last executing test programs: 1m38.023671315s ago: executing program 1 (id=270): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3}, 0x6) r0 = getpid() rt_sigsuspend(&(0x7f0000000040)={[0xca0]}, 0x8) tkill(r0, 0x1) r1 = getpgid(r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x9, &(0x7f0000000080)=""/135) ptrace$poke(0x4, r1, &(0x7f0000000140), 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x2}, 0x8) r2 = epoll_create1(0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x408080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000200)=0x8) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0\x00'}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={r0, 0xee00, r6}, 0xc) r7 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r5, r5, 0x2f, 0x0, @void}, 0x10) read$FUSE(r5, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_delete(0x0) syz_open_dev$vcsa(&(0x7f0000002340), 0x10, 0x4000) tgkill(r1, r1, 0x2) io_setup(0x1, &(0x7f0000002380)) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f00000023c0)={r8}) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000002400)=0x0) quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000301, r9, 0x0) r10 = accept4(r7, &(0x7f0000002440)=@generic, &(0x7f00000024c0)=0x80, 0x0) ioctl$BTRFS_IOC_SEND(r10, 0x40489426, &(0x7f0000002540)={{r3}, 0x2, &(0x7f0000002500)=[0x5, 0x8000000000000000], 0x2, 0x2, 0x1}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f00000025c0)={0x1, 0x2, 0x91ee, 0x3}, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x64, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x400c4) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) recvmsg$unix(r10, &(0x7f00000028c0)={&(0x7f0000002740)=@abs, 0x6e, &(0x7f00000027c0), 0x0, &(0x7f0000002800)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}, 0x40010063) 1m37.58563333s ago: executing program 1 (id=275): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x3, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}], 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r2, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYBLOB="24d089ce0e78353bf01c7115713985389f92db2893336aca7a8ef081b757e224618e1222fe2d638ce5de8bf4008994b7f2f261392bb28a4181aab722245014"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6be061c2dc2926c25a0d39aefc71154ddc4c0419e2d39ca66e3107bc0619def823444627fc1caedf4e4c435e1cde48f42d33cccdf9b113a86dc9109f48be8c6a44017819fdb2a478358d468197cc7aa2aff7fd4c5fbed10bacfbb3562d324f8b267f67c8e01e0edb74aeaca9f9ac"]) 1m37.256602138s ago: executing program 1 (id=278): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) 1m33.353046113s ago: executing program 2 (id=285): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a52"], 0x20}}, 0xc054) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$printer(r3, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x2e, &(0x7f0000000200)={0x5, 0xf, 0x2e, 0x3, [@ptm_cap={0x3}, @generic={0x3, 0x10, 0xb}, @generic={0x23, 0x10, 0xa, "f6c7effeeb4ff4161fed0912c050f84021731c055c2bcfbe3dc4ff1148fd8ff8"}]}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 1m30.065722446s ago: executing program 2 (id=298): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) 1m29.924930029s ago: executing program 1 (id=299): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x8}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0xfffffffd, 0x4) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x87}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@fd={0x807, 0x1, 0x4, 0x8, 0x6, {}, {0x2, 0x2, 0x9, 0x6, 0x9, 0xfd, 'hT=7'}, 0x0, 0x4, {}, 0x4}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f046}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x400) syz_emit_ethernet(0x83, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0x0) 1m29.711147663s ago: executing program 1 (id=300): mkdir(&(0x7f0000000000)='./file1\x00', 0xf0a552e37b97b976) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') unshare(0x480) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x2, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000000)={0x100, r0}, 0x0) chdir(&(0x7f0000000280)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x74, 0x30, 0xb, 0xfffffffd, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(r2, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x2, 0x0, 0x2, 0x40000476, 0x4000000000000000, 0xfffffffffffffffc, 0x8, 0x0, 0xfeff}) 1m27.555759958s ago: executing program 1 (id=302): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (fail_nth: 1) 1m26.70685856s ago: executing program 2 (id=305): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_getscheduler(r1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='rcu_utilization\x00', r4}, 0x18) syz_emit_ethernet(0x64, 0x0, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000800}, 0x40054) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0xe, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0xb, "0000002d240c0378cf"}, @fastopen={0x22, 0x4, "9922"}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0xa, 0x7, 0xe3}, @sack={0x5, 0x2}, @timestamp={0x8, 0xa, 0x8, 0xffffffff}]}}}}}}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0xfffffffc, 0x493, 0x3234564e, 0x9, 0x1, [{0x8, 0x2}, {0xff, 0x76c88}, {0x76cb03cd}, {0x5, 0x7}, {0x7, 0x7e1}, {0x10000}, {0x1, 0x6}, {0x1, 0x1}], 0x7, 0x7}}) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) r7 = socket(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080), 0x10) 1m25.377271573s ago: executing program 2 (id=306): syz_emit_ethernet(0x46, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300}}}}}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}, r1}}, 0x48) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000001740)={'syz1\x00', {0x8000, 0x0, 0x0, 0x2f5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x45c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x3, "271500007a0000006451b3f79f985d1d00"}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x48, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x34, 0x4, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5babf11f}]}}, @NFT_MSG_DELSETELEM={0x50e8, 0xe, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3a9c, 0x3, 0x0, 0x1, [{0x184c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tunnel={{0xb}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0xe0, 0xb, 0x0, 0x1, [{0xdc, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xcc, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4c, 0x3, "3d18e8c006d7db2dfb31ee8225bc43627f1f46ebb64c37871231b3cc0bd9da29c85a337c25e88641a3577c1afefad3f32d5f6c0a76ea9b072f5276aeefe78531a52356aee712ede0"}, @NFTA_MATCH_INFO={0x51, 0x3, "c5c97593d976864440c55ec1ea3951bc8a9dd5eacaeea614ffc41cffcf3f2e1effd7e9f22d0d0065e3d5ab45bb28070acb9c2da8f934b0ba28a102186358e485fb8549d881d17fa03ed79ce257"}, @NFTA_MATCH_NAME={0xe, 0x1, 'connbytes\x00'}, @NFTA_MATCH_INFO={0x12, 0x3, "d63740cf0923615015576562ebe9"}, @NFTA_MATCH_INFO={0x4}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xb0, 0x6, 0x1, 0x0, "e0a02a22dc76e6515a64dcce45eaaac4d73071cc085b3d8a4f97ba32c0ad78b7037a7e3b4e3b4fdacd5c4b1683e4df8c90a9c0d15249e10441fe4cf3547cd9716c707f54a55b4524278e68d686b7d616187e78ebb3aa155466b20225e5425a4ee12d18c29745238c57c691ac007a9464b6b3ef5d988917b2fa707cd484bdbaa0cca8e045998815e7bf42afd14cd02ca9e1c4165c8115e59fe3bff75dd8a4fc357e909cacacb4d65de2f10993"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}, @NFTA_SET_ELEM_KEY={0xc4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7d, 0x1, "9098005d4960af99a6b7333ffa5fe8d304619cbaf8970694bf39a4a0d2905b3e72092329e95c8479062065a439f0effe24a9f21d9486ba80570500450d2f6b0a1b955fa4e2fc37de85ce3ffaccef667d27e8ea7da636b606b23d2ca4d63a660e86293d65c79699d8a6898fbca9919efe62f2f2490803110abc"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_DATA={0xc8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa, 0x1, "86b4c780bce9"}]}, @NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8e, 0x1, "f66b8e3ff6e0fce452bf62ace470c77fb78885527c0441b891d08bb7dd70fb7be38417b460c7fd789bc15fb30749ae6beffa21579d9586192c67378166996abba1c43a0bf27fd12b4f7dd5f4cbbd5aaee77aca83dde4b8aade04e1602aa421f2a9d48c942f21ee0b29ad96246bc223612e9ee47cdd9c5e5dd1a713e6ab6ad0b5e9900096bb1248617d5d"}]}, @NFTA_SET_ELEM_DATA={0x1294, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xf0, 0x1, "5fe6f7a162cd3255646ea98edbcd054a770abaf24d433af939beecaf89848269ffa1187fb2c97ed38fd20cf9e81fa82b4200b6a1178ec3fa23015f7a4faead88dc2a31c3e212715e4842e41ec88e241e6b78c56002d6da6546a77373ffb6c4b60d4913c24ea1fed675f50c52519c43d9e3da9b297d05af7eaa6370d2ca87951b9c30ef94258ab3833f004a158989e8627a69ccff34209a44613f35c6ef9731b2491a7f5b9e38fdccde24252416d25266738d10141cdd15e03ca4125f319be26c797e03efc132e8329f9c80a7c17c9c409d985931495b76fba34f7d36697e525a5a583aafe4c8461dbd53ee6e"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "b9c278b7d2212eb3c5f5edbe38163e74e7aadcb283ede121f6f89d9a8abcbdcc4b7cbbdf93dd0fba2fa68f5d0a1a4951dd67ec5193a444b70dbb2d353888827a9e920c893aba1145b715aa420a7abf534fa6cf6be1e44c28b0b74d3d20029bad15e856433939366e2e331c5d8ca5e1d682fb97c5d1693634e9763943de81"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "71754c3edfca5f59b799efbb2b8c17ca209d00dbbf3b556ee14efdc2aea45b48e1f0e38359e83526fa74f88cd401085f7d710dcb7a1aee16da85bdb39e5d3b966f934dfc253d95998a3532fcc4547ce27541290d354c5ef2a6f620dd1c1f8899a9d7e1c74d9daabff1d6985e46ad4f7edf4fbff4e55efcbccf25aaa0a718f7f3fb6f4a08bfbddd7cfa53ee842b2e95c47f3b73fc19169e30c0d84d9fb54b117a2c61aa8e2f187620827cc37cb45d7ebc13be3c7a45592e2af5d4f893e221b3c853018d776ab06eef54aec696d0"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1d8, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xd05d2fdff2012d54}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_REG_ADDR={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x68, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x68000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x19bc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x38}]}}}, {0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x85}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x44, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x3b}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x599b}]}, {0x42c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x340, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5b, 0x1, "606ceee68bebd4f0f734b2cfa5003de3414c84454b9a96a63fa8507417229eba2d030a7748472aa53fb88643d4046146b486ed1af0e544e357d08bc1c5f8f9f5604a2c0008597f583800e1c9476a69704e48178732adaf"}, @NFTA_DATA_VALUE={0x58, 0x1, "788eb29300d5aee4b09f37944d487f0824e07ed0142ab29b32bb3f8a67b3caf7fb8f1c68d6d7810d203c5090800af445c6e121d3a1df84c6f46ccecf93cda9d91b7c23653ec97c3a6bbb7374c7e07fa0460823c5"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x49, 0x1, "d9030ae90c6d431ff5efa7929bdd587c5a5ffa9f1d5ddc6334bbcdf597693ac31c1df30f3fc97e59d65bdf799dea200ebff47edac64c1cba6b679fd11426974d942b6cd49d"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xca, 0x1, "8c53fb3cbd798909c719c648bdeb0ccecaac87c78cc4385a2d47031651941cea6283106b216a0337fa692777b16d345138bc170c3697fe6aeed9789940c39aadbec1da70e737c6f58ff48c4a6fcf39d4a34743abc1a2511fc0f14b67884c7acb2c0c0e386f6f49a702ab1f730b386e84378a6906c6e8e74a65bb490625c79c4459308560005e7840541819d38462dc533b29056670770b7eb5e2b332932cdb072e16996628ab74bb7128684b7743280bc77ec33a472a2db0d131ca5304fe54b35c6480faed7d"}, @NFTA_DATA_VALUE={0x93, 0x1, "95fba1f5a250adcb131f8230d261cd311e47748737ded0c3bd7864045a7f374570b8bc55b1aba3d3e07b9b4bb04bf662a165fd683bc93f4fb2a1d0365d765945338f470705d48d33ad14cbac31b8f3c50a6ceb7f716db702f938e3f62df3d8806af3d27e2b8c12bb5fc3083a8e5bd5165e3d58094130f1cadcdc973c4d2f26fddf8b5d3153fe6a2be4fe5a65b0bcf8"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x46, 0x1, "9c62f64c741491eddd6f8a4acf0d5251bab303618e57754b92d43d0e8454d706f2e818ef8268127c8acf774de5789becfd86f6dde42f5e9647b97e4d3120a703d8da"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xb4, 0x6, 0x1, 0x0, "089d8af5414a6e8f1bfc5a5126e63e017324d6ad93d296bfdeef12369db0e9a601a5f2eb101148877927505cffcd89097381ac8080530f3ed6a691c3a078b3c7fc06535ed8192f70d9606ffcadacd1847516ce1264e14bb43d95a5794a8852ea844f3a28a46e08227f7705b582ce86e11001ab8c8d27f1d5fa698acacd9e639443c0effe04fc6c62abc3daa7baa965caaaf57bc1e2ce78412a324d44252805330d6d4524454a4a67fa7f3288bfbb3cb6"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffd}]}, {0x8c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_ELEM_DATA={0x280, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfb, 0x1, "71740f4cf2078cf8ac1b06ededa58436a8e723a1876e7d880556331c6d07caa14febaf3e0609a7a27a2471bb08e49e8365ff80c19ccbd7d11f6efb3fc0e54f5e507b9a9a65f31fc32aeb3be1345a7fa7313fa58cf6ae70050a92411ae846596ea37454c0e8434469f8e45869bd0dec017c5cce65739fd933da7365dfbbcfc31061ab140c4db56680b33418a82a96dbd809919057bf1283e83c6f1a3ada723c0f216e4df84ec704a5c5701d1fc9d3e9f4be9f1c8f20557b4fc20d37fbbd81d938e512b2a6fb9cbf589d7a0bc670502f2dd0835a593278982923a0affa24f216f33fd61fb69ac2976acf98e9fdd0568270f85c1fa90e7ff0"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5edd9ec2586a60c6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}]}, @NFTA_DATA_VALUE={0xbe, 0x1, "711d95b2f6696a17b364c3016112f41f42c4d4bcca2fc476757ad602fd941a7e480380db1521eaf79fac87312362f9524af4f6983dcd7989f33791fcb1fe93f985f694622ace3cdcaa77c079fa4784f8d4aff3c65a96896d7167199573b45468f17d105b2c7d87e4b69628bdc9ae2439e92e485c16ca7ab5226edfa86da03c972cc22f7129a799c1c6b730b8454f2491c06de4675b204f0f5bf16369fe7ef5e88f866928e64dfe6c83d5d3dc863af2fd4c4a92c35712a363541a"}, @NFTA_DATA_VALUE={0x5e, 0x1, "97ea1c78088e53c2db72277cec37ab9a98fd207991e3100dcb39254ce87312538acbd741e3109ca6136553a078614f1d346647ea918a019a39902f235256edde90b1ae6c161d49739b39247c22974112ed8d8a9d7c98b956c6f1"}]}, @NFTA_SET_ELEM_KEY={0x224, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5e, 0x1, "4e94c3f63716a2dacfb4897a88c3662b7471659139127b50e78ce48e2b285118e4ffb92f7f2e406db709263b9fdfdbbb9972b0316b5f04be644069503d6d01b25c12e63cd7dab86ea78ec8ced139e01e3cde32f9c2e4dd234a62"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xcd, 0x1, "070fbe06f7bcea1495afdf36b75050dfef2ceb11b8e54d40021f8a43eb011f32111e2ad06f9cded86d0812bbe2f384e226bdae4d45a89078fb0a910e0f8ffcce29e2920cea135606448496ce76fb01db6d2d7547a53dd4963610eed77d86a62ea6cffa6fcdb1a7355984c5701567cbdae85adbb15e3962a471008a87b5011cbc04d749ab22388598e3551d2fee822a6866d8bde8f02282c5ae41d993d3dcc6575d28d251b23ce02dc506486d57f6519db4a2ad0070bd137150a555bd0ff1a35c97563d243c7d28717a"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x3d4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfc, 0x1, "ecd645d1d152c7aaf2010254c2d32c3b16f7d17aba46d4bf3b5e07ce6dce6dfd7c771780c117c5a3cc1480fbdd5585c53bc9c077b5b3a70212a0608fb4d8c3736ec6b8f1fc44efcc012bd87699437aab6aa7467118e396f9e68a0182218561e29a47e0dfd4f66580aa3426b1a458ee60c1fa2831feef2dfc028403b91004ac47bbfdab8c250ae481196a54f42fa6c08179807fc28e8210c391da0b5bdbb1718130ce53e70a063c4dcd97a6e8204e79763b3c227049c5936435dcaf006518ddfd9531dc4b1373d5df11ad935ef97b4b0b31eddd506d94a82a90c8cd6b2c938c137fc12a84e9d8ee6028a4c7aeec93c2ac0065a9e8a447a6fa"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8c20d847f63a0500}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8b}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xe7, 0x1, "5ef6882ec87a631f2960540f612630c59ae03d2950c816ca8899af638ca5faece46f9e0ee29f72a6780f8f1a4d19d080b7ec0513f7d6eb9d820613f88f84320b04533fd2d41a6fdbcb27098bb4338947e6df0fdb3e7d9337f3661bccc8a317376de2450a29644a6220fa4369b2c7fdce133b9fb0825448667bf9c922c564278a202ffe65668f76fd84d437756e9b0a8ba99ac3b5b14e8bf4345d8788cb857ca77e8b7ae5833128ac06de4cc20587c2e08e2d70da377728ea27b7425b852d36cfd69073824ec9f1545cc4dfa568cfea31f0c3809323b301ce9a6f1d991c165dde92ca9e"}, @NFTA_DATA_VALUE={0xf9, 0x1, "a12ea8f0286207908818b71a170cabdba9dd821565ed19fc48de7a1370de6ecec22e1451fb1a0f06ce3f4dc12daf3fcf2ac66ced5fbc62a2e6f4b1fe30d9c35ee6932baf98d7e7c934dd33b70d2f3a74e33b22a7609892ab3bd5de0257ff906531f2a7ba3b8498b4edf78778cf8755191cbeaba9c753c6ad1929344d8862155e8fcab59785835ee9631250bf95803deeaa03075a9b07ea0e90d8927ceef6d8e3b2b6ba1c9cc97cc020a0e3fef1e184ec98a4f1914bbe6e27bac4b54a8616a3dd024432b32cad8c1b36ed343de44fce2d9c64d8a9dcca83c5f9dc05e63feb53457b0ea9069836e60c24315e2b38cccbad7cadb47429"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x268, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x254, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa1, 0x1, "b7883027c233a6f0a81a3c9c3d88c3ab91aac4f54c0bc4654c649a940ece46fadb66cc26e5ecd286c260163a1535a89d71fe3f31ad87dd7d3c44861fdef208f9661f12f8efd87ed99e2b0976868d1fe28e3d1bbf01dbefb0b66d2b1fd1da8deda7ea427afc6453eaaf0df2575a917168cd8872f4ef313bf84c7dc551212a1cbed714a4d069688c79def7aa453e4fa7cecffff375fe6eccacacf5245825"}, @NFTA_DATA_VALUE={0x9a, 0x1, "0332ddbd0a0af8ce0dd5ca641a6f6141179888466fc97106169fa6aaddbf65aa5e5a2fa6674c0e9dd40d2e2256160a8a97eda23550a0e5f11b4f7fb461a601a87d1a976bbb2d28d444b423a55a83d717e3341ef8e79358373291c209fe4dcf60610f226464f80f0c5256556c312e2a0a7ff1b38702b487bfa56c27b9b36e113de7a94ed95fd56afdb6aa6badd8c5793596d93344c827"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xb5, 0x1, "b9bdc7faadf2a62768f9f2aad19e6581c2e75cbbc6866b4485c3e5c86aa0ce2078e140bd776ae48c95f31b9ad5ad659259284e7d81b100ac19c5341acd7860b2a690b96e98f7264d50078a1903c8ba71d6abe377b6ee8988ce2722e944d683670eeddc1c6bb7f303313b49bd725a877161b0c091710b55c783ed2683f830e00f5b46cff829d547a0fa75a9df07b813eb8c3b78565f8936b7be7f357e623c34cf2434f8a53bdd495f301e7aaa4d99a5b486"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}, {0x1074, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x1064, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "10e9e7c4871896a1c1802c7d5bea12e77e4ed798ceeb39dcdb68b1df9ca8f463a87f5fbab323e70ca5e17fa642971eb34824f3a1a57699d686884733357a53f38a71a9ae66882afff16748df80a3298d2c08f703c1f5d6f076a032e81212b2df1e9a8bcf6568cd1268608fdacae681c449070918a47ae26a2becf7557ad3170d9dfc9dfab23c12b26fe9d1c13b45418c7f3051d57b1f21d389a3de0df3b697890fd086b9390534a28730764762c2b87ddbc6420ee25183e0f777d8ed0f1f1a707d8cb48486dbfa4db8f8e0caec4ca37e924dc859e1e7e12308b149daa07da874868ccc38d2e36c1fb030d239eaf30e7647983aa51198ee97f15e10e0117377277ed5a49ce8bb400d5d6c25c210ecd2202cbb55949d4c92cc389ab4704583da1beee1c514d1f475ef372422e498c4c1bcff2d4b6bbff46881320eafc6f3de635e0ebac590c7574323b3733963f210f62e0c08ffe6df3b24c6409c3c709051e7622f1b39713f5ea0921a79bf9e98ee9b524cd05348966015bfb88fc988cd74b8202acac9f075604169d67071ba3a433eb8dcbe757f3b70b47d96fb7fc5dcd51aeff211897a23f9a1d2d435bda4420d8310eac1761772a79d2bc9d5807ed17bc581384d9cedf1590872697f45ff0ff864f1f3e59aa260a246b140bc291b14aabefe0603af781a7359ed79cf3536012475d95496e81207ca0d4167502b48e3cafac78a3224761d68f877cda81c8f168fd5b35b4dfad9958ef61d56bc9d443dbb3a6bc5e042b99fa9710ef71a549ec182d8d5251db55cb09043969f0caa1de302b903a1370db52f4c67d5dd8b1c6eb55ab7cddbf1ef11be98cc07fb9c2451cc14860718f3cd86fe75dce5476c1a985aa33965b006b3085c783b7bfbcb585c468d5144d2ac8a076c7d6cbaa137360b1feb2800441d6c6f670e36c8f21da4a7358e36c829856cdc076670a5e4dfdbff68066246f7ea154b70faea1773061ecfb6f5eca2aa7590dc7f40b9058c58af4b6552400e8841664168d4c3345e60d5c0d3260601ee91e04dde7354b69b117e656155373d2e57d82b983b46e39157dd28ed98ad84a9db4f22183c6d9471dd988d0a9c48d68dcc4006c8a148efeea5952caf3100533f0fd280b48fdcaf1637878a90e139ccb98e3a23a180cd79bf41f5f51b69f75f62f15687401cb0f3c772459510f279019bdcdc1f4d1de35834ee6c2de22c8135a2808ed8ccfea52a74215f353d9e34b2c36d886bd290421480fbdd5f1b35be2847761a84fdd16872a01daff121084950711d174afbd5ff9ec851fe29e9834a37ba09ad34c6aa32ea3b2c8196b82bbd43d1286b4b172c2cb042214f6b514f689162315b54a9108c049033a5b7bd52483872febe273c9400729556e07cbf1d726ad95232dba2aa3e9aa4d01b100311dee3bf63111bbd92f1ebb11ad65b3a7c45294eb8d2fc25390e1a194efb203570a8974620f2c2c9b6683669f25c6909cf1d80232aba3260d013b26f34a4a4241322f439d9b13222fb401d6b3f539b354edf40d069065496fb6d4648f478f61990424bf54a045e524d5e1844f2ba29600ab90334c053fa874695b101517d82bdb7e0dd839c592366c21cfce712659cf1780afa9205272814449f3a2fd49a9ee2f40ae346fcd2cb154068087f4b3b93f3db0ceb887fd3479663abdd2ae5bfb383a1502529aa1b6ccc93b22d87607d4dab3e33d5379eaf6ac1f311731c5db9a90f8bb51898153ab7cde58c87cfe990ec440e961ae4fd052ba5a94fa1aacb610068e81db78845c199e9d87230b84978509e3ada08682c3f18822d38d6ca8c1a3f619dc33c13640442f60f518220371db2152113530dd6fc720383bcf58f193dc1bc49dda6c1896c22062404721244f577cb2b141086192690a677b1db2fe9a4b5f16c8c0e97a8949f90dddefe9e261d658ec715eb27456c1d9bc0e2d0f5dc7fc4c5a8e146cf75c71b9ccf358356967d2cb3be0b1fed561d0db2437132346e9df67d2b45c488cd29c8a8e1bd5f7b24cab507d9536cd59c8413e7c633307ac5e14b856cdca8c7659e21657abbdfcb9613a1e005d6f2a5b783e76b71be274fe696bbece0f0f643c00982fb0408926ffabcd5decdb3fc8eb39a378935582ca47fdab2f58d5f0838fc470100a44818f3a8f54b83b21fd8c1357988441bc3ae5c39df317c5c7eab31d4775645aedd7bf719f86b8fc92f256e6fb8ae528213e2b5c6eeda045d5a8551ccfe390703f6514b7096fdde2fb4b7f8f4650ecc44bea9422e54f989aa0ed4749735e423976263f50644df313696dbc769a4bad89ef7f74d994652d6375f5b0b1a0736d303f74cc252468893e328047089a727ecaf81a4b8fb3ba23fd6b244f99f883f08f360dd72870ad2445d6b152d8f21c0c316280554f31be3464a2548b7dafbd76146de772234ee41563e7011681a602567fa2bbc304919d159c0e25a8fffdaeaaa876ea539b4838733f6da83fb6ae81ec69a3e376709989fc9e9b1f9f9617eb078f23ed778e012ce8d0178e7870b44de64ab8272feb35c79ecd3d84983dda1461bf7494a0fd9878a70af32b54ae03f394a5722fad8b1c307f745e2c73ba9268593de09e3cb46b233e99b773f8256f7a3e357a5a01dad70fee6fce73cfdba8d4ee63f7476f2bb7ef33363b27700b4b0b7115b6d2def1045a57df473aa3fcbac9bc92a20182f6a4c5b74e98a6d32088c0bba8ff88665001302d27189ea8edcacad4cf12194e8ad7307cd54e7385d202f2fb6bace8fc7173dfb3ed06b03bec22eb19da215c62b7158aaab5b354c8d23f797984316d353a2f8b3e9378540862f36fcf59c7e8253ad76cd8f65e0d0b0ad0c8d2d1bbaa214d6aa01b278bb63512533900083fab95c31bfa0781d5687967e756676ab22b89c592b983a6aa9404c262ca9581f8b4d0911553c7ec3c67e0006c40cb7d91e9830a594736a60a6757554633a3d52e992f49587a2d5aa42707bd5e0b0bbeb0bae62a6f8a7c048a4af3cca57f8482b6f984813f8f4b106d4a9717643d16aaaeed1b0d2ecfb4fb20fe44c780bf566efd66547e87cd56fac1ae119f779fe1ddc0cd6de1e4451b8cf6edc393042940eb0e144f6fbfef132862882def3eb79f10b9a64c33da6fcb1dc295ccf930452c6191dc4950cf66e32d5ab326d637c0750949a626072c32ee10ab741669559ca9a8f90d9269a2b8c96123bf5c92d5722ab7740367d8f4fb6a342a9da6f39ec15808df92d2a1fa9ef5e1d8ee9f372e5f7a729894eac771506ea9d650d629256d6ad542345ec8a9b81d6ab7b115bac4c93a384dcbb9722e3aefd611e567ddbf06e94267f584db42dc86a45e4a1e05d7229d57b8a509c8d34518c87a43bd2fa8558a3f9c3838e757486a939302bbb81a8bca4cb9e6d4ba48ce5c78a4f588613bc5ec9b4f4fdab375c5caa816759c58bb2554c89e9af160bf0731a5174558a407d0cdd27c0d71c91512eec300ef13231d425ebb350fef167fae4ed19c3263c6b42d2b966828d204230da60645429107f4b16ad34470cd4dbb27363a57febfd19fe463170acc9ccaccd37186c78e949f3a0135a9315f5da399cfdfd20fccad276dba314cd0c29e3f1961d0a8b7a07fa9e68a3cf4f1cc044671ae7c0ca204cab22248299bdefb5bf0521c06220eaf2305929ee1ac32877e7e53e84b95beb024091a9423021072f690def7214de31cf0389681d8a4fc8932ff8b5df4125a935c713ee73adcf35e6815c2eac6ee20e3aba4761fc04c5b15fddba0daff0527a7d52e72a01dc3019a77fa0e10ba98e084f5e4a207438e74c25a240abc7bd50f7ddad28c5efa8351cde449eadc61e5cc2ef2b6bf138f8e9d6227d1539127790e04bbb8a2a1d515b4c9811ea5bacebc2c2359c803dac7ca737325f0c3d7f8c6f48a0a21b74b10584998ef550b0211f7d8799e277181b233d478be811fd86078648b1198c88aec43bd70cf1d82bce8426a2dabdbdf0ccaeae32cf6689ed47fa33e74a9afff02fbdec13b1cc3ad64dbd6cfc8eaf2829751633205027833403cb196151878a24c47daa9c4e111271d597f551b53097b454b9715784beb9c393b4bdb8a008f09fe9ab837cf3b2d8e713fdcf0e9ca8ac0a969c361de25e9662194ad3ef70cc111d0e50270b9eea783ce35a6c64d52a9e7bce85b8ecb0ca624fdf6dc7e5852b4fb9b59ab83f9ad9d008150da2f2d73a1f519b6b3385b86b79f0394dc29894e9b1c49432bb6d6497f19be24ca7bc9bcc6446cee8efc8983d9ed023363a1a484859df066170a4e26abc69e801f3c80d2c5471c03bef34b099e5c4ca7294d212d96083f543e315641c393feab716787be3eeb17362143ac973ecbd19e7474cdf46ff8fa933303c521197634dac4e5df8c9e5159e6404f9e88c7fae39f33c57faa7ad6f5be6c3fdecfcf5ba4c6f4302ab45279e7f5793a07687ad106ff693bf242b0b3bc822c69b3b7555d6ce1e2fc5b33f71946f38c744c15acdc0a7dd1e1bbabecd2ea3538bebdce77f57c53934c620caf6ff37d1789ef38329fdf53f456fa566d3e1acf08ce855bdb9d564bd9f96e90f946d4304634b6e928eb0493ab6d8b9ea2993fe6aa01907149a265e1b5cfc53db4badc95ae31b4a1fa5a18c35c6240f83f76523ff019748391ea979b13e8a799369ce17eeae95472215842739f8d07535f2441af657ce794f47abe2273484fe7dca987cde19059279554cb67a976134060d0b02cfafad4cb3ce98a8dbaa7ce95f84ac0b506a639b5f4e17efbdf4efff133e971b23fe92ef393da0ceb67ad63971bfc992992d4ee6fefa7bc2d3b8f51c38cdd662ba2f9f914fb37c9495986e7ce11bd8e977549501c4639cd002067960b330a1515b4c7911fb311b7d13daaccbe3e84245d773db135f1b8223de9b864daaefba7de26ec7b005f4ff94ea90fa9f3d1a289b1d4811a70e814c892276409fdaae7d18c78156fe477aa1ae1949538066f4bf2f348782789e77b370320bcdc964f959fdf0658106c35b88fbf8999b4faeffc5ebdbebb261aa88fd164197c3b5c94c1e69d02e486e172a2b91c92ccf0b95878daf4d7b0f3af23f80f9a4c0c96eaf425fca374b7e9d841438985e37332e984ddcf3f29847ebea84f2cee3f6f3c5433e8b0d7cf44cce58c83718e285021b5485ffd20b58ae2cd4fd081362898caf99f5b40c75ae916b203ee432d84b33d90ae9413977f4f8127d0ccc64dce278b57c71c40b1ab3a7a79928b1481f60fe4346c9cf055655350690a96a0eba6bd5547952442809d560d8081a68f267e147cb75496e111082e44e5d1663f528aab426ab78e34a61b88387fce5506bb9e72a7f116e1db6e00b42b1cc07227fcc3403114e949813bb20646af7f53ceca5f82b98c063312a768f58052fc051c840673e02228facb577c4406f1a7fecbbb6d880d349378f23cd1c9ddbfdc7746548a1e6ba342885f750678324d4189e9c55a113a4b95c0bb9ae53969d4226a06d5f8346b725fd70dbf589e0800a94fda40d6d70862f12567abb123b6fe3dcef7011b3fb380d989ff52ad9d1fe7380df2f48e6870a7a327193257b410ac16cf55fca397f39e616ec10e82541ace116b5a70e59ccd839287d15767e4f06f6b0176e3d0e601182dde4f303e9446e433177218890a4471342e4dd5658bc5fd284dc3bab5cfe7f984cac2840af143301daabf98e9627964184625a9ff7ba47eb99b652713248ddb0b2c079035a1d3ee2e784365a7900e6fa90da70879733c4867a181b882c46d6877ae013983d3f5ef92f553c593b077b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x16e}]}, {0x114, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x110, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xa0, 0x1, "e2d5b26f768ea67fb716ce3960aee84df53fa130cd79393eb9e346e86f3cdfee6d80fcd0f7bc1ff58cf1957d8c9d745d247ee60d61b3f400958b828111683441d2c2f65b7688c99f7e3063e8d5e7eb771e42c2b2ad70e1470813dbe43dd616d9742fc9d3bb2bdbcf3cd18c7735891a4b94620145fdf48463a160100717050af6c36117bca46c706272494345de7d1b0e75b75a829bf3ba45929953f4"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x4}, {0x128, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8001}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0xfc, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0xec, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x100000000}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPRESSIONS={0xc4, 0xa, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x15fc, 0x3, 0x0, 0x1, [{0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8a4}, @NFTA_SET_ELEM_EXPRESSIONS={0x10c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x50, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3856361283bd55e}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x9e0d}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}]}}}, {0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x18}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0x18, 0x6, 0x1, 0x0, "c6606ab0fb4bb5caf66205804d76e98427760ff8"}]}, {0x1494, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xf7}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}]}}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @log={{0x8}, @void}}, @NFTA_SET_ELEM_KEY_END={0x13d8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x5f, 0x1, "8639c5824707cb0ee629aaaf3304a72219666992c0c5c3477448fe2adb569a1ad01d9c02a563d0b884498aec83b4d23a637756e64728c0d7d0b9323911952b82ab7200dac73bc8a8078925b5199eb113d8719b6e5b928398319612"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x50, 0x1, "71c4fa80e08c11f997054a95c13229ebf7dd8a4e55a6cd16cbbcafd4abbf127435990d4569971697f69b29856a48b9f7676ec5632daa9c2a63d6f3b5385d62aeb540b04fb3735a0e23f8fbbb"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xee, 0x1, "28dbb243621f1e4a46d99812a84aea3427312f80ee5c6f5b6561fca25adc173391d967fab231a4f3a8a8b2b66b77cf2e1f1321cca6a992c09d54a8446c86ac94e3d71008898f26cda99e5d086eb78f7ff3f4b0eb8265471b2abb08c5160790a208f3880e6bfe383677e07f0af27d7dd29bed54865deb18f88d40ad94bff53447682e14eb61770a9d358cc7b3bd61f688c0fe4568f40824c75540c4323401d2ba443f3547efbb5c1d803e08ef0a6e9baa429063bfa8801b6819a06f0cff72075f418852cf30aaa6dbd032b183ee3af4a9107115d3e7cd00daada7f54c2080e14caf122a78d044e982cff1"}, @NFTA_DATA_VALUE={0xdd, 0x1, "b1b2afbd5fdc225f104048d756c765262fad65c548e26120158ed5a6beec96a4fb60d116333ed6386484d193f0e1316ec1a147ac8739835a7730817e0870dbcc8e18122d7dfa396f018fd15c669f7b7650387a8a5f666f5507119da66f48dc46aeb3f4ac0a2ef2f6862ee7e7f5f26c62b9576c07d1c98d08f3fb753bfe289dbc25b36689e9323a01de7e69a4c00c1c2ee5735eeff5b97e9b91bed6bf63677d42ed3d822f59e14ea65dc4a8203762b81a3156f56aa09678ee480c5372d878ebf17a968aec48e6cf6afcf498f381341a987dbff54430f4f2e062"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x77, 0x1, "32c7ac5848321f7903bdbc9dcd66eb0d1f0e91631060f3bc3264eb5d22ebdcd3289fc356b86202b3beef1f32f2df1da39c9d742bffbdd97189968419746433ea016875f06ca72d5cab3867dd245d7bab456d9fc9650e4b77f853b9500955d3e27c9f4ff909e4f38f99b533052161f756cc2979"}, @NFTA_DATA_VALUE={0x36, 0x1, "e0269394e9d85a644124f269ef9ed017165b2f958dae19bb8d26e2a99035d51c8f3a3c4207400599877a1bef390343450ffb"}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x130, 0x0, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xfc, 0x6, "ab037f6cf32e39c42de674ba0d7dce7b94896ae5f0eeb2982fa308b305719d7722d3f409f9f16be2332c9edd042eeaeb45e13b0ec1b572121890d41adb8768ccaf09ade6a23e5d7ae9fd6e1a1bc5ddc06588de8ab17c2f592f66f2772b95a361ddbda1b23171634ee735db955f93e79b9c23ea6ea740f3e3ea47a8ba2b13f4fd28717aed9b7598058b75bc929f6c08dc822d8de0728b2256a9150daa503ab07736252ca2c20944299b037ae912405ef0a59f208cd092182540a64c8c8e282582fbc5b520bf978e2dec2ae4c13a0caee37e3df7d092a76e932eb0bdee1c8d49aa179bb84e09a87260be1da408eda756f96c652e1ffdbd7a27"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x7, 0x6, "7f1ad8"}]}, @NFT_MSG_DELRULE={0x220, 0x8, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x344}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xc093}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x10}, @NFTA_SYNPROXY_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x40}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x64, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x2e4b}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x1b0c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1aec, 0x3, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xaa, 0x6, 0x1, 0x0, "5383f33d32b9066cda6f5c5c3f1ce4693d62fb921a5e8f00eede42d8b6984d78129cf034402b37e88ac91075ed9ca86a3f98932708c83c889ee7cc2f6186fc97ee8e380a54d606ddd1983b5cd1094312df6218d0cea6e471765e2adec5325ae97ce9a04087d712416b8f029054733938cfc3e6c6bbf864916d9bd141ddbd9b86f5344273c47a35655bff06ecc1bf3d1fed2078e914573b73340acefc1100970103e93b2d3dfb"}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_SET_ELEM_DATA={0x148, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x23, 0x1, "4ebeb8475bc8cdd848ce0942b8abfdbfd9c5c2881f94d6b3eef018fa48e669"}, @NFTA_DATA_VALUE={0xf9, 0x1, "f80485bb2d22103e454e8bd2010a1d57ab7e6ccfa80eaa1c895108c981a67f51ccfbea84608a0d4de337d27123d20c40ae6cd8c49ec1f8d5006c2a1fefdb84ddf247c27edeed57a48334d92b9c0cedc9217f1942e10b7d196923adfefbf6d6c52855252361f43270ba3f97effe6d4afbac7ab2e8b5658e3406736ab5d8ead69d6b60e6951579ded9e2e6ed2c0fe5ba039ef0b4128731b2a0177ba97f4e560add5c9690d936acff1022be990749422f8c90d2ceffe9094c60168ee15432b6c0c83b99d787a8b69bc9ad82ee92f07d90c08bcb95c8a3ef47a3e137ee30814834ef4862e917bb5d72efdad82a19699949ee44cf650680"}]}]}, {0xac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf6}, @NFTA_SET_ELEM_USERDATA={0x35, 0x6, 0x1, 0x0, "3b45fa735c7e20002bfbdb85861c5168d9588608173c5df269df86e525123f360a26528d0f029a5e7e3cd7b29a727e7603"}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}]}, {0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "c11d049f9d5c4cc62b6f00da702b1c53d4772c4012c529367585c5b1783b9a1eac0bc1efb580beed8c10da63f50164f736d86033d21fb54ee6bcdb3760a1f59b23842b37570db76810b181f6af56c56ef1e1b44488f4cc32135d2df6486df23108677bb7e7651b7174c076ec3f924478ad3f925e2c5435d4eb8589d1cd75679c78aca968aa2e95c76df22b614f89bdbbaebf64ca0b45b0208d1a42f8c4b0e20edb"}, @NFTA_DATA_VALUE={0x5f, 0x1, "6b5476704cc20bb0794f704668b27b5d8ba1c8411494809109673f4472b7d89e6039d633201fbab334769730d126dcf68105911d6d4517f1ce2e8febc64f9a74faad12501f40a104fb9308e86ac914e3d41d6bc395972d5a42285d"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "4bd64d2e9ae2b96d"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x1164, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xe8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "5f243d4d6fa348b22ce4bdd6b5265652e2b302157bb031f0db9ab2ceef564453c26e761fd7a11bff8b8dfba0624f"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x67, 0x1, "1acaf8d4290639925c3b375b18a59e551d15f7391c2c8c2be4aa7c47b24f4c6a679d60c219ebfecfb56df4351283f9393c85d9fd1128e259d4a71ab2cb780780d2eaccfca89ae5b62f6fca7f74d4022a202f96c869e029aca3471d66ec50bcf3cb2f0a"}, @NFTA_DATA_VALUE={0x1b, 0x1, "dcc12ba18fe26b1ca3036da2bf365fa4b03e7d093ef93b"}]}, @NFTA_SET_ELEM_USERDATA={0x6e, 0x6, 0x1, 0x0, "d98683ab468f0b84719bd9959958c5fad72c6cc4868a76c3df743f2a7347179ca1b876cfc3ef5cb4b75a5aab1cd583246089358348037c844c990bbd71028eb283a89d3900dc6948e9511bdea0d83a031933e511b9556087805a2db3bf7dbbd1581a9ea21b2f96edc533"}, @NFTA_SET_ELEM_KEY={0x1008, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x50c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5b, 0x6, 0x1, 0x0, "27a2b352d15f4b05e2270bad0814b58de53c7a9ce3bb302abbbf0d73ccb8529ca0ac0d0c2f09debc87f452f39be4f33e6de551e71de2ccef6bb8e2eb0b1336e5839a93d3cb9ec22ed49e1fbda31f295537382baa3ed418"}, @NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x110, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xa765}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x100}, @NFTA_QUOTA_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x10000}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8000}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}]}, @NFTA_SET_ELEM_DATA={0x288, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xb3, 0x1, "d86ef1b59eae5d2fe8cff0b2d852a5d701c56079cda621f984f5c2917b6205757d1a043f9681830dc69d2543c67a23b96e634dd32d93eb9ec4f447b33ca2674d765cac5efaaad0471d6b66db7b0765ad6357b22025f3b450a518eb6cc84678ea797dca173000c8aeb6b80c045fc38e6d2f1e8611400ea921308c688b4da139a33372b4b79cec29efd8bbe6acaaa3ab923b8d0acc6b77185fdfce60568dfe0223d52fc1d3a56e35f289c7eb1e86cb9d"}, @NFTA_DATA_VALUE={0xa2, 0x1, "b5cc29caf6a6e54e4f625b24c47de30d6a190877d0e340baab742e37d90279577536b29b37791ff0d62a2170513d01f5cfac76e389094eaa36fe05f43d57229aa451579922a9ba5e8050cd33d6d6fb6436c34d5ffce75cf977679f09b818b87b9be2c17d848d2adf906381556cd52cc9c3acfe805329102772e42c6f4afeee917883d9a895c401bd616bab79c557293f5df9783888ab6d88773874c54ddd"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x77, 0x1, "63cf16e41142a8cd035c9a6d687234751ec6dd05bd43554888dcffb0de2becd73eb25d7e05dd61ba301c323ad1a9269f4703da2e563c65dc286ec89855e0bcf1e8f09ad5d02bf3e44bb7c655f5e1cb0d68ce7495a74028fb850063ac97531750ca395c682bd82cde872af99dccebf40ef9daa3"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x8, 0x1, "7a8c7f37"}]}, @NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_USERDATA={0x9b, 0x6, 0x1, 0x0, "c1c961f1bde5a3e74de51899d7968cf54429f0866fe02c9e834e685260510035ef07a8b93765c0a1f1cc6f244e6fdabbbbe470a91bac38ade727e4ef79e6531d5d4aff18e85a6dead1e3ec4d4894ae2973a996b11353796dd1f8038bf5fc8bce8364f2aa0c8b1969788d11e2e6d032bc794ee320f4ed207e53ca4ada3f673822a8ddf4874e96f8ac6ebbf30cc6c997a3d061193e418d41"}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x64, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7064}}, 0x20004081) 1m22.423235924s ago: executing program 2 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 1m22.169801519s ago: executing program 2 (id=310): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x8}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0xfffffffd, 0x4) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x87}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@fd={0x807, 0x1, 0x4, 0x8, 0x6, {}, {0x2, 0x2, 0x9, 0x6, 0x9, 0xfd, 'hT=7'}, 0x0, 0x4, {}, 0x4}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f046}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x400) syz_emit_ethernet(0x83, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0x0) 1m13.189193103s ago: executing program 0 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x7fffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, &(0x7f0000000300)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb635773f07ebbeee, 0x50112, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000600)={r3}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='afs_make_fs_calli\x00', r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000030000180100002020782500000000002020207b1af8ff00000000bfa300000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500ca7000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) connect$inet(r2, &(0x7f0000000580)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) getpeername$inet(r2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30"], 0xfc}}, 0x0) 1m10.359613786s ago: executing program 32 (id=302): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (fail_nth: 1) 1m5.519718994s ago: executing program 33 (id=310): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x8}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0xfffffffd, 0x4) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x87}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@fd={0x807, 0x1, 0x4, 0x8, 0x6, {}, {0x2, 0x2, 0x9, 0x6, 0x9, 0xfd, 'hT=7'}, 0x0, 0x4, {}, 0x4}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f046}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x400) syz_emit_ethernet(0x83, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0x0) 1m1.08732172s ago: executing program 0 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) (fail_nth: 1) 59.937481669s ago: executing program 0 (id=325): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xa6, 0x10}, 0xc) (async) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async, rerun: 32) r4 = dup(r2) (rerun: 32) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) (async, rerun: 64) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) (rerun: 64) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) (async) write$P9_RSETATTR(r4, &(0x7f00000002c0)={0x7, 0x1b, 0x2}, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) (async) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5452, &(0x7f0000000000)) (async, rerun: 64) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x6) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000198c00000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x100, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0xfffffffffffffdee) 58.069476637s ago: executing program 0 (id=326): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (fail_nth: 1) 52.932304377s ago: executing program 0 (id=332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB="8c030000", @ANYRES16=r1, @ANYBLOB="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"], 0x38c}}, 0x0) 52.571657236s ago: executing program 0 (id=333): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0xfd, 0x0, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}}], 0x1, 0x0) 49.959079098s ago: executing program 4 (id=335): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x0, 0x81, {0x5, 0x4, 0x3, 0x5, 0x40, 0x64, 0x7, 0x8, 0x6, 0x4, @loopback, @private=0xa010101}}}}}}, 0x0) 49.552290922s ago: executing program 4 (id=337): unshare(0x20000400) r0 = inotify_init1(0x80000) fcntl$getownex(r0, 0x10, 0xffffffffffffffff) (fail_nth: 1) 45.881632645s ago: executing program 4 (id=339): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/205, 0xcd}, 0x2}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="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", 0x2fc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000b00)="404e8269db2bfd39d0df9eda352d1073bcd2aef6ccf89d0bde3c37e135354087093ddb9990700c33fd72ed12fef37764532d4662b4151b3d39f8b94d1c851c7635f40eaea8a126fb03d000011c8ff51ff2034a22482a412d6f7ef3579d710df850c4a8d1230dd75f0c3e01adbd4d7423fc7fccd81a14e0f27c173247707a3b8a5867aad17ed86e9fe8688aa1b726518f3c76231f3ca18b64bbe383b56ae9b11d2aee5022a27c5f22d6f6caef3bfaa6dabad21c0a5a5d", 0xb6}, {&(0x7f00000002c0)="a644436d07214f1640fa2ebf0cf31abf010854f9b04422775df039843c98b72f45eb1ae73fb46faabcd035bb8935081048b14818c9ebeb373096688ecc57aa9ce63df5e02b1f9f9f5729c28055161b838106db86294803367740d3947f50b86ccad7600cb2bb0c97b6", 0x69}, {&(0x7f00000000c0)="d8e289a2", 0x4}, {&(0x7f0000000340)="130a58f0018f50eb4ab714b4822919907e05589e33a4cb71bce227c47eed28f531014e0c9b17bfea4ebc097e280fa5447cd8bec23a29eb0680b0e0bf798e17ab67483c094eecf232f7f81c947cc23a039543c5d40ec5a591b6cc33eeedba96f26cca56e0adc77b7edd224144ee9d841d5381889e043fe53091326a89d56baf77d977170355d3453f813207f6a7e42a025f1872b8dda758ee30cfcdff3a378b46a114a2d407a476976fcc060dbbe4b3b5747bed5be489d56c2c9938fe60d44256739a4e3be9cd557b119bd1c8f7", 0xcd}, {&(0x7f0000000440)="eaacec91f29886681996de91a10d6e03c0a696be4db24ff167daaba1d3df8c28507d4d35eea7c81736d23733f03d8f0c100b715d06e61f57138654d8307416dd532c35a15fb7e402a1ab2fc23a3c258c252036cc3a8d601f", 0x58}, {&(0x7f0000000200)="4246267fdf367f83b7e8c714f9ba2d5ae4b4562019004ee4bce8", 0x1a}, {&(0x7f00000009c0)="b4a423d69abff8252f69e52f936f399f57c389278924e0e2caae85800a73d70c2760d905894fed7681ae2342607d92a31056ccabe62e81139f0f25c1264678a7c89d20e92663aba5", 0x48}], 0x7}}], 0x2, 0x480e0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x90000014}) 44.568454789s ago: executing program 4 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000064}, 0x20000000) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000a00)="be5b1799b88f355d", 0x8}], 0x1, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) recvmmsg$unix(r3, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r5}, 0x10) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x804) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) 44.069994156s ago: executing program 3 (id=344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000140)={0x1, 0x1, 0x0, 0xfffffffe}) r5 = socket$kcm(0x10, 0x2, 0x4) lsetxattr$security_evm(0x0, &(0x7f0000004d80), 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006e80)={0x2020}, 0x2082) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200030001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 43.61702755s ago: executing program 4 (id=345): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x0, 0x81, {0x5, 0x4, 0x3, 0x5, 0x40, 0x64, 0x7, 0x8, 0x6, 0x4, @loopback, @private=0xa010101}}}}}}, 0x0) 42.651408532s ago: executing program 4 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 42.4980356s ago: executing program 3 (id=347): process_vm_writev(0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$sock_buf(r0, 0x1, 0x26, 0x0, &(0x7f0000000440)) (fail_nth: 1) 42.054546521s ago: executing program 3 (id=348): openat$fb0(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r3, 0x10, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r5, 0x0, 0x0, 0x4c, 0xfffffffffffffffd}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000040)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)=0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 36.992860976s ago: executing program 34 (id=333): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0xfd, 0x0, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}}], 0x1, 0x0) 36.864569023s ago: executing program 3 (id=350): openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000b00)={0x120, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8cd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan4\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB="8c030000", @ANYRES16, @ANYBLOB="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"], 0x38c}}, 0x0) 27.44450789s ago: executing program 3 (id=351): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) memfd_create(&(0x7f0000000940)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x7f\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xfd\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS\x80\xed<\xad\x89oL\xc19E\xc25\xe2\xcf\x8f\xbd\xb6\x1eA\xf23\xf2I/]\'\xcd\xe0p\xeepL\x17b\xa9\xb2\xba\xb0B\xee;%`\xf6\xb0\x92\xcc\xd7O\xfa7m;\n9/\xael\xec\xb91\xab\x8d\x05\xff\xf07\xd8\x02-\b\xc4\xf6\xe2i\xb2\x06\xe1\xf9\x1e&\b/\x18\bE\xea\xba\xc1\x05\x83/\xe2\x8a\xa6\xd1\xc7\x97\x92\xceJ\"rh\xa0 \xa7\x9b\\\xd9\xf9\x89\xe9_\xe4\x91\x81\x16y_\x1acf\xc3\xf6\xcd\x97\x9d\xcdY\xa0iA4\xab\xc1=\xcd\x13\x91<1\xa2r~\x18\x84{\x8e\\\xe5\x12', 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f00000002c0)={0x1, r2, 0x8, 0x7ff, 0x1, 0xffffffc0, 0x1}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8000080}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r7, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x1) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r9, 0x40383d0c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r12, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r12, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) 27.246117698s ago: executing program 35 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 16.297016412s ago: executing program 3 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x13c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1f}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_USERDATA={0xac, 0x7, 0x1, 0x0, "171d8ba61e9e94f4feea808014371972e562735419efd541abecbd15eb1df6459da59988d864b8a97238d42df249fe1b0dc316933a4954ee1441a6070436f2424740dcfba8c65c199858e49310c4007b253de4a4350c5a0723883791b8aeebaabc8ef9a3abe5881f1a16a0746d73878d4b9a98a4eb42daeaf3013dd0c223278577f1f891d0aaf400e7afa12d68d4fcff5c08d94895bd3c619000014087f1c09001c1a6fa5e1b55bd"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1b0}}, 0x40000) socket$inet6(0xa, 0x1, 0x84) syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2400, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[]) 0s ago: executing program 36 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x13c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1f}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_USERDATA={0xac, 0x7, 0x1, 0x0, "171d8ba61e9e94f4feea808014371972e562735419efd541abecbd15eb1df6459da59988d864b8a97238d42df249fe1b0dc316933a4954ee1441a6070436f2424740dcfba8c65c199858e49310c4007b253de4a4350c5a0723883791b8aeebaabc8ef9a3abe5881f1a16a0746d73878d4b9a98a4eb42daeaf3013dd0c223278577f1f891d0aaf400e7afa12d68d4fcff5c08d94895bd3c619000014087f1c09001c1a6fa5e1b55bd"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1b0}}, 0x40000) socket$inet6(0xa, 0x1, 0x84) syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2400, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[]) kernel console output (not intermixed with test programs): evice batadv0 [ 97.668928][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.891472][ T5837] veth0_vlan: entered promiscuous mode [ 97.951157][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.964084][ T5837] veth1_vlan: entered promiscuous mode [ 98.050671][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.083151][ T5836] veth0_vlan: entered promiscuous mode [ 98.151487][ T5836] veth1_vlan: entered promiscuous mode [ 98.202465][ T5837] veth0_macvtap: entered promiscuous mode [ 98.247916][ T5837] veth1_macvtap: entered promiscuous mode [ 98.298943][ T5833] veth0_vlan: entered promiscuous mode [ 98.365074][ T5834] veth0_vlan: entered promiscuous mode [ 98.386254][ T5842] veth0_vlan: entered promiscuous mode [ 98.393330][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.414545][ T5833] veth1_vlan: entered promiscuous mode [ 98.431399][ T5836] veth0_macvtap: entered promiscuous mode [ 98.444811][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.459846][ T5834] veth1_vlan: entered promiscuous mode [ 98.496699][ T5836] veth1_macvtap: entered promiscuous mode [ 98.501828][ T5842] veth1_vlan: entered promiscuous mode [ 98.528702][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.535319][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.561412][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.581092][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.675375][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.785014][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.832502][ T5833] veth0_macvtap: entered promiscuous mode [ 98.899328][ T5833] veth1_macvtap: entered promiscuous mode [ 98.906454][ T5834] veth0_macvtap: entered promiscuous mode [ 98.930664][ T3545] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.965539][ T3545] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.996457][ T3545] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.009632][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.033101][ T5834] veth1_macvtap: entered promiscuous mode [ 99.035653][ T5842] veth0_macvtap: entered promiscuous mode [ 99.071287][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.071313][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.163647][ T5842] veth1_macvtap: entered promiscuous mode [ 99.187551][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.292983][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.349665][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.371711][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.371732][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.473810][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.490998][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.494530][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.494886][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.535510][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.567735][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.575067][ T1474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.575086][ T1474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.603478][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.633095][ T3545] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.697904][ T3545] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.742110][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.812349][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.907616][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.929654][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.930295][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.930311][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.956443][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.020283][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.787512][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.787535][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.149581][ T5965] FAULT_INJECTION: forcing a failure. [ 101.149581][ T5965] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.149682][ T5965] CPU: 1 UID: 0 PID: 5965 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 101.149704][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 101.149721][ T5965] Call Trace: [ 101.149729][ T5965] [ 101.149738][ T5965] dump_stack_lvl+0x189/0x250 [ 101.149769][ T5965] ? irqentry_exit+0x74/0x90 [ 101.149789][ T5965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.149925][ T5965] should_fail_ex+0x46c/0x600 [ 101.149959][ T5965] _copy_from_user+0x2d/0xb0 [ 101.149982][ T5965] sk_setsockopt+0x276/0x2a70 [ 101.150017][ T5965] ? __pfx_sk_setsockopt+0x10/0x10 [ 101.150038][ T5965] ? preempt_schedule_irq+0xde/0x150 [ 101.150062][ T5965] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 101.150093][ T5965] ? irqentry_exit+0x74/0x90 [ 101.150110][ T5965] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.150158][ T5965] ? do_sock_setsockopt+0x33/0x1b0 [ 101.150176][ T5965] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 101.150198][ T5965] do_sock_setsockopt+0x11b/0x1b0 [ 101.150220][ T5965] __x64_sys_setsockopt+0x145/0x1b0 [ 101.150243][ T5965] do_syscall_64+0xfa/0x3b0 [ 101.150262][ T5965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.150279][ T5965] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 101.150303][ T5965] ? clear_bhb_loop+0x60/0xb0 [ 101.150324][ T5965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.150346][ T5965] RIP: 0033:0x7f2d39a3eec9 [ 101.150373][ T5965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.150387][ T5965] RSP: 002b:00007f2d37c5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.150408][ T5965] RAX: ffffffffffffffda RBX: 00007f2d39c96180 RCX: 00007f2d39a3eec9 [ 101.150422][ T5965] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 101.150433][ T5965] RBP: 00007f2d37c5c090 R08: 0000000000000010 R09: 0000000000000000 [ 101.150445][ T5965] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.150456][ T5965] R13: 00007f2d39c96218 R14: 00007f2d39c96180 R15: 00007ffff1022e68 [ 101.150486][ T5965] [ 101.967456][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.967475][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.188042][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.188063][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.276555][ T5972] FAULT_INJECTION: forcing a failure. [ 102.276555][ T5972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.276588][ T5972] CPU: 1 UID: 0 PID: 5972 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 102.276608][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.276619][ T5972] Call Trace: [ 102.276626][ T5972] [ 102.276633][ T5972] dump_stack_lvl+0x189/0x250 [ 102.276662][ T5972] ? __pfx____ratelimit+0x10/0x10 [ 102.276687][ T5972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.276710][ T5972] ? __pfx__printk+0x10/0x10 [ 102.276729][ T5972] ? __might_fault+0xb0/0x130 [ 102.276767][ T5972] should_fail_ex+0x46c/0x600 [ 102.276796][ T5972] _copy_from_user+0x2d/0xb0 [ 102.276818][ T5972] ___sys_recvmsg+0x12e/0x510 [ 102.276843][ T5972] ? __pfx____sys_recvmsg+0x10/0x10 [ 102.276885][ T5972] ? __fget_files+0x3a6/0x420 [ 102.276918][ T5972] do_recvmmsg+0x30d/0x770 [ 102.276945][ T5972] ? __pfx_do_recvmmsg+0x10/0x10 [ 102.276961][ T5972] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 102.276986][ T5972] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 102.277020][ T5972] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 102.277057][ T5972] __x64_sys_recvmmsg+0x190/0x240 [ 102.277078][ T5972] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 102.277095][ T5972] ? rcu_is_watching+0x15/0xb0 [ 102.277124][ T5972] ? do_syscall_64+0xbe/0x3b0 [ 102.277144][ T5972] do_syscall_64+0xfa/0x3b0 [ 102.277160][ T5972] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.277182][ T5972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.277200][ T5972] ? clear_bhb_loop+0x60/0xb0 [ 102.277220][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.277237][ T5972] RIP: 0033:0x7f590562eec9 [ 102.277253][ T5972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.277266][ T5972] RSP: 002b:00007f590388e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 102.277285][ T5972] RAX: ffffffffffffffda RBX: 00007f5905885fa0 RCX: 00007f590562eec9 [ 102.277298][ T5972] RDX: 0000000000000001 RSI: 0000200000007580 RDI: 0000000000000004 [ 102.277310][ T5972] RBP: 00007f590388e090 R08: 0000000000000000 R09: 0000000000000000 [ 102.277321][ T5972] R10: 0000000000008020 R11: 0000000000000246 R12: 0000000000000001 [ 102.277331][ T5972] R13: 00007f5905886038 R14: 00007f5905885fa0 R15: 00007fffc068fd78 [ 102.277360][ T5972] [ 102.561886][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.561907][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.622677][ T5974] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 102.706416][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.706434][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.682015][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.682035][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.724907][ T5980] overlayfs: overlapping lowerdir path [ 103.746575][ T5977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11'. [ 104.066407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.067621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.067744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.131148][ T5843] libceph: connect (1)[c::]:6789 error -101 [ 104.131937][ T5843] libceph: mon0 (1)[c::]:6789 connect error [ 104.195818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.299615][ T5977] ceph: No mds server is up or the cluster is laggy [ 104.412509][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 104.412725][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 104.610572][ T5989] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.149317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.149360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.149395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.149429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.149463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.149497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.761727][ T6001] FAULT_INJECTION: forcing a failure. [ 105.761727][ T6001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.761759][ T6001] CPU: 0 UID: 0 PID: 6001 Comm: syz.3.14 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.761779][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.761790][ T6001] Call Trace: [ 105.761797][ T6001] [ 105.761804][ T6001] dump_stack_lvl+0x189/0x250 [ 105.761833][ T6001] ? __pfx____ratelimit+0x10/0x10 [ 105.761858][ T6001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.761880][ T6001] ? __pfx__printk+0x10/0x10 [ 105.761899][ T6001] ? __might_fault+0xb0/0x130 [ 105.761933][ T6001] should_fail_ex+0x46c/0x600 [ 105.761961][ T6001] _copy_from_user+0x2d/0xb0 [ 105.761983][ T6001] do_sock_getsockopt+0x17d/0x450 [ 105.762004][ T6001] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 105.762021][ T6001] ? do_syscall_64+0x40/0x3b0 [ 105.762036][ T6001] ? __fget_files+0x3a6/0x420 [ 105.762057][ T6001] ? __fget_files+0x2a/0x420 [ 105.762086][ T6001] __x64_sys_getsockopt+0x1ab/0x250 [ 105.762102][ T6001] ? do_syscall_64+0x40/0x3b0 [ 105.762121][ T6001] ? do_syscall_64+0x40/0x3b0 [ 105.762141][ T6001] do_syscall_64+0xfa/0x3b0 [ 105.762157][ T6001] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.762179][ T6001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.762196][ T6001] ? clear_bhb_loop+0x60/0xb0 [ 105.762217][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.762234][ T6001] RIP: 0033:0x7f2d39a3eec9 [ 105.762256][ T6001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.762270][ T6001] RSP: 002b:00007f2d37c9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 105.762288][ T6001] RAX: ffffffffffffffda RBX: 00007f2d39c95fa0 RCX: 00007f2d39a3eec9 [ 105.762301][ T6001] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000003 [ 105.762312][ T6001] RBP: 00007f2d37c9e090 R08: 0000200000000000 R09: 0000000000000000 [ 105.762323][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.762334][ T6001] R13: 00007f2d39c96038 R14: 00007f2d39c95fa0 R15: 00007ffff1022e68 [ 105.762363][ T6001] [ 108.786120][ T5838] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.855881][ T37] audit: type=1326 audit(1759080623.661:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6024 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851e77eec9 code=0x7ffc0000 [ 108.855940][ T37] audit: type=1326 audit(1759080623.661:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6024 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f851e77eec9 code=0x7ffc0000 [ 108.855980][ T37] audit: type=1326 audit(1759080623.661:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6024 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851e77eec9 code=0x7ffc0000 [ 108.856048][ T37] audit: type=1326 audit(1759080623.661:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6024 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851e77eec9 code=0x7ffc0000 [ 108.856086][ T37] audit: type=1326 audit(1759080623.661:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6024 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f851e77d97f code=0x7ffc0000 [ 108.856125][ T37] audit: type=1326 audit(1759080623.661:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6024 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851e77eec9 code=0x7ffc0000 [ 108.856163][ T37] audit: type=1326 audit(1759080623.661:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6024 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851e77eec9 code=0x7ffc0000 [ 108.856202][ T37] audit: type=1326 audit(1759080623.661:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6024 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f851e77eec9 code=0x7ffc0000 [ 108.856246][ T37] audit: type=1326 audit(1759080623.661:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6024 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851e77eec9 code=0x7ffc0000 [ 108.856285][ T37] audit: type=1326 audit(1759080623.661:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6024 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f851e77eec9 code=0x7ffc0000 [ 110.411835][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.411870][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.411892][ T5838] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.411937][ T5838] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.411959][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.214819][ T5838] usb 2-1: config 0 descriptor?? [ 111.908489][ T6040] mmap: syz.0.24 (6040) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.937966][ T5838] usbhid 2-1:0.0: can't add hid device: -71 [ 111.938053][ T5838] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 112.066853][ T5838] usb 2-1: USB disconnect, device number 2 [ 112.078651][ T6043] ======================================================= [ 112.078651][ T6043] WARNING: The mand mount option has been deprecated and [ 112.078651][ T6043] and is ignored by this kernel. Remove the mand [ 112.078651][ T6043] option from the mount to silence this warning. [ 112.078651][ T6043] ======================================================= [ 112.131334][ T6044] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 112.257957][ T6044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.26'. [ 113.022915][ T6050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.078848][ T6048] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 113.135953][ T6048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27'. [ 115.246239][ T6066] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 117.183785][ T6068] FAULT_INJECTION: forcing a failure. [ 117.183785][ T6068] name failslab, interval 1, probability 0, space 0, times 0 [ 117.183807][ T6068] CPU: 0 UID: 0 PID: 6068 Comm: syz.1.31 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.183819][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.183825][ T6068] Call Trace: [ 117.183829][ T6068] [ 117.183834][ T6068] dump_stack_lvl+0x189/0x250 [ 117.183854][ T6068] ? __pfx____ratelimit+0x10/0x10 [ 117.183869][ T6068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.183882][ T6068] ? __pfx__printk+0x10/0x10 [ 117.183896][ T6068] ? __pfx___might_resched+0x10/0x10 [ 117.183909][ T6068] should_fail_ex+0x46c/0x600 [ 117.183925][ T6068] ? ima_inode_get+0xeb/0x4d0 [ 117.183936][ T6068] should_failslab+0xa8/0x100 [ 117.183950][ T6068] ? ima_inode_get+0xeb/0x4d0 [ 117.183960][ T6068] kmem_cache_alloc_noprof+0x6e/0x310 [ 117.183976][ T6068] ima_inode_get+0xeb/0x4d0 [ 117.183991][ T6068] process_measurement+0x3f7/0x1a40 [ 117.184013][ T6068] ? __pfx_process_measurement+0x10/0x10 [ 117.184042][ T6068] ? __lock_acquire+0xab9/0xd20 [ 117.184059][ T6068] ? do_raw_spin_lock+0x121/0x290 [ 117.184075][ T6068] ima_file_mmap+0x1a2/0x1f0 [ 117.184086][ T6068] ? __pfx_ima_file_mmap+0x10/0x10 [ 117.184098][ T6068] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 117.184118][ T6068] security_mmap_file+0x7a4/0xa60 [ 117.184141][ T6068] vm_mmap_pgoff+0x129/0x4d0 [ 117.184167][ T6068] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 117.184194][ T6068] ? __fget_files+0x2a/0x420 [ 117.184215][ T6068] ? __fget_files+0x3a6/0x420 [ 117.184235][ T6068] ? __fget_files+0x2a/0x420 [ 117.184260][ T6068] ksys_mmap_pgoff+0x4e9/0x720 [ 117.184284][ T6068] ? __x64_sys_mmap+0x7f/0x140 [ 117.184309][ T6068] do_syscall_64+0xfa/0x3b0 [ 117.184326][ T6068] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.184348][ T6068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.184365][ T6068] ? clear_bhb_loop+0x60/0xb0 [ 117.184386][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.184403][ T6068] RIP: 0033:0x7f590562eec9 [ 117.184419][ T6068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.184433][ T6068] RSP: 002b:00007f590388e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 117.184452][ T6068] RAX: ffffffffffffffda RBX: 00007f5905885fa0 RCX: 00007f590562eec9 [ 117.184465][ T6068] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 117.184477][ T6068] RBP: 00007f590388e090 R08: 0000000000000005 R09: 0000000002000000 [ 117.184488][ T6068] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 117.184499][ T6068] R13: 00007f5905886038 R14: 00007f5905885fa0 R15: 00007fffc068fd78 [ 117.184528][ T6068] [ 123.406493][ T6097] usb usb8: usbfs: process 6097 (syz.3.38) did not claim interface 0 before use [ 123.542354][ T6096] sctp: failed to load transform for md5: -2 [ 123.611098][ T6103] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 123.649774][ T6103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.39'. [ 123.851515][ T6115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.875919][ T5920] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.046049][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 124.063690][ T5920] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 124.063717][ T5920] usb 1-1: config 0 has no interface number 0 [ 124.063762][ T5920] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.063789][ T5920] usb 1-1: config 0 interface 85 has no altsetting 0 [ 124.285256][ T5920] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 124.285285][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.285305][ T5920] usb 1-1: Product: syz [ 124.285318][ T5920] usb 1-1: Manufacturer: syz [ 124.285332][ T5920] usb 1-1: SerialNumber: syz [ 124.368462][ T5920] usb 1-1: config 0 descriptor?? [ 125.409187][ T5920] appletouch 1-1:0.85: Failed to read mode from device. [ 125.409434][ T5920] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 125.649119][ T6132] Zero length message leads to an empty skb [ 125.796175][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 125.841014][ T6138] FAULT_INJECTION: forcing a failure. [ 125.841014][ T6138] name failslab, interval 1, probability 0, space 0, times 0 [ 125.841060][ T6138] CPU: 1 UID: 0 PID: 6138 Comm: syz.1.50 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.841080][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.841090][ T6138] Call Trace: [ 125.841097][ T6138] [ 125.841105][ T6138] dump_stack_lvl+0x189/0x250 [ 125.841139][ T6138] ? __pfx____ratelimit+0x10/0x10 [ 125.841163][ T6138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.841185][ T6138] ? __pfx__printk+0x10/0x10 [ 125.841208][ T6138] ? __pfx___might_resched+0x10/0x10 [ 125.841226][ T6138] ? fs_reclaim_acquire+0x7d/0x100 [ 125.841247][ T6138] should_fail_ex+0x46c/0x600 [ 125.841274][ T6138] ? vm_area_dup+0x2b/0x670 [ 125.841290][ T6138] should_failslab+0xa8/0x100 [ 125.841311][ T6138] ? vm_area_dup+0x2b/0x670 [ 125.841325][ T6138] kmem_cache_alloc_noprof+0x6e/0x310 [ 125.841352][ T6138] vm_area_dup+0x2b/0x670 [ 125.841374][ T6138] __split_vma+0x1ad/0x9e0 [ 125.841393][ T6138] ? mas_next_slot+0xc23/0xd00 [ 125.841422][ T6138] ? __pfx___split_vma+0x10/0x10 [ 125.841454][ T6138] ? mas_find+0xb0e/0xd30 [ 125.841476][ T6138] ? userfaultfd_unmap_prep+0x99/0x3e0 [ 125.841502][ T6138] vms_gather_munmap_vmas+0x4ce/0x12f0 [ 125.841542][ T6138] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 125.841573][ T6138] ? mas_find+0xb0e/0xd30 [ 125.841602][ T6138] mmap_region+0x729/0x20a0 [ 125.841642][ T6138] ? __pfx_mmap_region+0x10/0x10 [ 125.841670][ T6138] ? is_bpf_text_address+0x26/0x2b0 [ 125.841751][ T6138] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 125.841780][ T6138] ? do_raw_spin_lock+0x121/0x290 [ 125.841803][ T6138] ? cap_mmap_addr+0xb0/0x100 [ 125.841824][ T6138] ? bpf_lsm_mmap_addr+0x9/0x20 [ 125.841842][ T6138] ? security_mmap_addr+0x71/0x270 [ 125.841872][ T6138] do_mmap+0xc23/0x10c0 [ 125.841904][ T6138] ? __pfx_do_mmap+0x10/0x10 [ 125.841923][ T6138] ? rwbase_write_lock+0x56f/0x750 [ 125.841940][ T6138] ? __pfx_vfs_write+0x10/0x10 [ 125.841979][ T6138] vm_mmap_pgoff+0x2a9/0x4d0 [ 125.842009][ T6138] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 125.842028][ T6138] ? ksys_write+0x230/0x260 [ 125.842050][ T6138] ? __pfx_ksys_write+0x10/0x10 [ 125.842067][ T6138] ? rcu_is_watching+0x15/0xb0 [ 125.842097][ T6138] ? __x64_sys_mmap+0x7f/0x140 [ 125.842122][ T6138] do_syscall_64+0xfa/0x3b0 [ 125.842138][ T6138] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.842160][ T6138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.842177][ T6138] ? clear_bhb_loop+0x60/0xb0 [ 125.842198][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.842214][ T6138] RIP: 0033:0x7f590562eec9 [ 125.842235][ T6138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.842249][ T6138] RSP: 002b:00007f590386d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 125.842275][ T6138] RAX: ffffffffffffffda RBX: 00007f5905886090 RCX: 00007f590562eec9 [ 125.842288][ T6138] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 125.842299][ T6138] RBP: 00007f590386d090 R08: ffffffffffffffff R09: 0000000094173000 [ 125.842311][ T6138] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 125.842322][ T6138] R13: 00007f5905886128 R14: 00007f5905886090 R15: 00007fffc068fd78 [ 125.842352][ T6138] [ 126.288350][ T6039] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.287047][ T6039] usb 4-1: Using ep0 maxpacket: 8 [ 127.304306][ T6039] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 127.304335][ T6039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.304353][ T6039] usb 4-1: Product: syz [ 127.304366][ T6039] usb 4-1: Manufacturer: syz [ 127.304379][ T6039] usb 4-1: SerialNumber: syz [ 127.352294][ T6039] usb 4-1: config 0 descriptor?? [ 127.366912][ T6039] gspca_main: sq930x-2.14.0 probing 2770:930c [ 127.522146][ T5920] usb 1-1: USB disconnect, device number 2 [ 127.764318][ T6141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.765190][ T6141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.010522][ T6158] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 128.014022][ T6158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.56'. [ 128.603623][ T6039] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 128.837391][ T6039] gspca_sq930x: Sensor ov9630 not yet treated [ 128.879623][ T6039] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 129.305139][ T6039] usb 4-1: USB disconnect, device number 2 [ 129.882259][ T6171] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 129.919583][ T6171] input: syz1 as /devices/virtual/input/input6 [ 130.650558][ T6173] capability: warning: `syz.4.61' uses 32-bit capabilities (legacy support in use) [ 130.689751][ T6173] program syz.4.61 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.365982][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.369268][ T6196] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 132.396763][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.69'. [ 132.886461][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 132.888552][ T10] usb 2-1: config 1 has an invalid interface number: 182 but max is 0 [ 132.888578][ T10] usb 2-1: config 1 has no interface number 0 [ 132.888610][ T10] usb 2-1: config 1 interface 182 has no altsetting 0 [ 132.891260][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.53 [ 132.891286][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.891304][ T10] usb 2-1: Product: syz [ 132.891318][ T10] usb 2-1: Manufacturer: syz [ 132.891332][ T10] usb 2-1: SerialNumber: syz [ 132.970753][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.970838][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.168199][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.70'. [ 133.200801][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.201381][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.203027][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.203564][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.205063][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.205600][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.286509][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.287106][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.288577][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.289087][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.135653][ T10] usb 2-1: USB disconnect, device number 3 [ 134.555966][ T5933] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 135.265899][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 135.268491][ T5933] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 135.268522][ T5933] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 135.268547][ T5933] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.268569][ T5933] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.268610][ T5933] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.268633][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.787294][ T5933] usb 3-1: GET_CAPABILITIES returned 0 [ 135.787348][ T5933] usbtmc 3-1:16.0: can't read capabilities [ 137.623678][ T6233] sctp: failed to load transform for md5: -2 [ 137.830386][ T5851] Bluetooth: hci5: command 0x1003 tx timeout [ 137.942561][ T5153] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 138.106753][ T6228] overlayfs: failed to resolve './file1': -2 [ 138.201837][ T5933] usb 3-1: USB disconnect, device number 2 [ 138.291066][ T6228] netlink: 84 bytes leftover after parsing attributes in process `syz.4.75'. [ 138.520661][ T6248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.069468][ T6262] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 140.650352][ T6262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.83'. [ 141.705106][ T6267] ceph: No mds server is up or the cluster is laggy [ 142.189447][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.290975][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.111548][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.197229][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.246109][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.292096][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.591717][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.367079][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.933291][ T6295] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.002394][ T6302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.223848][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.402872][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.577629][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.761115][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.228869][ T5927] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 146.331836][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 147.460849][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.460883][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.460906][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.460947][ T5927] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.460970][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.506213][ T5927] usb 1-1: config 0 descriptor?? [ 148.724476][ T6331] FAULT_INJECTION: forcing a failure. [ 148.724476][ T6331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.724509][ T6331] CPU: 0 UID: 0 PID: 6331 Comm: syz.0.100 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.724530][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.724541][ T6331] Call Trace: [ 148.724548][ T6331] [ 148.724556][ T6331] dump_stack_lvl+0x189/0x250 [ 148.724586][ T6331] ? __pfx____ratelimit+0x10/0x10 [ 148.724611][ T6331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.724639][ T6331] ? __pfx__printk+0x10/0x10 [ 148.724674][ T6331] should_fail_ex+0x46c/0x600 [ 148.724704][ T6331] _copy_to_user+0x31/0xb0 [ 148.724728][ T6331] simple_read_from_buffer+0xe1/0x170 [ 148.724761][ T6331] proc_fail_nth_read+0x1b6/0x220 [ 148.724783][ T6331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.724809][ T6331] ? rw_verify_area+0x2ac/0x4e0 [ 148.724829][ T6331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.724849][ T6331] vfs_read+0x203/0xa30 [ 148.724879][ T6331] ? __pfx_vfs_read+0x10/0x10 [ 148.724896][ T6331] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 148.724927][ T6331] ? mutex_lock_nested+0x154/0x1d0 [ 148.724947][ T6331] ? fdget_pos+0x253/0x320 [ 148.724979][ T6331] ksys_read+0x14b/0x260 [ 148.724998][ T6331] ? __fget_files+0x3a6/0x420 [ 148.725022][ T6331] ? __pfx_ksys_read+0x10/0x10 [ 148.725048][ T6331] ? do_syscall_64+0xbe/0x3b0 [ 148.725070][ T6331] do_syscall_64+0xfa/0x3b0 [ 148.725088][ T6331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.725104][ T6331] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 148.725121][ T6331] ? clear_bhb_loop+0x60/0xb0 [ 148.725143][ T6331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.725160][ T6331] RIP: 0033:0x7f851e77d8dc [ 148.725176][ T6331] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 148.725190][ T6331] RSP: 002b:00007f851c9c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.725210][ T6331] RAX: ffffffffffffffda RBX: 00007f851e9d6090 RCX: 00007f851e77d8dc [ 148.725223][ T6331] RDX: 000000000000000f RSI: 00007f851c9c50a0 RDI: 0000000000000004 [ 148.725234][ T6331] RBP: 00007f851c9c5090 R08: 0000000000000000 R09: 0000000000000000 [ 148.725245][ T6331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.725255][ T6331] R13: 00007f851e9d6128 R14: 00007f851e9d6090 R15: 00007ffc05e14928 [ 148.725286][ T6331] [ 149.145015][ T5927] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 149.165976][ T5927] usb 1-1: USB disconnect, device number 3 [ 149.381753][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 151.516571][ T6346] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.380531][ T6349] fido_id[6349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 153.510415][ T6357] FAULT_INJECTION: forcing a failure. [ 153.510415][ T6357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.510454][ T6357] CPU: 1 UID: 0 PID: 6357 Comm: syz.4.110 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 153.510474][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 153.510485][ T6357] Call Trace: [ 153.510493][ T6357] [ 153.510501][ T6357] dump_stack_lvl+0x189/0x250 [ 153.510530][ T6357] ? __pfx____ratelimit+0x10/0x10 [ 153.510555][ T6357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.510578][ T6357] ? __pfx__printk+0x10/0x10 [ 153.510613][ T6357] should_fail_ex+0x46c/0x600 [ 153.510642][ T6357] _copy_to_user+0x31/0xb0 [ 153.510666][ T6357] simple_read_from_buffer+0xe1/0x170 [ 153.510693][ T6357] proc_fail_nth_read+0x1b6/0x220 [ 153.510715][ T6357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.510737][ T6357] ? rw_verify_area+0x2ac/0x4e0 [ 153.510757][ T6357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.510777][ T6357] vfs_read+0x203/0xa30 [ 153.510806][ T6357] ? __pfx_vfs_read+0x10/0x10 [ 153.510823][ T6357] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 153.510854][ T6357] ? mutex_lock_nested+0x154/0x1d0 [ 153.510873][ T6357] ? fdget_pos+0x253/0x320 [ 153.510905][ T6357] ksys_read+0x14b/0x260 [ 153.510927][ T6357] ? __pfx_ksys_read+0x10/0x10 [ 153.510945][ T6357] ? rcu_is_watching+0x15/0xb0 [ 153.510974][ T6357] ? do_syscall_64+0xbe/0x3b0 [ 153.510996][ T6357] do_syscall_64+0xfa/0x3b0 [ 153.511012][ T6357] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.511034][ T6357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.511052][ T6357] ? clear_bhb_loop+0x60/0xb0 [ 153.511073][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.511090][ T6357] RIP: 0033:0x7f430bf4d8dc [ 153.511106][ T6357] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 153.511120][ T6357] RSP: 002b:00007f430a1ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.511143][ T6357] RAX: ffffffffffffffda RBX: 00007f430c1a5fa0 RCX: 00007f430bf4d8dc [ 153.511156][ T6357] RDX: 000000000000000f RSI: 00007f430a1ae0a0 RDI: 0000000000000004 [ 153.511167][ T6357] RBP: 00007f430a1ae090 R08: 0000000000000000 R09: 0000000000000000 [ 153.511178][ T6357] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 153.511188][ T6357] R13: 00007f430c1a6038 R14: 00007f430c1a5fa0 R15: 00007ffd9a8aa2d8 [ 153.511217][ T6357] [ 156.149412][ T6382] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 156.153068][ T6382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.118'. [ 156.507032][ T5843] libceph: connect (1)[c::]:6789 error -101 [ 156.507227][ T5843] libceph: mon0 (1)[c::]:6789 connect error [ 156.730177][ T6393] fuse: Bad value for 'fd' [ 156.766448][ T5843] libceph: connect (1)[c::]:6789 error -101 [ 156.766657][ T5843] libceph: mon0 (1)[c::]:6789 connect error [ 158.011515][ T6382] ceph: No mds server is up or the cluster is laggy [ 158.854670][ T5843] libceph: connect (1)[c::]:6789 error -101 [ 158.854898][ T5843] libceph: mon0 (1)[c::]:6789 connect error [ 160.193346][ T6408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.028559][ T6039] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 161.477248][ T6039] usb 2-1: Using ep0 maxpacket: 32 [ 161.479760][ T6039] usb 2-1: config 4 has an invalid interface number: 118 but max is 0 [ 161.479787][ T6039] usb 2-1: config 4 has no interface number 0 [ 161.479837][ T6039] usb 2-1: config 4 interface 118 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 64 [ 161.479862][ T6039] usb 2-1: config 4 interface 118 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 8 [ 161.479884][ T6039] usb 2-1: config 4 interface 118 has no altsetting 0 [ 161.483454][ T6039] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0005, bcdDevice=d2.65 [ 161.483482][ T6039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.483501][ T6039] usb 2-1: Product: syz [ 161.483515][ T6039] usb 2-1: Manufacturer: syz [ 161.483529][ T6039] usb 2-1: SerialNumber: syz [ 161.595371][ T6415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 161.595598][ T6415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 161.617429][ T6039] kvaser_usb 2-1:4.118: error -ENODEV: Cannot get usb endpoint(s) [ 161.843224][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 161.843241][ T37] audit: type=1326 audit(2000000013.189:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6401 comm="syz.3.123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d39a3eec9 code=0x0 [ 162.001843][ T6428] FAULT_INJECTION: forcing a failure. [ 162.001843][ T6428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.001878][ T6428] CPU: 0 UID: 0 PID: 6428 Comm: syz.4.130 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 162.001899][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 162.001910][ T6428] Call Trace: [ 162.001917][ T6428] [ 162.001933][ T6428] dump_stack_lvl+0x189/0x250 [ 162.001963][ T6428] ? __pfx____ratelimit+0x10/0x10 [ 162.001988][ T6428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.002011][ T6428] ? __pfx__printk+0x10/0x10 [ 162.002044][ T6428] should_fail_ex+0x46c/0x600 [ 162.002073][ T6428] _copy_to_user+0x31/0xb0 [ 162.002096][ T6428] virtual_ncidev_read+0x2de/0x4a0 [ 162.002119][ T6428] ? __pfx_virtual_ncidev_read+0x10/0x10 [ 162.002140][ T6428] ? do_raw_spin_lock+0x121/0x290 [ 162.002167][ T6428] ? rw_verify_area+0x2ac/0x4e0 [ 162.002186][ T6428] ? __lock_acquire+0xab9/0xd20 [ 162.002208][ T6428] ? __pfx_virtual_ncidev_read+0x10/0x10 [ 162.002230][ T6428] vfs_read+0x203/0xa30 [ 162.002259][ T6428] ? __pfx_vfs_read+0x10/0x10 [ 162.002281][ T6428] ? __fget_files+0x2a/0x420 [ 162.002306][ T6428] ? __fget_files+0x2a/0x420 [ 162.002327][ T6428] ? __fget_files+0x3a6/0x420 [ 162.002347][ T6428] ? __fget_files+0x2a/0x420 [ 162.002379][ T6428] ksys_read+0x14b/0x260 [ 162.002402][ T6428] ? __pfx_ksys_read+0x10/0x10 [ 162.002419][ T6428] ? rcu_is_watching+0x15/0xb0 [ 162.002449][ T6428] ? do_syscall_64+0xbe/0x3b0 [ 162.002471][ T6428] do_syscall_64+0xfa/0x3b0 [ 162.002487][ T6428] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.002509][ T6428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.002527][ T6428] ? clear_bhb_loop+0x60/0xb0 [ 162.002548][ T6428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.002566][ T6428] RIP: 0033:0x7f430bf4eec9 [ 162.002583][ T6428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.002596][ T6428] RSP: 002b:00007f430a18d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.002616][ T6428] RAX: ffffffffffffffda RBX: 00007f430c1a6090 RCX: 00007f430bf4eec9 [ 162.002629][ T6428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 162.002639][ T6428] RBP: 00007f430a18d090 R08: 0000000000000000 R09: 0000000000000000 [ 162.002650][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.002660][ T6428] R13: 00007f430c1a6128 R14: 00007f430c1a6090 R15: 00007ffd9a8aa2d8 [ 162.002690][ T6428] [ 163.204015][ T5927] usb 2-1: USB disconnect, device number 4 [ 163.452747][ T6445] overlayfs: failed to resolve './file0': -2 [ 163.486370][ T6444] netlink: 84 bytes leftover after parsing attributes in process `syz.0.132'. [ 164.485916][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 164.694788][ T6453] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 164.719942][ T6453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.135'. [ 165.089202][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.089285][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.089334][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.089563][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.089610][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.330963][ T10] usb 4-1: config 0 descriptor?? [ 165.639806][ T6064] libceph: connect (1)[c::]:6789 error -101 [ 165.640012][ T6064] libceph: mon0 (1)[c::]:6789 connect error [ 165.795157][ T6453] ceph: No mds server is up or the cluster is laggy [ 165.825007][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 165.998352][ T6443] FAULT_INJECTION: forcing a failure. [ 165.998352][ T6443] name failslab, interval 1, probability 0, space 0, times 0 [ 165.998393][ T6443] CPU: 0 UID: 0 PID: 6443 Comm: syz.3.134 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.998414][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 165.998425][ T6443] Call Trace: [ 165.998432][ T6443] [ 165.998440][ T6443] dump_stack_lvl+0x189/0x250 [ 165.998469][ T6443] ? __pfx____ratelimit+0x10/0x10 [ 165.998494][ T6443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.998517][ T6443] ? __pfx__printk+0x10/0x10 [ 165.998542][ T6443] ? __pfx___might_resched+0x10/0x10 [ 165.998562][ T6443] ? fs_reclaim_acquire+0x7d/0x100 [ 165.998583][ T6443] should_fail_ex+0x46c/0x600 [ 165.998612][ T6443] should_failslab+0xa8/0x100 [ 165.998636][ T6443] __kmalloc_noprof+0xcb/0x430 [ 165.998656][ T6443] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 165.998685][ T6443] tomoyo_realpath_from_path+0xe3/0x5d0 [ 165.998710][ T6443] ? tomoyo_domain+0xda/0x130 [ 165.998739][ T6443] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 165.998759][ T6443] tomoyo_path_number_perm+0x1e8/0x5a0 [ 165.998782][ T6443] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 165.998807][ T6443] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 165.998832][ T6443] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.998863][ T6443] ? __lock_acquire+0xab9/0xd20 [ 165.998906][ T6443] ? __fget_files+0x2a/0x420 [ 165.998932][ T6443] ? __fget_files+0x2a/0x420 [ 165.998953][ T6443] ? __fget_files+0x3a6/0x420 [ 165.998973][ T6443] ? __fget_files+0x2a/0x420 [ 165.998999][ T6443] security_file_ioctl+0xcb/0x2d0 [ 165.999022][ T6443] __se_sys_ioctl+0x47/0x170 [ 165.999044][ T6443] do_syscall_64+0xfa/0x3b0 [ 165.999063][ T6443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.999080][ T6443] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 165.999096][ T6443] ? clear_bhb_loop+0x60/0xb0 [ 165.999117][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.999134][ T6443] RIP: 0033:0x7f2d39a3eec9 [ 165.999149][ T6443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.999163][ T6443] RSP: 002b:00007f2d37c9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.999182][ T6443] RAX: ffffffffffffffda RBX: 00007f2d39c95fa0 RCX: 00007f2d39a3eec9 [ 165.999195][ T6443] RDX: 0000200000000080 RSI: 00000000c038480a RDI: 0000000000000004 [ 165.999207][ T6443] RBP: 00007f2d37c9e090 R08: 0000000000000000 R09: 0000000000000000 [ 165.999217][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.999227][ T6443] R13: 00007f2d39c96038 R14: 00007f2d39c95fa0 R15: 00007ffff1022e68 [ 165.999258][ T6443] [ 165.999265][ T6443] ERROR: Out of memory at tomoyo_realpath_from_path. [ 166.194091][ T6057] usb 4-1: USB disconnect, device number 3 [ 166.436229][ T6471] FAULT_INJECTION: forcing a failure. [ 166.436229][ T6471] name failslab, interval 1, probability 0, space 0, times 0 [ 166.436261][ T6471] CPU: 0 UID: 0 PID: 6471 Comm: syz.0.139 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 166.436282][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 166.436292][ T6471] Call Trace: [ 166.436298][ T6471] [ 166.436306][ T6471] dump_stack_lvl+0x189/0x250 [ 166.436343][ T6471] ? __pfx____ratelimit+0x10/0x10 [ 166.436368][ T6471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.436390][ T6471] ? __pfx__printk+0x10/0x10 [ 166.436414][ T6471] ? __pfx___might_resched+0x10/0x10 [ 166.436436][ T6471] should_fail_ex+0x46c/0x600 [ 166.436464][ T6471] should_failslab+0xa8/0x100 [ 166.436488][ T6471] __kmalloc_cache_noprof+0x6e/0x320 [ 166.436509][ T6471] ? alloc_pipe_info+0xe9/0x4e0 [ 166.436534][ T6471] alloc_pipe_info+0xe9/0x4e0 [ 166.436558][ T6471] splice_direct_to_actor+0xa6e/0xcd0 [ 166.436581][ T6471] ? __lock_acquire+0xab9/0xd20 [ 166.436614][ T6471] ? __lock_acquire+0xab9/0xd20 [ 166.436633][ T6471] ? __pfx_direct_splice_actor+0x10/0x10 [ 166.436654][ T6471] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 166.436685][ T6471] do_splice_direct+0x187/0x270 [ 166.436709][ T6471] ? __pfx_do_splice_direct+0x10/0x10 [ 166.436731][ T6471] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 166.436759][ T6471] ? rw_verify_area+0x25b/0x4e0 [ 166.436784][ T6471] do_sendfile+0x4ec/0x7f0 [ 166.436799][ T6471] ? __pfx_vfs_write+0x10/0x10 [ 166.436825][ T6471] ? __pfx_do_sendfile+0x10/0x10 [ 166.436854][ T6471] __se_sys_sendfile64+0x13e/0x190 [ 166.436880][ T6471] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 166.436908][ T6471] ? do_syscall_64+0xbe/0x3b0 [ 166.436928][ T6471] do_syscall_64+0xfa/0x3b0 [ 166.436943][ T6471] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.436966][ T6471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.436982][ T6471] ? clear_bhb_loop+0x60/0xb0 [ 166.437003][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.437019][ T6471] RIP: 0033:0x7f851e77eec9 [ 166.437034][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.437048][ T6471] RSP: 002b:00007f851c9a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 166.437066][ T6471] RAX: ffffffffffffffda RBX: 00007f851e9d6180 RCX: 00007f851e77eec9 [ 166.437079][ T6471] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000003 [ 166.437089][ T6471] RBP: 00007f851c9a4090 R08: 0000000000000000 R09: 0000000000000000 [ 166.437100][ T6471] R10: 0000020000023892 R11: 0000000000000246 R12: 0000000000000001 [ 166.437110][ T6471] R13: 00007f851e9d6218 R14: 00007f851e9d6180 R15: 00007ffc05e14928 [ 166.437139][ T6471] [ 167.316863][ T6462] fuse: Bad value for 'fd' [ 167.422446][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'. [ 167.479641][ T6474] fido_id[6474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 168.483487][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.546202][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.867115][ T6490] FAULT_INJECTION: forcing a failure. [ 168.867115][ T6490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.867149][ T6490] CPU: 0 UID: 0 PID: 6490 Comm: syz.3.145 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 168.867169][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.867179][ T6490] Call Trace: [ 168.867186][ T6490] [ 168.867194][ T6490] dump_stack_lvl+0x189/0x250 [ 168.867223][ T6490] ? __pfx____ratelimit+0x10/0x10 [ 168.867248][ T6490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.867271][ T6490] ? __pfx__printk+0x10/0x10 [ 168.867290][ T6490] ? __might_fault+0xb0/0x130 [ 168.867324][ T6490] should_fail_ex+0x46c/0x600 [ 168.867353][ T6490] _copy_from_user+0x2d/0xb0 [ 168.867375][ T6490] do_seccomp+0x1a3/0xce0 [ 168.867404][ T6490] ? __pfx_do_seccomp+0x10/0x10 [ 168.867435][ T6490] ? ksys_write+0x230/0x260 [ 168.867458][ T6490] ? __pfx_ksys_write+0x10/0x10 [ 168.867476][ T6490] ? rcu_is_watching+0x15/0xb0 [ 168.867505][ T6490] ? do_syscall_64+0xbe/0x3b0 [ 168.867526][ T6490] do_syscall_64+0xfa/0x3b0 [ 168.867541][ T6490] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.867564][ T6490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.867582][ T6490] ? clear_bhb_loop+0x60/0xb0 [ 168.867603][ T6490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.867619][ T6490] RIP: 0033:0x7f2d39a3eec9 [ 168.867635][ T6490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.867649][ T6490] RSP: 002b:00007f2d37c7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 168.867668][ T6490] RAX: ffffffffffffffda RBX: 00007f2d39c96090 RCX: 00007f2d39a3eec9 [ 168.867681][ T6490] RDX: 0000200000000080 RSI: 000000000000001d RDI: 0000000000000001 [ 168.867692][ T6490] RBP: 00007f2d37c7d090 R08: 0000000000000000 R09: 0000000000000000 [ 168.867703][ T6490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.867713][ T6490] R13: 00007f2d39c96128 R14: 00007f2d39c96090 R15: 00007ffff1022e68 [ 168.867742][ T6490] [ 169.228307][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.928737][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.840194][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.260647][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.363431][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.528802][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.631443][ T6511] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 172.637291][ T6511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.151'. [ 172.838028][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.941810][ T6039] libceph: connect (1)[c::]:6789 error -101 [ 172.942025][ T6039] libceph: mon0 (1)[c::]:6789 connect error [ 172.968099][ T6039] libceph: connect (1)[c::]:6789 error -101 [ 172.968306][ T6039] libceph: mon0 (1)[c::]:6789 connect error [ 173.098712][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.154'. [ 173.131851][ T6523] FAULT_INJECTION: forcing a failure. [ 173.131851][ T6523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.131912][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: syz.3.153 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 173.131933][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 173.131944][ T6523] Call Trace: [ 173.131951][ T6523] [ 173.131959][ T6523] dump_stack_lvl+0x189/0x250 [ 173.131984][ T6523] ? __pfx____ratelimit+0x10/0x10 [ 173.132004][ T6523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.132021][ T6523] ? __pfx__printk+0x10/0x10 [ 173.132036][ T6523] ? __might_fault+0xb0/0x130 [ 173.132066][ T6523] should_fail_ex+0x46c/0x600 [ 173.132089][ T6523] _copy_from_user+0x2d/0xb0 [ 173.132106][ T6523] ___sys_sendmsg+0x158/0x2a0 [ 173.132124][ T6523] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.132168][ T6523] ? __fget_files+0x2a/0x420 [ 173.132187][ T6523] ? __fget_files+0x3a6/0x420 [ 173.132217][ T6523] __x64_sys_sendmsg+0x1a1/0x260 [ 173.132236][ T6523] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.132260][ T6523] ? __pfx_ksys_write+0x10/0x10 [ 173.132277][ T6523] ? rcu_is_watching+0x15/0xb0 [ 173.132304][ T6523] ? do_syscall_64+0xbe/0x3b0 [ 173.132324][ T6523] do_syscall_64+0xfa/0x3b0 [ 173.132340][ T6523] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.132362][ T6523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.132379][ T6523] ? clear_bhb_loop+0x60/0xb0 [ 173.132400][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.132417][ T6523] RIP: 0033:0x7f2d39a3eec9 [ 173.132433][ T6523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.132446][ T6523] RSP: 002b:00007f2d37c9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.132466][ T6523] RAX: ffffffffffffffda RBX: 00007f2d39c95fa0 RCX: 00007f2d39a3eec9 [ 173.132479][ T6523] RDX: 000000000000fc00 RSI: 0000200000000080 RDI: 0000000000000003 [ 173.132490][ T6523] RBP: 00007f2d37c9e090 R08: 0000000000000000 R09: 0000000000000000 [ 173.132501][ T6523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.132511][ T6523] R13: 00007f2d39c96038 R14: 00007f2d39c95fa0 R15: 00007ffff1022e68 [ 173.132541][ T6523] [ 173.226485][ T6039] libceph: connect (1)[c::]:6789 error -101 [ 173.226705][ T6039] libceph: mon0 (1)[c::]:6789 connect error [ 173.412848][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.154'. [ 173.445122][ T6513] ceph: No mds server is up or the cluster is laggy [ 173.820025][ T10] libceph: connect (1)[c::]:6789 error -101 [ 173.820153][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 174.112283][ T6532] FAULT_INJECTION: forcing a failure. [ 174.112283][ T6532] name failslab, interval 1, probability 0, space 0, times 0 [ 174.112314][ T6532] CPU: 1 UID: 0 PID: 6532 Comm: syz.3.155 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 174.112334][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 174.112344][ T6532] Call Trace: [ 174.112351][ T6532] [ 174.112358][ T6532] dump_stack_lvl+0x189/0x250 [ 174.112387][ T6532] ? __pfx____ratelimit+0x10/0x10 [ 174.112412][ T6532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.112434][ T6532] ? __pfx__printk+0x10/0x10 [ 174.112459][ T6532] ? __pfx___might_resched+0x10/0x10 [ 174.112477][ T6532] ? fs_reclaim_acquire+0x7d/0x100 [ 174.112499][ T6532] should_fail_ex+0x46c/0x600 [ 174.112527][ T6532] should_failslab+0xa8/0x100 [ 174.112551][ T6532] __kmalloc_noprof+0xcb/0x430 [ 174.112571][ T6532] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 174.112599][ T6532] tomoyo_realpath_from_path+0xe3/0x5d0 [ 174.112623][ T6532] ? tomoyo_domain+0xda/0x130 [ 174.112651][ T6532] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 174.112670][ T6532] tomoyo_path_number_perm+0x1e8/0x5a0 [ 174.112693][ T6532] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 174.112717][ T6532] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 174.112740][ T6532] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.112771][ T6532] ? __lock_acquire+0xab9/0xd20 [ 174.112813][ T6532] ? __fget_files+0x2a/0x420 [ 174.112838][ T6532] ? __fget_files+0x2a/0x420 [ 174.112858][ T6532] ? __fget_files+0x3a6/0x420 [ 174.112885][ T6532] ? __fget_files+0x2a/0x420 [ 174.112911][ T6532] security_file_ioctl+0xcb/0x2d0 [ 174.112934][ T6532] __se_sys_ioctl+0x47/0x170 [ 174.112955][ T6532] do_syscall_64+0xfa/0x3b0 [ 174.112971][ T6532] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.112993][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.113010][ T6532] ? clear_bhb_loop+0x60/0xb0 [ 174.113031][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.113047][ T6532] RIP: 0033:0x7f2d39a3eec9 [ 174.113063][ T6532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.113076][ T6532] RSP: 002b:00007f2d37c5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.113094][ T6532] RAX: ffffffffffffffda RBX: 00007f2d39c96180 RCX: 00007f2d39a3eec9 [ 174.113107][ T6532] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 174.113117][ T6532] RBP: 00007f2d37c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 174.113128][ T6532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.113137][ T6532] R13: 00007f2d39c96218 R14: 00007f2d39c96180 R15: 00007ffff1022e68 [ 174.113167][ T6532] [ 174.113174][ T6532] ERROR: Out of memory at tomoyo_realpath_from_path. [ 174.115615][ T6532] input: syz1 as /devices/virtual/input/input8 [ 174.115645][ T6532] input: failed to attach handler leds to device input8, error: -6 [ 175.664122][ T6536] fuse: Bad value for 'fd' [ 177.878391][ T6552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 179.989534][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 180.109318][ T6565] FAULT_INJECTION: forcing a failure. [ 180.109318][ T6565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.109886][ T6565] CPU: 0 UID: 0 PID: 6565 Comm: syz.1.164 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.109909][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 180.109920][ T6565] Call Trace: [ 180.109927][ T6565] [ 180.109935][ T6565] dump_stack_lvl+0x189/0x250 [ 180.109964][ T6565] ? __pfx____ratelimit+0x10/0x10 [ 180.109989][ T6565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.110013][ T6565] ? __pfx__printk+0x10/0x10 [ 180.110032][ T6565] ? __might_fault+0xb0/0x130 [ 180.110067][ T6565] should_fail_ex+0x46c/0x600 [ 180.110096][ T6565] _copy_from_user+0x2d/0xb0 [ 180.110118][ T6565] __sys_bpf+0x1ed/0x870 [ 180.110145][ T6565] ? __pfx___sys_bpf+0x10/0x10 [ 180.110186][ T6565] ? rcu_is_watching+0x15/0xb0 [ 180.110217][ T6565] __x64_sys_bpf+0x7c/0x90 [ 180.110238][ T6565] do_syscall_64+0xfa/0x3b0 [ 180.110256][ T6565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.110273][ T6565] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 180.110289][ T6565] ? clear_bhb_loop+0x60/0xb0 [ 180.110311][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.110328][ T6565] RIP: 0033:0x7f590562eec9 [ 180.110343][ T6565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.110358][ T6565] RSP: 002b:00007f590388e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.110377][ T6565] RAX: ffffffffffffffda RBX: 00007f5905885fa0 RCX: 00007f590562eec9 [ 180.110391][ T6565] RDX: 0000000000000049 RSI: 0000200000000980 RDI: 0000000000000005 [ 180.110402][ T6565] RBP: 00007f590388e090 R08: 0000000000000000 R09: 0000000000000000 [ 180.110413][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.110424][ T6565] R13: 00007f5905886038 R14: 00007f5905885fa0 R15: 00007fffc068fd78 [ 180.110453][ T6565] [ 180.489915][ T6569] Bluetooth: MGMT ver 1.23 [ 180.786801][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 181.263101][ T6578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.387905][ T6582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.460612][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.844268][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.867731][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.215232][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.545975][ T5153] Bluetooth: hci0: command 0x1407 tx timeout [ 182.546265][ T5851] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 182.578699][ T6594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.186262][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.466418][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.470762][ T6607] FAULT_INJECTION: forcing a failure. [ 183.470762][ T6607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.470793][ T6607] CPU: 0 UID: 0 PID: 6607 Comm: syz.4.180 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 183.470813][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 183.470824][ T6607] Call Trace: [ 183.470830][ T6607] [ 183.470838][ T6607] dump_stack_lvl+0x189/0x250 [ 183.470867][ T6607] ? __pfx____ratelimit+0x10/0x10 [ 183.470892][ T6607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.470914][ T6607] ? __pfx__printk+0x10/0x10 [ 183.470932][ T6607] ? __might_fault+0xb0/0x130 [ 183.470966][ T6607] should_fail_ex+0x46c/0x600 [ 183.470996][ T6607] _copy_from_user+0x2d/0xb0 [ 183.471017][ T6607] ___sys_sendmsg+0x158/0x2a0 [ 183.471040][ T6607] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.471094][ T6607] ? __fget_files+0x2a/0x420 [ 183.471115][ T6607] ? __fget_files+0x3a6/0x420 [ 183.471146][ T6607] __x64_sys_sendmsg+0x1a1/0x260 [ 183.471167][ T6607] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.471194][ T6607] ? __pfx_ksys_write+0x10/0x10 [ 183.471220][ T6607] ? do_syscall_64+0xbe/0x3b0 [ 183.471262][ T6607] do_syscall_64+0xfa/0x3b0 [ 183.471277][ T6607] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.471299][ T6607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.471317][ T6607] ? clear_bhb_loop+0x60/0xb0 [ 183.471338][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.471354][ T6607] RIP: 0033:0x7f430bf4eec9 [ 183.471369][ T6607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.471383][ T6607] RSP: 002b:00007f430a1ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.471402][ T6607] RAX: ffffffffffffffda RBX: 00007f430c1a5fa0 RCX: 00007f430bf4eec9 [ 183.471414][ T6607] RDX: 0000000000008040 RSI: 0000200000000040 RDI: 0000000000000005 [ 183.471426][ T6607] RBP: 00007f430a1ae090 R08: 0000000000000000 R09: 0000000000000000 [ 183.471436][ T6607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.471446][ T6607] R13: 00007f430c1a6038 R14: 00007f430c1a5fa0 R15: 00007ffd9a8aa2d8 [ 183.471476][ T6607] [ 183.729266][ T6611] loop2: detected capacity change from 0 to 7 [ 183.743723][ T6611] Dev loop2: unable to read RDB block 7 [ 183.743769][ T6611] loop2: unable to read partition table [ 183.743995][ T6611] loop2: partition table beyond EOD, truncated [ 183.744021][ T6611] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 183.836031][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.844481][ T6039] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 184.241824][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.836785][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.865961][ T6039] usb 2-1: Using ep0 maxpacket: 8 [ 184.869585][ T6039] usb 2-1: unable to get BOS descriptor or descriptor too short [ 184.871495][ T6039] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.871549][ T6039] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 184.924660][ T6039] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 184.924691][ T6039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.924710][ T6039] usb 2-1: Product: syz [ 184.924724][ T6039] usb 2-1: Manufacturer: syz [ 184.924738][ T6039] usb 2-1: SerialNumber: syz [ 185.082884][ T6039] usb 2-1: config 0 descriptor?? [ 185.169913][ T6039] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.275866][ T5933] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 185.436380][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 185.462441][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.462498][ T5933] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 185.462521][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.499731][ T6632] fuse: Bad value for 'fd' [ 185.502145][ T6039] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 185.540099][ T5933] usb 1-1: config 0 descriptor?? [ 185.540721][ T6039] usb 2-1: USB disconnect, device number 5 [ 185.873770][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.996584][ T5933] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 186.415907][ T5920] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 187.319175][ T5920] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 187.319204][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.391294][ T5920] usb 4-1: config 0 descriptor?? [ 187.407344][ T5933] usb 1-1: USB disconnect, device number 4 [ 188.593643][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.193'. [ 188.659714][ T5920] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 188.682748][ T5920] [drm:udl_init] *ERROR* Selecting channel failed [ 188.757472][ T5920] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 188.757496][ T5920] [drm] Initialized udl on minor 2 [ 188.797097][ T5920] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 188.819618][ T5920] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 188.841863][ T6057] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 188.844410][ T5920] usb 4-1: USB disconnect, device number 4 [ 188.879902][ T6057] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 190.271166][ T6681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.200'. [ 190.735146][ T6682] process 'syz.1.200' launched '/dev/fd/4' with NULL argv: empty string added [ 193.726821][ T6714] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 194.882267][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.882343][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.360076][ T5843] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 196.576411][ T6735] FAULT_INJECTION: forcing a failure. [ 196.576411][ T6735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.576444][ T6735] CPU: 0 UID: 0 PID: 6735 Comm: syz.3.215 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 196.576464][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.576474][ T6735] Call Trace: [ 196.576481][ T6735] [ 196.576489][ T6735] dump_stack_lvl+0x189/0x250 [ 196.576517][ T6735] ? __pfx____ratelimit+0x10/0x10 [ 196.576542][ T6735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.576566][ T6735] ? __pfx__printk+0x10/0x10 [ 196.576585][ T6735] ? __might_fault+0xb0/0x130 [ 196.576619][ T6735] should_fail_ex+0x46c/0x600 [ 196.576648][ T6735] _copy_from_user+0x2d/0xb0 [ 196.576670][ T6735] ___sys_sendmsg+0x158/0x2a0 [ 196.576698][ T6735] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.576752][ T6735] ? __fget_files+0x2a/0x420 [ 196.576774][ T6735] ? __fget_files+0x3a6/0x420 [ 196.576806][ T6735] __x64_sys_sendmsg+0x1a1/0x260 [ 196.576827][ T6735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.576855][ T6735] ? __pfx_ksys_write+0x10/0x10 [ 196.576881][ T6735] ? do_syscall_64+0xbe/0x3b0 [ 196.576903][ T6735] do_syscall_64+0xfa/0x3b0 [ 196.576921][ T6735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.576937][ T6735] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 196.576954][ T6735] ? clear_bhb_loop+0x60/0xb0 [ 196.576975][ T6735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.576991][ T6735] RIP: 0033:0x7f2d39a3eec9 [ 196.577007][ T6735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.577021][ T6735] RSP: 002b:00007f2d37c5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.577040][ T6735] RAX: ffffffffffffffda RBX: 00007f2d39c96180 RCX: 00007f2d39a3eec9 [ 196.577053][ T6735] RDX: 000000000000fc00 RSI: 0000200000000080 RDI: 0000000000000007 [ 196.577064][ T6735] RBP: 00007f2d37c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 196.577075][ T6735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.577086][ T6735] R13: 00007f2d39c96218 R14: 00007f2d39c96180 R15: 00007ffff1022e68 [ 196.577115][ T6735] [ 196.597405][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 197.174433][ T5843] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.174515][ T5843] usb 1-1: config 0 interface 0 has no altsetting 0 [ 197.174757][ T5843] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 197.174802][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.466619][ T5843] usb 1-1: config 0 descriptor?? [ 197.665840][ T5933] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 197.816111][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 197.818526][ T5933] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 197.818553][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.824807][ T5933] usb 4-1: config 0 descriptor?? [ 199.003236][ T5843] usbhid 1-1:0.0: can't add hid device: -71 [ 199.003371][ T5843] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 199.024422][ T5843] usb 1-1: USB disconnect, device number 5 [ 199.240755][ T10] usb 4-1: USB disconnect, device number 5 [ 199.440146][ T6753] FAULT_INJECTION: forcing a failure. [ 199.440146][ T6753] name failslab, interval 1, probability 0, space 0, times 0 [ 199.440177][ T6753] CPU: 1 UID: 0 PID: 6753 Comm: syz.2.220 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 199.440197][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.440208][ T6753] Call Trace: [ 199.440215][ T6753] [ 199.440223][ T6753] dump_stack_lvl+0x189/0x250 [ 199.440251][ T6753] ? __pfx____ratelimit+0x10/0x10 [ 199.440276][ T6753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.440298][ T6753] ? __pfx__printk+0x10/0x10 [ 199.440323][ T6753] ? __pfx___might_resched+0x10/0x10 [ 199.440342][ T6753] ? fs_reclaim_acquire+0x7d/0x100 [ 199.440363][ T6753] should_fail_ex+0x46c/0x600 [ 199.440391][ T6753] ? getname_flags+0xb8/0x540 [ 199.440412][ T6753] should_failslab+0xa8/0x100 [ 199.440435][ T6753] ? getname_flags+0xb8/0x540 [ 199.440455][ T6753] kmem_cache_alloc_noprof+0x6e/0x310 [ 199.440483][ T6753] getname_flags+0xb8/0x540 [ 199.440511][ T6753] __se_sys_acct+0x3d/0x820 [ 199.440531][ T6753] ? do_syscall_64+0xbe/0x3b0 [ 199.440558][ T6753] do_syscall_64+0xfa/0x3b0 [ 199.440574][ T6753] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.440597][ T6753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.440614][ T6753] ? clear_bhb_loop+0x60/0xb0 [ 199.440635][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.440652][ T6753] RIP: 0033:0x7f5df9faeec9 [ 199.440668][ T6753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.440682][ T6753] RSP: 002b:00007f5df8216038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 199.440701][ T6753] RAX: ffffffffffffffda RBX: 00007f5dfa205fa0 RCX: 00007f5df9faeec9 [ 199.440714][ T6753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 199.440725][ T6753] RBP: 00007f5df8216090 R08: 0000000000000000 R09: 0000000000000000 [ 199.440736][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.440746][ T6753] R13: 00007f5dfa206038 R14: 00007f5dfa205fa0 R15: 00007ffe804cd218 [ 199.440776][ T6753] [ 200.037820][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.221887][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.322334][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.346369][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.450123][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.551209][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.924637][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.468603][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.835379][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.365051][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.577053][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.896438][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.741438][ T6785] fuse: Unknown parameter 'subj_user' [ 203.854764][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.922210][ T6794] FAULT_INJECTION: forcing a failure. [ 203.922210][ T6794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.922241][ T6794] CPU: 1 UID: 0 PID: 6794 Comm: syz.1.232 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 203.922262][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 203.922272][ T6794] Call Trace: [ 203.922279][ T6794] [ 203.922287][ T6794] dump_stack_lvl+0x189/0x250 [ 203.922315][ T6794] ? __pfx____ratelimit+0x10/0x10 [ 203.922340][ T6794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.922363][ T6794] ? __pfx__printk+0x10/0x10 [ 203.922398][ T6794] should_fail_ex+0x46c/0x600 [ 203.922428][ T6794] _copy_to_user+0x31/0xb0 [ 203.922452][ T6794] simple_read_from_buffer+0xe1/0x170 [ 203.922480][ T6794] proc_fail_nth_read+0x1b6/0x220 [ 203.922501][ T6794] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.922523][ T6794] ? rw_verify_area+0x2ac/0x4e0 [ 203.922543][ T6794] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.922563][ T6794] vfs_read+0x203/0xa30 [ 203.922592][ T6794] ? __pfx_vfs_read+0x10/0x10 [ 203.922608][ T6794] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 203.922640][ T6794] ? mutex_lock_nested+0x154/0x1d0 [ 203.922659][ T6794] ? fdget_pos+0x253/0x320 [ 203.922690][ T6794] ksys_read+0x14b/0x260 [ 203.922713][ T6794] ? __pfx_ksys_read+0x10/0x10 [ 203.922730][ T6794] ? rcu_is_watching+0x15/0xb0 [ 203.922760][ T6794] ? do_syscall_64+0xbe/0x3b0 [ 203.922782][ T6794] do_syscall_64+0xfa/0x3b0 [ 203.922797][ T6794] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.922820][ T6794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.922837][ T6794] ? clear_bhb_loop+0x60/0xb0 [ 203.922858][ T6794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.922875][ T6794] RIP: 0033:0x7f590562d8dc [ 203.922891][ T6794] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 203.922905][ T6794] RSP: 002b:00007f590388e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.922923][ T6794] RAX: ffffffffffffffda RBX: 00007f5905885fa0 RCX: 00007f590562d8dc [ 203.922936][ T6794] RDX: 000000000000000f RSI: 00007f590388e0a0 RDI: 0000000000000006 [ 203.922947][ T6794] RBP: 00007f590388e090 R08: 0000000000000000 R09: 0000000000000000 [ 203.922964][ T6794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.922974][ T6794] R13: 00007f5905886038 R14: 00007f5905885fa0 R15: 00007fffc068fd78 [ 203.923005][ T6794] [ 204.027967][ T6796] fuse: Bad value for 'group_id' [ 204.027985][ T6796] fuse: Bad value for 'group_id' [ 204.275970][ T6799] syz.1.233 uses obsolete (PF_INET,SOCK_PACKET) [ 204.867204][ T6807] FAULT_INJECTION: forcing a failure. [ 204.867204][ T6807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.867236][ T6807] CPU: 0 UID: 0 PID: 6807 Comm: syz.3.237 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.867256][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.867267][ T6807] Call Trace: [ 204.867274][ T6807] [ 204.867282][ T6807] dump_stack_lvl+0x189/0x250 [ 204.867310][ T6807] ? __pfx____ratelimit+0x10/0x10 [ 204.867335][ T6807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.867358][ T6807] ? __pfx__printk+0x10/0x10 [ 204.867377][ T6807] ? __might_fault+0xb0/0x130 [ 204.867411][ T6807] should_fail_ex+0x46c/0x600 [ 204.867440][ T6807] _copy_from_user+0x2d/0xb0 [ 204.867461][ T6807] ___sys_sendmsg+0x158/0x2a0 [ 204.867483][ T6807] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.867536][ T6807] ? __fget_files+0x2a/0x420 [ 204.867558][ T6807] ? __fget_files+0x3a6/0x420 [ 204.867590][ T6807] __x64_sys_sendmsg+0x1a1/0x260 [ 204.867611][ T6807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.867637][ T6807] ? __pfx_ksys_write+0x10/0x10 [ 204.867656][ T6807] ? rcu_is_watching+0x15/0xb0 [ 204.867685][ T6807] ? do_syscall_64+0xbe/0x3b0 [ 204.867706][ T6807] do_syscall_64+0xfa/0x3b0 [ 204.867722][ T6807] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.867743][ T6807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.867760][ T6807] ? clear_bhb_loop+0x60/0xb0 [ 204.867779][ T6807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.867795][ T6807] RIP: 0033:0x7f2d39a3eec9 [ 204.867810][ T6807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.867823][ T6807] RSP: 002b:00007f2d37c9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.867842][ T6807] RAX: ffffffffffffffda RBX: 00007f2d39c95fa0 RCX: 00007f2d39a3eec9 [ 204.867855][ T6807] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 204.867866][ T6807] RBP: 00007f2d37c9e090 R08: 0000000000000000 R09: 0000000000000000 [ 204.867877][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.867887][ T6807] R13: 00007f2d39c96038 R14: 00007f2d39c95fa0 R15: 00007ffff1022e68 [ 204.867916][ T6807] [ 206.249809][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 206.272959][ T6815] netlink: 'syz.1.240': attribute type 3 has an invalid length. [ 206.272979][ T6815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 206.570209][ T6821] FAULT_INJECTION: forcing a failure. [ 206.570209][ T6821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.570241][ T6821] CPU: 1 UID: 0 PID: 6821 Comm: syz.3.243 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 206.570260][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.570269][ T6821] Call Trace: [ 206.570276][ T6821] [ 206.570283][ T6821] dump_stack_lvl+0x189/0x250 [ 206.570311][ T6821] ? __pfx____ratelimit+0x10/0x10 [ 206.570336][ T6821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.570358][ T6821] ? __pfx__printk+0x10/0x10 [ 206.570377][ T6821] ? __might_fault+0xb0/0x130 [ 206.570411][ T6821] should_fail_ex+0x46c/0x600 [ 206.570440][ T6821] _copy_from_user+0x2d/0xb0 [ 206.570462][ T6821] __sys_bpf+0x1ed/0x870 [ 206.570486][ T6821] ? __pfx___sys_bpf+0x10/0x10 [ 206.570518][ T6821] ? ksys_write+0x230/0x260 [ 206.570549][ T6821] ? __pfx_ksys_write+0x10/0x10 [ 206.570577][ T6821] __x64_sys_bpf+0x7c/0x90 [ 206.570597][ T6821] do_syscall_64+0xfa/0x3b0 [ 206.570616][ T6821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.570632][ T6821] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.570650][ T6821] ? clear_bhb_loop+0x60/0xb0 [ 206.570671][ T6821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.570688][ T6821] RIP: 0033:0x7f2d39a3eec9 [ 206.570703][ T6821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.570717][ T6821] RSP: 002b:00007f2d37c9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.570737][ T6821] RAX: ffffffffffffffda RBX: 00007f2d39c95fa0 RCX: 00007f2d39a3eec9 [ 206.570750][ T6821] RDX: 000000000000000c RSI: 0000200000000240 RDI: 000000000000000e [ 206.570761][ T6821] RBP: 00007f2d37c9e090 R08: 0000000000000000 R09: 0000000000000000 [ 206.570772][ T6821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.570781][ T6821] R13: 00007f2d39c96038 R14: 00007f2d39c95fa0 R15: 00007ffff1022e68 [ 206.570811][ T6821] [ 208.018178][ T6832] fuse: Unknown parameter 'subj_user' [ 208.669364][ T6848] random: crng reseeded on system resumption [ 213.007614][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 213.007658][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 213.007687][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 213.007789][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 213.007864][ T5853] Bluetooth: hci0: command 0x1407 tx timeout [ 213.248320][ T6873] random: crng reseeded on system resumption [ 213.701701][ T6884] FAULT_INJECTION: forcing a failure. [ 213.701701][ T6884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.701733][ T6884] CPU: 0 UID: 0 PID: 6884 Comm: syz.0.262 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 213.701753][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.701764][ T6884] Call Trace: [ 213.701771][ T6884] [ 213.701778][ T6884] dump_stack_lvl+0x189/0x250 [ 213.701807][ T6884] ? __pfx____ratelimit+0x10/0x10 [ 213.701831][ T6884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.701854][ T6884] ? __pfx__printk+0x10/0x10 [ 213.701873][ T6884] ? __might_fault+0xb0/0x130 [ 213.701907][ T6884] should_fail_ex+0x46c/0x600 [ 213.701935][ T6884] _copy_from_user+0x2d/0xb0 [ 213.701957][ T6884] ___sys_sendmsg+0x158/0x2a0 [ 213.701987][ T6884] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.702036][ T6884] ? __fget_files+0x2a/0x420 [ 213.702057][ T6884] ? __fget_files+0x3a6/0x420 [ 213.702088][ T6884] __sys_sendmmsg+0x22d/0x430 [ 213.702111][ T6884] ? __pfx___sys_sendmmsg+0x10/0x10 [ 213.702138][ T6884] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 213.702173][ T6884] ? ksys_write+0x230/0x260 [ 213.702195][ T6884] ? __pfx_ksys_write+0x10/0x10 [ 213.702212][ T6884] ? rcu_is_watching+0x15/0xb0 [ 213.702243][ T6884] __x64_sys_sendmmsg+0xa0/0xc0 [ 213.702262][ T6884] do_syscall_64+0xfa/0x3b0 [ 213.702278][ T6884] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.702300][ T6884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.702317][ T6884] ? clear_bhb_loop+0x60/0xb0 [ 213.702343][ T6884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.702359][ T6884] RIP: 0033:0x7f851e77eec9 [ 213.702375][ T6884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.702389][ T6884] RSP: 002b:00007f851c9e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 213.702407][ T6884] RAX: ffffffffffffffda RBX: 00007f851e9d5fa0 RCX: 00007f851e77eec9 [ 213.702420][ T6884] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000006 [ 213.702431][ T6884] RBP: 00007f851c9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 213.702442][ T6884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.702452][ T6884] R13: 00007f851e9d6038 R14: 00007f851e9d5fa0 R15: 00007ffc05e14928 [ 213.702481][ T6884] [ 214.025854][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 214.255999][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 214.257336][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 214.262470][ T31] usb 3-1: config 9 has an invalid interface number: 112 but max is 0 [ 214.262486][ T31] usb 3-1: config 9 has no interface number 0 [ 214.262504][ T31] usb 3-1: config 9 interface 112 has no altsetting 0 [ 214.265195][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 8.d3 [ 214.265210][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.265220][ T31] usb 3-1: Product: syz [ 214.265227][ T31] usb 3-1: Manufacturer: syz [ 214.265234][ T31] usb 3-1: SerialNumber: syz [ 214.287972][ T31] r8152-cfgselector 3-1: Unknown version 0x0000 [ 214.426602][ T6890] netlink: 84 bytes leftover after parsing attributes in process `syz.0.263'. [ 214.594440][ T6878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.598363][ T6878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.605063][ T6878] random: crng reseeded on system resumption [ 215.069982][ T37] audit: type=1326 audit(2000000066.419:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590562eec9 code=0x7ffc0000 [ 215.071565][ T37] audit: type=1326 audit(2000000066.419:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f590562eec9 code=0x7ffc0000 [ 215.074244][ T37] audit: type=1326 audit(2000000066.419:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590562eec9 code=0x7ffc0000 [ 215.074760][ T37] audit: type=1326 audit(2000000066.419:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590562eec9 code=0x7ffc0000 [ 215.321662][ T31] r8152 3-1:9.112: Expected endpoints are not found [ 215.372122][ T31] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 215.445536][ T6898] fuse: Unknown parameter 'subj_user' [ 215.545877][ T6902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.718125][ T6910] netlink: 'syz.1.267': attribute type 2 has an invalid length. [ 216.718148][ T6910] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.267'. [ 216.718178][ T6910] nbd: must specify at least one socket [ 217.912480][ T6935] FAULT_INJECTION: forcing a failure. [ 217.912480][ T6935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.912512][ T6935] CPU: 1 UID: 0 PID: 6935 Comm: syz.3.276 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 217.912532][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 217.912543][ T6935] Call Trace: [ 217.912550][ T6935] [ 217.912557][ T6935] dump_stack_lvl+0x189/0x250 [ 217.912585][ T6935] ? __pfx____ratelimit+0x10/0x10 [ 217.912609][ T6935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.912635][ T6935] ? __pfx__printk+0x10/0x10 [ 217.912665][ T6935] should_fail_ex+0x46c/0x600 [ 217.912694][ T6935] _copy_to_user+0x31/0xb0 [ 217.912718][ T6935] simple_read_from_buffer+0xe1/0x170 [ 217.912745][ T6935] proc_fail_nth_read+0x1b6/0x220 [ 217.912767][ T6935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.912789][ T6935] ? rw_verify_area+0x2ac/0x4e0 [ 217.912809][ T6935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.912825][ T6935] vfs_read+0x203/0xa30 [ 217.912854][ T6935] ? __pfx_vfs_read+0x10/0x10 [ 217.912870][ T6935] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 217.912900][ T6935] ? mutex_lock_nested+0x154/0x1d0 [ 217.912919][ T6935] ? fdget_pos+0x253/0x320 [ 217.912950][ T6935] ksys_read+0x14b/0x260 [ 217.912972][ T6935] ? __pfx_ksys_read+0x10/0x10 [ 217.912989][ T6935] ? rcu_is_watching+0x15/0xb0 [ 217.913019][ T6935] ? do_syscall_64+0xbe/0x3b0 [ 217.913039][ T6935] do_syscall_64+0xfa/0x3b0 [ 217.913054][ T6935] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.913075][ T6935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.913101][ T6935] ? clear_bhb_loop+0x60/0xb0 [ 217.913122][ T6935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.913139][ T6935] RIP: 0033:0x7f2d39a3d8dc [ 217.913153][ T6935] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 217.913166][ T6935] RSP: 002b:00007f2d37c7d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.913185][ T6935] RAX: ffffffffffffffda RBX: 00007f2d39c96090 RCX: 00007f2d39a3d8dc [ 217.913197][ T6935] RDX: 000000000000000f RSI: 00007f2d37c7d0a0 RDI: 0000000000000006 [ 217.913208][ T6935] RBP: 00007f2d37c7d090 R08: 0000000000000000 R09: 0000000000000000 [ 217.913219][ T6935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.913229][ T6935] R13: 00007f2d39c96128 R14: 00007f2d39c96090 R15: 00007ffff1022e68 [ 217.913259][ T6935] [ 218.276570][ T44] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 219.321383][ T44] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 219.321412][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.321431][ T44] usb 1-1: Product: syz [ 219.321444][ T44] usb 1-1: Manufacturer: syz [ 219.321458][ T44] usb 1-1: SerialNumber: syz [ 219.377324][ T44] usb 1-1: config 0 descriptor?? [ 221.116144][ T6962] FAULT_INJECTION: forcing a failure. [ 221.116144][ T6962] name failslab, interval 1, probability 0, space 0, times 0 [ 221.116173][ T6962] CPU: 0 UID: 0 PID: 6962 Comm: syz.4.279 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.116192][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.116201][ T6962] Call Trace: [ 221.116208][ T6962] [ 221.116215][ T6962] dump_stack_lvl+0x189/0x250 [ 221.116243][ T6962] ? __pfx____ratelimit+0x10/0x10 [ 221.116267][ T6962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.116289][ T6962] ? __pfx__printk+0x10/0x10 [ 221.116313][ T6962] ? __pfx___might_resched+0x10/0x10 [ 221.116329][ T6962] ? fs_reclaim_acquire+0x7d/0x100 [ 221.116347][ T6962] should_fail_ex+0x46c/0x600 [ 221.116375][ T6962] should_failslab+0xa8/0x100 [ 221.116395][ T6962] __kmalloc_noprof+0xcb/0x430 [ 221.116415][ T6962] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 221.116442][ T6962] tomoyo_realpath_from_path+0xe3/0x5d0 [ 221.116462][ T6962] ? tomoyo_domain+0xda/0x130 [ 221.116487][ T6962] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 221.116505][ T6962] tomoyo_path_number_perm+0x1e8/0x5a0 [ 221.116522][ T6962] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 221.116542][ T6962] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 221.116562][ T6962] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.116588][ T6962] ? __lock_acquire+0xab9/0xd20 [ 221.116624][ T6962] ? __fget_files+0x2a/0x420 [ 221.116645][ T6962] ? __fget_files+0x2a/0x420 [ 221.116660][ T6962] ? __fget_files+0x3a6/0x420 [ 221.116676][ T6962] ? __fget_files+0x2a/0x420 [ 221.116696][ T6962] security_file_ioctl+0xcb/0x2d0 [ 221.116715][ T6962] __se_sys_ioctl+0x47/0x170 [ 221.116735][ T6962] do_syscall_64+0xfa/0x3b0 [ 221.116748][ T6962] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.116768][ T6962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.116784][ T6962] ? clear_bhb_loop+0x60/0xb0 [ 221.116802][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.116816][ T6962] RIP: 0033:0x7f430bf4eec9 [ 221.116829][ T6962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.116839][ T6962] RSP: 002b:00007f430a16c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.116856][ T6962] RAX: ffffffffffffffda RBX: 00007f430c1a6180 RCX: 00007f430bf4eec9 [ 221.116865][ T6962] RDX: 0000200000000080 RSI: 000000004008af04 RDI: 0000000000000005 [ 221.116874][ T6962] RBP: 00007f430a16c090 R08: 0000000000000000 R09: 0000000000000000 [ 221.116882][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.116890][ T6962] R13: 00007f430c1a6218 R14: 00007f430c1a6180 R15: 00007ffd9a8aa2d8 [ 221.116913][ T6962] [ 221.116920][ T6962] ERROR: Out of memory at tomoyo_realpath_from_path. [ 221.565119][ T6956] FAULT_INJECTION: forcing a failure. [ 221.565119][ T6956] name failslab, interval 1, probability 0, space 0, times 0 [ 221.565154][ T6956] CPU: 0 UID: 0 PID: 6956 Comm: syz.2.282 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.565175][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.565185][ T6956] Call Trace: [ 221.565192][ T6956] [ 221.565201][ T6956] dump_stack_lvl+0x189/0x250 [ 221.565228][ T6956] ? __pfx____ratelimit+0x10/0x10 [ 221.565252][ T6956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.565274][ T6956] ? __pfx__printk+0x10/0x10 [ 221.565290][ T6956] ? try_to_take_rt_mutex+0x840/0xb00 [ 221.565327][ T6956] should_fail_ex+0x46c/0x600 [ 221.565356][ T6956] ? __alloc_skb+0x112/0x2d0 [ 221.565377][ T6956] should_failslab+0xa8/0x100 [ 221.565400][ T6956] ? __alloc_skb+0x112/0x2d0 [ 221.565419][ T6956] kmem_cache_alloc_node_noprof+0x77/0x330 [ 221.565449][ T6956] __alloc_skb+0x112/0x2d0 [ 221.565477][ T6956] _sctp_make_chunk+0x5e/0x430 [ 221.565507][ T6956] sctp_make_sack+0x186/0x730 [ 221.565535][ T6956] ? __pfx_sctp_make_sack+0x10/0x10 [ 221.565563][ T6956] ? reacquire_held_locks+0x127/0x1d0 [ 221.565606][ T6956] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 221.565632][ T6956] sctp_assoc_rwnd_increase+0x37e/0x7e0 [ 221.565661][ T6956] sctp_ulpevent_free+0x219/0x4f0 [ 221.565686][ T6956] sctp_queue_purge_ulpevents+0xa2/0x130 [ 221.565705][ T6956] sctp_close+0x148/0x920 [ 221.565733][ T6956] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.565757][ T6956] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 221.565780][ T6956] ? __pfx_sctp_close+0x10/0x10 [ 221.565812][ T6956] ? rwbase_write_lock+0x56f/0x750 [ 221.565836][ T6956] ? ip_mc_drop_socket+0x25a/0x270 [ 221.565863][ T6956] inet_release+0x144/0x190 [ 221.565883][ T6956] sock_close+0xc3/0x240 [ 221.565905][ T6956] ? __pfx_sock_close+0x10/0x10 [ 221.565925][ T6956] __fput+0x45b/0xa80 [ 221.565954][ T6956] task_work_run+0x1d1/0x260 [ 221.565976][ T6956] ? __pfx_task_work_run+0x10/0x10 [ 221.566005][ T6956] get_signal+0x11c5/0x1310 [ 221.566023][ T6956] ? kick_process+0xeb/0x160 [ 221.566052][ T6956] ? task_work_add+0x377/0x420 [ 221.566072][ T6956] ? __pfx_task_work_add+0x10/0x10 [ 221.566101][ T6956] arch_do_signal_or_restart+0x9a/0x750 [ 221.566121][ T6956] ? __pfx___fput_deferred+0x10/0x10 [ 221.566137][ T6956] ? __fget_files+0x2a/0x420 [ 221.566162][ T6956] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 221.566198][ T6956] ? exit_to_user_mode_loop+0x40/0x110 [ 221.566224][ T6956] exit_to_user_mode_loop+0x75/0x110 [ 221.566246][ T6956] do_syscall_64+0x2bd/0x3b0 [ 221.566262][ T6956] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.566284][ T6956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.566301][ T6956] ? clear_bhb_loop+0x60/0xb0 [ 221.566321][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.566338][ T6956] RIP: 0033:0x7f5df9faeec9 [ 221.566355][ T6956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.566368][ T6956] RSP: 002b:00007f5df8216038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 221.566388][ T6956] RAX: fffffffffffffe00 RBX: 00007f5dfa205fa0 RCX: 00007f5df9faeec9 [ 221.566401][ T6956] RDX: 0000000000000001 RSI: 0000200000001300 RDI: 0000000000000003 [ 221.566412][ T6956] RBP: 00007f5df8216090 R08: 0000000000000000 R09: 0000000000000000 [ 221.566423][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.566434][ T6956] R13: 00007f5dfa206038 R14: 00007f5dfa205fa0 R15: 00007ffe804cd218 [ 221.566463][ T6956] [ 221.674054][ T44] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 221.675443][ T44] asix 1-1:0.0: probe with driver asix failed with error -71 [ 221.941667][ T44] usb 1-1: USB disconnect, device number 6 [ 222.315865][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 222.470720][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 222.473940][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.474009][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.474037][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 222.474058][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 222.474080][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.475367][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 222.475391][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 222.475411][ T10] usb 3-1: Manufacturer: syz [ 222.568850][ T10] usb 3-1: config 0 descriptor?? [ 223.015815][ T10] rc_core: IR keymap rc-hauppauge not found [ 223.015836][ T10] Registered IR keymap rc-empty [ 223.019108][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.039198][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.068044][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 223.085941][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 223.194590][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.206296][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.226192][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.246237][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.275950][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.305970][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.335930][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.356025][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.376349][ T6984] FAULT_INJECTION: forcing a failure. [ 223.376349][ T6984] name failslab, interval 1, probability 0, space 0, times 0 [ 223.376380][ T6984] CPU: 0 UID: 0 PID: 6984 Comm: syz.4.289 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 223.376400][ T6984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 223.376410][ T6984] Call Trace: [ 223.376417][ T6984] [ 223.376424][ T6984] dump_stack_lvl+0x189/0x250 [ 223.376454][ T6984] ? __pfx____ratelimit+0x10/0x10 [ 223.376479][ T6984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.376501][ T6984] ? __pfx__printk+0x10/0x10 [ 223.376526][ T6984] ? __pfx___might_resched+0x10/0x10 [ 223.376545][ T6984] ? fs_reclaim_acquire+0x7d/0x100 [ 223.376566][ T6984] should_fail_ex+0x46c/0x600 [ 223.376595][ T6984] should_failslab+0xa8/0x100 [ 223.376619][ T6984] __kmalloc_noprof+0xcb/0x430 [ 223.376639][ T6984] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 223.376668][ T6984] tomoyo_realpath_from_path+0xe3/0x5d0 [ 223.376692][ T6984] ? tomoyo_domain+0xda/0x130 [ 223.376720][ T6984] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 223.376748][ T6984] tomoyo_path_number_perm+0x1e8/0x5a0 [ 223.376772][ T6984] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 223.376796][ T6984] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 223.376821][ T6984] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.376853][ T6984] ? __lock_acquire+0xab9/0xd20 [ 223.376895][ T6984] ? __fget_files+0x2a/0x420 [ 223.376920][ T6984] ? __fget_files+0x2a/0x420 [ 223.376941][ T6984] ? __fget_files+0x3a6/0x420 [ 223.376960][ T6984] ? __fget_files+0x2a/0x420 [ 223.376985][ T6984] security_file_ioctl+0xcb/0x2d0 [ 223.377008][ T6984] __se_sys_ioctl+0x47/0x170 [ 223.377030][ T6984] do_syscall_64+0xfa/0x3b0 [ 223.377046][ T6984] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.377068][ T6984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.377086][ T6984] ? clear_bhb_loop+0x60/0xb0 [ 223.377107][ T6984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.377124][ T6984] RIP: 0033:0x7f430bf4eec9 [ 223.377140][ T6984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.377154][ T6984] RSP: 002b:00007f430a1ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.377173][ T6984] RAX: ffffffffffffffda RBX: 00007f430c1a5fa0 RCX: 00007f430bf4eec9 [ 223.377186][ T6984] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 223.377196][ T6984] RBP: 00007f430a1ae090 R08: 0000000000000000 R09: 0000000000000000 [ 223.377207][ T6984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.377217][ T6984] R13: 00007f430c1a6038 R14: 00007f430c1a5fa0 R15: 00007ffd9a8aa2d8 [ 223.377248][ T6984] [ 223.377255][ T6984] ERROR: Out of memory at tomoyo_realpath_from_path. [ 223.412905][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.426219][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 223.546457][ T10] mceusb 3-1:0.0: Registered Ð… with mce emulator interface version 1 [ 223.546481][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 223.780814][ T6986] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.939920][ T6990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.290'. [ 223.941725][ T6990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.290'. [ 225.026255][ T44] usb 3-1: USB disconnect, device number 4 [ 225.635010][ T7013] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 225.635052][ T7013] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 225.691240][ T7013] overlayfs: overlapping lowerdir path [ 225.886096][ T44] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 229.200141][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 230.817237][ T44] usb 3-1: device descriptor read/all, error -71 [ 233.267160][ T7056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.783689][ T7060] lo speed is unknown, defaulting to 1000 [ 236.783809][ T7060] lo speed is unknown, defaulting to 1000 [ 236.816550][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 236.848536][ T7060] lo speed is unknown, defaulting to 1000 [ 236.892581][ T7060] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 237.021045][ T7060] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 237.171242][ C0] sched: DL replenish lagged too much [ 238.384886][ T7060] lo speed is unknown, defaulting to 1000 [ 238.397811][ T7060] lo speed is unknown, defaulting to 1000 [ 238.401446][ T7060] lo speed is unknown, defaulting to 1000 [ 238.404366][ T7060] lo speed is unknown, defaulting to 1000 [ 238.578366][ T7060] lo speed is unknown, defaulting to 1000 [ 241.594158][ T7088] FAULT_INJECTION: forcing a failure. [ 241.594158][ T7088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.594266][ T7088] CPU: 0 UID: 0 PID: 7088 Comm: syz.0.317 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 241.594287][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.594302][ T7088] Call Trace: [ 241.594309][ T7088] [ 241.594317][ T7088] dump_stack_lvl+0x189/0x250 [ 241.594346][ T7088] ? __pfx____ratelimit+0x10/0x10 [ 241.594370][ T7088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.594393][ T7088] ? __pfx__printk+0x10/0x10 [ 241.594412][ T7088] ? __might_fault+0xb0/0x130 [ 241.594447][ T7088] should_fail_ex+0x46c/0x600 [ 241.594476][ T7088] _copy_from_user+0x2d/0xb0 [ 241.594499][ T7088] __sys_bpf+0x1ed/0x870 [ 241.594522][ T7088] ? __pfx___sys_bpf+0x10/0x10 [ 241.594555][ T7088] ? ksys_write+0x230/0x260 [ 241.594579][ T7088] ? __pfx_ksys_write+0x10/0x10 [ 241.594596][ T7088] ? rcu_is_watching+0x15/0xb0 [ 241.594632][ T7088] __x64_sys_bpf+0x7c/0x90 [ 241.594652][ T7088] do_syscall_64+0xfa/0x3b0 [ 241.594668][ T7088] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.594691][ T7088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.594708][ T7088] ? clear_bhb_loop+0x60/0xb0 [ 241.594729][ T7088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.594746][ T7088] RIP: 0033:0x7f851e77eec9 [ 241.594762][ T7088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.594776][ T7088] RSP: 002b:00007f851c9e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 241.594795][ T7088] RAX: ffffffffffffffda RBX: 00007f851e9d5fa0 RCX: 00007f851e77eec9 [ 241.594808][ T7088] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000004 [ 241.594819][ T7088] RBP: 00007f851c9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 241.594830][ T7088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.594846][ T7088] R13: 00007f851e9d6038 R14: 00007f851e9d5fa0 R15: 00007ffc05e14928 [ 241.594876][ T7088] [ 251.030941][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 251.051047][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 251.053124][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 251.467576][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 251.471305][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 251.873672][ T7106] lo speed is unknown, defaulting to 1000 [ 253.913453][ T5840] Bluetooth: hci5: command tx timeout [ 254.478961][ T5153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.522381][ T5153] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.537192][ T5153] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.541304][ T5153] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.542257][ T5153] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 254.662679][ T7112] FAULT_INJECTION: forcing a failure. [ 254.662679][ T7112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.662712][ T7112] CPU: 0 UID: 0 PID: 7112 Comm: syz.0.323 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 254.662739][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.662751][ T7112] Call Trace: [ 254.662757][ T7112] [ 254.662765][ T7112] dump_stack_lvl+0x189/0x250 [ 254.662795][ T7112] ? __pfx____ratelimit+0x10/0x10 [ 254.662820][ T7112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.662843][ T7112] ? __pfx__printk+0x10/0x10 [ 254.662861][ T7112] ? __might_fault+0xb0/0x130 [ 254.662895][ T7112] should_fail_ex+0x46c/0x600 [ 254.662928][ T7112] _copy_from_user+0x2d/0xb0 [ 254.662949][ T7112] ___sys_sendmsg+0x158/0x2a0 [ 254.662971][ T7112] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.663023][ T7112] ? __fget_files+0x2a/0x420 [ 254.663045][ T7112] ? __fget_files+0x3a6/0x420 [ 254.663077][ T7112] __x64_sys_sendmsg+0x1a1/0x260 [ 254.663097][ T7112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.663125][ T7112] ? __pfx_ksys_write+0x10/0x10 [ 254.663143][ T7112] ? rcu_is_watching+0x15/0xb0 [ 254.663171][ T7112] ? do_syscall_64+0xbe/0x3b0 [ 254.663192][ T7112] do_syscall_64+0xfa/0x3b0 [ 254.663208][ T7112] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.663230][ T7112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.663247][ T7112] ? clear_bhb_loop+0x60/0xb0 [ 254.663268][ T7112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.663284][ T7112] RIP: 0033:0x7f851e77eec9 [ 254.663300][ T7112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.663316][ T7112] RSP: 002b:00007f851c9e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.663335][ T7112] RAX: ffffffffffffffda RBX: 00007f851e9d5fa0 RCX: 00007f851e77eec9 [ 254.663349][ T7112] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 254.663360][ T7112] RBP: 00007f851c9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 254.663371][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.663382][ T7112] R13: 00007f851e9d6038 R14: 00007f851e9d5fa0 R15: 00007ffc05e14928 [ 254.663411][ T7112] [ 256.350826][ T5153] Bluetooth: hci5: command tx timeout [ 256.627661][ T5153] Bluetooth: hci6: command tx timeout [ 256.801742][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 256.912092][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 257.310777][ T7108] lo speed is unknown, defaulting to 1000 [ 258.591982][ T5153] Bluetooth: hci5: command tx timeout [ 259.405790][ T5153] Bluetooth: hci6: command tx timeout [ 259.407421][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.407495][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.607273][ T7123] FAULT_INJECTION: forcing a failure. [ 259.607273][ T7123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.607307][ T7123] CPU: 0 UID: 0 PID: 7123 Comm: syz.0.326 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 259.607328][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.607340][ T7123] Call Trace: [ 259.607347][ T7123] [ 259.607355][ T7123] dump_stack_lvl+0x189/0x250 [ 259.607385][ T7123] ? __pfx____ratelimit+0x10/0x10 [ 259.607410][ T7123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.607433][ T7123] ? __pfx__printk+0x10/0x10 [ 259.607452][ T7123] ? __might_fault+0xb0/0x130 [ 259.607486][ T7123] should_fail_ex+0x46c/0x600 [ 259.607515][ T7123] _copy_from_user+0x2d/0xb0 [ 259.607537][ T7123] core_sys_select+0x4b9/0xa20 [ 259.607572][ T7123] ? __pfx_core_sys_select+0x10/0x10 [ 259.607619][ T7123] ? __pfx_set_user_sigmask+0x10/0x10 [ 259.607639][ T7123] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 259.607664][ T7123] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 259.607693][ T7123] __se_sys_pselect6+0x27a/0x300 [ 259.607727][ T7123] ? __pfx___se_sys_pselect6+0x10/0x10 [ 259.607750][ T7123] ? __pfx_ksys_write+0x10/0x10 [ 259.607768][ T7123] ? rcu_is_watching+0x15/0xb0 [ 259.607797][ T7123] ? __x64_sys_pselect6+0x21/0xf0 [ 259.607822][ T7123] do_syscall_64+0xfa/0x3b0 [ 259.607839][ T7123] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.607862][ T7123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.607880][ T7123] ? clear_bhb_loop+0x60/0xb0 [ 259.607901][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.607918][ T7123] RIP: 0033:0x7f851e77eec9 [ 259.607934][ T7123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.607948][ T7123] RSP: 002b:00007f851c9e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 259.607968][ T7123] RAX: ffffffffffffffda RBX: 00007f851e9d5fa0 RCX: 00007f851e77eec9 [ 259.607982][ T7123] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 259.607993][ T7123] RBP: 00007f851c9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 259.608004][ T7123] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 259.608015][ T7123] R13: 00007f851e9d6038 R14: 00007f851e9d5fa0 R15: 00007ffc05e14928 [ 259.608045][ T7123] [ 260.203242][ T7106] chnl_net:caif_netlink_parms(): no params data found [ 260.733690][ T5153] Bluetooth: hci5: command tx timeout [ 261.622008][ T5153] Bluetooth: hci6: command tx timeout [ 262.283965][ T7150] netlink: 64 bytes leftover after parsing attributes in process `syz.0.332'. [ 262.284003][ T7150] netlink: 136 bytes leftover after parsing attributes in process `syz.0.332'. [ 263.822519][ T5153] Bluetooth: hci6: command tx timeout [ 265.833405][ T7169] FAULT_INJECTION: forcing a failure. [ 265.833405][ T7169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.833439][ T7169] CPU: 0 UID: 0 PID: 7169 Comm: syz.4.337 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 265.833459][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 265.833470][ T7169] Call Trace: [ 265.833477][ T7169] [ 265.833485][ T7169] dump_stack_lvl+0x189/0x250 [ 265.833515][ T7169] ? __pfx____ratelimit+0x10/0x10 [ 265.833539][ T7169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.833562][ T7169] ? __pfx__printk+0x10/0x10 [ 265.833594][ T7169] should_fail_ex+0x46c/0x600 [ 265.833623][ T7169] _copy_to_user+0x31/0xb0 [ 265.833646][ T7169] do_fcntl+0x1318/0x17c0 [ 265.833668][ T7169] ? kmem_cache_free+0x195/0x510 [ 265.833691][ T7169] ? __pfx_do_fcntl+0x10/0x10 [ 265.833720][ T7169] ? ksys_write+0x1e7/0x260 [ 265.833748][ T7169] ? bpf_lsm_file_fcntl+0x9/0x20 [ 265.833772][ T7169] __se_sys_fcntl+0xcb/0x160 [ 265.833793][ T7169] do_syscall_64+0xfa/0x3b0 [ 265.833809][ T7169] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.833833][ T7169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.833850][ T7169] ? clear_bhb_loop+0x60/0xb0 [ 265.833872][ T7169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.833906][ T7169] RIP: 0033:0x7f430bf4eec9 [ 265.833926][ T7169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.833941][ T7169] RSP: 002b:00007f430a1ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 265.833961][ T7169] RAX: ffffffffffffffda RBX: 00007f430c1a5fa0 RCX: 00007f430bf4eec9 [ 265.833974][ T7169] RDX: ffffffffffffffff RSI: 0000000000000010 RDI: 0000000000000003 [ 265.833985][ T7169] RBP: 00007f430a1ae090 R08: 0000000000000000 R09: 0000000000000000 [ 265.833997][ T7169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.834008][ T7169] R13: 00007f430c1a6038 R14: 00007f430c1a5fa0 R15: 00007ffd9a8aa2d8 [ 265.834038][ T7169] [ 270.151505][ T7184] netlink: 64 bytes leftover after parsing attributes in process `syz.3.341'. [ 270.151532][ T7184] netlink: 136 bytes leftover after parsing attributes in process `syz.3.341'. [ 272.735561][ T7200] FAULT_INJECTION: forcing a failure. [ 272.735561][ T7200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.735603][ T7200] CPU: 0 UID: 0 PID: 7200 Comm: syz.3.347 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 272.735624][ T7200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 272.735635][ T7200] Call Trace: [ 272.735643][ T7200] [ 272.735651][ T7200] dump_stack_lvl+0x189/0x250 [ 272.735681][ T7200] ? __pfx____ratelimit+0x10/0x10 [ 272.735705][ T7200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.735727][ T7200] ? __pfx__printk+0x10/0x10 [ 272.735746][ T7200] ? __might_fault+0xb0/0x130 [ 272.735781][ T7200] should_fail_ex+0x46c/0x600 [ 272.735811][ T7200] _copy_from_user+0x2d/0xb0 [ 272.735833][ T7200] do_sock_getsockopt+0x17d/0x450 [ 272.735854][ T7200] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 272.735871][ T7200] ? do_syscall_64+0x40/0x3b0 [ 272.735888][ T7200] ? __fget_files+0x3a6/0x420 [ 272.735910][ T7200] ? __fget_files+0x2a/0x420 [ 272.735938][ T7200] __x64_sys_getsockopt+0x1ab/0x250 [ 272.735955][ T7200] ? do_syscall_64+0x40/0x3b0 [ 272.735973][ T7200] ? do_syscall_64+0x40/0x3b0 [ 272.735994][ T7200] do_syscall_64+0xfa/0x3b0 [ 272.736010][ T7200] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.736033][ T7200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.736051][ T7200] ? clear_bhb_loop+0x60/0xb0 [ 272.736072][ T7200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.736089][ T7200] RIP: 0033:0x7f2d39a3eec9 [ 272.736105][ T7200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.736119][ T7200] RSP: 002b:00007f2d37c9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 272.736139][ T7200] RAX: ffffffffffffffda RBX: 00007f2d39c95fa0 RCX: 00007f2d39a3eec9 [ 272.736153][ T7200] RDX: 0000000000000026 RSI: 0000000000000001 RDI: 0000000000000003 [ 272.736164][ T7200] RBP: 00007f2d37c9e090 R08: 0000200000000440 R09: 0000000000000000 [ 272.736176][ T7200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.736186][ T7200] R13: 00007f2d39c96038 R14: 00007f2d39c95fa0 R15: 00007ffff1022e68 [ 272.736216][ T7200] [ 283.413351][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.443807][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.448651][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.466000][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.486958][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 286.415750][ T5840] Bluetooth: hci3: command tx timeout [ 288.466186][ T5840] Bluetooth: hci3: command tx timeout [ 289.274462][ T5153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 289.301748][ T5153] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 289.316674][ T5153] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 289.318267][ T5153] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 289.319106][ T5153] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 290.546056][ T5840] Bluetooth: hci3: command tx timeout [ 292.565327][ T5153] Bluetooth: hci7: command tx timeout [ 292.627072][ T5840] Bluetooth: hci3: command tx timeout [ 294.626167][ T5840] Bluetooth: hci7: command tx timeout [ 296.705921][ T5840] Bluetooth: hci7: command tx timeout [ 298.325158][ T7220] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.789998][ T5840] Bluetooth: hci7: command tx timeout [ 307.317797][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.357137][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.358459][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.360047][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.360854][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.426152][ T5153] Bluetooth: hci0: command tx timeout [ 311.223616][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 311.256089][ T5840] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 311.260366][ T5840] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 311.261571][ T5840] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 311.262354][ T5840] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 311.506247][ T5840] Bluetooth: hci0: command tx timeout [ 313.355868][ T5840] Bluetooth: hci8: command tx timeout [ 313.586415][ T5840] Bluetooth: hci0: command tx timeout [ 314.921342][ T5153] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 314.938499][ T5153] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 314.953096][ T5153] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 314.954553][ T5153] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 314.955457][ T5153] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 315.427525][ T5153] Bluetooth: hci8: command tx timeout [ 315.666507][ T5153] Bluetooth: hci0: command tx timeout [ 317.026045][ T5153] Bluetooth: hci9: command tx timeout [ 317.517562][ T5153] Bluetooth: hci8: command tx timeout [ 319.105972][ T5153] Bluetooth: hci9: command tx timeout [ 319.585944][ T5153] Bluetooth: hci8: command tx timeout [ 321.187459][ T5153] Bluetooth: hci9: command tx timeout [ 322.172390][ T7215] lo speed is unknown, defaulting to 1000 [ 322.258978][ T7253] lo speed is unknown, defaulting to 1000 [ 322.286146][ T7225] lo speed is unknown, defaulting to 1000 [ 322.288879][ T7236] lo speed is unknown, defaulting to 1000 [ 322.346242][ T7242] lo speed is unknown, defaulting to 1000 [ 322.396422][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.396491][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.265925][ T5153] Bluetooth: hci9: command tx timeout [ 324.459114][ T7215] chnl_net:caif_netlink_parms(): no params data found [ 324.490529][ T7236] chnl_net:caif_netlink_parms(): no params data found [ 324.791018][ T7225] chnl_net:caif_netlink_parms(): no params data found [ 339.673244][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 339.699713][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 339.700920][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 339.702128][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 339.703794][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 341.211400][ T7253] chnl_net:caif_netlink_parms(): no params data found [ 346.959429][ T5153] Bluetooth: hci10: command tx timeout [ 349.026217][ T5153] Bluetooth: hci10: command tx timeout [ 349.883841][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 349.906146][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 349.907482][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 349.909200][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 349.910082][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 351.106307][ T5153] Bluetooth: hci10: command tx timeout [ 351.465133][ T7242] chnl_net:caif_netlink_parms(): no params data found [ 353.185990][ T5840] Bluetooth: hci10: command tx timeout [ 353.427366][ T5840] Bluetooth: hci6: command tx timeout [ 355.517601][ T5840] Bluetooth: hci6: command tx timeout [ 357.592332][ T5840] Bluetooth: hci6: command tx timeout [ 359.665944][ T5840] Bluetooth: hci6: command tx timeout [ 368.260085][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.284130][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.294467][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.308098][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.309220][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.334273][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.356488][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.361216][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.362474][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.363879][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 373.929008][ T59] Bluetooth: hci5: command tx timeout [ 375.361245][ T5840] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 375.379925][ T5840] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 375.381200][ T5840] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 375.382503][ T5840] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 375.383652][ T5840] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 375.989125][ T59] Bluetooth: hci3: command tx timeout [ 375.989599][ T5840] Bluetooth: hci5: command tx timeout [ 377.505942][ T5840] Bluetooth: hci11: command tx timeout [ 378.066262][ T59] Bluetooth: hci3: command tx timeout [ 378.067667][ T5840] Bluetooth: hci5: command tx timeout [ 379.586462][ T5840] Bluetooth: hci11: command tx timeout [ 380.165692][ T5840] Bluetooth: hci5: command tx timeout [ 380.165730][ T5840] Bluetooth: hci3: command tx timeout [ 381.670983][ T59] Bluetooth: hci11: command tx timeout [ 382.227969][ T59] Bluetooth: hci3: command tx timeout [ 383.745913][ T59] Bluetooth: hci11: command tx timeout [ 384.013213][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.013307][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.586017][ T38] INFO: task syz-executor:5842 blocked for more than 143 seconds. [ 389.586040][ T38] Not tainted syzkaller #0 [ 389.586051][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.586060][ T38] task:syz-executor state:D stack:21832 pid:5842 tgid:5842 ppid:1 task_flags:0x400140 flags:0x00004006 [ 389.586120][ T38] Call Trace: [ 389.586127][ T38] [ 389.586142][ T38] __schedule+0x16f3/0x4c20 [ 389.586195][ T38] ? __lock_acquire+0xab9/0xd20 [ 389.586220][ T38] ? __pfx___schedule+0x10/0x10 [ 389.586261][ T38] ? schedule+0x91/0x360 [ 389.586288][ T38] schedule+0x165/0x360 [ 389.586314][ T38] schedule_timeout+0x9a/0x270 [ 389.586337][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 389.586381][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.586405][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.586427][ T38] ? wait_for_completion+0x267/0x5d0 [ 389.586453][ T38] wait_for_completion+0x2bf/0x5d0 [ 389.586492][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 389.586517][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 389.586517][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 389.586541][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 389.586569][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 389.586595][ T38] rcu_barrier+0x463/0x570 [ 389.586626][ T38] flush_rcu_work+0x84/0xb0 [ 389.586649][ T38] kvfree_rcu_barrier+0x12b/0x160 [ 389.586676][ T38] ? p9_client_destroy+0x4a7/0x4f0 [ 389.586697][ T38] kmem_cache_destroy+0x2e/0x160 [ 389.586723][ T38] p9_client_destroy+0x4a7/0x4f0 [ 389.586747][ T38] ? __pfx_p9_client_destroy+0x10/0x10 [ 389.586780][ T38] v9fs_session_close+0x4f/0x200 [ 389.586806][ T38] v9fs_kill_super+0x5c/0x90 [ 389.586833][ T38] deactivate_locked_super+0xbc/0x130 [ 389.586856][ T38] cleanup_mnt+0x425/0x4c0 [ 389.586876][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.586902][ T38] task_work_run+0x1d1/0x260 [ 389.586924][ T38] ? __pfx_task_work_run+0x10/0x10 [ 389.586941][ T38] ? __x64_sys_umount+0x122/0x160 [ 389.586967][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 389.586994][ T38] exit_to_user_mode_loop+0xec/0x110 [ 389.587016][ T38] do_syscall_64+0x2bd/0x3b0 [ 389.587034][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.587057][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.587076][ T38] ? clear_bhb_loop+0x60/0xb0 [ 389.587098][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.587121][ T38] RIP: 0033:0x7f5df9fb01f7 [ 389.587138][ T38] RSP: 002b:00007ffe804cc4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 389.587157][ T38] RAX: 0000000000000000 RBX: 00007f5dfa031d7d RCX: 00007f5df9fb01f7 [ 389.587171][ T38] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe804cc560 [ 389.587183][ T38] RBP: 00007ffe804cc560 R08: 0000000000000000 R09: 0000000000000000 [ 389.587195][ T38] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe804cd5f0 [ 389.587208][ T38] R13: 00007f5dfa031d7d R14: 0000000000038cff R15: 00007ffe804cd630 [ 389.587239][ T38] [ 389.587301][ T38] [ 389.587301][ T38] Showing all locks held in the system: [ 389.587310][ T38] 3 locks held by kworker/0:1/10: [ 389.587322][ T38] 9 locks held by rcuc/1/28: [ 389.587332][ T38] 2 locks held by ktimers/1/29: [ 389.587342][ T38] #0: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 389.587394][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 389.587440][ T38] 1 lock held by khungtaskd/38: [ 389.587450][ T38] #0: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 389.587495][ T38] 3 locks held by kworker/u8:4/67: [ 389.587505][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 389.587550][ T38] #1: ffffc9000152fbc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 389.587595][ T38] #2: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 389.587639][ T38] 3 locks held by kworker/u8:5/147: [ 389.587649][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 389.587693][ T38] #1: ffffc90003a57bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 389.587737][ T38] #2: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 389.587796][ T38] 3 locks held by kworker/u8:12/3979: [ 389.587806][ T38] #0: ffff888030598138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 389.587850][ T38] #1: ffffc9000e737bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 389.587895][ T38] #2: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 389.587941][ T38] 2 locks held by getty/5595: [ 389.587952][ T38] #0: ffff88823bf428a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 389.587993][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 389.588039][ T38] 1 lock held by syz-executor/5837: [ 389.588050][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 389.588092][ T38] 1 lock held by syz-executor/5842: [ 389.588102][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 389.588147][ T38] 3 locks held by kworker/0:4/5927: [ 389.588157][ T38] 3 locks held by kworker/0:5/5933: [ 389.588167][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 389.588212][ T38] #1: ffffc900051afbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 389.588257][ T38] #2: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 389.588301][ T38] 3 locks held by kworker/u8:14/7070: [ 389.588312][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 389.588362][ T38] #1: ffffc900051efbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 389.588406][ T38] #2: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 389.588448][ T38] 3 locks held by kworker/u8:15/7071: [ 389.588458][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 389.588502][ T38] #1: ffffc900051cfbc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 389.588546][ T38] #2: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 389.588588][ T38] 1 lock held by syz-executor/7106: [ 389.588598][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 389.588645][ T38] 1 lock held by syz-executor/7108: [ 389.588655][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 389.588698][ T38] 1 lock held by syz.0.333/7152: [ 389.588707][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 389.588749][ T38] 3 locks held by kworker/u8:16/7153: [ 389.588759][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 389.588804][ T38] #1: ffffc9000d5a7bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 389.588854][ T38] #2: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 389.588896][ T38] 3 locks held by kworker/u8:17/7154: [ 389.588906][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 389.588954][ T38] #1: ffffc9000d4b7bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 389.588999][ T38] #2: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 389.589042][ T38] 2 locks held by kworker/u8:20/7157: [ 389.589052][ T38] 1 lock held by syz.4.346/7197: [ 389.589063][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 389.589104][ T38] 1 lock held by syz-executor/7215: [ 389.589114][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 389.589160][ T38] 1 lock held by syz-executor/7225: [ 389.589170][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 389.589216][ T38] 1 lock held by syz.3.353/7230: [ 389.589226][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 389.589268][ T38] 2 locks held by syz-executor/7236: [ 389.589278][ T38] #0: ffffffff8f1d7be8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 389.589330][ T38] #1: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 389.589380][ T38] 2 locks held by syz-executor/7242: [ 389.589391][ T38] #0: ffffffff8f1f44c0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 389.589442][ T38] #1: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 389.589487][ T38] 2 locks held by syz-executor/7253: [ 389.589497][ T38] #0: ffffffff8e43b960 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 389.589547][ T38] #1: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 389.589593][ T38] 1 lock held by syz-executor/7278: [ 389.589603][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 389.589649][ T38] 1 lock held by syz-executor/7285: [ 389.589659][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 389.589704][ T38] 1 lock held by syz-executor/7294: [ 389.589715][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 389.589758][ T38] 1 lock held by syz-executor/7297: [ 389.589768][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 389.589810][ T38] 1 lock held by syz-executor/7301: [ 389.589821][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 389.589863][ T38] [ 389.589868][ T38] ============================================= [ 389.589868][ T38] [ 389.589887][ T38] NMI backtrace for cpu 0 [ 389.589907][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 389.589927][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 389.589939][ T38] Call Trace: [ 389.589946][ T38] [ 389.589954][ T38] dump_stack_lvl+0x189/0x250 [ 389.589981][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.590004][ T38] ? __pfx__printk+0x10/0x10 [ 389.590036][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 389.590061][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 389.590083][ T38] ? __pfx__printk+0x10/0x10 [ 389.590103][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 389.590132][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 389.590155][ T38] watchdog+0xf93/0xfe0 [ 389.590180][ T38] ? watchdog+0x1de/0xfe0 [ 389.590204][ T38] kthread+0x711/0x8a0 [ 389.590229][ T38] ? __pfx_watchdog+0x10/0x10 [ 389.590246][ T38] ? __pfx_kthread+0x10/0x10 [ 389.590271][ T38] ? __pfx_kthread+0x10/0x10 [ 389.590292][ T38] ret_from_fork+0x436/0x7d0 [ 389.590315][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 389.590342][ T38] ? __switch_to_asm+0x39/0x70 [ 389.590363][ T38] ? __switch_to_asm+0x33/0x70 [ 389.590378][ T38] ? __pfx_kthread+0x10/0x10 [ 389.590402][ T38] ret_from_fork_asm+0x1a/0x30 [ 389.590432][ T38] [ 389.590443][ T38] Sending NMI from CPU 0 to CPUs 1: [ 389.590466][ C1] NMI backtrace for cpu 1 [ 389.590480][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 389.590499][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 389.590507][ C1] RIP: 0010:lock_is_held_type+0xd2/0x190 [ 389.590530][ C1] Code: 85 c0 75 2a 49 ff c7 49 63 85 18 0b 00 00 48 83 c3 28 49 39 c7 7c d8 eb 11 48 c7 c7 90 98 87 8d 4c 89 fe e8 80 27 f8 f9 eb cb <31> db eb 1c 83 fd ff 74 12 31 c0 f6 43 22 03 0f 95 c0 31 db 39 c5 [ 389.590544][ C1] RSP: 0018:ffffc90000a2f4b8 EFLAGS: 00000046 [ 389.590558][ C1] RAX: 0000000000000004 RBX: ffff88801cab8bc0 RCX: 16a1fbf9a60bc200 [ 389.590569][ C1] RDX: 0000000000000200 RSI: ffffffff8d9a8e80 RDI: ffff88801cab8b98 [ 389.590581][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff88d9f17c [ 389.590592][ C1] R10: dffffc0000000000 R11: fffffbfff1e3ac47 R12: 0000000000000246 [ 389.590603][ C1] R13: ffff88801cab8000 R14: ffffffff8d9a8e80 R15: 0000000000000004 [ 389.590614][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 389.590627][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.590638][ C1] CR2: 0000563386c8bb58 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 389.590653][ C1] Call Trace: [ 389.590658][ C1] [ 389.590667][ C1] __might_resched+0xa6/0x5d0 [ 389.590686][ C1] ? __pfx___might_resched+0x10/0x10 [ 389.590701][ C1] ? skb_dequeue+0x2c/0x140 [ 389.590724][ C1] rt_spin_lock+0xc7/0x2c0 [ 389.590740][ C1] ? ieee80211_rx_napi+0xca/0x3d0 [ 389.590759][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 389.590776][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 389.590793][ C1] ? rt_spin_unlock+0x65/0x80 [ 389.590811][ C1] skb_dequeue+0x2c/0x140 [ 389.590829][ C1] ieee80211_handle_queued_frames+0x4a/0x1f0 [ 389.590848][ C1] tasklet_action_common+0x36c/0x580 [ 389.590870][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 389.590893][ C1] handle_softirqs+0x22c/0x710 [ 389.590914][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 389.590934][ C1] __local_bh_enable_ip+0x179/0x270 [ 389.590951][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 389.590972][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 389.590991][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 389.591008][ C1] rcu_cpu_kthread+0xc3d/0x1b50 [ 389.591029][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 389.591052][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 389.591076][ C1] ? __lock_acquire+0xab9/0xd20 [ 389.591094][ C1] ? __pfx___schedule+0x10/0x10 [ 389.591124][ C1] ? schedule+0x91/0x360 [ 389.591149][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 389.591165][ C1] smpboot_thread_fn+0x542/0xa60 [ 389.591186][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 389.591206][ C1] kthread+0x711/0x8a0 [ 389.591226][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 389.591243][ C1] ? __pfx_kthread+0x10/0x10 [ 389.591263][ C1] ? __pfx_kthread+0x10/0x10 [ 389.591281][ C1] ret_from_fork+0x436/0x7d0 [ 389.591299][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 389.591319][ C1] ? __switch_to_asm+0x39/0x70 [ 389.591332][ C1] ? __switch_to_asm+0x33/0x70 [ 389.591345][ C1] ? __pfx_kthread+0x10/0x10 [ 389.591363][ C1] ret_from_fork_asm+0x1a/0x30 [ 389.591384][ C1] [ 389.725788][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 389.725809][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 389.725831][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 389.725842][ T38] Call Trace: [ 389.725849][ T38] [ 389.725859][ T38] dump_stack_lvl+0x99/0x250 [ 389.725888][ T38] ? __asan_memcpy+0x40/0x70 [ 389.725907][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.725930][ T38] ? __pfx__printk+0x10/0x10 [ 389.725963][ T38] vpanic+0x281/0x750 [ 389.725988][ T38] ? __pfx_vpanic+0x10/0x10 [ 389.726009][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 389.726027][ T38] ? preempt_schedule+0xae/0xc0 [ 389.726053][ T38] ? preempt_schedule_common+0x83/0xd0 [ 389.726082][ T38] panic+0xb9/0xc0 [ 389.726103][ T38] ? __pfx_panic+0x10/0x10 [ 389.726127][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 389.726152][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 389.726177][ T38] watchdog+0xfd2/0xfe0 [ 389.726205][ T38] ? watchdog+0x1de/0xfe0 [ 389.726232][ T38] kthread+0x711/0x8a0 [ 389.726259][ T38] ? __pfx_watchdog+0x10/0x10 [ 389.726278][ T38] ? __pfx_kthread+0x10/0x10 [ 389.726307][ T38] ? __pfx_kthread+0x10/0x10 [ 389.726331][ T38] ret_from_fork+0x436/0x7d0 [ 389.726355][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 389.726389][ T38] ? __switch_to_asm+0x39/0x70 [ 389.726404][ T38] ? __switch_to_asm+0x33/0x70 [ 389.726420][ T38] ? __pfx_kthread+0x10/0x10 [ 389.726444][ T38] ret_from_fork_asm+0x1a/0x30 [ 389.726476][ T38] [ 389.726750][ T38] Kernel Offset: disabled