xff, 0x2]}}, {{0x1c, 0x1, {0x6, 0x8, 0x2, 0x2, 0x1, 0xf, 0xffff, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x4, 0x32, 0x56e, 0x2, 0x1, 0x5, 0x7, 0x2}}, {0x8, 0x2, [0x4, 0x2]}}, {{0x1c, 0x1, {0x7, 0x0, 0x37b5, 0x1, 0x1, 0x8, 0x970, 0x3}}, {0xa, 0x2, [0x8, 0xf, 0x6]}}, {{0x1c, 0x1, {0xb, 0x7, 0xfffc, 0xa, 0x1, 0x1, 0xfffffff0, 0x7}}, {0x12, 0x2, [0x1, 0x1, 0x2, 0x2, 0x2, 0x800, 0xe]}}, {{0x1c, 0x1, {0x66, 0x0, 0x3, 0x6, 0x0, 0x7f, 0xda18, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x3, 0x5, 0x4, 0x4, 0x2, 0x4, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}]}]}, 0x278}}, 0x0) write$binfmt_script(r8, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '\t\n\v\xed\x14\x9e\xed\x04F\x05\x00\x00\x00\x00\x00\x00\x00C\xb6dd\x82\x85Y\xc3:B>$\xee\xdda\xae\x18\x02D\xd0H\x10\xf4L\xb2\f\xb0t\xe3j\x95\x96m+\x0f\x8c7P\x00?\x14q\x013\x90\xae\xbf\xc7\x00\x1c\xb6\xefi\xf8$k\xb4\xca\x1a\xe9\xac\xc4\x17\xd1\x86?\xf1\x7f=\xa4\f*\xfd\xe1\xe5\x98\x92q\x06\x1b^\xe1\x9ch:\xdcw9\r\xf2\xd1\x9b\xfb\xcb\xa9\x91s\xc6\xcd\x92\xd9\xc7\xd7\xd0@<\x12\xb5\xa8\x81\xf3u\x82\x15\xde\xfeP\xa1\x83l\x92\xaf\xf5\xf8\xb0U6\xf3q\x9b_\xdb\xa6d\xee\x1e\xd2\x1aa\xd1\xb0\x19\x93\xaa\xf55._\x04:\x86k\xe6\t/\x1e\xdf\xae\x1a\xad\xedJ\x14\xb8d\x8d\xb8\xe7H\xb3\xa4\xdcT\xcfF\xeb\"\x88@\x83MKT\x92Ub\x93\xf1?J\x9f\xee\xa5\xf5S\xc2\xec\xbe;m\x85\xc7\xfd!\x86\xfd.\xcf\x98\x888\xb8F-\xbf\xa59l\xc5\x1f\x00l\x0e\xe9\xd2o\x14G\x01\xa8X'}]}, 0x104) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 779.049535ms ago: executing program 2 (id=1851): socket$inet_dccp(0x2, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) fsopen(&(0x7f0000000400)='ceph\x00', 0x0) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) ptrace(0x10, r1) (async) ptrace$setregs(0x1a, r1, 0xc, &(0x7f0000000000)) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x275a, 0x0) (async, rerun: 64) socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0xb, 0x4}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5], 0x20) (async, rerun: 32) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000004040de28051200b27f2f0000000001090224000100000000090400000103000000092100000001220500090581030000030000"], 0x0) (rerun: 32) 586.138309ms ago: executing program 1 (id=1852): mmap(&(0x7f00004b5000/0x4000)=nil, 0x4000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x6c189000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r1, r0, 0x2) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045002, &(0x7f0000000400)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x20000600) unshare(0x28020200) mkdir(&(0x7f0000001200)='./control\x00', 0x0) chmod(&(0x7f0000000940)='./control\x00', 0x9c32f69e6caa24ef) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r2, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) socket$unix(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503d867e7cb4f46b4ea60aec203f380b9631b76f302513363be3947f3d13a0ad87f11"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="7d2d2c74a25bad96f59a23d83c2688a1764a448a61f7eab0e8b3f3429745b9229feb3ba75839216cce7cc95e0cd63786979d48008d53d6a9", 0x38}], 0x1}, 0x4014915) syz_emit_vhci(0x0, 0xe) 517.566557ms ago: executing program 2 (id=1853): socket$tipc(0x1e, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) openat$btrfs_control(0xffffff9c, &(0x7f0000000040), 0x21c100, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000040095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "78e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="00000300000026009af37e36f4412e37fef97a406065994749bbdac06c740f337dfe5c42"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 101.33615ms ago: executing program 3 (id=1854): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x20d}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000080000000000000031b401020000000000000000000008001a4000000fdb0859034000000000"], 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000240)) r4 = dup(r3) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x8008) 0s ago: executing program 3 (id=1855): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x6c189000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r1, r1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045002, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) socket$unix(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0) (fail_nth: 12) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0xe) kernel console output (not intermixed with test programs): 752.351439][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.389490][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.453737][ T5281] usb 3-1: Using ep0 maxpacket: 32 [ 752.468424][ T5281] usb 3-1: unable to get BOS descriptor or descriptor too short [ 752.513036][ T5281] usb 3-1: too many configurations: 243, using maximum allowed: 8 [ 752.533675][ T2924] veth1_macvtap: left promiscuous mode [ 752.539270][ T2924] veth0_macvtap: left promiscuous mode [ 752.574491][ T5281] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 752.583759][ T2924] veth1_vlan: left promiscuous mode [ 752.589080][ T2924] veth0_vlan: left promiscuous mode [ 752.597332][ T5281] usb 3-1: can't read configurations, error -61 [ 752.613224][ T5281] usb usb3-port1: attempt power cycle [ 752.830570][T12802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 752.841274][T12802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 752.851833][T12802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 752.874450][T12802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 752.891659][T12802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 752.899870][T12802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 752.987635][ T5281] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 753.023662][ T5281] usb 3-1: Using ep0 maxpacket: 32 [ 753.031009][ T5281] usb 3-1: unable to get BOS descriptor or descriptor too short [ 753.048155][ T5281] usb 3-1: too many configurations: 243, using maximum allowed: 8 [ 753.064661][ T5281] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 753.073841][ T5281] usb 3-1: can't read configurations, error -61 [ 753.213088][ T5281] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 753.264087][ T5281] usb 3-1: Using ep0 maxpacket: 32 [ 753.275197][ T5281] usb 3-1: unable to get BOS descriptor or descriptor too short [ 753.287787][ T5281] usb 3-1: too many configurations: 243, using maximum allowed: 8 [ 753.297799][ T5281] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 753.309650][ T5281] usb 3-1: can't read configurations, error -61 [ 753.316297][ T5281] usb usb3-port1: unable to enumerate USB device [ 753.332273][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 753.383871][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 753.453826][ T25] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 753.625736][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 753.640936][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 753.657727][ T25] usb 3-1: too many configurations: 243, using maximum allowed: 8 [ 753.668964][ T25] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 753.687720][ T25] usb 3-1: can't read configurations, error -61 [ 753.827783][ T25] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 753.927618][T16101] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.939677][T16101] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.949287][T16101] bridge_slave_0: entered allmulticast mode [ 753.957699][T16101] bridge_slave_0: entered promiscuous mode [ 753.989345][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 754.001350][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 754.001857][T16101] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.020320][ T25] usb 3-1: too many configurations: 243, using maximum allowed: 8 [ 754.025747][T16101] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.039711][ T25] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 754.047564][T16101] bridge_slave_1: entered allmulticast mode [ 754.051177][ T25] usb 3-1: can't read configurations, error -61 [ 754.055105][T16101] bridge_slave_1: entered promiscuous mode [ 754.078853][ T25] usb usb3-port1: attempt power cycle [ 754.126763][T16101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.165815][T16101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.285622][T16101] team0: Port device team_slave_0 added [ 754.318287][T16101] team0: Port device team_slave_1 added [ 754.383950][T12802] Bluetooth: hci4: command tx timeout [ 754.423414][ T25] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 754.454350][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 754.468593][T16101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.495991][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 754.507980][T16101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.534179][ T25] usb 3-1: too many configurations: 243, using maximum allowed: 8 [ 754.544025][T16101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.557759][T16101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.565665][T16101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.576396][ T25] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 754.632965][T16101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.647501][ T25] usb 3-1: can't read configurations, error -61 [ 754.790577][T16161] chnl_net:caif_netlink_parms(): no params data found [ 754.821242][T16101] hsr_slave_0: entered promiscuous mode [ 754.827946][T16101] hsr_slave_1: entered promiscuous mode [ 754.836728][T16101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 754.847406][T16101] Cannot create hsr debugfs directory [ 754.928927][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 754.942289][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 754.943213][T13871] Bluetooth: hci1: command tx timeout [ 754.958418][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 754.973589][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 754.981739][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 754.998084][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 755.020903][ T2924] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.093193][ T25] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 755.113714][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 755.128294][ T25] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 755.149005][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.169272][ T25] usb 3-1: Product: syz [ 755.174354][ T25] usb 3-1: Manufacturer: syz [ 755.178973][ T25] usb 3-1: SerialNumber: syz [ 755.213709][ T25] usb 3-1: config 0 descriptor?? [ 755.245413][ T2924] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.282237][T16161] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.289689][T16161] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.302776][T16161] bridge_slave_0: entered allmulticast mode [ 755.331663][T16161] bridge_slave_0: entered promiscuous mode [ 755.351029][T16161] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.358614][T16161] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.366439][T16161] bridge_slave_1: entered allmulticast mode [ 755.374586][T16161] bridge_slave_1: entered promiscuous mode [ 755.436188][ T2924] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.574506][ T2924] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.643622][T16161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.680484][T16161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.793020][ T25] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 755.801585][ T25] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 755.817462][T16161] team0: Port device team_slave_0 added [ 755.841798][T16161] team0: Port device team_slave_1 added [ 755.883767][ T25] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 755.898166][ T25] usb 3-1: USB disconnect, device number 47 [ 755.993593][T16161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.000655][T16161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.028009][T16161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.067207][T16161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.075187][T16161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.101356][T16161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.253311][ T2924] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.391498][T16161] hsr_slave_0: entered promiscuous mode [ 756.416181][T16161] hsr_slave_1: entered promiscuous mode [ 756.422367][T16161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 756.438087][T16161] Cannot create hsr debugfs directory [ 756.471274][ T5235] Bluetooth: hci4: command tx timeout [ 756.480916][ T2924] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.501383][T16184] chnl_net:caif_netlink_parms(): no params data found [ 756.623886][ T5279] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 756.710402][ T2924] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.777607][ T2924] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.799088][ T5279] usb 3-1: Using ep0 maxpacket: 8 [ 756.818208][ T5279] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 756.850047][ T5279] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 756.874284][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.882305][ T5279] usb 3-1: Product: syz [ 756.893106][ T5279] usb 3-1: Manufacturer: syz [ 756.897739][ T5279] usb 3-1: SerialNumber: syz [ 756.904828][ T5279] usb 3-1: config 0 descriptor?? [ 756.914087][ T5279] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 756.975473][T16184] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.983793][T16184] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.991016][T16184] bridge_slave_0: entered allmulticast mode [ 757.007273][T16184] bridge_slave_0: entered promiscuous mode [ 757.023400][ T5235] Bluetooth: hci0: command tx timeout [ 757.029502][ T5235] Bluetooth: hci1: command tx timeout [ 757.055542][T16184] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.062678][T16184] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.090671][T16184] bridge_slave_1: entered allmulticast mode [ 757.105702][T16184] bridge_slave_1: entered promiscuous mode [ 757.275151][T16101] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 757.314820][T16184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.336582][T16184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.364373][T16101] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 757.383129][ T2924] bridge_slave_1: left allmulticast mode [ 757.388826][ T2924] bridge_slave_1: left promiscuous mode [ 757.401153][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.413371][ T2924] bridge_slave_0: left allmulticast mode [ 757.419041][ T2924] bridge_slave_0: left promiscuous mode [ 757.443202][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.462165][ T2924] bridge_slave_1: left allmulticast mode [ 757.468011][ T2924] bridge_slave_1: left promiscuous mode [ 757.474389][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.503724][ T2924] bridge_slave_0: left allmulticast mode [ 757.509572][ T2924] bridge_slave_0: left promiscuous mode [ 757.523166][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.751793][T12802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 757.767874][T12802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 757.790652][T12802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 757.806513][T12802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 757.815583][T12802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 757.836184][T12802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 758.410914][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.422390][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.439854][ T2924] bond0 (unregistering): Released all slaves [ 758.553187][ T5235] Bluetooth: hci4: command tx timeout [ 758.576969][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.588690][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.600460][ T2924] bond0 (unregistering): Released all slaves [ 758.710211][T16101] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 758.820807][T16184] team0: Port device team_slave_0 added [ 758.832636][T16101] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 758.906979][T16184] team0: Port device team_slave_1 added [ 759.048601][T16184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.061018][T16184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.093084][T16184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.107811][T16184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.113196][ T5235] Bluetooth: hci1: command tx timeout [ 759.115424][T16184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.120153][ T5235] Bluetooth: hci0: command tx timeout [ 759.153454][T16184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.386221][ T2924] hsr_slave_0: left promiscuous mode [ 759.392037][ T2924] hsr_slave_1: left promiscuous mode [ 759.405597][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.413712][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.421475][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.431841][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.448179][ T2924] hsr_slave_0: left promiscuous mode [ 759.458326][ T2924] hsr_slave_1: left promiscuous mode [ 759.465836][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.478782][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.488816][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.496941][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.547027][ T2924] veth1_macvtap: left promiscuous mode [ 759.552666][ T2924] veth0_macvtap: left promiscuous mode [ 759.558836][ T2924] veth1_vlan: left promiscuous mode [ 759.564344][ T2924] veth0_vlan: left promiscuous mode [ 759.571037][ T2924] veth1_macvtap: left promiscuous mode [ 759.576732][ T2924] veth0_macvtap: left promiscuous mode [ 759.582291][ T2924] veth1_vlan: left promiscuous mode [ 759.587879][ T2924] veth0_vlan: left promiscuous mode [ 759.903250][ T5235] Bluetooth: hci3: command tx timeout [ 760.182370][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 760.183624][T16214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.217940][T16214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.253735][ T5279] gspca_zc3xx: reg_w_i err -71 [ 760.261271][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 760.287744][ T5279] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 760.308038][ T5279] usb 3-1: USB disconnect, device number 48 [ 761.193127][ T5235] Bluetooth: hci0: command tx timeout [ 761.193171][T12802] Bluetooth: hci1: command tx timeout [ 761.262759][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 761.322975][ T25] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 761.532937][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 761.567329][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 761.578790][ T25] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 761.588539][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.599168][ T25] usb 3-1: config 0 descriptor?? [ 761.834938][T16184] hsr_slave_0: entered promiscuous mode [ 761.841698][T16184] hsr_slave_1: entered promiscuous mode [ 761.855983][T16184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 761.869747][T16184] Cannot create hsr debugfs directory [ 761.993633][T12802] Bluetooth: hci3: command tx timeout [ 762.011907][T16240] chnl_net:caif_netlink_parms(): no params data found [ 762.047643][T16161] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 762.116886][T16161] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 762.133308][T16246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.164786][T16161] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 762.172493][T16246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.194996][T16246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.208986][T16246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.227912][T16161] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 762.660501][T16240] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.685649][T16240] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.714749][T16240] bridge_slave_0: entered allmulticast mode [ 762.739911][T16240] bridge_slave_0: entered promiscuous mode [ 762.928207][T16101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.956066][T16240] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.972733][T16240] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.980883][T16240] bridge_slave_1: entered allmulticast mode [ 763.003375][T16240] bridge_slave_1: entered promiscuous mode [ 763.197943][T16101] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.264246][T12802] Bluetooth: hci0: command tx timeout [ 763.306056][T16240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.365230][T16240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.459318][T14282] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.466477][T14282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.527683][T14282] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.534830][T14282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.634885][T16240] team0: Port device team_slave_0 added [ 763.701594][T16240] team0: Port device team_slave_1 added [ 763.804869][T16240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.833625][T16240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.880562][T16240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.946226][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 763.952426][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 763.965736][ T25] usb 3-1: USB disconnect, device number 49 [ 763.985321][T16240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.992303][T16240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.056016][T16240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.073773][T16269] loop2: detected capacity change from 0 to 7 [ 764.075177][T12802] Bluetooth: hci3: command tx timeout [ 764.091327][T16269] Dev loop2: unable to read RDB block 7 [ 764.130210][T16269] loop2: unable to read partition table [ 764.151680][T16269] loop2: partition table beyond EOD, truncated [ 764.162269][T16269] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 764.192587][T16184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 764.295635][ T2924] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.339381][T16240] hsr_slave_0: entered promiscuous mode [ 764.361257][T16240] hsr_slave_1: entered promiscuous mode [ 764.382165][T16240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 764.390842][T16240] Cannot create hsr debugfs directory [ 764.404918][T16184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 764.414766][T16184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 764.506306][ T2924] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.588209][T16184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 764.659650][ T2924] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.689630][T16161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.790122][ T2924] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.803186][ T25] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 764.867934][T16161] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.906894][T16101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.924005][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.931125][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.965988][ T25] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 764.978894][ T25] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 765.013867][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 765.038282][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.045429][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.053310][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 765.065368][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 765.084537][ T25] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 765.117120][ T25] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 765.142881][ T25] usb 3-1: Product: syz [ 765.147138][ T25] usb 3-1: Manufacturer: syz [ 765.170376][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 765.195793][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 765.204806][ T25] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 765.210740][ T25] cdc_wdm 3-1:1.0: Unknown control protocol [ 765.273057][ T2924] bridge_slave_1: left allmulticast mode [ 765.278780][ T2924] bridge_slave_1: left promiscuous mode [ 765.293870][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.315963][ T2924] bridge_slave_0: left allmulticast mode [ 765.321651][ T2924] bridge_slave_0: left promiscuous mode [ 765.332702][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.370328][ T8] usb 3-1: USB disconnect, device number 50 [ 765.690306][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.701599][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.718061][ T2924] bond0 (unregistering): Released all slaves [ 765.804461][T16184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.819955][T16101] veth0_vlan: entered promiscuous mode [ 765.839920][ T5281] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 765.843353][T16161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.900380][T16101] veth1_vlan: entered promiscuous mode [ 765.944837][T16184] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.979493][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.986638][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.021652][ T5281] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 766.039287][ T5281] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 766.050259][ T5281] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 766.056275][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.066371][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.073063][ T5281] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 766.086489][ T5281] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 766.099836][ T5281] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 766.109306][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 766.122094][ T5281] usb 3-1: Product: syz [ 766.127285][ T5281] usb 3-1: Manufacturer: syz [ 766.150499][T12802] Bluetooth: hci3: command tx timeout [ 766.170324][ T5281] cdc_wdm 3-1:1.0: skipping garbage [ 766.181593][ T5281] cdc_wdm 3-1:1.0: skipping garbage [ 766.211452][ T5281] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 766.218902][ T5281] cdc_wdm 3-1:1.0: Unknown control protocol [ 766.280429][T16101] veth0_macvtap: entered promiscuous mode [ 766.305676][T16101] veth1_macvtap: entered promiscuous mode [ 766.331371][ T2924] hsr_slave_0: left promiscuous mode [ 766.344348][ T2924] hsr_slave_1: left promiscuous mode [ 766.351919][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.360080][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.371896][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.380836][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.427484][ T2924] veth1_macvtap: left promiscuous mode [ 766.434565][ T2924] veth0_macvtap: left promiscuous mode [ 766.440263][ T2924] veth1_vlan: left promiscuous mode [ 766.445820][ T2924] veth0_vlan: left promiscuous mode [ 766.930587][ T5281] usb 3-1: USB disconnect, device number 51 [ 767.203484][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 767.258336][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 767.463067][ T8] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 767.617536][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 767.625136][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 767.640627][ T8] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 767.668094][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.697266][ T8] usb 3-1: config 0 descriptor?? [ 767.875669][T16101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.888925][T16101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.924008][T16101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.943790][T16336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.970739][T16101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.988941][T16101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.000495][T16336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.038857][T16161] veth0_vlan: entered promiscuous mode [ 768.099214][T16184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 768.126084][T16101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.164732][T16101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.197200][T16101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.212139][T16101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.235996][T16101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.259637][T16161] veth1_vlan: entered promiscuous mode [ 768.294294][T16336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.316915][T16336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.344035][T16240] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 768.378376][T16240] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 768.399706][T16101] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.430527][T16101] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.449512][T16101] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.467581][T16101] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.503553][T16240] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 768.531864][T16240] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 768.658811][T16184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.790803][T16161] veth0_macvtap: entered promiscuous mode [ 768.840108][T16161] veth1_macvtap: entered promiscuous mode [ 768.890904][ T2444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.922568][ T2444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.019889][T16161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.040427][T16161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.051747][T16161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.072517][T16161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.093391][T16161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.180208][T16161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.211471][T16161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.231982][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.281023][T16161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.293751][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.309541][T16161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.320715][T16161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.338984][T16161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.351372][T16161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.366411][T16161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.378830][T16161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.410642][T16184] veth0_vlan: entered promiscuous mode [ 769.467462][T16161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.482915][T16161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.491634][T16161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.701343][T16161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.850348][T16184] veth1_vlan: entered promiscuous mode [ 769.942543][T16240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.986539][T16184] veth0_macvtap: entered promiscuous mode [ 770.009403][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.017542][ T5277] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 770.038187][T16184] veth1_macvtap: entered promiscuous mode [ 770.052151][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.094812][T16240] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.140893][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.148027][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.190580][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.204091][ T5277] usb 4-1: Using ep0 maxpacket: 32 [ 770.221667][ T5277] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 770.234127][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.244869][T14282] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.251983][T14282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.260750][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.274481][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 770.285081][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 770.296820][ T8] usb 3-1: USB disconnect, device number 52 [ 770.320649][ T5277] usb 4-1: config 0 descriptor?? [ 770.332004][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.353456][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.381593][ T5277] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 770.388978][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.403662][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.414259][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.425800][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.437771][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.449049][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.468338][T16184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 770.521703][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.562948][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.580100][T16358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.592113][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.629598][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.650953][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.661787][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.681138][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.702895][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.723261][T16358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.724359][T16184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.741199][T16381] netlink: 'syz.1.1705': attribute type 3 has an invalid length. [ 770.771635][T16184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.773196][T16381] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1705'. [ 770.802878][T16184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.811622][T16184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.832089][T16184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.846021][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1722'. [ 770.861335][T16375] bridge_slave_0: left allmulticast mode [ 770.867928][T16375] bridge_slave_0: left promiscuous mode [ 770.883915][T16375] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.053612][T16240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.220549][T16394] loop2: detected capacity change from 0 to 7 [ 771.243762][T16394] Dev loop2: unable to read RDB block 7 [ 771.249461][T16394] loop2: unable to read partition table [ 771.255911][T16394] loop2: partition table beyond EOD, truncated [ 771.262160][T16394] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 771.279454][T16240] veth0_vlan: entered promiscuous mode [ 771.299158][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.329896][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.349040][ T5277] gspca_sunplus: reg_w_riv err -71 [ 771.355291][ T5277] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 771.382330][T16240] veth1_vlan: entered promiscuous mode [ 771.400344][ T5277] usb 4-1: USB disconnect, device number 126 [ 771.497105][T14282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.513811][T14282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.534272][T16240] veth0_macvtap: entered promiscuous mode [ 771.559491][T16240] veth1_macvtap: entered promiscuous mode [ 771.634830][T16240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.666738][T16240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.693569][T16240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.721399][T16240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.742049][T16240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.762994][T16240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.782606][T16240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.804115][T16240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.822930][T16240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.839154][T16240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.873737][T16240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.963879][T16240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.042123][T16240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.087193][T16240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.111258][T16240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.176883][T16240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.191569][T16426] xt_CT: You must specify a L4 protocol and not use inversions on it [ 772.219621][T16426] input: syz0 as /devices/virtual/input/input104 [ 772.263263][T16240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.307856][T16240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.379500][T16240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.463253][T16240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.512807][T16240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.631874][T16240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.764650][ T29] audit: type=1326 audit(1729743158.521:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16441 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 772.897095][T16240] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.940636][T16240] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.951129][ T29] audit: type=1326 audit(1729743158.521:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16441 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 773.011261][T16240] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.089671][ T29] audit: type=1326 audit(1729743158.571:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16441 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 773.113778][T16240] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.122659][ T5277] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 773.219371][ T29] audit: type=1326 audit(1729743158.571:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16441 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 773.277850][ T29] audit: type=1326 audit(1729743158.571:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16441 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 773.294386][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 773.300198][ T5277] usb 4-1: Using ep0 maxpacket: 8 [ 773.482909][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 773.523268][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 773.540479][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.550335][ T9] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 773.562942][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.572998][ T9] usb 2-1: config 0 descriptor?? [ 773.608922][ T29] audit: type=1326 audit(1729743158.571:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16441 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 773.631264][ C1] vkms_vblank_simulate: vblank timer overrun [ 773.643094][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.765367][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.787560][T16445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.797176][T16445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.810950][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1732'. [ 773.855953][ T29] audit: type=1326 audit(1729743158.571:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16441 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 773.878418][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.916324][T16451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1732'. [ 774.012517][T16445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.025549][T16445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.080053][ T29] audit: type=1326 audit(1729743158.571:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16441 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 774.275065][ T29] audit: type=1326 audit(1729743158.571:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16441 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 774.297086][ C1] vkms_vblank_simulate: vblank timer overrun [ 774.419314][ T29] audit: type=1326 audit(1729743158.571:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16441 comm="syz.3.1729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 774.605344][ T5277] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 774.633377][ T5277] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 774.674381][ T5277] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 774.716250][ T5277] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 774.743026][ T5277] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 774.798016][ T5277] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 774.839588][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.113598][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 775.123066][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 775.153323][ T9] usb 2-1: USB disconnect, device number 5 [ 775.157328][ T5277] usb 4-1: usb_control_msg returned -32 [ 775.202707][ T5277] usbtmc 4-1:16.0: can't read capabilities [ 775.286523][T16482] binfmt_misc: register: failed to install interpreter file ./file/file0 [ 775.553089][T13968] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 775.963022][T13968] usb 3-1: Using ep0 maxpacket: 8 [ 776.083610][T13968] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.115058][T13968] usb 3-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12 [ 776.135985][T13968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.174888][T13968] usb 3-1: config 0 descriptor?? [ 776.396403][T16482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.424811][T16482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.437443][T13968] usb 3-1: string descriptor 0 read error: -71 [ 776.458046][T13968] usb 3-1: Found UVC 0.00 device (05a9:2640) [ 776.481413][T13968] usb 3-1: No valid video chain found. [ 776.498940][T13968] usb 3-1: USB disconnect, device number 53 [ 776.865103][T14591] usb 4-1: USB disconnect, device number 127 [ 777.051718][T16501] loop2: detected capacity change from 0 to 7 [ 777.082034][T16501] Dev loop2: unable to read RDB block 7 [ 777.124648][T16501] loop2: unable to read partition table [ 777.143369][T16501] loop2: partition table beyond EOD, truncated [ 777.152121][T16501] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 778.153328][T16531] FAULT_INJECTION: forcing a failure. [ 778.153328][T16531] name failslab, interval 1, probability 0, space 0, times 0 [ 778.173282][T16531] CPU: 0 UID: 0 PID: 16531 Comm: syz.1.1750 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 778.184127][T16531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 778.194202][T16531] Call Trace: [ 778.197489][T16531] [ 778.200408][T16531] dump_stack_lvl+0x241/0x360 [ 778.205087][T16531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.210271][T16531] ? __pfx__printk+0x10/0x10 [ 778.214847][T16531] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 778.220385][T16531] ? __pfx___might_resched+0x10/0x10 [ 778.225667][T16531] should_fail_ex+0x3b0/0x4e0 [ 778.230339][T16531] ? mas_alloc_nodes+0x26c/0x840 [ 778.235276][T16531] should_failslab+0xac/0x100 [ 778.239944][T16531] ? mas_alloc_nodes+0x26c/0x840 [ 778.244882][T16531] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 778.250267][T16531] mas_alloc_nodes+0x26c/0x840 [ 778.255037][T16531] mas_preallocate+0x554/0x8c0 [ 778.259797][T16531] ? __pfx_mas_preallocate+0x10/0x10 [ 778.265079][T16531] ? __mas_set_range+0x133/0x3c0 [ 778.270010][T16531] __split_vma+0x302/0xc50 [ 778.274423][T16531] ? __pfx___split_vma+0x10/0x10 [ 778.279354][T16531] ? mas_find+0x950/0xbb0 [ 778.283684][T16531] vms_gather_munmap_vmas+0x4b2/0x15d0 [ 778.289144][T16531] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 778.295038][T16531] ? mas_find+0x8c0/0xbb0 [ 778.299365][T16531] mmap_region+0x8b1/0x2a30 [ 778.303877][T16531] ? __pfx_mmap_region+0x10/0x10 [ 778.308814][T16531] ? __pfx_lock_acquire+0x10/0x10 [ 778.313839][T16531] ? mm_get_unmapped_area+0xa8/0xd0 [ 778.319031][T16531] ? bpf_lsm_mmap_addr+0x9/0x10 [ 778.323867][T16531] ? security_mmap_addr+0x6f/0x250 [ 778.328967][T16531] ? __get_unmapped_area+0x2ed/0x350 [ 778.334254][T16531] do_mmap+0x8f0/0x1000 [ 778.338409][T16531] ? __pfx_do_mmap+0x10/0x10 [ 778.342993][T16531] ? __pfx_down_write_killable+0x10/0x10 [ 778.348622][T16531] ? apparmor_mmap_file+0xc3/0xe0 [ 778.353642][T16531] vm_mmap_pgoff+0x1dd/0x3d0 [ 778.358223][T16531] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 778.363321][T16531] ? ksys_mmap_pgoff+0xdf/0x720 [ 778.368160][T16531] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 778.374737][T16531] ? __ia32_sys_mmap_pgoff+0x21/0xf0 [ 778.380013][T16531] __do_fast_syscall_32+0xb4/0x110 [ 778.385115][T16531] ? exc_page_fault+0x590/0x8c0 [ 778.389959][T16531] do_fast_syscall_32+0x34/0x80 [ 778.394796][T16531] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 778.401107][T16531] RIP: 0023:0xf7fe3579 [ 778.405163][T16531] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 778.424759][T16531] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 778.433192][T16531] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000b36000 [ 778.441150][T16531] RDX: 0000000001000004 RSI: 0000000004008031 RDI: 00000000ffffffff [ 778.449127][T16531] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 778.457098][T16531] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 778.465058][T16531] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 778.473023][T16531] [ 778.722998][ T5289] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 778.853373][T13968] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 778.868025][T16543] loop2: detected capacity change from 0 to 7 [ 778.879677][T16543] Dev loop2: unable to read RDB block 7 [ 778.886911][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.898201][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.914236][ T5289] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 778.927817][T16543] loop2: unable to read partition table [ 778.933837][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.949891][T16543] loop2: partition table beyond EOD, truncated [ 778.957314][T16543] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 778.967668][ T5289] usb 4-1: config 0 descriptor?? [ 779.016536][T13968] usb 3-1: device descriptor read/64, error -71 [ 779.177629][ T5289] dragonrise 0003:0079:0011.001F: unknown main item tag 0x5 [ 779.189531][ T5289] dragonrise 0003:0079:0011.001F: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 779.262969][T13968] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 779.274771][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 779.402990][T13968] usb 3-1: device descriptor read/64, error -71 [ 779.413067][ T9] usb 2-1: device descriptor read/64, error -71 [ 779.523272][T13968] usb usb3-port1: attempt power cycle [ 779.652959][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 779.782953][ T9] usb 2-1: device descriptor read/64, error -71 [ 779.883411][T13968] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 779.893223][ T9] usb usb2-port1: attempt power cycle [ 779.913400][T13968] usb 3-1: device descriptor read/8, error -71 [ 780.153014][T13968] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 780.178617][T13968] usb 3-1: device descriptor read/8, error -71 [ 780.232967][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 780.253618][ T9] usb 2-1: device descriptor read/8, error -71 [ 780.294016][T13968] usb usb3-port1: unable to enumerate USB device [ 780.497968][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 780.523621][ T9] usb 2-1: device descriptor read/8, error -71 [ 780.636809][ T9] usb usb2-port1: unable to enumerate USB device [ 781.156708][ T8] usb 4-1: USB disconnect, device number 2 [ 783.403856][ T29] kauditd_printk_skb: 663 callbacks suppressed [ 783.403869][ T29] audit: type=1326 audit(1729743169.161:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.1.1769" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x0 [ 784.267767][ T81] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.317703][T16614] vhci_hcd: default hub control req: 8009 v0303 i0000 l0 [ 784.450066][ T81] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.600270][T16624] FAULT_INJECTION: forcing a failure. [ 784.600270][T16624] name failslab, interval 1, probability 0, space 0, times 0 [ 784.622808][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 784.635800][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 784.644218][T16624] CPU: 1 UID: 0 PID: 16624 Comm: syz.1.1777 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 784.655010][T16624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 784.665075][T16624] Call Trace: [ 784.668350][T16624] [ 784.671277][T16624] dump_stack_lvl+0x241/0x360 [ 784.675961][T16624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.681160][T16624] ? __pfx__printk+0x10/0x10 [ 784.685750][T16624] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 784.691297][T16624] ? __pfx___might_resched+0x10/0x10 [ 784.696589][T16624] should_fail_ex+0x3b0/0x4e0 [ 784.701272][T16624] ? vm_area_alloc+0x24/0x1d0 [ 784.705955][T16624] should_failslab+0xac/0x100 [ 784.710637][T16624] ? vm_area_alloc+0x24/0x1d0 [ 784.715316][T16624] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 784.720692][T16624] vm_area_alloc+0x24/0x1d0 [ 784.725196][T16624] mmap_region+0x11c0/0x2a30 [ 784.729808][T16624] ? __pfx_mmap_region+0x10/0x10 [ 784.734766][T16624] ? __pfx_lock_acquire+0x10/0x10 [ 784.739809][T16624] ? mm_get_unmapped_area+0xa8/0xd0 [ 784.745023][T16624] ? bpf_lsm_mmap_addr+0x9/0x10 [ 784.749871][T16624] ? security_mmap_addr+0x6f/0x250 [ 784.755007][T16624] ? __get_unmapped_area+0x2ed/0x350 [ 784.760304][T16624] do_mmap+0x8f0/0x1000 [ 784.764468][T16624] ? __pfx_do_mmap+0x10/0x10 [ 784.769059][T16624] ? __pfx_down_write_killable+0x10/0x10 [ 784.774691][T16624] ? apparmor_mmap_file+0xc3/0xe0 [ 784.779720][T16624] vm_mmap_pgoff+0x1dd/0x3d0 [ 784.784312][T16624] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 784.789423][T16624] ? ksys_mmap_pgoff+0xdf/0x720 [ 784.794274][T16624] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 784.800859][T16624] ? __ia32_sys_mmap_pgoff+0x21/0xf0 [ 784.806149][T16624] __do_fast_syscall_32+0xb4/0x110 [ 784.811258][T16624] ? exc_page_fault+0x590/0x8c0 [ 784.816117][T16624] do_fast_syscall_32+0x34/0x80 [ 784.820964][T16624] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 784.827294][T16624] RIP: 0023:0xf7fe3579 [ 784.831357][T16624] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 784.850957][T16624] RSP: 002b:00000000f574556c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 784.859377][T16624] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000b36000 [ 784.867348][T16624] RDX: 0000000001000004 RSI: 0000000004008031 RDI: 00000000ffffffff [ 784.875318][T16624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 784.883287][T16624] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 784.891253][T16624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 784.899231][T16624] [ 784.908689][ T81] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.919954][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 784.932195][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 784.940400][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 784.949093][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 785.114748][ T81] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.546544][ T81] bridge_slave_1: left allmulticast mode [ 785.552719][ T81] bridge_slave_1: left promiscuous mode [ 785.559122][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.770031][T16644] loop2: detected capacity change from 0 to 7 [ 785.802475][T16644] Dev loop2: unable to read RDB block 7 [ 785.822069][T16644] loop2: unable to read partition table [ 785.840621][T16644] loop2: partition table beyond EOD, truncated [ 785.869113][T16644] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 786.563004][ T5277] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 786.729781][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.732628][ T5277] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 786.758351][ T5277] usb 2-1: can't read configurations, error -61 [ 786.778980][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.807098][ T81] bond0 (unregistering): Released all slaves [ 786.855509][T16655] netlink: 'syz.0.1782': attribute type 5 has an invalid length. [ 786.919184][ T5277] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 786.973449][T16629] chnl_net:caif_netlink_parms(): no params data found [ 787.047894][ T5235] Bluetooth: hci5: command tx timeout [ 787.129371][ T5277] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 787.144198][ T5277] usb 2-1: can't read configurations, error -61 [ 787.171198][ T5277] usb usb2-port1: attempt power cycle [ 787.387178][ T81] hsr_slave_0: left promiscuous mode [ 787.439263][ T81] hsr_slave_1: left promiscuous mode [ 787.448613][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.456387][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.476043][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.503889][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.523406][ T5277] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 787.557944][ T5277] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 787.566424][ T81] veth1_macvtap: left promiscuous mode [ 787.578941][ T5277] usb 2-1: can't read configurations, error -61 [ 787.590677][ T81] veth0_macvtap: left promiscuous mode [ 787.604184][ T81] veth1_vlan: left promiscuous mode [ 787.609554][ T81] veth0_vlan: left promiscuous mode [ 787.745751][ T5277] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 787.796977][ T5277] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 787.827986][ T5277] usb 2-1: can't read configurations, error -61 [ 787.843556][ T5277] usb usb2-port1: unable to enumerate USB device [ 787.979289][T16683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1786'. [ 788.009044][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1786'. [ 788.483003][T14591] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 788.649235][T14591] usb 4-1: Using ep0 maxpacket: 32 [ 788.656374][T14591] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.668294][T14591] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.691813][T14591] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 788.711269][T14591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.725807][T14591] usb 4-1: config 0 descriptor?? [ 788.765563][ T81] team0 (unregistering): Port device team_slave_1 removed [ 788.822202][ T81] team0 (unregistering): Port device team_slave_0 removed [ 788.963675][T14591] usb 4-1: string descriptor 0 read error: -71 [ 788.986031][T14591] usbhid 4-1:0.0: can't add hid device: -71 [ 788.992085][T14591] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 789.011598][T14591] usb 4-1: USB disconnect, device number 3 [ 789.109547][ T5235] Bluetooth: hci5: command tx timeout [ 789.213825][T16696] FAULT_INJECTION: forcing a failure. [ 789.213825][T16696] name failslab, interval 1, probability 0, space 0, times 0 [ 789.234234][T16696] CPU: 0 UID: 0 PID: 16696 Comm: syz.1.1789 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 789.245079][T16696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 789.255133][T16696] Call Trace: [ 789.258411][T16696] [ 789.261340][T16696] dump_stack_lvl+0x241/0x360 [ 789.266019][T16696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 789.271218][T16696] ? __pfx__printk+0x10/0x10 [ 789.275809][T16696] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 789.281355][T16696] ? __pfx___might_resched+0x10/0x10 [ 789.286652][T16696] should_fail_ex+0x3b0/0x4e0 [ 789.291337][T16696] ? vm_area_alloc+0x10e/0x1d0 [ 789.296091][T16696] should_failslab+0xac/0x100 [ 789.300761][T16696] ? vm_area_alloc+0x10e/0x1d0 [ 789.305520][T16696] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 789.310895][T16696] vm_area_alloc+0x10e/0x1d0 [ 789.315482][T16696] mmap_region+0x11c0/0x2a30 [ 789.320085][T16696] ? __pfx_mmap_region+0x10/0x10 [ 789.325029][T16696] ? __pfx_lock_acquire+0x10/0x10 [ 789.330069][T16696] ? mm_get_unmapped_area+0xa8/0xd0 [ 789.335272][T16696] ? bpf_lsm_mmap_addr+0x9/0x10 [ 789.340114][T16696] ? security_mmap_addr+0x6f/0x250 [ 789.345220][T16696] ? __get_unmapped_area+0x2ed/0x350 [ 789.350511][T16696] do_mmap+0x8f0/0x1000 [ 789.354668][T16696] ? __pfx_do_mmap+0x10/0x10 [ 789.359259][T16696] ? __pfx_down_write_killable+0x10/0x10 [ 789.364886][T16696] ? apparmor_mmap_file+0xc3/0xe0 [ 789.369921][T16696] vm_mmap_pgoff+0x1dd/0x3d0 [ 789.374526][T16696] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 789.379637][T16696] ? ksys_mmap_pgoff+0xdf/0x720 [ 789.384496][T16696] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 789.391098][T16696] ? __ia32_sys_mmap_pgoff+0x21/0xf0 [ 789.396383][T16696] __do_fast_syscall_32+0xb4/0x110 [ 789.401500][T16696] ? exc_page_fault+0x590/0x8c0 [ 789.406363][T16696] do_fast_syscall_32+0x34/0x80 [ 789.411210][T16696] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 789.417535][T16696] RIP: 0023:0xf7fe3579 [ 789.421625][T16696] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 789.441231][T16696] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 789.449654][T16696] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000b36000 [ 789.457625][T16696] RDX: 0000000001000004 RSI: 0000000004008031 RDI: 00000000ffffffff [ 789.465598][T16696] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 789.473585][T16696] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 789.481565][T16696] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 789.489552][T16696] [ 789.872498][T16629] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.888025][T16629] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.898619][T16629] bridge_slave_0: entered allmulticast mode [ 789.911239][T16629] bridge_slave_0: entered promiscuous mode [ 789.922715][T16629] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.936258][T16629] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.946502][T16629] bridge_slave_1: entered allmulticast mode [ 789.955241][T16629] bridge_slave_1: entered promiscuous mode [ 790.007335][T16629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.028547][T16629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.042980][ T5277] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 790.098399][T16629] team0: Port device team_slave_0 added [ 790.108162][T16629] team0: Port device team_slave_1 added [ 790.157968][T16629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.173656][T16629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.203482][T16629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.217033][T16629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.227955][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.241364][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.254748][T16629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.291258][ T5277] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 790.318160][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.339926][ T5277] usb 4-1: config 0 descriptor?? [ 790.347970][T16629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.533207][T16629] hsr_slave_0: entered promiscuous mode [ 790.551153][T16629] hsr_slave_1: entered promiscuous mode [ 790.569117][T16629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.587229][T16629] Cannot create hsr debugfs directory [ 790.706046][T16722] netlink: 'syz.1.1793': attribute type 9 has an invalid length. [ 790.733276][T16722] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1793'. [ 791.013869][ T29] audit: type=1326 audit(1729743176.761:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.3.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 791.034200][T16704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.075369][ T29] audit: type=1326 audit(1729743176.761:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.3.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 791.099329][T16704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.109880][ T29] audit: type=1326 audit(1729743176.761:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.3.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 791.148244][ T29] audit: type=1326 audit(1729743176.761:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.3.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 791.171107][ T29] audit: type=1326 audit(1729743176.791:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.3.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 791.193223][ T5235] Bluetooth: hci5: command tx timeout [ 791.200422][T14591] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 791.211677][ T29] audit: type=1326 audit(1729743176.791:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.3.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 791.300394][ T29] audit: type=1326 audit(1729743176.791:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.3.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 791.323332][ T29] audit: type=1326 audit(1729743176.891:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.3.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 791.359594][ T29] audit: type=1326 audit(1729743176.891:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.3.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 791.385154][T14591] usb 2-1: Using ep0 maxpacket: 16 [ 791.396056][T14591] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 791.419178][T14591] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 791.436792][T14591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.463056][T14591] usb 2-1: Product: syz [ 791.467304][T14591] usb 2-1: Manufacturer: syz [ 791.471936][T14591] usb 2-1: SerialNumber: syz [ 791.493195][T14591] usb 2-1: config 0 descriptor?? [ 791.500347][T14591] hub 2-1:0.0: bad descriptor, ignoring hub [ 791.507947][T14591] hub 2-1:0.0: probe with driver hub failed with error -5 [ 791.518851][T14591] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input105 [ 791.677613][T16629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 791.706562][T16629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 791.716047][ T5277] usbhid 4-1:0.0: can't add hid device: -71 [ 791.722124][ T5277] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 791.755600][ T5277] usb 4-1: USB disconnect, device number 4 [ 791.755619][T16629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 791.857972][T16629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 791.988041][T16629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.027575][T16629] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.051031][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.058208][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.107227][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.114404][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.171363][T16629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.194054][ T5277] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 792.240749][T16629] veth0_vlan: entered promiscuous mode [ 792.254881][T16629] veth1_vlan: entered promiscuous mode [ 792.298502][T16629] veth0_macvtap: entered promiscuous mode [ 792.320019][T16629] veth1_macvtap: entered promiscuous mode [ 792.343119][ T5277] usb 4-1: Using ep0 maxpacket: 16 [ 792.353534][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.366797][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.380777][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.397218][ T5277] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 792.407306][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.417697][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.425900][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.438438][ T5277] usb 4-1: config 0 descriptor?? [ 792.443577][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.454365][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.468800][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.480490][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.491751][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.502017][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.521218][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.533482][T16629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.553616][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.575941][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.595872][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.611434][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.632906][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.653260][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.674329][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.687061][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.697516][T16629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.709069][T16629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.720911][T16629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.756688][T16629] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.772903][T16629] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.781667][T16629] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.798369][T16629] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.877603][ T5277] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0020/input/input106 [ 792.927491][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.946082][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.982360][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.992252][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.003239][ T5277] appleir 0003:05AC:8241.0020: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 793.263055][ T5235] Bluetooth: hci5: command tx timeout [ 793.658928][ T9] usb 4-1: USB disconnect, device number 5 [ 793.713301][ T5279] usb 2-1: USB disconnect, device number 14 [ 794.073261][ T5279] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 794.141381][T16814] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1799'. [ 794.161102][T16814] vlan2: entered promiscuous mode [ 794.167901][T16814] vlan2: entered allmulticast mode [ 794.271360][ T5279] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 794.297309][ T5279] usb 2-1: can't read configurations, error -61 [ 794.305054][T16816] FAULT_INJECTION: forcing a failure. [ 794.305054][T16816] name failslab, interval 1, probability 0, space 0, times 0 [ 794.332599][T16816] CPU: 1 UID: 0 PID: 16816 Comm: syz.3.1800 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 794.343398][T16816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 794.353472][T16816] Call Trace: [ 794.356763][T16816] [ 794.359709][T16816] dump_stack_lvl+0x241/0x360 [ 794.364413][T16816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.369637][T16816] ? __pfx__printk+0x10/0x10 [ 794.374252][T16816] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 794.380170][T16816] ? __pfx___might_resched+0x10/0x10 [ 794.385491][T16816] should_fail_ex+0x3b0/0x4e0 [ 794.390196][T16816] ? shmem_alloc_inode+0x28/0x40 [ 794.395166][T16816] should_failslab+0xac/0x100 [ 794.399869][T16816] ? shmem_alloc_inode+0x28/0x40 [ 794.404829][T16816] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 794.410580][T16816] shmem_alloc_inode+0x28/0x40 [ 794.415362][T16816] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 794.420838][T16816] alloc_inode+0x65/0x1a0 [ 794.425197][T16816] new_inode+0x22/0x1d0 [ 794.429387][T16816] shmem_get_inode+0x34a/0xd70 [ 794.434194][T16816] __shmem_file_setup+0x171/0x2c0 [ 794.439255][T16816] shmem_zero_setup+0x91/0x140 [ 794.444039][T16816] mmap_region+0x1d99/0x2a30 [ 794.448678][T16816] ? __pfx_mmap_region+0x10/0x10 [ 794.453661][T16816] ? __pfx_lock_acquire+0x10/0x10 [ 794.458725][T16816] ? mm_get_unmapped_area+0xa8/0xd0 [ 794.463964][T16816] ? bpf_lsm_mmap_addr+0x9/0x10 [ 794.468830][T16816] ? security_mmap_addr+0x6f/0x250 [ 794.473956][T16816] ? __get_unmapped_area+0x2ed/0x350 [ 794.479269][T16816] do_mmap+0x8f0/0x1000 [ 794.483456][T16816] ? __pfx_do_mmap+0x10/0x10 [ 794.488066][T16816] ? __pfx_down_write_killable+0x10/0x10 [ 794.493718][T16816] ? apparmor_mmap_file+0xc3/0xe0 [ 794.498767][T16816] vm_mmap_pgoff+0x1dd/0x3d0 [ 794.503380][T16816] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 794.508523][T16816] ? ksys_mmap_pgoff+0xdf/0x720 [ 794.513372][T16816] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 794.519946][T16816] ? __ia32_sys_mmap_pgoff+0x21/0xf0 [ 794.525238][T16816] __do_fast_syscall_32+0xb4/0x110 [ 794.530359][T16816] ? exc_page_fault+0x590/0x8c0 [ 794.535237][T16816] do_fast_syscall_32+0x34/0x80 [ 794.540076][T16816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 794.546393][T16816] RIP: 0023:0xf740d579 [ 794.550448][T16816] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 794.570040][T16816] RSP: 002b:00000000f56f656c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 794.578443][T16816] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000b36000 [ 794.586403][T16816] RDX: 0000000001000004 RSI: 0000000004008031 RDI: 00000000ffffffff [ 794.594361][T16816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 794.602317][T16816] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 794.610273][T16816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 794.618241][T16816] [ 794.621373][ C1] vkms_vblank_simulate: vblank timer overrun [ 794.704931][ T5279] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 794.898553][ T5279] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 794.908883][ T5279] usb 2-1: can't read configurations, error -61 [ 794.978547][ T5279] usb usb2-port1: attempt power cycle [ 795.003003][ T5277] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 795.163908][ T5277] usb 3-1: Using ep0 maxpacket: 16 [ 795.174946][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 795.202614][ T5277] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 795.235180][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.255979][ T5277] usb 3-1: config 0 descriptor?? [ 795.373151][ T5279] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 795.420322][ T5279] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 795.429395][ T5279] usb 2-1: can't read configurations, error -61 [ 795.474299][T16820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.484299][T16820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.573991][ T5279] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 795.595460][ T5279] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 795.603468][ T5279] usb 2-1: can't read configurations, error -61 [ 795.610080][ T5279] usb usb2-port1: unable to enumerate USB device [ 795.700438][T16820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.715473][T16820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.140464][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.255307][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.385302][T16836] usb usb8: usbfs: process 16836 (syz.2.1808) did not claim interface 0 before use [ 796.397633][ T5277] usbhid 3-1:0.0: can't add hid device: -71 [ 796.403749][ T5277] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 796.411855][T12802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 796.424633][T12802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 796.427407][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.432561][T12802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 796.442117][ T5277] usb 3-1: USB disconnect, device number 58 [ 796.450567][T12802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 796.464448][T12802] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 796.472762][T12802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 796.559479][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.668027][T16839] chnl_net:caif_netlink_parms(): no params data found [ 796.807050][ T11] bridge_slave_1: left allmulticast mode [ 796.828655][ T11] bridge_slave_1: left promiscuous mode [ 796.834669][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.845672][ T11] bridge_slave_0: left allmulticast mode [ 796.851337][ T11] bridge_slave_0: left promiscuous mode [ 796.857312][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.143434][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 797.279859][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.294612][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 797.316556][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 797.337221][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.346631][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 797.358594][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 797.372380][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 797.383156][ T11] bond0 (unregistering): Released all slaves [ 797.396571][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.409542][ T9] usb 2-1: config 0 descriptor?? [ 797.422705][T16847] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 797.522466][T16839] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.531118][T16839] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.546350][T16839] bridge_slave_0: entered allmulticast mode [ 797.556166][T16839] bridge_slave_0: entered promiscuous mode [ 797.601778][T16850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1810'. [ 797.620401][T16839] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.631454][T16839] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.653132][T16839] bridge_slave_1: entered allmulticast mode [ 797.662944][T16839] bridge_slave_1: entered promiscuous mode [ 797.739705][T16839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.766165][T16839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.824061][T16857] sctp: [Deprecated]: syz.2.1811 (pid 16857) Use of struct sctp_assoc_value in delayed_ack socket option. [ 797.824061][T16857] Use struct sctp_sack_info instead [ 797.847529][ T9] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 797.856945][T16857] ucma_write: process 23 (syz.2.1811) changed security contexts after opening file descriptor, this is not allowed. [ 797.878527][ T9] plantronics 0003:047F:FFFF.0021: item fetching failed at offset 12/15 [ 797.891252][ T9] plantronics 0003:047F:FFFF.0021: parse failed [ 797.902260][ T9] plantronics 0003:047F:FFFF.0021: probe with driver plantronics failed with error -22 [ 798.007170][ T11] hsr_slave_0: left promiscuous mode [ 798.034581][ T11] hsr_slave_1: left promiscuous mode [ 798.083246][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.090691][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.110510][T14591] usb 2-1: USB disconnect, device number 19 [ 798.134637][T16871] FAULT_INJECTION: forcing a failure. [ 798.134637][T16871] name failslab, interval 1, probability 0, space 0, times 0 [ 798.164190][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.196441][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.199415][T16871] CPU: 0 UID: 0 PID: 16871 Comm: syz.2.1812 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 798.214345][T16871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 798.224413][T16871] Call Trace: [ 798.227698][T16871] [ 798.230629][T16871] dump_stack_lvl+0x241/0x360 [ 798.235310][T16871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 798.240510][T16871] ? __pfx__printk+0x10/0x10 [ 798.245100][T16871] ? fs_reclaim_acquire+0x93/0x130 [ 798.250215][T16871] ? __pfx___might_resched+0x10/0x10 [ 798.255504][T16871] ? lockdep_init_map_type+0xa1/0x910 [ 798.260886][T16871] should_fail_ex+0x3b0/0x4e0 [ 798.265576][T16871] ? security_inode_alloc+0x37/0x310 [ 798.270869][T16871] should_failslab+0xac/0x100 [ 798.275549][T16871] ? security_inode_alloc+0x37/0x310 [ 798.280838][T16871] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 798.286218][T16871] security_inode_alloc+0x37/0x310 [ 798.291331][T16871] inode_init_always_gfp+0x988/0xcd0 [ 798.296619][T16871] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 798.302080][T16871] alloc_inode+0x9f/0x1a0 [ 798.306410][T16871] new_inode+0x22/0x1d0 [ 798.310567][T16871] shmem_get_inode+0x34a/0xd70 [ 798.315342][T16871] __shmem_file_setup+0x171/0x2c0 [ 798.320367][T16871] shmem_zero_setup+0x91/0x140 [ 798.325133][T16871] mmap_region+0x1d99/0x2a30 [ 798.329748][T16871] ? __pfx_mmap_region+0x10/0x10 [ 798.334705][T16871] ? __pfx_lock_acquire+0x10/0x10 [ 798.339744][T16871] ? mm_get_unmapped_area+0xa8/0xd0 [ 798.344956][T16871] ? bpf_lsm_mmap_addr+0x9/0x10 [ 798.349801][T16871] ? security_mmap_addr+0x6f/0x250 [ 798.354910][T16871] ? __get_unmapped_area+0x2ed/0x350 [ 798.360205][T16871] do_mmap+0x8f0/0x1000 [ 798.364370][T16871] ? __pfx_do_mmap+0x10/0x10 [ 798.368963][T16871] ? __pfx_down_write_killable+0x10/0x10 [ 798.374596][T16871] ? apparmor_mmap_file+0xc3/0xe0 [ 798.379627][T16871] vm_mmap_pgoff+0x1dd/0x3d0 [ 798.384220][T16871] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 798.389330][T16871] ? ksys_mmap_pgoff+0xdf/0x720 [ 798.394182][T16871] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 798.400766][T16871] ? __ia32_sys_mmap_pgoff+0x21/0xf0 [ 798.406056][T16871] __do_fast_syscall_32+0xb4/0x110 [ 798.411168][T16871] ? exc_page_fault+0x590/0x8c0 [ 798.416023][T16871] do_fast_syscall_32+0x34/0x80 [ 798.420872][T16871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 798.427202][T16871] RIP: 0023:0xf741d579 [ 798.431268][T16871] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 798.450869][T16871] RSP: 002b:00000000f56e556c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 798.459281][T16871] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000b36000 [ 798.467254][T16871] RDX: 0000000001000004 RSI: 0000000004008031 RDI: 00000000ffffffff [ 798.475228][T16871] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 798.483195][T16871] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 798.491160][T16871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 798.499138][T16871] [ 798.554386][ T11] veth1_macvtap: left promiscuous mode [ 798.560050][ T11] veth0_macvtap: left promiscuous mode [ 798.571445][ T11] veth1_vlan: left promiscuous mode [ 798.571464][T12802] Bluetooth: hci4: command tx timeout [ 798.594624][T16879] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1813'. [ 798.603050][ T11] veth0_vlan: left promiscuous mode [ 798.619291][T16879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1813'. [ 798.677473][T16879] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1813'. [ 798.713038][T16879] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1813'. [ 798.755079][T16887] loop2: detected capacity change from 0 to 7 [ 798.761867][T16887] Dev loop2: unable to read RDB block 7 [ 798.768049][T16887] loop2: unable to read partition table [ 798.803577][T16887] loop2: partition table beyond EOD, truncated [ 798.809884][T16887] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 799.292559][ T11] team0 (unregistering): Port device team_slave_1 removed [ 799.342144][ T11] team0 (unregistering): Port device team_slave_0 removed [ 799.783739][T16839] team0: Port device team_slave_0 added [ 799.902218][T16839] team0: Port device team_slave_1 added [ 800.017653][T16839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.038202][T16839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.064097][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.072270][T16839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.091046][T16839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.098462][T16839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.141796][T16839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.377022][T16839] hsr_slave_0: entered promiscuous mode [ 800.401954][T16839] hsr_slave_1: entered promiscuous mode [ 800.424431][T16839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 800.443027][T16839] Cannot create hsr debugfs directory [ 800.623289][T12802] Bluetooth: hci4: command tx timeout [ 800.942581][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.994652][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 801.006134][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 801.014657][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 801.024316][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 801.062956][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 801.081564][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 801.089021][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 801.235689][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 801.262349][ T9] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 801.285770][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.298870][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 801.309909][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.320188][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 801.332361][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.370636][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 801.377187][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.392015][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.412303][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 801.452738][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.501091][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 801.523892][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.546350][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 801.584189][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.602799][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 801.616035][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.626748][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 801.648019][ T9] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 801.657521][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.674379][ T9] usb 2-1: config 0 descriptor?? [ 801.681480][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.785733][T16930] FAULT_INJECTION: forcing a failure. [ 801.785733][T16930] name failslab, interval 1, probability 0, space 0, times 0 [ 801.809798][T16930] CPU: 1 UID: 0 PID: 16930 Comm: syz.4.1824 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 801.820603][T16930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 801.830654][T16930] Call Trace: [ 801.833925][T16930] [ 801.836854][T16930] dump_stack_lvl+0x241/0x360 [ 801.841527][T16930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.846720][T16930] ? __pfx__printk+0x10/0x10 [ 801.851299][T16930] ? fs_reclaim_acquire+0x93/0x130 [ 801.856398][T16930] ? __pfx___might_resched+0x10/0x10 [ 801.861689][T16930] ? lockdep_init_map_type+0xa1/0x910 [ 801.867087][T16930] should_fail_ex+0x3b0/0x4e0 [ 801.871762][T16930] ? security_inode_alloc+0x37/0x310 [ 801.877040][T16930] should_failslab+0xac/0x100 [ 801.881720][T16930] ? security_inode_alloc+0x37/0x310 [ 801.887018][T16930] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 801.892402][T16930] security_inode_alloc+0x37/0x310 [ 801.897545][T16930] inode_init_always_gfp+0x988/0xcd0 [ 801.902874][T16930] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 801.908380][T16930] alloc_inode+0x9f/0x1a0 [ 801.912736][T16930] new_inode+0x22/0x1d0 [ 801.916926][T16930] shmem_get_inode+0x34a/0xd70 [ 801.921727][T16930] __shmem_file_setup+0x171/0x2c0 [ 801.926780][T16930] shmem_zero_setup+0x91/0x140 [ 801.931568][T16930] mmap_region+0x1d99/0x2a30 [ 801.936216][T16930] ? __pfx_mmap_region+0x10/0x10 [ 801.941216][T16930] ? __pfx_lock_acquire+0x10/0x10 [ 801.946286][T16930] ? mm_get_unmapped_area+0xa8/0xd0 [ 801.951525][T16930] ? bpf_lsm_mmap_addr+0x9/0x10 [ 801.956394][T16930] ? security_mmap_addr+0x6f/0x250 [ 801.961523][T16930] ? __get_unmapped_area+0x2ed/0x350 [ 801.966841][T16930] do_mmap+0x8f0/0x1000 [ 801.971039][T16930] ? __pfx_do_mmap+0x10/0x10 [ 801.975652][T16930] ? __pfx_down_write_killable+0x10/0x10 [ 801.981313][T16930] ? apparmor_mmap_file+0xc3/0xe0 [ 801.986370][T16930] vm_mmap_pgoff+0x1dd/0x3d0 [ 801.990985][T16930] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 801.996117][T16930] ? ksys_mmap_pgoff+0xdf/0x720 [ 802.000993][T16930] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 802.007602][T16930] ? __ia32_sys_mmap_pgoff+0x21/0xf0 [ 802.012913][T16930] __do_fast_syscall_32+0xb4/0x110 [ 802.018049][T16930] ? exc_page_fault+0x590/0x8c0 [ 802.022934][T16930] do_fast_syscall_32+0x34/0x80 [ 802.027803][T16930] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 802.034152][T16930] RIP: 0023:0xf7ff4579 [ 802.038241][T16930] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 802.057877][T16930] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 802.066329][T16930] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000b36000 [ 802.074324][T16930] RDX: 0000000001000004 RSI: 0000000004008031 RDI: 00000000ffffffff [ 802.082326][T16930] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 802.090320][T16930] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 802.098314][T16930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 802.106326][T16930] [ 802.109482][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.261021][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.297127][T16928] netlink: 'syz.0.1823': attribute type 21 has an invalid length. [ 802.577196][T16917] chnl_net:caif_netlink_parms(): no params data found [ 802.701362][T16917] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.711035][T16917] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.713941][ T5235] Bluetooth: hci4: command tx timeout [ 802.723425][T16917] bridge_slave_0: entered allmulticast mode [ 802.731045][T16917] bridge_slave_0: entered promiscuous mode [ 802.755061][T16917] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.766853][T16917] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.776048][T16917] bridge_slave_1: entered allmulticast mode [ 802.788245][T16917] bridge_slave_1: entered promiscuous mode [ 802.852508][ T11] bridge_slave_1: left allmulticast mode [ 802.858605][ T11] bridge_slave_1: left promiscuous mode [ 802.864948][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.876349][ T11] bridge_slave_0: left allmulticast mode [ 802.882128][ T11] bridge_slave_0: left promiscuous mode [ 802.888858][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.197022][ T5235] Bluetooth: hci5: command tx timeout [ 803.460931][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.471671][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.484705][ T11] bond0 (unregistering): Released all slaves [ 803.588529][T16917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.616303][T16917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.694555][T16839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 803.713428][T16839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 803.747589][T16839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 803.772254][T16839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 803.787187][T16917] team0: Port device team_slave_0 added [ 803.855082][ T5289] usb 2-1: USB disconnect, device number 20 [ 803.867281][T16917] team0: Port device team_slave_1 added [ 803.907435][T16917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.953095][T16917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.979046][ C1] vkms_vblank_simulate: vblank timer overrun [ 804.003413][T16917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.021283][T16917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.051552][T16917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.151062][T16917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.316963][ T11] hsr_slave_0: left promiscuous mode [ 804.332297][ T11] hsr_slave_1: left promiscuous mode [ 804.349747][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.363269][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.376662][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.396602][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.429483][ T11] veth1_macvtap: left promiscuous mode [ 804.435268][ T11] veth0_macvtap: left promiscuous mode [ 804.440852][ T11] veth1_vlan: left promiscuous mode [ 804.446992][ T11] veth0_vlan: left promiscuous mode [ 804.503047][ T5277] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 804.683236][ T5277] usb 2-1: Using ep0 maxpacket: 16 [ 804.697511][ T5277] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 804.710284][ T5277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.721547][ T5277] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 804.731706][ T5277] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 804.749304][ T5277] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 804.764350][ T5277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 804.774195][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 804.782272][ T5277] usb 2-1: SerialNumber: syz [ 804.795418][T16969] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 804.803263][ T5235] Bluetooth: hci4: command tx timeout [ 804.807919][T16969] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 804.817460][ T5277] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 805.042252][T16969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.046677][ T11] team0 (unregistering): Port device team_slave_1 removed [ 805.058914][T16969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.109465][ T11] team0 (unregistering): Port device team_slave_0 removed [ 805.264117][ T5235] Bluetooth: hci5: command tx timeout [ 805.757982][ T5277] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 805.809641][ T5277] usb 2-1: USB disconnect, device number 21 [ 805.946175][T16917] hsr_slave_0: entered promiscuous mode [ 805.968080][T16917] hsr_slave_1: entered promiscuous mode [ 806.015419][T16917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 806.042085][T16917] Cannot create hsr debugfs directory [ 806.112287][T16987] FAULT_INJECTION: forcing a failure. [ 806.112287][T16987] name failslab, interval 1, probability 0, space 0, times 0 [ 806.143326][T16987] CPU: 0 UID: 0 PID: 16987 Comm: syz.0.1833 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 806.154128][T16987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 806.164183][T16987] Call Trace: [ 806.167459][T16987] [ 806.170401][T16987] dump_stack_lvl+0x241/0x360 [ 806.175100][T16987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 806.180299][T16987] ? __pfx__printk+0x10/0x10 [ 806.184890][T16987] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 806.190455][T16987] ? __pfx___might_resched+0x10/0x10 [ 806.195754][T16987] should_fail_ex+0x3b0/0x4e0 [ 806.200455][T16987] ? alloc_empty_file+0x9e/0x1d0 [ 806.205402][T16987] should_failslab+0xac/0x100 [ 806.210081][T16987] ? alloc_empty_file+0x9e/0x1d0 [ 806.215032][T16987] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 806.220424][T16987] alloc_empty_file+0x9e/0x1d0 [ 806.225195][T16987] alloc_file_pseudo+0x1da/0x290 [ 806.230137][T16987] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 806.235599][T16987] ? shmem_get_inode+0xad5/0xd70 [ 806.240542][T16987] __shmem_file_setup+0x237/0x2c0 [ 806.245572][T16987] shmem_zero_setup+0x91/0x140 [ 806.250336][T16987] mmap_region+0x1d99/0x2a30 [ 806.254947][T16987] ? __pfx_mmap_region+0x10/0x10 [ 806.259900][T16987] ? __pfx_lock_acquire+0x10/0x10 [ 806.264941][T16987] ? mm_get_unmapped_area+0xa8/0xd0 [ 806.270151][T16987] ? bpf_lsm_mmap_addr+0x9/0x10 [ 806.274998][T16987] ? security_mmap_addr+0x6f/0x250 [ 806.280110][T16987] ? __get_unmapped_area+0x2ed/0x350 [ 806.285398][T16987] do_mmap+0x8f0/0x1000 [ 806.289562][T16987] ? __pfx_do_mmap+0x10/0x10 [ 806.294151][T16987] ? __pfx_down_write_killable+0x10/0x10 [ 806.299783][T16987] ? apparmor_mmap_file+0xc3/0xe0 [ 806.304818][T16987] vm_mmap_pgoff+0x1dd/0x3d0 [ 806.309414][T16987] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 806.314525][T16987] ? ksys_mmap_pgoff+0xdf/0x720 [ 806.319378][T16987] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 806.325959][T16987] ? __ia32_sys_mmap_pgoff+0x21/0xf0 [ 806.331244][T16987] __do_fast_syscall_32+0xb4/0x110 [ 806.336352][T16987] ? exc_page_fault+0x590/0x8c0 [ 806.341206][T16987] do_fast_syscall_32+0x34/0x80 [ 806.346056][T16987] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 806.352387][T16987] RIP: 0023:0xf739d579 [ 806.356455][T16987] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 806.376057][T16987] RSP: 002b:00000000f566556c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 806.384479][T16987] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000b36000 [ 806.392446][T16987] RDX: 0000000001000004 RSI: 0000000004008031 RDI: 00000000ffffffff [ 806.400413][T16987] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 806.408382][T16987] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 806.416349][T16987] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 806.424325][T16987] [ 806.617127][T16839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.670277][T16995] loop2: detected capacity change from 0 to 7 [ 806.703247][T16995] Dev loop2: unable to read RDB block 7 [ 806.715268][T16995] loop2: unable to read partition table [ 806.744240][T16995] loop2: partition table beyond EOD, truncated [ 806.766865][T16839] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.774129][T16995] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 806.833989][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.841112][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.894459][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.901560][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.175487][T17007] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 807.355621][ T5235] Bluetooth: hci5: command tx timeout [ 807.471881][T16839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.573961][T16839] veth0_vlan: entered promiscuous mode [ 807.595502][T16839] veth1_vlan: entered promiscuous mode [ 807.660815][T16839] veth0_macvtap: entered promiscuous mode [ 807.689733][T16839] veth1_macvtap: entered promiscuous mode [ 807.733305][T16917] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 807.768917][T16917] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 807.808770][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.823036][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.862198][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.873703][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.897178][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.918436][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.932426][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.950607][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.967280][T16839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.984775][T16917] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 808.003632][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.030976][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.069727][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.099204][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.126149][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.151944][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.173938][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.195819][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.211840][T16839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.230504][T16917] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 808.252485][T16839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.296797][T16839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.319762][T16839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.346844][T16839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.510718][ T2444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.536492][ T2444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.612147][T16917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.624329][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.653273][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.660786][T16917] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.707097][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.714201][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.759423][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.766586][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.794003][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.802100][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.960813][T16917] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 808.974509][T16917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 809.102352][T16917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.360440][T16917] veth0_vlan: entered promiscuous mode [ 809.402865][T16917] veth1_vlan: entered promiscuous mode [ 809.424104][ T5235] Bluetooth: hci5: command tx timeout [ 809.521828][T16917] veth0_macvtap: entered promiscuous mode [ 809.538584][T16917] veth1_macvtap: entered promiscuous mode [ 809.575555][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.592494][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.603099][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 809.618981][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.629969][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.673189][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.706580][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.717373][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.746380][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.764750][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.790213][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 809.803929][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.816189][ T9] usb 4-1: can't read configurations, error -61 [ 809.840618][T16917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.881275][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.926889][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.937495][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.948748][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.959533][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.962923][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 809.970462][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.989362][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.001096][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.015020][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.028268][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.051026][T16917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.115353][T16917] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.148156][T16917] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.161456][T16917] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.179398][T16917] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.220485][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 810.252624][ T9] usb 4-1: can't read configurations, error -61 [ 810.277963][ T9] usb usb4-port1: attempt power cycle [ 810.368402][ T2444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.395746][ T2444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.451394][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.462034][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.652244][T17087] netlink: 127 bytes leftover after parsing attributes in process `syz.2.1820'. [ 810.713055][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 810.728907][T17087] netlink: 127 bytes leftover after parsing attributes in process `syz.2.1820'. [ 810.740509][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 810.754765][T17092] FAULT_INJECTION: forcing a failure. [ 810.754765][T17092] name failslab, interval 1, probability 0, space 0, times 0 [ 810.773293][T17092] CPU: 1 UID: 0 PID: 17092 Comm: syz.4.1842 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 810.777932][ T9] usb 4-1: can't read configurations, error -61 [ 810.784064][T17092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 810.784082][T17092] Call Trace: [ 810.784091][T17092] [ 810.784100][T17092] dump_stack_lvl+0x241/0x360 [ 810.784130][T17092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 810.784151][T17092] ? __pfx__printk+0x10/0x10 [ 810.784174][T17092] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 810.784199][T17092] ? __pfx___might_resched+0x10/0x10 [ 810.784230][T17092] should_fail_ex+0x3b0/0x4e0 [ 810.784260][T17092] ? security_file_alloc+0x32/0x310 [ 810.784279][T17092] should_failslab+0xac/0x100 [ 810.784303][T17092] ? security_file_alloc+0x32/0x310 [ 810.784321][T17092] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 810.784349][T17092] security_file_alloc+0x32/0x310 [ 810.784370][T17092] init_file+0x93/0x1e0 [ 810.866207][T17092] alloc_empty_file+0xb8/0x1d0 [ 810.870963][T17092] alloc_file_pseudo+0x1da/0x290 [ 810.875898][T17092] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 810.881346][T17092] ? shmem_get_inode+0xad5/0xd70 [ 810.886283][T17092] __shmem_file_setup+0x237/0x2c0 [ 810.891303][T17092] shmem_zero_setup+0x91/0x140 [ 810.896062][T17092] mmap_region+0x1d99/0x2a30 [ 810.900656][T17092] ? __pfx_mmap_region+0x10/0x10 [ 810.905598][T17092] ? __pfx_lock_acquire+0x10/0x10 [ 810.910627][T17092] ? mm_get_unmapped_area+0xa8/0xd0 [ 810.915827][T17092] ? bpf_lsm_mmap_addr+0x9/0x10 [ 810.920663][T17092] ? security_mmap_addr+0x6f/0x250 [ 810.925762][T17092] ? __get_unmapped_area+0x2ed/0x350 [ 810.931038][T17092] do_mmap+0x8f0/0x1000 [ 810.935207][T17092] ? __pfx_do_mmap+0x10/0x10 [ 810.939812][T17092] ? __pfx_down_write_killable+0x10/0x10 [ 810.945437][T17092] ? apparmor_mmap_file+0xc3/0xe0 [ 810.950453][T17092] vm_mmap_pgoff+0x1dd/0x3d0 [ 810.955033][T17092] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 810.960133][T17092] ? ksys_mmap_pgoff+0xdf/0x720 [ 810.964971][T17092] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 810.971550][T17092] ? __ia32_sys_mmap_pgoff+0x21/0xf0 [ 810.976828][T17092] __do_fast_syscall_32+0xb4/0x110 [ 810.981925][T17092] ? exc_page_fault+0x590/0x8c0 [ 810.983824][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 810.986765][T17092] do_fast_syscall_32+0x34/0x80 [ 810.999051][T17092] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 811.005367][T17092] RIP: 0023:0xf7ff4579 [ 811.009421][T17092] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 811.029016][T17092] RSP: 002b:00000000f575556c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 811.037428][T17092] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000b36000 [ 811.045401][T17092] RDX: 0000000001000004 RSI: 0000000004008031 RDI: 00000000ffffffff [ 811.053369][T17092] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 811.061335][T17092] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 811.069300][T17092] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 811.077279][T17092] [ 811.092529][ T5289] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 811.141199][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 811.149147][ T9] usb 4-1: can't read configurations, error -61 [ 811.174103][ T9] usb usb4-port1: unable to enumerate USB device [ 811.209060][T17095] loop2: detected capacity change from 0 to 7 [ 811.224736][T17095] Dev loop2: unable to read RDB block 7 [ 811.240694][T17095] loop2: unable to read partition table [ 811.250865][T17095] loop2: partition table beyond EOD, truncated [ 811.257439][ T5289] usb 2-1: Using ep0 maxpacket: 16 [ 811.272013][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 811.286017][T17095] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 811.308725][ T5289] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 811.363304][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.409193][ T5289] usb 2-1: config 0 descriptor?? [ 811.640641][T17079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.654333][T17079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.889931][T17079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.909436][T17079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.306368][T17107] loop2: detected capacity change from 0 to 7 [ 812.316457][T17107] Dev loop2: unable to read RDB block 7 [ 812.322393][T17107] loop2: unable to read partition table [ 812.340506][T17107] loop2: partition table beyond EOD, truncated [ 812.359558][T17107] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 812.635751][T17113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 812.655944][T17113] input: syz0 as /devices/virtual/input/input108 [ 812.804962][ T5289] usbhid 2-1:0.0: can't add hid device: -71 [ 812.811034][ T5289] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 812.836185][ T5289] usb 2-1: USB disconnect, device number 22 [ 813.383055][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 813.504581][ T5302] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 813.563038][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 813.571016][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.580340][T17132] FAULT_INJECTION: forcing a failure. [ 813.580340][T17132] name failslab, interval 1, probability 0, space 0, times 0 [ 813.583316][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.602944][T17132] CPU: 1 UID: 0 PID: 17132 Comm: syz.3.1855 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 813.604394][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 813.615007][T17132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 813.615023][T17132] Call Trace: [ 813.615032][T17132] [ 813.615042][T17132] dump_stack_lvl+0x241/0x360 [ 813.615071][T17132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 813.615093][T17132] ? __pfx__printk+0x10/0x10 [ 813.628079][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 813.637866][T17132] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 813.637899][T17132] ? __pfx___might_resched+0x10/0x10 [ 813.641254][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.644092][T17132] should_fail_ex+0x3b0/0x4e0 [ 813.644127][T17132] ? mas_alloc_nodes+0x26c/0x840 [ 813.655502][ T9] usb 3-1: config 0 descriptor?? [ 813.658522][T17132] should_failslab+0xac/0x100 [ 813.705486][T17132] ? mas_alloc_nodes+0x26c/0x840 [ 813.710438][T17132] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 813.715816][T17132] mas_alloc_nodes+0x26c/0x840 [ 813.720591][T17132] mas_preallocate+0x554/0x8c0 [ 813.725360][T17132] ? shmem_get_inode+0xad5/0xd70 [ 813.730296][T17132] ? __pfx_mas_preallocate+0x10/0x10 [ 813.735585][T17132] ? __shmem_file_setup+0x263/0x2c0 [ 813.740781][T17132] ? shmem_zero_setup+0x12b/0x140 [ 813.745806][T17132] mmap_region+0x1fd6/0x2a30 [ 813.750417][T17132] ? __pfx_mmap_region+0x10/0x10 [ 813.755373][T17132] ? __pfx_lock_acquire+0x10/0x10 [ 813.760427][T17132] ? mm_get_unmapped_area+0xa8/0xd0 [ 813.765639][T17132] ? bpf_lsm_mmap_addr+0x9/0x10 [ 813.770483][T17132] ? security_mmap_addr+0x6f/0x250 [ 813.775597][T17132] ? __get_unmapped_area+0x2ed/0x350 [ 813.780887][T17132] do_mmap+0x8f0/0x1000 [ 813.785057][T17132] ? __pfx_do_mmap+0x10/0x10 [ 813.789650][T17132] ? __pfx_down_write_killable+0x10/0x10 [ 813.795284][T17132] ? apparmor_mmap_file+0xc3/0xe0 [ 813.800313][T17132] vm_mmap_pgoff+0x1dd/0x3d0 [ 813.804906][T17132] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 813.810016][T17132] ? ksys_mmap_pgoff+0xdf/0x720 [ 813.814868][T17132] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 813.821558][T17132] ? __ia32_sys_mmap_pgoff+0x21/0xf0 [ 813.826857][T17132] __do_fast_syscall_32+0xb4/0x110 [ 813.831981][T17132] ? exc_page_fault+0x590/0x8c0 [ 813.836846][T17132] do_fast_syscall_32+0x34/0x80 [ 813.841711][T17132] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 813.848055][T17132] RIP: 0023:0xf7f41579 [ 813.852122][T17132] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 813.871729][T17132] RSP: 002b:00000000f56a556c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 813.880153][T17132] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000b36000 [ 813.888125][T17132] RDX: 0000000001000004 RSI: 0000000004008031 RDI: 00000000ffffffff [ 813.896096][T17132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 813.904076][T17132] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 813.912049][T17132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 813.920038][T17132] [ 813.945073][T17132] ------------[ cut here ]------------ [ 813.948212][ T5302] usb 2-1: device descriptor read/64, error -71 [ 813.951590][T17132] kernel BUG at mm/page_table_check.c:87! [ 813.963702][T17132] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 813.970645][T17132] CPU: 0 UID: 0 PID: 17132 Comm: syz.3.1855 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 813.981399][T17132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 813.991451][T17132] RIP: 0010:page_table_check_clear+0x3a5/0x550 [ 813.997610][T17132] Code: 4a fd ff ff e8 2c 5e 89 ff 90 0f 0b e8 24 5e 89 ff 90 0f 0b e8 1c 5e 89 ff 90 0f 0b e8 14 5e 89 ff 90 0f 0b e8 0c 5e 89 ff 90 <0f> 0b f3 0f 1e fa 4c 89 fe 48 81 e6 c0 0f 00 00 31 ff e8 d4 62 89 [ 814.017210][T17132] RSP: 0018:ffffc90004357180 EFLAGS: 00010293 [ 814.023271][T17132] RAX: ffffffff820b79d4 RBX: ffff88801ddea098 RCX: ffff888027958000 [ 814.031244][T17132] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 814.039214][T17132] RBP: 00000000ffffffff R08: ffffffff820b78a5 R09: 1ffff11003bbd413 [ 814.047181][T17132] R10: dffffc0000000000 R11: ffffed1003bbd414 R12: ffff88801ddea09c [ 814.055147][T17132] R13: ffff88801ddea050 R14: 1ffffffff34881b4 R15: 0000000000000001 [ 814.063635][T17132] FS: 0000000000000000(0000) GS:ffff8880b8600000(0063) knlGS:00000000f56a5b40 [ 814.072558][T17132] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 814.079135][T17132] CR2: 0000000000000000 CR3: 000000006bf12000 CR4: 00000000003526f0 [ 814.087110][T17132] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 814.095083][T17132] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 814.103050][T17132] Call Trace: [ 814.106320][T17132] [ 814.109240][T17132] ? __die_body+0x5f/0xb0 [ 814.113566][T17132] ? die+0x9e/0xc0 [ 814.117279][T17132] ? do_trap+0x15a/0x3a0 [ 814.121516][T17132] ? page_table_check_clear+0x3a5/0x550 [ 814.127054][T17132] ? do_error_trap+0x1dc/0x2c0 [ 814.131812][T17132] ? page_table_check_clear+0x3a5/0x550 [ 814.137349][T17132] ? page_table_check_clear+0x3a5/0x550 [ 814.142889][T17132] ? wq_cpu_intensive_thresh_init+0x111/0x160 [ 814.148963][T17132] ? __pfx_do_error_trap+0x10/0x10 [ 814.154071][T17132] ? handle_invalid_op+0x34/0x40 [ 814.159001][T17132] ? page_table_check_clear+0x3a5/0x550 [ 814.164537][T17132] ? exc_invalid_op+0x38/0x50 [ 814.169203][T17132] ? asm_exc_invalid_op+0x1a/0x20 [ 814.174220][T17132] ? page_table_check_clear+0x275/0x550 [ 814.179758][T17132] ? page_table_check_clear+0x3a4/0x550 [ 814.185295][T17132] ? page_table_check_clear+0x3a5/0x550 [ 814.190836][T17132] zap_huge_pmd+0x940/0xc40 [ 814.195364][T17132] unmap_page_range+0x762/0x40e0 [ 814.200296][T17132] ? __pfx_validate_chain+0x10/0x10 [ 814.205496][T17132] ? __lock_acquire+0x1384/0x2050 [ 814.210527][T17132] ? __pfx_unmap_page_range+0x10/0x10 [ 814.215908][T17132] ? __pfx_lock_acquire+0x10/0x10 [ 814.220938][T17132] ? unmap_vmas+0x1f1/0x5f0 [ 814.225437][T17132] ? __pfx_lock_release+0x10/0x10 [ 814.230463][T17132] ? __mmu_notifier_invalidate_range_start+0x7e6/0x890 [ 814.237305][T17132] ? unmap_single_vma+0x1bd/0x2b0 [ 814.242326][T17132] unmap_vmas+0x3cc/0x5f0 [ 814.246654][T17132] ? __pfx_unmap_vmas+0x10/0x10 [ 814.251503][T17132] ? tlb_gather_mmu+0x24e/0x310 [ 814.256346][T17132] unmap_region+0x214/0x380 [ 814.260838][T17132] ? __pfx_unmap_region+0x10/0x10 [ 814.265854][T17132] ? __mas_set_range+0x133/0x3c0 [ 814.270784][T17132] ? fput+0x1af/0x230 [ 814.274759][T17132] mmap_region+0x23fa/0x2a30 [ 814.279358][T17132] ? __pfx_mmap_region+0x10/0x10 [ 814.284293][T17132] ? __pfx_lock_acquire+0x10/0x10 [ 814.289318][T17132] ? mm_get_unmapped_area+0xa8/0xd0 [ 814.294518][T17132] ? bpf_lsm_mmap_addr+0x9/0x10 [ 814.299361][T17132] ? security_mmap_addr+0x6f/0x250 [ 814.304461][T17132] ? __get_unmapped_area+0x2ed/0x350 [ 814.309743][T17132] do_mmap+0x8f0/0x1000 [ 814.313900][T17132] ? __pfx_do_mmap+0x10/0x10 [ 814.318486][T17132] ? __pfx_down_write_killable+0x10/0x10 [ 814.324113][T17132] ? apparmor_mmap_file+0xc3/0xe0 [ 814.329131][T17132] vm_mmap_pgoff+0x1dd/0x3d0 [ 814.333710][T17132] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 814.338812][T17132] ? ksys_mmap_pgoff+0xdf/0x720 [ 814.343652][T17132] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 814.350225][T17132] ? __ia32_sys_mmap_pgoff+0x21/0xf0 [ 814.355502][T17132] __do_fast_syscall_32+0xb4/0x110 [ 814.360604][T17132] ? exc_page_fault+0x590/0x8c0 [ 814.365447][T17132] do_fast_syscall_32+0x34/0x80 [ 814.370285][T17132] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 814.376601][T17132] RIP: 0023:0xf7f41579 [ 814.380654][T17132] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 814.400257][T17132] RSP: 002b:00000000f56a556c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 814.408664][T17132] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000b36000 [ 814.416623][T17132] RDX: 0000000001000004 RSI: 0000000004008031 RDI: 00000000ffffffff [ 814.424582][T17132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 814.432538][T17132] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 814.440497][T17132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 814.448464][T17132] [ 814.451470][T17132] Modules linked in: [ 814.457486][T17132] ---[ end trace 0000000000000000 ]--- [ 814.463905][T17132] RIP: 0010:page_table_check_clear+0x3a5/0x550 [ 814.470109][T17132] Code: 4a fd ff ff e8 2c 5e 89 ff 90 0f 0b e8 24 5e 89 ff 90 0f 0b e8 1c 5e 89 ff 90 0f 0b e8 14 5e 89 ff 90 0f 0b e8 0c 5e 89 ff 90 <0f> 0b f3 0f 1e fa 4c 89 fe 48 81 e6 c0 0f 00 00 31 ff e8 d4 62 89 [ 814.490050][T17132] RSP: 0018:ffffc90004357180 EFLAGS: 00010293 [ 814.496546][T17132] RAX: ffffffff820b79d4 RBX: ffff88801ddea098 RCX: ffff888027958000 [ 814.504759][T17132] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 814.512738][T17132] RBP: 00000000ffffffff R08: ffffffff820b78a5 R09: 1ffff11003bbd413 [ 814.520768][T17132] R10: dffffc0000000000 R11: ffffed1003bbd414 R12: ffff88801ddea09c [ 814.528776][T17132] R13: ffff88801ddea050 R14: 1ffffffff34881b4 R15: 0000000000000001 [ 814.536789][T17132] FS: 0000000000000000(0000) GS:ffff8880b8600000(0063) knlGS:00000000f56a5b40 [ 814.545746][T17132] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 814.552323][T17132] CR2: 0000000000000000 CR3: 000000006bf12000 CR4: 00000000003526f0 [ 814.560299][T17132] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 814.568300][T17132] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 814.576325][T17132] Kernel panic - not syncing: Fatal exception [ 814.582629][T17132] Kernel Offset: disabled [ 814.586934][T17132] Rebooting in 86400 seconds..