last executing test programs: 11m58.407530918s ago: executing program 3 (id=1096): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) 11m57.394195811s ago: executing program 3 (id=1099): r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32, @ANYRES64, @ANYRESOCT=r0, @ANYRES16=r0], 0x14}}, 0x4004010) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040841}, 0x20044) io_setup(0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r2, &(0x7f00000009c0)=[{&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000a40)=""/168, 0xa8}, {&(0x7f0000000680)=""/178, 0xb2}, {&(0x7f0000000740)=""/179, 0xb3}, {&(0x7f00000005c0)=""/184, 0xb8}, {&(0x7f0000000b00)=""/246, 0xf6}], 0x6, 0x0, 0x9) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x8001) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r5, 0x8, 0x0, 0x0, 0x3, 0x0, 0x46d, 0xfff9, 0x4, 0x1, 0x9, 'syz0\x00'}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x119a000, 0x0) socket$inet6(0xa, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(r2, &(0x7f0000000300)='./file0\x00', 0x105080, 0x126) getdents64(r6, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/fib_trie\x00') lseek(r7, 0x9, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) 11m55.745465057s ago: executing program 3 (id=1104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x78) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x4e27, @rand_addr=0x64010100}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000002000103000000000000000000000000140000001100010000040000000000000000000a"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000980)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000001180)}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) splice(r4, &(0x7f0000000740)=0x58b, r1, &(0x7f0000000780)=0x7, 0x3ff, 0xa) r5 = socket(0xa, 0x800, 0x4) sendmsg$nl_route(r5, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000005200000826bd7000fbdbdf2502080006000900000008000300d5a47968aca9dc0f0e9500080002000700000200040000000800060006000000080005000600000008000500080000000800020009000000080005001f3f11f60600000013b586477f0d08a1e0681a19"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xc5}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) 11m54.567131649s ago: executing program 3 (id=1106): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) vmsplice(0xffffffffffffffff, 0x0, 0xfe, 0xc) 11m54.115204948s ago: executing program 3 (id=1109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x6908, &(0x7f0000000440)={0x0, 0xfffffffe, 0x10100, 0x3, 0xb5}, &(0x7f0000000080), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1862, &(0x7f00000004c0)={0x0, 0xd823, 0x0, 0x0, 0x200000}, &(0x7f0000000300)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0xf046) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r11, &(0x7f0000000100)=ANY=[@ANYBLOB='VOLUME\nSYNTH \'Synth Capture\' 004'], 0x32) r12 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x280, 0x0) dup3(r12, r11, 0x0) ioctl$PIO_UNIMAPCLR(r10, 0x4b68, 0x0) 11m52.309542321s ago: executing program 3 (id=1113): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$packet(0x11, 0x3, 0x300) r0 = open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x94) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f00000003c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e21, 0x0, 0x4e22, 0x8, 0x2, 0x180, 0x0, 0x3a, 0x0, r1}, {0x200, 0x101, 0x3, 0x7ff, 0x4, 0x9, 0xe}, {0x2, 0x9, 0x0, 0x6}, 0x800, 0x6e6bbd, 0x0, 0x1, 0x2, 0x2}, {{@in=@loopback, 0x4d2, 0xff}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x1, 0x2, 0x1, 0x4, 0x7, 0x9}}, 0xe8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x7, 0xffffffff, 0x52424752, 0x2, 0x81, 0x20000006, 0x7, 0xa, 0x0, 0x7, 0x0, 0x7}}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000400)={0x6, 'geneve0\x00', {0xfffffff8}, 0x1}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) accept4(r6, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSETELEM={0x24fc, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x5dc, 0x3, 0x0, 0x1, [{0x358, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x25, 0x6, 0x1, 0x0, "d0a541a9f579e694ddae8661dcf6eb8ceeb592feb2150ae13cec7f042f52ff1a39"}, @NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xec, 0x1, "8b0c982b19078d9de13df924a36b27523ca637483f1a81e5d5c43a3ff00cb91cf5979a5ca785f37d37e8b237dec0b173cf936c50752c606df3f559244bd9e91007cbbccbfbdec5e8f1b4c4782febac5ae97100d5f52955ccc0401022e5394c432905bc08c55c1425715246e89f22fafdc720975a1988ea7374e46ee753d05f9487a85eece1c78e83d2c47b73f8e70c1a32994d88f4b9a1a549abab66f55dff2ca9dda143234ceaa2541458c9a0dd19412f2dd78f448c3b2494f0a9b31b3bac76d71a8d928dea5ee3425bbd5277aac3be4fb3c509e851b3caa25d16b55e804f10db47efd2fb4bc71e"}, @NFTA_DATA_VALUE={0xe1, 0x1, "9735edaaa61d9f7e9dae3201979aee455cfa30e644d40db0a4686b93a307a0c6efe27b6c8279ba5ab4337641e7426e73c38e81f1f94f77383cbc5021f6bb40e7ba6d75606764b57b9e7eb96c19ff92dd7ba66d915a701d1232cbb5195ebdda000a1df988704bbb9d26368c8835dc19e38bbf603c74996200a87c55197034a255ef34d5e1150b66f5734db540890450648e5d789bc5783273bb9ee571ee689a43944e6768d5ffb6648c2a7de78e95a9322fb37ee940f848fb1a8e16cc4e8e395cc16ba60bf808c0accbe45ac83114395653b277921544181c9fb9283b57"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_USERDATA={0xe3, 0x6, 0x1, 0x0, "649d0d06bd8bcf25693eda54228c435248e0709752b983118ae65d7aced18c4c62e482abbd69d609f6d7112fe4623694f043eaa24ef807afd837c7560cfac938f4485b0b1b08e1fdf9176fa1d4c569f4d63d5d50426a5310b71f2e097419682571c1ac70384ba9c9d14887d0cde9962a91b38953483a077485add9474036c7659884b3b4e4e67d41905961415b72e4cb6f3dbd915972aa36677868c502d75ef1e4eb3aa493e0af943f96394283549b1a2434d1dd7c4d7ede4160bd80558d19247ebf35229dc7dbcf27ef34c8859feb716313bd65d5d13d36a0b1d13634531a"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4af7}, @NFTA_SET_ELEM_KEY_END={0x40, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x280, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "a7d339f0bb83d4f84d390ab2149bf4dddbedf09d55a8520d74666e4a4e6a45ce5d14a0b63d6cd9e84ebfaf6402ac0a6ee4077cb1485cc71b4c0bcfb8b95fe7fcebf1a0369f374c9a48fcc9e74433d4f338"}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_BYTEORDER_OP={0x8}]}}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x58, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x3f, 0x1, "06ccdc45f2bbac32ecf18bc6eaaaad147e08cdb0f544544597adbddd0f2b8a80231e2747d407ac01bbf317f4d29d30b6a7ed6f0e65bdbe81902436"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xb8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x16dc, 0x3, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x94, 0x6, 0x1, 0x0, "d31a085ea6e3e4bd653da0f421ee9894a2a45afb2c721c70f7633afa7062e09e4e70d303d77974f118156cc4441de62f734462c750e58e2105aff52679c17959b35f6b112640d9913544f2d6eea9f738fc7f56dae24fbe9540f9c98ced87e578e946f9cbb55a548326cf3a718a918dda6dd638bea552e893fae8ea99b7e4e0b9b8fe7c30ab509ba955026daaac5214cf"}]}, {0x26c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xb3, 0x6, 0x1, 0x0, "8e3256db8d735957c4974834b53568655200bef0519e68f9989bd4e3cc7efbcab091a01d9290f0d227d2401c2bb81c181532f891aa234bddb4931bbd9d70f91020b75ae472f5c45ca4ea456cb04435f82f7145fcf8f90c0a153e3e5ecb85bf92fdfbdc60cb63a0d73abe2e3da7fdb9cd0285f55895644145956bb03f897e2ecacfa2d6bc6e643e8e008228681598022138c9a9562a25ed0b1cc58cfcd21348c6798231db2b109704d7dae1e4d4a744"}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1bc3a4f6}, @NFTA_SET_ELEM_USERDATA={0xf6, 0x6, 0x1, 0x0, "f3695f2ab2b6077c61a10bdbfccefe4f7b77a7a81e59990af6b9ed46f6a80b4c1580aeff2ff597feb0c1ac8b40295f4ebef96ad8652350a858c6891c179e7617843a9a9a45ab461e2730b92e53147a182667f5013aeea75bf2b279e9f07e3cfdeed012bbf7a55e33ad4cea1f158a6f919fad6dd1913eda3b05f4ffa6a9f28ecd6393c449658f5d90886c9c34e467e6ce5338f64226623ef8ce7fe8388fe1fdf4364e4337db62d02a9be49adb504ed3fcea13083b9f2cc0b1d3f8283e111f64884e300ed1ba78cd56c1b5ee5a608e2669171b9d71764ab305451ea5d00943cec20b6e0bb6a95625580ff3d8f9187ee2aae749"}, @NFTA_SET_ELEM_USERDATA={0x4a, 0x6, 0x1, 0x0, "809aaec32ec67e4623b267ff7448d22537f60ed79a650adb60130c7dc6860d2782a51cf5fdf9b0da7b0588380e3ee3150bd8246c5bc95f2f018e752305f1a70104bd82614fc1"}]}, {0x2a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0xdc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "b528adb7c2a0ca22e8fe86e2a992c1668ffec774b47ba449015254e411877951172a034c676888225a3805d9942777edac82"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x6a, 0x1, "1bcd75d8f2503b6a5d0616e20bd2e88ee7858135f013cab2dbfc5289eedeca71ba92feb27873ad2bf246cd01659e1cb1dca2d692af5957aba30a6c8dd15e2d6687878c4ed8153c2a55760e9f2fa39d7735a7d638f058c80283f073d81acdc570b7ccb43a8309"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x94, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x48, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x7}, @NFTA_OSF_TTL={0x5, 0x2, 0x3}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xa0}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x33defb12}, @NFTA_SET_ELEM_USERDATA={0x13, 0x6, 0x1, 0x0, "1af2bf38867c1f0d777b6265400607"}, @NFTA_SET_ELEM_EXPRESSIONS={0x100, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x64360ab2594994e5}]}}}, {0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0x3c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x96e}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x50, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x187dd14fe0fb91af}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x48, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x44, 0x1, "c453c9b40ab9a9c384819f167be6812bf707af42595c53b0b9fdebf1949a435fc9039d2291cb1dec0300b8f9ddad167c8e1d001fec799138e4faa8f87faff3b2"}]}]}, {0x4}, {0x8e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x56, 0x6, 0x1, 0x0, "4d11dc8ee7fd103781dc88dfbbfdd4eb7127127f22a8e9424b840743ecf6c941cd4f8ff0faf57b2dddd2f08a39ecb7b0adde865bae684aa97dfe7cca903957069ad0dda929e37e4e224898730deb5967d1cf"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0x54, 0x6, 0x1, 0x0, "8e5449998ec554b20ea03b49a0798df88cc5827eb3f8b8f9ff6304697f00c4adcc13ff233e6803cd74f46c7752497a51ab8c0d8402d46b04116569a958b3e80fc4e4de68876e94f6cfc8a884b6b81d2a"}, @NFTA_SET_ELEM_USERDATA={0xef, 0x6, 0x1, 0x0, "6cdc6b671556f1552f2693910120331c707c4ae072a9b4a39530729bc073906ffb6c2e256cc974c78efdd37c5950569426bb28a971ba1d3002b1019798661e55807cbf6a98e9a118d3804037789c45376b6a5bab72359c45d13892f5bbbaf97d6ca97be9107ddcd60f8d815356552cf1b031fc602896004c1aaf3e001081b193682448de9bb71896cb42e1dd8f0ba15ea0c55cbf9e9819ff17c790afa7724013a3f2f6f6ea5ac02b6b838813421baa8ca5803ed697a182b9a3bf337e4093d9bf243ee24b5325ab1b3cb57ea5cdc0befd7d15000254589925756efac56c09cda54e0f4cca0b14db72cab376"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x2cc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xfc, 0x1, "1555caf103bd9640fb72839fcfb7a85faab1df61cc9a2487e904dc7b1990f1045861a019d3631693dc3e97d02305604dcf7ead2a11d1991784dcf99e48a977b2d42d796883da36b216df0a3a16bfd70288565eab2a2f7af2e7b52013bbd9e5f6fee160e3b8755b86033f069fb8b4cd289b6b3002398b3bd34fe264195d928d214f2258161c94a0768740b6c90032b4dec26d4501e91c214203be59f074c1d0049de77223c82cb0b5a56f3fc4effa30e754e88880159fff8333f88a85da64b7694e21619a766d448e49a1d80c9f9017db576e2bf81a55527acbce9fab7fc694d3f21925249b243cb5e8dab17f92a4528f9e50efbf2c5da2dc"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x36, 0x1, "ab47ebd013f788de5084940269c20af8cdbb72da78bba71f3fb8fb3016770363e32efc4e5f140218906115541d3b43cf59d9"}, @NFTA_DATA_VALUE={0x2e, 0x1, "6d3330534c69c90860cdc4aa65827693a32ad55125234e2a587f0459597f9956f54cda895045ddeb1f6a"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "dcb22cbd18b30c3886702730e3aefd30dc38160cc311196c190b7a7512ec936a86cae90480e5c68fbf3dfc1ccd291e4ad2cd74e89042e50161104eea04d9028dd6918581470e1e09ff717b30f5e986758d955f6d17e2173dd95e1966a08fae2294691e223d0d1d129e46bde1c26cc0058581219ab7f81b36d3b2e837ba04df51ed08d90142b54a3edc04d7a54296265a2baae72d468cf01a05cfc948b1e21692da052bca95a28455aeae41fe8f23952f2eb3c53c218d6e13e098f050bd5c569aaa08fe70eebdb98112c9ce86c3"}]}, @NFTA_SET_ELEM_EXPR={0x444, 0x7, 0x0, 0x1, @range={{0xa}, @val={0x434, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RANGE_TO_DATA={0x194, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x46, 0x1, "daad5382bfc726f1301563dcf34a7e18f6e0325c70d7646be9d3bd97076e3c0cccac967c352e7dc00cc759069ebb56f4fd2f416935599bd4c569906bdbf8f220f7b4"}, @NFTA_DATA_VALUE={0x8c, 0x1, "cf850062cdfbc057886c349208a7fdc5e667238215ae8f42bd6149d2fa79f83c7467be50a3d670e1c6159bf7067d23e87a239c8e8a1b293c040ffe3c144039032d3a0ebcb64469311f0df7546fff668b50846733e6f02e5d76dc8d5568a537204e13b89898f0bdbe09dd00498b9c3f108f755886b0210b62531db907e026cbe61624880483227a2a"}, @NFTA_DATA_VALUE={0x2b, 0x1, "e2ec6603423a868f3fa079d96fc387578589b15fc3210d50aa0ac33069b57ebf17948dca24475a"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x89, 0x1, "1ab1ce71d6b94dfa0f1574397e80790067b38315602bf9b625ce8c316a517854db0237178f662c0c6be9d3b32ef512b1ed71bcea53cd75755fe9f02b6962a70a33366c1e08b50bd303edda1c7bd02d37cdb6dd9ae4088469a2d94e9d831c0fb279d1aa4cfeb20f2884f10810f695c56593b1911d18be0023ac16fc08546728c17cb0732010"}]}, @NFTA_RANGE_FROM_DATA={0x27c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x99, 0x1, "0cb8cb0e7d3d7eb3ae6a50c0b76d322b1af86f93ce7d951d40b25ad443fe2e1d72c95514ad468ef1d4d38ccc9832434a4d6f0fd4f0e464cf4f58fb99bd90364c72d876d06435809806ccf9f769e7f79575fb77508be7a1d9f9ae7a36a4cf47a39b2777856624c32f93f7fb179168902851f0c6735c70f6b78bff0a18213294f28152b7c845cfc3526b294a90b82686ada1436c0042"}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0xa3, 0x1, "ce9bc02b21bc6d68f61ebf0a5312b323342831b4777b43e1e6a628697fb518eaa592b3542ca0698ffe7b84a319ea831a195542b5b74a3361c8bf0693201e03971378ece76f244f0e6bcbb1619e97d6ddc79767d694c001c640e8cdba5c3b6f55bfbd76df3b59c78f13dc7cd5d28abffea24e246eb9471ecace251e62fd291149751489ff4775a8aef8264b4baa99b0a6187e742a92889fbfbe314d8021db7b"}]}]}}}]}, {0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}]}, {0x788, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xdd, 0x6, 0x1, 0x0, "5e6f741b19a50b0a9af18a456b7df83c7538a25007a93ed0bd7104a74d76585ea7726290a401221ce02c966310bba37148540acf186d848ab6836bd8c4582cfde167a4153a20649646807bcee3a31b9ffcd985b60783ad320bb5ae0bd7946c809002241b2b2fdeb0d72a1ec11a2f537067eab715f3c95d9dfd73dc11bd6ac49aa370d81a0156c5dcf72e55e6f40397dde686296229f1e28ebb2415eda4c897e6d971b35a903192914faf18e1b28017882a96c475bd5eb8e587f9706bf62479dff7de407ada79c8f2a930c989a2831f4605c012fdb8827dbe92"}, @NFTA_SET_ELEM_KEY={0x190, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaa, 0x1, "470b63efb2643a05e7c882e3ea8b3895c7c3a999000a7b0e5ca4e3e8cda3eb02eb0b65f9d1eb93bf6346d5f4af81f55cc44d9bfdab37a1b4336c592cf9fd9786bea3b74162638d8734091b198c35e55393ab664c24f8982c705ebd2068a281c51776323851bd789aca163ad4e50a54e30bac7694782223dd429e89b74c286fdd7e91d6f93d838eff66904dee66d7a96387a1594450a62350a6c6deed3bebc1d85d08771f47db"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4b, 0x1, "78debed4756c2ac5eddc75837bfb51822a6034e68dee0ff4449aba2126da180e7a5542abc01c59e61bac66f65f6035933f52f7a99d68467c6ab3805b72a0e39ce78292a5984c9d"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY={0x16c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "33c76f219f5121e816525e426ca4ac56c1a0d9f19b0931b375e71b57e051ec10dda2cd6cbc5be9cc6227c0472442341d920d504eac543f34f9f402a0604d42072489ea7e53c765fa13ad669c4fe24300bac26cff7bc680b519c860d2228ec4df5fb72f87d0fc5b577e2c259c5daed29ab38bcaab03ac6dac2a22b39292d03d885a4d20ec3bf7d3ae0d5697c0e903b8b28657b8bb9b21c8fa29451c334b5f7a3cf028d9b1fb3c50b98f111d431c239877916e3a7370cd95ded374021f5314787f385444e813fdaaf88e1eb3b1aef1cb541b762d12f22472524136ef80c0b40304460f5c4b3710fce2c59474081f276af92d18"}, @NFTA_DATA_VALUE={0x57, 0x1, "0099f7aea42a3e3c11724b8d156572a21c6c5dab66de45714616d31c9733c9440cf394fccb23f0d4c69f1e6bc79547b441744daba4cfb7c4b9402a6fc601ab8ff0b2cd8626117e20de6b6b59c6cb9c1b46ba26"}]}, @NFTA_SET_ELEM_DATA={0x2d8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdb, 0x1, "4871d8da4a26a58a03e60127a76fad81095b1bc29dda2ac6ebd7aaa7596040beadabeda78f4da126d078014a212b21da09643ced71436ad45b22020086e7fa702f88e654be840052e195995c6f554a6eacd636e67a072f93d758fbc49e45dbc0292d2f138d19959f4ef8ac78fc288264112f99f59add37618fcec2e3156142f918575e857e13e641301e4cc41496586f8f25d39da990645d9b8596eca7a9e98d650718402eb5b60b80446bdde0475b00bccffa7a08245980769195ee214e652160d1f287455ac739035fd90b6dfae3b2d34c00205b1c06"}, @NFTA_DATA_VALUE={0x23, 0x1, "ed0447cd54f541785b8968167c43d50642b4216918163f99d75dc0a22c54f4"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "db184378de347e42361a7e2c17d6c879781415bc2a8b0fd2adefb390d54362855298ce80610f03583e8dd191addb80aced7ed9af606a42354cf10e6643539c58065ceb1bca23c59f97b99d95f47237102b4b6e423618a85954afeac868390183762300d5f0113b514d872dae75e9e91ce3cf505915a825adf64667179ff4b7760580afb72169b8"}, @NFTA_DATA_VALUE={0xe3, 0x1, "998cae709ea3e53a47f41836844ad94e8311b2a5505014f0df9043fd9a5b39d200aee6dad7354b1019eff0a538f34b938d1fd6071d601f55051582f0a11cd009d71989cfba56fd002992e96a4a9882f4614395569d33a71e7469b20eee3e019bfcb49f9f8163feec4d8cda0c864c0e44875fccc49b59e61de5cc525833e8dabb26a664a546e0d8bf9375f390e1bf4de4db9008a4e7da1768ba7bc2a03415c50ef622cef1ab5e991c7d55bd7edd3cf814d6ea21bfeffeb1f7d1431d807396986a2a54c300750a6c25263e873c71e36381cb1dde698b8c2cf0e20650e9a15011"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_USERDATA={0xce, 0x6, 0x1, 0x0, "ca1d63f7a09ee5f60088c73894504db679640f687607a54f1ae928473089afced3b526207885dedad1bdc8a0c291fc3c192f646778746eb91f357cb1dae4ea9d75cfae7ad8b22c8006796c8f6e063178a3e4620842d3181f00a40239cc21769df83463ee6ee4bb3248be782d92a2c0eee7855fbd40131f664e8512a3616a39bf7e0cb969e6ecad7439baac34991583924b27a51488b66ceb6b2763611f650fe79cfb8181d0ba5b7791d5673a4a161c89250a098a2c30a4aedb5210cac76ae37143a07155947939373ee7"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x804, 0x3, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x150, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}]}}}, {0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_XFRM_DIR={0x5}]}}}, {0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x58, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x9e}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x620, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x28c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8f, 0x1, "3456ff0e93df939c5f712b0e1fcc660380e9018fc9f4b7470e3a2fb7b88ed906cbbf84a9371da7498a951e386d46a15ec7c8734d2296589e9b40457cd80a8c79114650d434bb81b810a993249e5f17c21b9f6b482e93ed166405fd698e4eea8219589443b1d200ccefe173bef254940c161201a9709956c86d12fb77f2a9dfcfef11f158f25a65be9ad880"}, @NFTA_DATA_VALUE={0x89, 0x1, "9f0576cfc43adbd04b844911ca6d2b5661e6dcbe2ea73517e9c1e4c0c203cc04e3c1886be3f53062d119c9173242ed1ecc792bca7b678ee6e15d4e16ca516f44d946459d023d328f740c089fc790e9228a8ce98c7b669034d2f663dd4024f3528e4636215705adcf3094e0a0ea473848479e2ef6abcbea5ae26c9b7464c5a342c9799eeb1e"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xa6, 0x1, "f534b3053ac87955aa10df70c33f51ea48760c647a0b51d28585c83a34c4e58ae6dc4b4d067d0c17186ed2388f1378a3357c7df59851e78a013ea2636a2a585ae0b744b91fa6296f84ec1004f1790d35f9c0f6ce0951221113da6a33a55fd43902652197b846a6fee655512665696ea5ac308a263596661f0e99c938cbcc6d8edd6f7c96449c86f7ac0fbe06f0eea4dff3d81d4ab396c90cecaaef2a9dc64551d3ad"}, @NFTA_DATA_VALUE={0x4f, 0x1, "6d7523229eefacc0b303f10d3655b014b4c927366d095d51a9d2f38f700d1640fdb51253331c4d817792f9b99a355a39bb1316b30f2e77613a2eb3d81df9905bcec2d0483fd565225ac6b0"}, @NFTA_DATA_VALUE={0x13, 0x1, "83d799456b5f8e622bf3707e81381f"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffff67}, @NFTA_SET_ELEM_KEY={0x208, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa3, 0x1, "e226a7c8d4ae66e3c0dc010b3b02ad021c0cc04466de7793c1cc699ac9745ab3fc5b0580ec0677122247ca537bf3b252e6589c4375a825e192f57e1c599992a78eeae44a96fa8da56be48700d057b23f69e34647efcf62a97276fa764cf03c26b91cb3b4da49c9e8fd0879222417829b7c89b3859ba5492fa39aee3b091d96a27463a8b870adf3498d5a4fbf038736fd64dae1025db2d3a0f8bc95b5cf377a"}, @NFTA_DATA_VALUE={0x8d, 0x1, "f5d76b69e50b633556993fc1ebdbbc8db0d94a41758a8c8b53e3364593a102f576aedcf8680a65c7b8020c4ec19f31c99ab4d8d66a51142185474130157c4115a6375b651e5bb09528516f35dc7f3e1f0d86babb4b4d7b12366769fc4cd43e156fbdef40c1e584a690dea1b0e71721d50aa727d98ee6522e4d15876c50b12018a0e0ddb45884b041c8"}, @NFTA_DATA_VALUE={0x73, 0x1, "ef92b2a79d487c61b99b014b1b1e2468b00485945e29391ba35046a16595dad2ee75ee65c2b5971ec9dd435c2f93800d8c40a20f459414a555975eb14adbbba3619bfccdd90a3ecfd339cb4cc2b3f6bce2ec4f1c22330afb514a1b4cb4c796c506f125854246f484193d434a1417ea"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x150, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb3, 0x1, "4151ab509d1c136b37c7ad661d175a31461b1c13053eb2f30bc5ab7d8eff4c3e561418f3a9dc6bf2ee655fb5f7a7c3509bdf62275b16ab42184209b06b6238952dde04be9749f8bc35625cc223eeb1a834eff6c87e52d8ac2efc8dae800ca4ada8f7bdb520bfde0f48dca2002f7ca25fc88c38d4adffe15e9915e9b5f1cfe97fcd7197bab132e7e195e9422bffa02fca2bbf2dd0085cc77428c8e4f4ebb52fdb3945e8008e5a3ca55a7558f028c70d"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x2558}}, 0x40) setrlimit(0xb, &(0x7f0000000440)={0x401, 0x3}) 11m37.032809232s ago: executing program 32 (id=1113): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$packet(0x11, 0x3, 0x300) r0 = open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x94) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f00000003c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e21, 0x0, 0x4e22, 0x8, 0x2, 0x180, 0x0, 0x3a, 0x0, r1}, {0x200, 0x101, 0x3, 0x7ff, 0x4, 0x9, 0xe}, {0x2, 0x9, 0x0, 0x6}, 0x800, 0x6e6bbd, 0x0, 0x1, 0x2, 0x2}, {{@in=@loopback, 0x4d2, 0xff}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x1, 0x2, 0x1, 0x4, 0x7, 0x9}}, 0xe8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x7, 0xffffffff, 0x52424752, 0x2, 0x81, 0x20000006, 0x7, 0xa, 0x0, 0x7, 0x0, 0x7}}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000400)={0x6, 'geneve0\x00', {0xfffffff8}, 0x1}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) accept4(r6, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSETELEM={0x24fc, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x5dc, 0x3, 0x0, 0x1, [{0x358, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x25, 0x6, 0x1, 0x0, "d0a541a9f579e694ddae8661dcf6eb8ceeb592feb2150ae13cec7f042f52ff1a39"}, @NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xec, 0x1, "8b0c982b19078d9de13df924a36b27523ca637483f1a81e5d5c43a3ff00cb91cf5979a5ca785f37d37e8b237dec0b173cf936c50752c606df3f559244bd9e91007cbbccbfbdec5e8f1b4c4782febac5ae97100d5f52955ccc0401022e5394c432905bc08c55c1425715246e89f22fafdc720975a1988ea7374e46ee753d05f9487a85eece1c78e83d2c47b73f8e70c1a32994d88f4b9a1a549abab66f55dff2ca9dda143234ceaa2541458c9a0dd19412f2dd78f448c3b2494f0a9b31b3bac76d71a8d928dea5ee3425bbd5277aac3be4fb3c509e851b3caa25d16b55e804f10db47efd2fb4bc71e"}, @NFTA_DATA_VALUE={0xe1, 0x1, "9735edaaa61d9f7e9dae3201979aee455cfa30e644d40db0a4686b93a307a0c6efe27b6c8279ba5ab4337641e7426e73c38e81f1f94f77383cbc5021f6bb40e7ba6d75606764b57b9e7eb96c19ff92dd7ba66d915a701d1232cbb5195ebdda000a1df988704bbb9d26368c8835dc19e38bbf603c74996200a87c55197034a255ef34d5e1150b66f5734db540890450648e5d789bc5783273bb9ee571ee689a43944e6768d5ffb6648c2a7de78e95a9322fb37ee940f848fb1a8e16cc4e8e395cc16ba60bf808c0accbe45ac83114395653b277921544181c9fb9283b57"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_USERDATA={0xe3, 0x6, 0x1, 0x0, "649d0d06bd8bcf25693eda54228c435248e0709752b983118ae65d7aced18c4c62e482abbd69d609f6d7112fe4623694f043eaa24ef807afd837c7560cfac938f4485b0b1b08e1fdf9176fa1d4c569f4d63d5d50426a5310b71f2e097419682571c1ac70384ba9c9d14887d0cde9962a91b38953483a077485add9474036c7659884b3b4e4e67d41905961415b72e4cb6f3dbd915972aa36677868c502d75ef1e4eb3aa493e0af943f96394283549b1a2434d1dd7c4d7ede4160bd80558d19247ebf35229dc7dbcf27ef34c8859feb716313bd65d5d13d36a0b1d13634531a"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4af7}, @NFTA_SET_ELEM_KEY_END={0x40, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x280, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "a7d339f0bb83d4f84d390ab2149bf4dddbedf09d55a8520d74666e4a4e6a45ce5d14a0b63d6cd9e84ebfaf6402ac0a6ee4077cb1485cc71b4c0bcfb8b95fe7fcebf1a0369f374c9a48fcc9e74433d4f338"}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_BYTEORDER_OP={0x8}]}}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x58, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x3f, 0x1, "06ccdc45f2bbac32ecf18bc6eaaaad147e08cdb0f544544597adbddd0f2b8a80231e2747d407ac01bbf317f4d29d30b6a7ed6f0e65bdbe81902436"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xb8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x16dc, 0x3, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x94, 0x6, 0x1, 0x0, "d31a085ea6e3e4bd653da0f421ee9894a2a45afb2c721c70f7633afa7062e09e4e70d303d77974f118156cc4441de62f734462c750e58e2105aff52679c17959b35f6b112640d9913544f2d6eea9f738fc7f56dae24fbe9540f9c98ced87e578e946f9cbb55a548326cf3a718a918dda6dd638bea552e893fae8ea99b7e4e0b9b8fe7c30ab509ba955026daaac5214cf"}]}, {0x26c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xb3, 0x6, 0x1, 0x0, "8e3256db8d735957c4974834b53568655200bef0519e68f9989bd4e3cc7efbcab091a01d9290f0d227d2401c2bb81c181532f891aa234bddb4931bbd9d70f91020b75ae472f5c45ca4ea456cb04435f82f7145fcf8f90c0a153e3e5ecb85bf92fdfbdc60cb63a0d73abe2e3da7fdb9cd0285f55895644145956bb03f897e2ecacfa2d6bc6e643e8e008228681598022138c9a9562a25ed0b1cc58cfcd21348c6798231db2b109704d7dae1e4d4a744"}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1bc3a4f6}, @NFTA_SET_ELEM_USERDATA={0xf6, 0x6, 0x1, 0x0, "f3695f2ab2b6077c61a10bdbfccefe4f7b77a7a81e59990af6b9ed46f6a80b4c1580aeff2ff597feb0c1ac8b40295f4ebef96ad8652350a858c6891c179e7617843a9a9a45ab461e2730b92e53147a182667f5013aeea75bf2b279e9f07e3cfdeed012bbf7a55e33ad4cea1f158a6f919fad6dd1913eda3b05f4ffa6a9f28ecd6393c449658f5d90886c9c34e467e6ce5338f64226623ef8ce7fe8388fe1fdf4364e4337db62d02a9be49adb504ed3fcea13083b9f2cc0b1d3f8283e111f64884e300ed1ba78cd56c1b5ee5a608e2669171b9d71764ab305451ea5d00943cec20b6e0bb6a95625580ff3d8f9187ee2aae749"}, @NFTA_SET_ELEM_USERDATA={0x4a, 0x6, 0x1, 0x0, "809aaec32ec67e4623b267ff7448d22537f60ed79a650adb60130c7dc6860d2782a51cf5fdf9b0da7b0588380e3ee3150bd8246c5bc95f2f018e752305f1a70104bd82614fc1"}]}, {0x2a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0xdc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "b528adb7c2a0ca22e8fe86e2a992c1668ffec774b47ba449015254e411877951172a034c676888225a3805d9942777edac82"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x6a, 0x1, "1bcd75d8f2503b6a5d0616e20bd2e88ee7858135f013cab2dbfc5289eedeca71ba92feb27873ad2bf246cd01659e1cb1dca2d692af5957aba30a6c8dd15e2d6687878c4ed8153c2a55760e9f2fa39d7735a7d638f058c80283f073d81acdc570b7ccb43a8309"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x94, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x48, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x7}, @NFTA_OSF_TTL={0x5, 0x2, 0x3}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xa0}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x33defb12}, @NFTA_SET_ELEM_USERDATA={0x13, 0x6, 0x1, 0x0, "1af2bf38867c1f0d777b6265400607"}, @NFTA_SET_ELEM_EXPRESSIONS={0x100, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x64360ab2594994e5}]}}}, {0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0x3c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x96e}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x50, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x187dd14fe0fb91af}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x48, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x44, 0x1, "c453c9b40ab9a9c384819f167be6812bf707af42595c53b0b9fdebf1949a435fc9039d2291cb1dec0300b8f9ddad167c8e1d001fec799138e4faa8f87faff3b2"}]}]}, {0x4}, {0x8e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x56, 0x6, 0x1, 0x0, "4d11dc8ee7fd103781dc88dfbbfdd4eb7127127f22a8e9424b840743ecf6c941cd4f8ff0faf57b2dddd2f08a39ecb7b0adde865bae684aa97dfe7cca903957069ad0dda929e37e4e224898730deb5967d1cf"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0x54, 0x6, 0x1, 0x0, "8e5449998ec554b20ea03b49a0798df88cc5827eb3f8b8f9ff6304697f00c4adcc13ff233e6803cd74f46c7752497a51ab8c0d8402d46b04116569a958b3e80fc4e4de68876e94f6cfc8a884b6b81d2a"}, @NFTA_SET_ELEM_USERDATA={0xef, 0x6, 0x1, 0x0, "6cdc6b671556f1552f2693910120331c707c4ae072a9b4a39530729bc073906ffb6c2e256cc974c78efdd37c5950569426bb28a971ba1d3002b1019798661e55807cbf6a98e9a118d3804037789c45376b6a5bab72359c45d13892f5bbbaf97d6ca97be9107ddcd60f8d815356552cf1b031fc602896004c1aaf3e001081b193682448de9bb71896cb42e1dd8f0ba15ea0c55cbf9e9819ff17c790afa7724013a3f2f6f6ea5ac02b6b838813421baa8ca5803ed697a182b9a3bf337e4093d9bf243ee24b5325ab1b3cb57ea5cdc0befd7d15000254589925756efac56c09cda54e0f4cca0b14db72cab376"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x2cc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xfc, 0x1, "1555caf103bd9640fb72839fcfb7a85faab1df61cc9a2487e904dc7b1990f1045861a019d3631693dc3e97d02305604dcf7ead2a11d1991784dcf99e48a977b2d42d796883da36b216df0a3a16bfd70288565eab2a2f7af2e7b52013bbd9e5f6fee160e3b8755b86033f069fb8b4cd289b6b3002398b3bd34fe264195d928d214f2258161c94a0768740b6c90032b4dec26d4501e91c214203be59f074c1d0049de77223c82cb0b5a56f3fc4effa30e754e88880159fff8333f88a85da64b7694e21619a766d448e49a1d80c9f9017db576e2bf81a55527acbce9fab7fc694d3f21925249b243cb5e8dab17f92a4528f9e50efbf2c5da2dc"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x36, 0x1, "ab47ebd013f788de5084940269c20af8cdbb72da78bba71f3fb8fb3016770363e32efc4e5f140218906115541d3b43cf59d9"}, @NFTA_DATA_VALUE={0x2e, 0x1, "6d3330534c69c90860cdc4aa65827693a32ad55125234e2a587f0459597f9956f54cda895045ddeb1f6a"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "dcb22cbd18b30c3886702730e3aefd30dc38160cc311196c190b7a7512ec936a86cae90480e5c68fbf3dfc1ccd291e4ad2cd74e89042e50161104eea04d9028dd6918581470e1e09ff717b30f5e986758d955f6d17e2173dd95e1966a08fae2294691e223d0d1d129e46bde1c26cc0058581219ab7f81b36d3b2e837ba04df51ed08d90142b54a3edc04d7a54296265a2baae72d468cf01a05cfc948b1e21692da052bca95a28455aeae41fe8f23952f2eb3c53c218d6e13e098f050bd5c569aaa08fe70eebdb98112c9ce86c3"}]}, @NFTA_SET_ELEM_EXPR={0x444, 0x7, 0x0, 0x1, @range={{0xa}, @val={0x434, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RANGE_TO_DATA={0x194, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x46, 0x1, "daad5382bfc726f1301563dcf34a7e18f6e0325c70d7646be9d3bd97076e3c0cccac967c352e7dc00cc759069ebb56f4fd2f416935599bd4c569906bdbf8f220f7b4"}, @NFTA_DATA_VALUE={0x8c, 0x1, "cf850062cdfbc057886c349208a7fdc5e667238215ae8f42bd6149d2fa79f83c7467be50a3d670e1c6159bf7067d23e87a239c8e8a1b293c040ffe3c144039032d3a0ebcb64469311f0df7546fff668b50846733e6f02e5d76dc8d5568a537204e13b89898f0bdbe09dd00498b9c3f108f755886b0210b62531db907e026cbe61624880483227a2a"}, @NFTA_DATA_VALUE={0x2b, 0x1, "e2ec6603423a868f3fa079d96fc387578589b15fc3210d50aa0ac33069b57ebf17948dca24475a"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x89, 0x1, "1ab1ce71d6b94dfa0f1574397e80790067b38315602bf9b625ce8c316a517854db0237178f662c0c6be9d3b32ef512b1ed71bcea53cd75755fe9f02b6962a70a33366c1e08b50bd303edda1c7bd02d37cdb6dd9ae4088469a2d94e9d831c0fb279d1aa4cfeb20f2884f10810f695c56593b1911d18be0023ac16fc08546728c17cb0732010"}]}, @NFTA_RANGE_FROM_DATA={0x27c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x99, 0x1, "0cb8cb0e7d3d7eb3ae6a50c0b76d322b1af86f93ce7d951d40b25ad443fe2e1d72c95514ad468ef1d4d38ccc9832434a4d6f0fd4f0e464cf4f58fb99bd90364c72d876d06435809806ccf9f769e7f79575fb77508be7a1d9f9ae7a36a4cf47a39b2777856624c32f93f7fb179168902851f0c6735c70f6b78bff0a18213294f28152b7c845cfc3526b294a90b82686ada1436c0042"}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0xa3, 0x1, "ce9bc02b21bc6d68f61ebf0a5312b323342831b4777b43e1e6a628697fb518eaa592b3542ca0698ffe7b84a319ea831a195542b5b74a3361c8bf0693201e03971378ece76f244f0e6bcbb1619e97d6ddc79767d694c001c640e8cdba5c3b6f55bfbd76df3b59c78f13dc7cd5d28abffea24e246eb9471ecace251e62fd291149751489ff4775a8aef8264b4baa99b0a6187e742a92889fbfbe314d8021db7b"}]}]}}}]}, {0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}]}, {0x788, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xdd, 0x6, 0x1, 0x0, "5e6f741b19a50b0a9af18a456b7df83c7538a25007a93ed0bd7104a74d76585ea7726290a401221ce02c966310bba37148540acf186d848ab6836bd8c4582cfde167a4153a20649646807bcee3a31b9ffcd985b60783ad320bb5ae0bd7946c809002241b2b2fdeb0d72a1ec11a2f537067eab715f3c95d9dfd73dc11bd6ac49aa370d81a0156c5dcf72e55e6f40397dde686296229f1e28ebb2415eda4c897e6d971b35a903192914faf18e1b28017882a96c475bd5eb8e587f9706bf62479dff7de407ada79c8f2a930c989a2831f4605c012fdb8827dbe92"}, @NFTA_SET_ELEM_KEY={0x190, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaa, 0x1, "470b63efb2643a05e7c882e3ea8b3895c7c3a999000a7b0e5ca4e3e8cda3eb02eb0b65f9d1eb93bf6346d5f4af81f55cc44d9bfdab37a1b4336c592cf9fd9786bea3b74162638d8734091b198c35e55393ab664c24f8982c705ebd2068a281c51776323851bd789aca163ad4e50a54e30bac7694782223dd429e89b74c286fdd7e91d6f93d838eff66904dee66d7a96387a1594450a62350a6c6deed3bebc1d85d08771f47db"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4b, 0x1, "78debed4756c2ac5eddc75837bfb51822a6034e68dee0ff4449aba2126da180e7a5542abc01c59e61bac66f65f6035933f52f7a99d68467c6ab3805b72a0e39ce78292a5984c9d"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY={0x16c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "33c76f219f5121e816525e426ca4ac56c1a0d9f19b0931b375e71b57e051ec10dda2cd6cbc5be9cc6227c0472442341d920d504eac543f34f9f402a0604d42072489ea7e53c765fa13ad669c4fe24300bac26cff7bc680b519c860d2228ec4df5fb72f87d0fc5b577e2c259c5daed29ab38bcaab03ac6dac2a22b39292d03d885a4d20ec3bf7d3ae0d5697c0e903b8b28657b8bb9b21c8fa29451c334b5f7a3cf028d9b1fb3c50b98f111d431c239877916e3a7370cd95ded374021f5314787f385444e813fdaaf88e1eb3b1aef1cb541b762d12f22472524136ef80c0b40304460f5c4b3710fce2c59474081f276af92d18"}, @NFTA_DATA_VALUE={0x57, 0x1, "0099f7aea42a3e3c11724b8d156572a21c6c5dab66de45714616d31c9733c9440cf394fccb23f0d4c69f1e6bc79547b441744daba4cfb7c4b9402a6fc601ab8ff0b2cd8626117e20de6b6b59c6cb9c1b46ba26"}]}, @NFTA_SET_ELEM_DATA={0x2d8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdb, 0x1, "4871d8da4a26a58a03e60127a76fad81095b1bc29dda2ac6ebd7aaa7596040beadabeda78f4da126d078014a212b21da09643ced71436ad45b22020086e7fa702f88e654be840052e195995c6f554a6eacd636e67a072f93d758fbc49e45dbc0292d2f138d19959f4ef8ac78fc288264112f99f59add37618fcec2e3156142f918575e857e13e641301e4cc41496586f8f25d39da990645d9b8596eca7a9e98d650718402eb5b60b80446bdde0475b00bccffa7a08245980769195ee214e652160d1f287455ac739035fd90b6dfae3b2d34c00205b1c06"}, @NFTA_DATA_VALUE={0x23, 0x1, "ed0447cd54f541785b8968167c43d50642b4216918163f99d75dc0a22c54f4"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "db184378de347e42361a7e2c17d6c879781415bc2a8b0fd2adefb390d54362855298ce80610f03583e8dd191addb80aced7ed9af606a42354cf10e6643539c58065ceb1bca23c59f97b99d95f47237102b4b6e423618a85954afeac868390183762300d5f0113b514d872dae75e9e91ce3cf505915a825adf64667179ff4b7760580afb72169b8"}, @NFTA_DATA_VALUE={0xe3, 0x1, "998cae709ea3e53a47f41836844ad94e8311b2a5505014f0df9043fd9a5b39d200aee6dad7354b1019eff0a538f34b938d1fd6071d601f55051582f0a11cd009d71989cfba56fd002992e96a4a9882f4614395569d33a71e7469b20eee3e019bfcb49f9f8163feec4d8cda0c864c0e44875fccc49b59e61de5cc525833e8dabb26a664a546e0d8bf9375f390e1bf4de4db9008a4e7da1768ba7bc2a03415c50ef622cef1ab5e991c7d55bd7edd3cf814d6ea21bfeffeb1f7d1431d807396986a2a54c300750a6c25263e873c71e36381cb1dde698b8c2cf0e20650e9a15011"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_USERDATA={0xce, 0x6, 0x1, 0x0, "ca1d63f7a09ee5f60088c73894504db679640f687607a54f1ae928473089afced3b526207885dedad1bdc8a0c291fc3c192f646778746eb91f357cb1dae4ea9d75cfae7ad8b22c8006796c8f6e063178a3e4620842d3181f00a40239cc21769df83463ee6ee4bb3248be782d92a2c0eee7855fbd40131f664e8512a3616a39bf7e0cb969e6ecad7439baac34991583924b27a51488b66ceb6b2763611f650fe79cfb8181d0ba5b7791d5673a4a161c89250a098a2c30a4aedb5210cac76ae37143a07155947939373ee7"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x804, 0x3, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x150, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}]}}}, {0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_XFRM_DIR={0x5}]}}}, {0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x58, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x9e}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x620, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x28c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8f, 0x1, "3456ff0e93df939c5f712b0e1fcc660380e9018fc9f4b7470e3a2fb7b88ed906cbbf84a9371da7498a951e386d46a15ec7c8734d2296589e9b40457cd80a8c79114650d434bb81b810a993249e5f17c21b9f6b482e93ed166405fd698e4eea8219589443b1d200ccefe173bef254940c161201a9709956c86d12fb77f2a9dfcfef11f158f25a65be9ad880"}, @NFTA_DATA_VALUE={0x89, 0x1, "9f0576cfc43adbd04b844911ca6d2b5661e6dcbe2ea73517e9c1e4c0c203cc04e3c1886be3f53062d119c9173242ed1ecc792bca7b678ee6e15d4e16ca516f44d946459d023d328f740c089fc790e9228a8ce98c7b669034d2f663dd4024f3528e4636215705adcf3094e0a0ea473848479e2ef6abcbea5ae26c9b7464c5a342c9799eeb1e"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xa6, 0x1, "f534b3053ac87955aa10df70c33f51ea48760c647a0b51d28585c83a34c4e58ae6dc4b4d067d0c17186ed2388f1378a3357c7df59851e78a013ea2636a2a585ae0b744b91fa6296f84ec1004f1790d35f9c0f6ce0951221113da6a33a55fd43902652197b846a6fee655512665696ea5ac308a263596661f0e99c938cbcc6d8edd6f7c96449c86f7ac0fbe06f0eea4dff3d81d4ab396c90cecaaef2a9dc64551d3ad"}, @NFTA_DATA_VALUE={0x4f, 0x1, "6d7523229eefacc0b303f10d3655b014b4c927366d095d51a9d2f38f700d1640fdb51253331c4d817792f9b99a355a39bb1316b30f2e77613a2eb3d81df9905bcec2d0483fd565225ac6b0"}, @NFTA_DATA_VALUE={0x13, 0x1, "83d799456b5f8e622bf3707e81381f"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffff67}, @NFTA_SET_ELEM_KEY={0x208, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa3, 0x1, "e226a7c8d4ae66e3c0dc010b3b02ad021c0cc04466de7793c1cc699ac9745ab3fc5b0580ec0677122247ca537bf3b252e6589c4375a825e192f57e1c599992a78eeae44a96fa8da56be48700d057b23f69e34647efcf62a97276fa764cf03c26b91cb3b4da49c9e8fd0879222417829b7c89b3859ba5492fa39aee3b091d96a27463a8b870adf3498d5a4fbf038736fd64dae1025db2d3a0f8bc95b5cf377a"}, @NFTA_DATA_VALUE={0x8d, 0x1, "f5d76b69e50b633556993fc1ebdbbc8db0d94a41758a8c8b53e3364593a102f576aedcf8680a65c7b8020c4ec19f31c99ab4d8d66a51142185474130157c4115a6375b651e5bb09528516f35dc7f3e1f0d86babb4b4d7b12366769fc4cd43e156fbdef40c1e584a690dea1b0e71721d50aa727d98ee6522e4d15876c50b12018a0e0ddb45884b041c8"}, @NFTA_DATA_VALUE={0x73, 0x1, "ef92b2a79d487c61b99b014b1b1e2468b00485945e29391ba35046a16595dad2ee75ee65c2b5971ec9dd435c2f93800d8c40a20f459414a555975eb14adbbba3619bfccdd90a3ecfd339cb4cc2b3f6bce2ec4f1c22330afb514a1b4cb4c796c506f125854246f484193d434a1417ea"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x150, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb3, 0x1, "4151ab509d1c136b37c7ad661d175a31461b1c13053eb2f30bc5ab7d8eff4c3e561418f3a9dc6bf2ee655fb5f7a7c3509bdf62275b16ab42184209b06b6238952dde04be9749f8bc35625cc223eeb1a834eff6c87e52d8ac2efc8dae800ca4ada8f7bdb520bfde0f48dca2002f7ca25fc88c38d4adffe15e9915e9b5f1cfe97fcd7197bab132e7e195e9422bffa02fca2bbf2dd0085cc77428c8e4f4ebb52fdb3945e8008e5a3ca55a7558f028c70d"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x2558}}, 0x40) setrlimit(0xb, &(0x7f0000000440)={0x401, 0x3}) 9m8.882465073s ago: executing program 1 (id=1642): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000000010403b0c2a94e1eb2600000000f6b62a8e4c2806f0d71009447980b20400", @ANYRES32=r1, @ANYRESOCT=r1], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x22) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) syz_usb_disconnect(r3) socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x2e45, 0x4) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) dup3(r8, r7, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f00000019c0)={0x0, 0xffffffffffffff14, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r10, 0x1, 0x70bd25, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x300}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES16=r10, @ANYBLOB="015980500025bd70a50f281f219bab686ec500fbdbdf2506000000080001020063690011000200303030303a30303a31302e30000000000800"], 0x40}, 0x1, 0x0, 0x0, 0x400c1}, 0x80) 9m5.184712457s ago: executing program 1 (id=1656): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000600)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r1}}, 0x30) (fail_nth: 5) 9m4.563965428s ago: executing program 1 (id=1657): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r2, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffff"], 0x6c}}, 0x840) socket$nl_netfilter(0x10, 0x3, 0xc) 9m4.411458584s ago: executing program 1 (id=1663): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (fail_nth: 5) 9m3.563666849s ago: executing program 1 (id=1665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 9m3.292769708s ago: executing program 1 (id=1668): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x800) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000380)={0x3, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x4000000000200, 0x20013}}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000240)={r1, 0x7ff, {0x0, 0x0, 0x0, 0x9, 0x10000032, 0x0, 0x3, 0xa, 0x8, "46803555603803be0ffa336fe1aac74820b99922ab93e56d2d5679956124d79598af0bfd9a389b693ad4ffc8e291c6015b6e96d96c2fdafc5125daf5d07714f1", "02491e7ea488cabc828ff4ad9a064c82b0c62282785860c1c02fc358b16c3012296d63bbff545b68319feff234b2cfa72e86cbde1c90fdd6338476e790ab0df0", "9e455400e76fe289b4820a746aa4c24c523d255d16562d43553375403aaf29ff", [0xf, 0x74]}}) ioctl$AUTOFS_IOC_READY(r0, 0xc1086201, 0x20001f00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000000)={'gre0\x00', @remote}) openat$cgroup_ro(r2, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x3ed9, &(0x7f0000000540)={0x0, 0x100000, 0x10, 0x0, 0x0, 0x0, r2}, &(0x7f0000000440)=0x0, &(0x7f0000000140)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = socket(0x23, 0x0, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES8=r4, @ANYRES32=r2, @ANYRESHEX, @ANYRESOCT=r3, @ANYRESOCT=0x0], 0x48) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f00000003c0)={0x4, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000100)={0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x6}, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000200)={0x41, 0x0, 0x3, 0xfffe}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x48) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x400141042, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) 8m48.143110034s ago: executing program 33 (id=1668): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x800) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000380)={0x3, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x4000000000200, 0x20013}}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000240)={r1, 0x7ff, {0x0, 0x0, 0x0, 0x9, 0x10000032, 0x0, 0x3, 0xa, 0x8, "46803555603803be0ffa336fe1aac74820b99922ab93e56d2d5679956124d79598af0bfd9a389b693ad4ffc8e291c6015b6e96d96c2fdafc5125daf5d07714f1", "02491e7ea488cabc828ff4ad9a064c82b0c62282785860c1c02fc358b16c3012296d63bbff545b68319feff234b2cfa72e86cbde1c90fdd6338476e790ab0df0", "9e455400e76fe289b4820a746aa4c24c523d255d16562d43553375403aaf29ff", [0xf, 0x74]}}) ioctl$AUTOFS_IOC_READY(r0, 0xc1086201, 0x20001f00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000000)={'gre0\x00', @remote}) openat$cgroup_ro(r2, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x3ed9, &(0x7f0000000540)={0x0, 0x100000, 0x10, 0x0, 0x0, 0x0, r2}, &(0x7f0000000440)=0x0, &(0x7f0000000140)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = socket(0x23, 0x0, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="39b3329e3941a342604adadf9382e1690330bfef99102172047020946a161da1ccee251d0a66331ca71c180312e758725a5f0b5aa1d221514dbae81ecf44bf188e5cb9d23cc7fd832a2397ccc54787bac8db32fb8523b4a731f1e95ef23dbf96cce0b48b193d8cd7e425fa5a2dbc7c328d50b3f4da54fae58550b46d1b89ca2b7e67200be6dc93e9f5f2ee359d0a4eb38c58765c565072e97f2ef07756167c3907e78106301e791c271d5c00118b2b4ed8509a5eb8420c9114daae480aa9e1b1d260c6b9aa5edf23586f80fc19cad7bbe5e53b2346dd47dd7d6f9f08b7b06417871198bdc9fdd46882c2093664f1eb995669229b64be4b4c85d3aa0c382c7abdf8e94ca941b2740c8df3b49b26854475ebdca2dd4d31b7233c3f0aac3fc3c44af24d65e0dfe49ebc2ce2a59ce0e76785e5c75f5079853193f79ac5b11ea734ed0df906acd79b800387a78e72a8dc98dd301cbd527431b62663606165faaa36f0ba748f5421b670f5eaa1ff017ac3a94291d84db8ad14548ab9c2f4adc0ba47e66737bf9c80f50cfb5e37dc37311b0a75bfbfb43023c8771acd641c89e2be545c5f15350e9d08b622531b31c21fdd2b64229d655b6f804f81ab35008d6810a8ba3c3133be95b9b1d72504b3d5884ac6f46a4c6aa4a4fa3407a2e325fc36aa405c0f31f493b1a9e923655e4dc830a7e42ea9e8858fa935bb4e940ab929912a7cd3c0b485712fdb5196699e2068f838cdabea2dc784089792fbafbb3ffe5c8b9d0f38a6bec78b964642ead25a949021573e7b135b6d74ccde9f6ae73a815501120bbc90ed447842581778626c9d0fb22569011714e78efbd48ae125059a62d04ad29062baf694177416703e40f4e7db133a2079642965432975650b356a1798647530b6f6571ee031fca6d1c50794182da1467292616ea1465ab54655ab7cf03398d17991f1f7214ba23e6530e1d169791d389110ba3152afe7133c7a24ffde73f844d6297e98fc5833a7a58f2d4ae443360af0260d138f9f3728da72cf5f5376445c8b57508138e42afa9019c207855ecdb5868e4ae42392695155d6a3dface0ec152aeeb6ae2351e36bf10bcbb4bd7955235a123eb43b6c667018e62a11d9eaa00cb1e672e2e8baea6b30b759c9334683f574ca04a5d274c4b28adb1245f538df5013d0246a48346062731d9e73409a6974df2b5202c48edeeb236ea4c98a6f1e524ec156990308617d96c12c20a64536ae333f08284c3ab0567bea80b8ac2606878659440d03ff55580ba816527f1e4a3c90076fdc4f7428966c83e4afc8063b9b4c1f69fcefa4ce0144b8fd8815cd64b48fcc0523ae48af029fca2a8c085a3392c7e63271a1489989123ef4e7a82005d0918fd793ed8611f59b5250e891cbaa6dca8ca603208bfe6e0412a3eb69c8350311bb7b18f952b28e161afb815ce1bde2ea942c539a45e5848218f5810a1102897b855d36fda5fc186c7f73db5c77b5875719a7f86513926a24ed6f75d7ce55ec76558b6d17ef5cce902cee04098f56b5e9077bad8ff5d922ff520cb92a23e1c7d6a37a592697c96b1c9cafc9f0145b1dfa505a2e545af77c0b8b67dd9736594b19d2caed2bffb71dbd951db7bdb67ddd6cfbcb9f6f8e2582b1107ba110eba219e2f3cd10eca26a3c928dfd17648adbda2ad480b13567ed8b03099296d4310753b033ae65d17985f407de1acdd3e75ec66f85601d97c4b9ed4394b206a0427badf7f14b759a16ada5bf7d568d4c1d51bcc7e9aeb7c4e92ce3bba2e6691633111dff2bfb484a7a4144c3b08f931f0199af9502b39d649b9018bff8ec65fb791a4ff2a5c57f02815922ffa717d4f40356d9b3f91e598f314ca1a899c9581e9282a5ae652c37989d3b6dddf44dc2eb1c2ae044c6d7c35141eaede752347462d744dc4434eb9e40f9462ff8a332b99a16390cb58d529eab0903bb76e7506c424637b5303804959bbacb0f63369c40c737420b328bb4b2a8166ae7d5165e51fe41abf2a871a09d133340af5ec35570d9ef3bb6ea065d16454c05dd5930003eb2ceffba057dd74440135310faa7d21d05f284551407ccb16d33f71bb533fec1130a96910677aeac57471b35d8c34c5e2ca7c901063bfe4e75ef6eb94dd5cfd5ac965ae1c337c6fd2ced809866a051af6f51ce5d3c6928eaec187c85fdc138a46183b5287b9b2561e6139e30e2ea85f4bf2f0ce135251667c79c0a6c60f48fbff5f9d4e7688a8c0be0a027e7f3f9825a23c9004c3255684cc3960b408081e0b68b21203c9cbfdfd11604cf0008e3d3905520b92f70718785e4267ec947ee243dca9da0b49113c34f43a7226f3aeac2ade3f8cd8fced83069a92e25f0fdd2ab740f1c23b961bdf8cca205e4fa14c31b68e054f794f9231e3092ed5640026a7d7f93bab71259656083ad0fb8217908f9f1520debf90a5fab2b9e38905e9c618469535f3e9d28dff5f8b02550b4b0d3ebbc7791e7038cd1161e3b7dcacc4553645c4acec0acf4d44cebf1df2c00464aec3360877084b643e9fb651a7883a2f83626e077a47f91eacef964720c8364188f0b8cc04a24aedbb8bc269f00e2c594f026373bdc03d2809ab07e7541c9e9b681dbdd46b59bd1174251f50c83e289da63988e35e600782d9db3c704dacff00f15ffb725d0b53f4f5d436ca61c8ff9f449cf0a6f6facd436f089063d487d715ec31940207653adb06d53819049ca090442e140659e7bf4fb10c907e49b03e44a9596903afd677f38804a0d8cf3cc4c48377d3f25303bc8e4c25f29d91c4fe334231896ccc66d9fab040b8cb0cb2f09ca753c378ac31c320ef547e66a48f39539a24ba1956a7029dd919d0e1a0d25cb0f24eafd23838f742d6f2a527b2c28909ac43e4c8584abb351ea9238f6bc853147889e025f4276018d88290fb82a722b74163c1865cdb9865d9c3c2c5b8ec2b762d9a2152252509c5d88100441d5d8a511f31dcd003ce33fd1cf0fa0ed2e8e9eb88b2e72372879d297146e3e75a5e982db89d2e95c93236aa01789cb438ad89128b476836d4e4c5165b143560bd7ff797ee909fe1651a5d1ea9eb82611aaa871001eb8121408dfde3abc4df3a8773dc48b5f66ab41b1d0d15c47d35f12241b84c40120b8b07699275f09964fdd8dfbb020d98d9ef855a1ad506aa685a7a3643e0872eeb53681588163fb48b3af200619cc775835041992f463789f750c5a45c640adb168c44ecb2d22a934a3f21521e9e677053ef5b77cb3935e0217a8bc2e930e1a58f80498de1114d598a1f018358e2b38daaced584cd6adb926619f17c7d3afde699b5703f5987b564d617d103f95a31e5134fd25df22b37cc38dcf0e1a2c0a6e3dec8ead30b88bbdc0eeccee75d98aecebb5e3bbdebdbc927a89b6f947e2b9016a4a8edb240e389a7cfcd8c7eef020344037cd92fc280a22d7e357ed9c9469a52044da1a24266c9b1c2e67da935ff3dcfbfec7b0d9f6208bb15a768b01172723ed9b91422afd6e0f0ed83ae2152b99c4b8458966b5e884a2763d6c6c86f0f9f0e3fd0da529d79dda70e4ce2414c30121b30f2b8a2e09eeb67dd8fc7a290a5caeb8bdd3800d8d052c7f83110f3e905bd73eeb652cce04ae6db6c096bf626a2164b62b6f30806175f287db33f8a063b726b025bf71378a151f62496d20220004686f646f0a8a5bccf59f90a993ac0175fb7fff06c72dd2291964686ea2dc4eba8d1c74b78c9a0d92ddce3fbaf79fb5f048bbc371396082a21ef5b7ab5220bc6229ee4bf859bd6c45e5a233b32824bcf8f51ad017476282aa74c7d88a9b7f51c9c349628a1e2e5ab01b2619b83093ae8787722180be59f6f57b3c0a5cf6784bea214e33274183710b8fc927ff600edca1fa0d4a2eb4accb15f8db526212743edf10472594d5b81a99c8f982156ce505d903eefa4fb37714755600828e779514e1b934c7180b6869c53ca92550393eb469c259f96fa4516ad5d88b92a82d9303917c90ef61fe542e0e44bd944d926f8344ae02af8011ded1cb1c782f7e9836a8d6a6dbe7a618f29a865dd311697339ee785c9d747e01ffeed46b6aabebef59edae2764444ed2f54f7b5ebc577d908bc3c5bfcc112c34402d6b94f577fbe98baed04941bf5b4f4a74583bc0e6cfe1e14bf43cd5dca4452f6a256b47424a7bfcd39a619171d30ddfddd8f7d644e8c93122701bf747886941e2d674a9f528d35d9d1dc57300ceb176e5b3b56a09f9d2d00337d6d732ee06fe3f04861880204742c7de0c449b2652c2e56691f4b41a510294721f4714b890fdc23c71ac516fb1004faaf947c81473dae3b09284685c22d689f1ddb8fc77f20189f4779620b1515165d7575eea3b9aa1bf79e4b0c675be582cc74ac2195517e7d9d184822900d482697327ac1054aae87bab3c014753925b37ca89b60771d522e0500336cf8b927d969c301a71f48b8f041a54ef7cba2a80b5c5ed12c9711dd6a3bd321e5216dffaac277beb3c42ad95b620f370286f9c4c43d5806e003093d96094ba842d06f2e1e5b363a145e62ea1fc5fc5fcf0d6f77c72cf1a61973900df09f63c5f44e7c518ebb08d8fafd42376d3c0a5b363edc8894ee5d988e43a2e331903a96c165b198e322d2522cf8bab734325a6b9cca944033bbdf8dc5ce388d46d592d6a7f4f9aa2cc58bc82d233e7ebaedd638a6481026087d71d1bc8866e69cf5fec9ce15fd56dc1aa4010e03dfa630d19be9f9680c02ef25fe5a18d9fe765b7b8553713d8e9fc373c0f7056ee0d3280a1ca069796e6da5c6c6121fbc4cbbe5ed2abbe90bee9a73cf1fe51ce12da3ee81dfa298609c947e758f5298a1546f564dca6e797a94e2d123255dc74c7c54be4e87ac66ce486623e5b292b6b4d207e60d39822eec0a54423e9b1671419232d5fbe67cceea040e0594251d81f47e51d7667ca71e7e030e42b99335faf6a2e505b67b294ddd47288ddab7c9fbce31450e267b51caf4c787659972698e43485a38b54c38f3cf73d65836e0301c614bb1699af6ce90448a5189e9d4e6aaf69c265ad653072524880bc13e750030a3b74c9c1228758b238df9f7d4c4a1ee97afd531d85caf596b32fd9a5988172ffe63b3a6793323fbfddc3880cffa481c7df62cccb49ac0a5164db7e6f56842328e7ebd06ff24d1b764996368456b42a366f9eaf6ff057141ab29572991aa9fac8c01464335fb31bdad75a2f1f3fb7e06524b7066f498d6c5d55017af55cf56e328baf9e1c696aa4c74167efd566073a8015369c299cd4df76811cdd0eac9fb8d9e93b047e63f43757811ed77d895cc2ccabd7e937ca56462c1160e5aa18abfcd1cc41d10d8d8605abbccf1eaf5996b8e26978ca70d5d7de8b4b99bc4bda0527c9770de63746d9f0962fd82218e71049e8f5b6b7765eab5dbffbc417e7b9fee6a3b048cc5ce9c5745917606c6da077ffd82db2478a66d6ea467bc12d8557d52f5818ad1657c6f2e051af426107cbba51feab597e5f0e4cffe804e1ff4505db016450b4d026f9b32c59eb07a8d62bd8565610d39aaed27cb29d79a91d0da2717db1a4d96d0e5b8d3873f020561dd92b8937c324217df2fe4a9b9a064d8f04e044804d8a6ebec480a045465238b704cd4c5c3fbe2f40e770013aad1bc45c378803fe4cd4946fd55a659d602958ce0dfd6dcbb3272321788c7a4121c8063073b3e7d713a03cc6ddb2eef07a3f7318fff51fc4961726b98854f3ea311f0e7ad984020602e7d89d09f8c69f3190bda5fc411940eca56da49f12c791d70f326569bf3090ce12", @ANYRES8=r4, @ANYRES32=r2, @ANYRESHEX, @ANYRESOCT=r3, @ANYRESOCT=0x0], 0x48) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f00000003c0)={0x4, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000100)={0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x6}, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000200)={0x41, 0x0, 0x3, 0xfffe}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x48) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x400141042, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) 3m3.975744955s ago: executing program 4 (id=2821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) syz_open_dev$MSR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x78) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000002000103000000000000000000000000140000001100010000040000000000000000000a"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000001180)}) r4 = socket(0xa, 0x800, 0x4) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000005200000826bd7000fbdbdf2502080006000900000008000300d5a47968aca9dc0f0e9500080002000700000200040000000800060006000000080005000600000008000500080000000800020009000000080005001f3f11f60600000013b586477f0d08a1e0681a19"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xc5}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES8=r1, @ANYBLOB="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", @ANYBLOB="468eee85ae3901015259c85b099583abcb1a2a8192ec0e142a29e4139d76944ce5ebcf4e92c762caf8d5ac2d0d87c1d8b3679267e845e6b148790400c1dabb20f6463ccadb1ad4871af78f6666509c7cc4f11be8851ec792ca0ee3c1a6ffcb9eb730f5947a6f657f040129866e636a863763d56d2de4c635f88e07a62cd6d7eca73c653624c7432e1c8436", @ANYRESOCT=r2], 0x2c}, 0x1, 0x0, 0x0, 0x20004091}, 0x0) 3m2.80331589s ago: executing program 4 (id=2824): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0xf0, &(0x7f0000000280)="9e36d448b388dd965f7a331286dd", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m2.63910872s ago: executing program 4 (id=2827): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000001100)=ANY=[@ANYBLOB="120100026dc77640e305030579250102030109021b0002040050080904270700e31ef700090431ac00989c2605"], 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000001040)={0x18, 0x0, {0x1, @dev, 'wg2\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) memfd_create(0x0, 0x2) bind$pptp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) writev(r2, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0xf00}], 0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3m0.598525334s ago: executing program 4 (id=2832): r0 = memfd_create(&(0x7f0000000900)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xa) ftruncate(r0, 0x2000000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x813014, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r1, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@uid={'uid', 0x3d, r2}}, {@gid={'gid', 0x3d, r3}}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) 3m0.431916406s ago: executing program 4 (id=2833): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fanotify_init(0x8, 0x800) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r2 = syz_open_procfs$userns(r1, &(0x7f0000000100)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000180)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffffff, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae000a5000003000500001e001e02"], 0x80}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) 3m0.251382529s ago: executing program 4 (id=2835): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fanotify_init(0x8, 0x800) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae000a5000003000500001e001e02"], 0x80}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_emit_ethernet(0x15e, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x0) 2m59.396453798s ago: executing program 34 (id=2835): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fanotify_init(0x8, 0x800) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae000a5000003000500001e001e02"], 0x80}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_emit_ethernet(0x15e, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x0) 14.437758064s ago: executing program 0 (id=3339): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x5, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x4e22, 0x4e21, @in=@private=0xa010102}}]}, 0x154}}, 0x0) close(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000080)={0x10000, 0x8000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 14.135337195s ago: executing program 2 (id=3341): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00'}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xdcb9, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0) socket(0x10, 0x3, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f00000000c0)=0x40) 12.980242462s ago: executing program 2 (id=3344): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x5, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x4e22, 0x4e21, @in=@private=0xa010102}}]}, 0x154}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000080)={0x10000, 0x8000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 11.660227954s ago: executing program 0 (id=3349): mmap(&(0x7f00009f0000/0x4000)=nil, 0x4000, 0x2000008, 0x8010, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)) read(r1, 0x0, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x3) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) sync_file_range(r3, 0x4, 0xfffffffffffff00c, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x301) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x101301) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f0000000000)='2\x00', 0x2) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000400)="8a5b", 0x2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000040), 0x0, 0x4) 10.575352045s ago: executing program 0 (id=3351): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}], 0x1, 0x40000) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x100) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000000)={"34e17141", 0x200, 0x5, 0x8, 0x5, 0x6d, "8a86ccfd751b15dac5ddb6f309fe93", "2f2c30e1", "39ad577c", "f119ab00", ["5d086e6b8476dc731c55f35c", "749e9fffef9ad43460f115b1", "681218fcfcdc175ade9e1fc0", "f6c7fdde06da7e3140431a04"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f00000000c0)={0x1, 0xc, 0x5, 0x8, 0x8000, 0x3fe, "a20a069f416ef72504d1690ea4e7e0ef", 0x1, 0x7, 0x2, 0x9, 0x6, 0xf4, 0x3e}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r7, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)=0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) 9.102489035s ago: executing program 2 (id=3354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800", @ANYRES32, @ANYBLOB="000000000000faffffffffffffff000000200000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfed9) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50, 0x0, r4, {0x7, 0x1f, 0xfffffffd, 0x69f295, 0x800, 0x1004, 0x51e}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x11, 0x0, 0x8000, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) lchown(&(0x7f0000000240)='./file0\x00', r5, r6) io_setup(0x202, &(0x7f0000000200)=0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0xae) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x4040000}) close_range(r9, 0xffffffffffffffff, 0x0) io_submit(r8, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r7, 0x0}]) 8.916020007s ago: executing program 0 (id=3355): ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d0c, &(0x7f0000000080)) unshare(0x68060200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000500)={0x2020}, 0x2020) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x181200, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x403) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000280)='./file1\x00') chdir(&(0x7f0000000140)='./bus\x00') r7 = open(&(0x7f0000000300)='./file2\x00', 0x82821, 0x81) getdents64(r7, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xc) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000040)) 8.733128662s ago: executing program 6 (id=3356): openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x71}, &(0x7f00000001c0)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="83bb18af", @ANYRES16=r4, @ANYBLOB="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"], 0x114}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r6, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback={0x200000000000000}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) 7.731983489s ago: executing program 2 (id=3357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r5, 0x3, {0x0, 0x1, 0x3}}, 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0x404c011) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xf597) r6 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x40045730, &(0x7f0000002780)) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000130005000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f'], 0x2c}}, 0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x4100, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140100002b0001000000000000000000040191800c"], 0x114}], 0x1, 0x0, 0x0, 0xc010}, 0x0) 6.615569779s ago: executing program 6 (id=3358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r5, 0x3, {0x0, 0x1, 0x3}}, 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0x404c011) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xf597) r6 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x40045730, &(0x7f0000002780)) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000130005000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f'], 0x2c}}, 0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x4100, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140100002b0001000000000000000000040191800c"], 0x114}], 0x1, 0x0, 0x0, 0xc010}, 0x0) 6.55352324s ago: executing program 7 (id=3359): iopl(0x3) accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, &(0x7f0000000080)=0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x16a042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x0, 0x0, 0xfe) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x600000, 0x10) fanotify_mark(r0, 0x1, 0x10, r1, &(0x7f0000000100)='./file0\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = io_uring_setup(0x168e, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 5.420171365s ago: executing program 5 (id=3360): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x40) 5.399151336s ago: executing program 7 (id=3361): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$packet(0x11, 0x3, 0x300) r0 = open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x94) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f00000003c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e21, 0x0, 0x4e22, 0x8, 0x2, 0x180, 0x0, 0x3a, 0x0, r1}, {0x200, 0x101, 0x3, 0x7ff, 0x4, 0x9, 0xe}, {0x2, 0x9, 0x0, 0x6}, 0x800, 0x6e6bbd, 0x0, 0x1, 0x2, 0x2}, {{@in=@loopback, 0x4d2, 0xff}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x1, 0x2, 0x1, 0x4, 0x7, 0x9}}, 0xe8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x7, 0xffffffff, 0x52424752, 0x2, 0x81, 0x20000006, 0x7, 0xa, 0x0, 0x7, 0x0, 0x7}}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000400)={0x6, 'geneve0\x00', {0xfffffff8}, 0x1}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) accept4(r6, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [], {0x14}}, 0x28}}, 0x40) setrlimit(0xb, &(0x7f0000000440)={0x401, 0x3}) 5.348982137s ago: executing program 5 (id=3362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x100, 0x7, {0x3, 0xda2, 0x4}}) sched_rr_get_interval(0x0, &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = io_uring_setup(0x4b2f, &(0x7f0000000200)={0x0, 0xa5e, 0x1000, 0x3, 0xc2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000000)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) 4.572971756s ago: executing program 5 (id=3363): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x40045731, &(0x7f0000000000)) 4.491393753s ago: executing program 2 (id=3364): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="16010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0) 4.490491743s ago: executing program 7 (id=3365): accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000380)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x3ff, 0x5, 0x0, 0xd, 0xc15, 0x7, 0xdca, 0x17d8, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0x7, 0x5, 0x4]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x36, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20022, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0xffffdfff}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f00000010c0), 0xc, &(0x7f0000001100)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x3000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.823960951s ago: executing program 0 (id=3366): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x300, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = io_uring_setup(0x17ba, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xe0}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x1b, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') close_range(r0, 0xffffffffffffffff, 0x0) 3.503156594s ago: executing program 5 (id=3367): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009807e2b58940f96ff0fc00e3ff9400856800000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) listen(r0, 0x80080400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000fc6039ed88da4581669fe90004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000006000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100001f0001000000000000000000030100800c0001", @ANYRES32, @ANYRES64=r6, @ANYRES32=r6, @ANYRES32=r4], 0x114}], 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) geteuid() r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e40)={0xffffffffffffffff}) r9 = io_uring_setup(0x291e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}) dup3(r8, r9, 0x0) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x31379000) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r10, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r10, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_int(r7, 0x10d, 0xf, &(0x7f0000000000), &(0x7f0000000280)=0x4) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x208000, 0x0) 3.133584268s ago: executing program 6 (id=3368): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00'}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xdcb9, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) 2.820140459s ago: executing program 7 (id=3369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x4b2f, &(0x7f0000000200)={0x0, 0xa5e, 0x1000, 0x3, 0xc2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) 2.290736666s ago: executing program 5 (id=3370): syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) 2.096393606s ago: executing program 6 (id=3371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x100, 0x7, {0x3, 0xda2, 0x4}}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x4b2f, &(0x7f0000000200)={0x0, 0xa5e, 0x1000, 0x3, 0xc2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) 1.998668967s ago: executing program 7 (id=3372): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x2}]}}, &(0x7f0000000540)=""/132, 0x26, 0x84, 0x1, 0x0, 0x0, @void, @value}, 0x20) socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x40045731, &(0x7f0000000000)) 1.90763389s ago: executing program 2 (id=3373): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f00000006c0)={0x0, 0x9, 0xc, "cd8fc54213ffd30fac5ad3d0"}, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f0000000540)='./file0\x00', 0xd0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x2c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @exit, @tail_call]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x43000000}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80e85411, &(0x7f00000022c0)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018000280140003"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x6, 0x2d, 0x0, 0x0) 1.828377491s ago: executing program 6 (id=3374): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fanotify_init(0x8, 0x800) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r1 = syz_open_procfs$userns(r0, &(0x7f0000000100)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000180)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffffff, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae000a5000003000500001e001e02"], 0x80}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) 581.38727ms ago: executing program 6 (id=3375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x100, 0x7, {0x3, 0xda2, 0x4}}) sched_rr_get_interval(0x0, &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = io_uring_setup(0x4b2f, &(0x7f0000000200)={0x0, 0xa5e, 0x1000, 0x3, 0xc2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000000)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) 181.026282ms ago: executing program 5 (id=3376): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="16010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0) 108.679767ms ago: executing program 7 (id=3377): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xbfdb2ec4b0ddc176, 0x10, r0, 0x0) (fail_nth: 7) 0s ago: executing program 0 (id=3378): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xdcb9, 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0) socket(0x10, 0x3, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f00000000c0)=0x40) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000003a000b00000000000000000004"], 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000140001800d0001007564703a73797a3000000000"], 0x28}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup2(r9, r9) kernel console output (not intermixed with test programs): 945.642851][T17592] RIP: 0033:0x7f940d57e819 [ 945.642867][T17592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.642884][T17592] RSP: 002b:00007f940e37e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.642902][T17592] RAX: ffffffffffffffda RBX: 00007f940d735fa0 RCX: 00007f940d57e819 [ 945.642915][T17592] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 945.642926][T17592] RBP: 00007f940e37e090 R08: 0000000000000000 R09: 0000000000000000 [ 945.642938][T17592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.642949][T17592] R13: 0000000000000000 R14: 00007f940d735fa0 R15: 00007ffc0afdcf58 [ 945.642973][T17592] [ 945.643049][ C0] vkms_vblank_simulate: vblank timer overrun [ 945.874849][ C0] vkms_vblank_simulate: vblank timer overrun [ 945.898650][ T29] audit: type=1400 audit(2000000217.109:1002): avc: denied { create } for pid=17585 comm="syz.6.2918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 945.921269][T17592] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2921'. [ 946.420331][T17605] netlink: 'syz.5.2924': attribute type 12 has an invalid length. [ 946.428594][T17605] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2924'. [ 946.626492][T17604] netlink: 'syz.7.2923': attribute type 12 has an invalid length. [ 946.635053][T17604] netlink: 244 bytes leftover after parsing attributes in process `syz.7.2923'. [ 948.089529][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 948.089558][ T29] audit: type=1400 audit(2000000219.309:1013): avc: denied { read } for pid=5503 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 948.289367][ T5912] usb 3-1: USB disconnect, device number 80 [ 948.788973][ T29] audit: type=1400 audit(2000000220.009:1014): avc: denied { search } for pid=5503 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 948.911541][ T29] audit: type=1400 audit(2000000220.009:1015): avc: denied { read } for pid=5503 comm="dhcpcd" name="n139" dev="tmpfs" ino=11166 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 948.985666][ T29] audit: type=1400 audit(2000000220.009:1016): avc: denied { open } for pid=5503 comm="dhcpcd" path="/run/udev/data/n139" dev="tmpfs" ino=11166 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 949.087891][ T29] audit: type=1400 audit(2000000220.009:1017): avc: denied { getattr } for pid=5503 comm="dhcpcd" path="/run/udev/data/n139" dev="tmpfs" ino=11166 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 949.169986][ T29] audit: type=1400 audit(2000000220.289:1018): avc: denied { recv } for pid=5209 comm="udevd" saddr=10.128.0.169 src=49364 daddr=10.128.10.60 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 949.284821][T17624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 950.220065][ T29] audit: type=1400 audit(2000000221.439:1019): avc: denied { read } for pid=17623 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 950.243312][ C0] vkms_vblank_simulate: vblank timer overrun [ 950.343128][T17628] overlayfs: missing 'workdir' [ 950.525797][ T29] audit: type=1400 audit(2000000221.549:1020): avc: denied { open } for pid=17623 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 950.810830][ T29] audit: type=1400 audit(2000000221.549:1021): avc: denied { getattr } for pid=17623 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 950.844308][ T29] audit: type=1400 audit(2000000221.569:1022): avc: denied { mounton } for pid=17627 comm="syz.2.2929" path="/564/bus" dev="tmpfs" ino=3051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 951.051754][T17643] FAULT_INJECTION: forcing a failure. [ 951.051754][T17643] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 951.075378][T17643] CPU: 1 UID: 0 PID: 17643 Comm: syz.5.2934 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 951.085829][T17643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 951.095907][T17643] Call Trace: [ 951.099193][T17643] [ 951.102131][T17643] dump_stack_lvl+0x16c/0x1f0 [ 951.106837][T17643] should_fail_ex+0x497/0x5b0 [ 951.111535][T17643] ? fs_reclaim_acquire+0xae/0x150 [ 951.116660][T17643] should_fail_alloc_page+0xe7/0x130 [ 951.121947][T17643] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 951.128099][T17643] __alloc_pages_noprof+0x190/0x25a0 [ 951.133380][T17643] ? hlock_class+0x4e/0x130 [ 951.137893][T17643] ? __lock_acquire+0x15a9/0x3c40 [ 951.142917][T17643] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 951.148613][T17643] ? hlock_class+0x4e/0x130 [ 951.153097][T17643] ? __lock_acquire+0xcc5/0x3c40 [ 951.158018][T17643] ? __pfx___lock_acquire+0x10/0x10 [ 951.163190][T17643] ? lock_acquire.part.0+0x11b/0x380 [ 951.168459][T17643] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 951.174333][T17643] ? policy_nodemask+0xea/0x4e0 [ 951.179164][T17643] alloc_pages_mpol_noprof+0x2c9/0x610 [ 951.184600][T17643] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 951.190562][T17643] ? __fget_files+0x1fc/0x3a0 [ 951.195226][T17643] ? __pfx_lock_release+0x10/0x10 [ 951.200224][T17643] ? trace_lock_acquire+0x14a/0x1d0 [ 951.205402][T17643] get_free_pages_noprof+0xc/0x40 [ 951.210416][T17643] __pollwait+0x291/0x4c0 [ 951.214740][T17643] ? __fget_files+0x206/0x3a0 [ 951.219405][T17643] pipe_poll+0x28a/0x8a0 [ 951.223625][T17643] ? __pfx___pollwait+0x10/0x10 [ 951.228454][T17643] ? __pfx_pipe_poll+0x10/0x10 [ 951.233193][T17643] do_sys_poll+0x524/0xde0 [ 951.237590][T17643] ? __pfx_do_sys_poll+0x10/0x10 [ 951.242541][T17643] ? __pfx___lock_acquire+0x10/0x10 [ 951.247723][T17643] ? __pfx___pollwait+0x10/0x10 [ 951.252551][T17643] ? __pfx_pollwake+0x10/0x10 [ 951.257205][T17643] ? __pfx_pollwake+0x10/0x10 [ 951.261865][T17643] ? __pfx_pollwake+0x10/0x10 [ 951.266518][T17643] ? __pfx_pollwake+0x10/0x10 [ 951.271176][T17643] ? __pfx_pollwake+0x10/0x10 [ 951.275915][T17643] ? __pfx_pollwake+0x10/0x10 [ 951.280683][T17643] ? __pfx_pollwake+0x10/0x10 [ 951.285352][T17643] ? __pfx_pollwake+0x10/0x10 [ 951.290016][T17643] ? __pfx_pollwake+0x10/0x10 [ 951.294673][T17643] ? __mutex_unlock_slowpath+0x164/0x690 [ 951.300283][T17643] ? set_user_sigmask+0x217/0x2a0 [ 951.305285][T17643] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 951.311241][T17643] ? __pfx_set_user_sigmask+0x10/0x10 [ 951.316590][T17643] ? __fget_files+0x206/0x3a0 [ 951.321246][T17643] __x64_sys_ppoll+0x25a/0x2d0 [ 951.325999][T17643] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 951.331259][T17643] ? ksys_write+0x1ba/0x250 [ 951.335737][T17643] ? __pfx_ksys_write+0x10/0x10 [ 951.340566][T17643] do_syscall_64+0xcd/0x250 [ 951.345048][T17643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.350923][T17643] RIP: 0033:0x7f940d57e819 [ 951.355334][T17643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.374916][T17643] RSP: 002b:00007f940e37e038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 951.383304][T17643] RAX: ffffffffffffffda RBX: 00007f940d735fa0 RCX: 00007f940d57e819 [ 951.391251][T17643] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00000000200000c0 [ 951.399205][T17643] RBP: 00007f940e37e090 R08: 0000000000000000 R09: 0000000000000000 [ 951.407161][T17643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.415112][T17643] R13: 0000000000000000 R14: 00007f940d735fa0 R15: 00007ffc0afdcf58 [ 951.423064][T17643] [ 951.890771][T16170] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 952.062514][T16170] usb 7-1: unable to get BOS descriptor or descriptor too short [ 952.082201][T16170] usb 7-1: not running at top speed; connect to a high speed hub [ 952.091636][T16170] usb 7-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 952.661485][ T5882] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 952.669177][T16170] usb 7-1: config 219 interface 0 has no altsetting 0 [ 952.676367][T16170] usb 7-1: config 219 interface 0 has no altsetting 1 [ 952.686257][T16170] usb 7-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 952.697473][T16170] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.706476][T16170] usb 7-1: Product: syz [ 952.710657][T16170] usb 7-1: Manufacturer: syz [ 952.726495][T17684] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 952.729289][T16170] usb 7-1: SerialNumber: syz [ 953.031128][T17699] netlink: 'syz.7.2941': attribute type 12 has an invalid length. [ 953.039027][T17699] netlink: 244 bytes leftover after parsing attributes in process `syz.7.2941'. [ 953.454148][T17663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.463372][ T5882] usb 6-1: Using ep0 maxpacket: 8 [ 953.463961][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 953.463972][ T29] audit: type=1400 audit(2000000224.689:1040): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 953.468907][T17663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.508149][ T5882] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 953.520175][ T5882] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 953.521573][ T29] audit: type=1400 audit(2000000224.739:1041): avc: denied { sys_chroot } for pid=17700 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 953.529896][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.552562][ T29] audit: type=1400 audit(2000000224.739:1042): avc: denied { setgid } for pid=17700 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 953.592756][ T5882] usb 6-1: Product: syz [ 953.597023][ T5882] usb 6-1: Manufacturer: syz [ 953.601862][ T5882] usb 6-1: SerialNumber: syz [ 953.612476][ T5882] usb 6-1: config 0 descriptor?? [ 953.622491][ T5882] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 953.635402][ T29] audit: type=1400 audit(2000000224.739:1043): avc: denied { setrlimit } for pid=17700 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 953.656097][T16170] usb 7-1: selecting invalid altsetting 0 [ 953.662476][T16170] usb 7-1: selecting invalid altsetting 0 [ 953.688997][T16170] usb 7-1: USB disconnect, device number 37 [ 953.942990][T13530] udevd[13530]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 954.448625][ T5882] gspca_zc3xx: reg_w_i err -71 [ 955.361009][ T5882] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 955.367334][ T5882] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 955.379127][ T5882] usb 6-1: USB disconnect, device number 66 [ 955.395160][T17741] overlayfs: missing 'workdir' [ 958.194234][T17788] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2952'. [ 959.082869][T17795] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 959.231937][ T29] audit: type=1400 audit(2000000230.279:1044): avc: denied { accept } for pid=17794 comm="syz.2.2954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 959.251759][ T29] audit: type=1400 audit(2000000230.319:1045): avc: denied { write } for pid=17794 comm="syz.2.2954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 959.646779][T17810] 9pnet_fd: Insufficient options for proto=fd [ 959.874905][T17824] netlink: 'syz.0.2960': attribute type 10 has an invalid length. [ 959.884242][T17824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2960'. [ 959.905012][ T29] audit: type=1400 audit(2000000231.089:1046): avc: denied { create } for pid=17817 comm="syz.0.2960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 959.981378][ T5912] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 960.053132][ T5884] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 960.160877][ T29] audit: type=1400 audit(2000000231.099:1047): avc: denied { ioctl } for pid=17817 comm="syz.0.2960" path="socket:[59702]" dev="sockfs" ino=59702 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 960.229440][T17824] team0: Port device geneve0 added [ 960.283913][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short [ 960.302044][ T5884] usb 3-1: not running at top speed; connect to a high speed hub [ 960.321752][ T5884] usb 3-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 960.341023][ T5912] usb 6-1: Using ep0 maxpacket: 16 [ 960.350600][ T5884] usb 3-1: config 219 interface 0 has no altsetting 0 [ 960.357951][ T5884] usb 3-1: config 219 interface 0 has no altsetting 1 [ 960.367035][ T5912] usb 6-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 960.404453][ T5884] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 960.413963][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.423281][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.442236][ T5912] usb 6-1: config 0 descriptor?? [ 960.458106][ T5884] usb 3-1: Product: syz [ 960.488274][ T5912] usb 6-1: invalid MIDI EP [ 960.496378][ T5884] usb 3-1: Manufacturer: syz [ 960.516836][ T5912] usb 6-1: snd-bcd2000: error during probing [ 960.527293][ T5884] usb 3-1: SerialNumber: syz [ 960.553943][ T5912] snd-bcd2000 6-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 960.781856][ T29] audit: type=1400 audit(2000000232.009:1048): avc: denied { mounton } for pid=17805 comm="syz.5.2958" path="/proc/1249/task" dev="proc" ino=58882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 960.793227][T17827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.810993][ T5882] usb 6-1: USB disconnect, device number 67 [ 961.376987][T17827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.448101][ T29] audit: type=1400 audit(2000000232.009:1049): avc: denied { mount } for pid=17805 comm="syz.5.2958" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 961.625332][ T5884] usb 3-1: selecting invalid altsetting 0 [ 961.643250][ T5884] usb 3-1: selecting invalid altsetting 0 [ 961.712345][ T5884] usb 3-1: USB disconnect, device number 81 [ 961.994728][T13530] udevd[13530]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 962.031270][T17862] FAULT_INJECTION: forcing a failure. [ 962.031270][T17862] name failslab, interval 1, probability 0, space 0, times 0 [ 962.094862][T17862] CPU: 1 UID: 0 PID: 17862 Comm: syz.0.2966 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 962.105317][T17862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 962.115378][T17862] Call Trace: [ 962.118650][T17862] [ 962.121561][T17862] dump_stack_lvl+0x16c/0x1f0 [ 962.126224][T17862] should_fail_ex+0x497/0x5b0 [ 962.130910][T17862] should_failslab+0xc2/0x120 [ 962.135606][T17862] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 962.140978][T17862] ? skb_clone+0x190/0x3f0 [ 962.145377][T17862] skb_clone+0x190/0x3f0 [ 962.149606][T17862] netlink_deliver_tap+0xabd/0xd30 [ 962.154721][T17862] netlink_unicast+0x5e1/0x7f0 [ 962.159484][T17862] ? __pfx_netlink_unicast+0x10/0x10 [ 962.164749][T17862] netlink_sendmsg+0x8b8/0xd70 [ 962.169491][T17862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.174754][T17862] ____sys_sendmsg+0xaaf/0xc90 [ 962.179509][T17862] ? copy_msghdr_from_user+0x10b/0x160 [ 962.184943][T17862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 962.190221][T17862] ___sys_sendmsg+0x135/0x1e0 [ 962.194876][T17862] ? __pfx____sys_sendmsg+0x10/0x10 [ 962.200064][T17862] ? __pfx_lock_release+0x10/0x10 [ 962.205072][T17862] ? trace_lock_acquire+0x14a/0x1d0 [ 962.210259][T17862] ? __fget_files+0x206/0x3a0 [ 962.214921][T17862] __sys_sendmsg+0x16e/0x220 [ 962.219494][T17862] ? __pfx___sys_sendmsg+0x10/0x10 [ 962.224595][T17862] do_syscall_64+0xcd/0x250 [ 962.229091][T17862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.234968][T17862] RIP: 0033:0x7f246357e819 [ 962.239360][T17862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 962.258947][T17862] RSP: 002b:00007f24642f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.267336][T17862] RAX: ffffffffffffffda RBX: 00007f2463735fa0 RCX: 00007f246357e819 [ 962.275279][T17862] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 962.283228][T17862] RBP: 00007f24642f3090 R08: 0000000000000000 R09: 0000000000000000 [ 962.291185][T17862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.299130][T17862] R13: 0000000000000000 R14: 00007f2463735fa0 R15: 00007ffe575ad6c8 [ 962.307087][T17862] [ 962.326306][T17865] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2967'. [ 963.331087][ T5884] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 964.049811][ T5884] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 964.058033][ T5884] usb 3-1: config 0 has no interface number 0 [ 964.064240][ T29] audit: type=1400 audit(2000000234.779:1050): avc: denied { read append } for pid=17883 comm="syz.5.2973" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 964.098488][ T5884] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 964.114188][ T29] audit: type=1400 audit(2000000234.779:1051): avc: denied { open } for pid=17883 comm="syz.5.2973" path="/dev/sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 964.144970][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.179394][ T5884] usb 3-1: config 0 descriptor?? [ 964.522451][ T5884] cp210x 3-1:0.1: cp210x converter detected [ 964.532535][T17901] FAULT_INJECTION: forcing a failure. [ 964.532535][T17901] name failslab, interval 1, probability 0, space 0, times 0 [ 964.636592][T17901] CPU: 0 UID: 0 PID: 17901 Comm: syz.7.2965 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 964.647054][T17901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 964.657088][T17901] Call Trace: [ 964.660344][T17901] [ 964.663267][T17901] dump_stack_lvl+0x16c/0x1f0 [ 964.667957][T17901] should_fail_ex+0x497/0x5b0 [ 964.672744][T17901] should_failslab+0xc2/0x120 [ 964.677428][T17901] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 964.682784][T17901] ? skb_clone+0x190/0x3f0 [ 964.687183][T17901] skb_clone+0x190/0x3f0 [ 964.691421][T17901] netlink_deliver_tap+0xabd/0xd30 [ 964.696544][T17901] netlink_unicast+0x5e1/0x7f0 [ 964.701289][T17901] ? __pfx_netlink_unicast+0x10/0x10 [ 964.706552][T17901] netlink_sendmsg+0x8b8/0xd70 [ 964.711293][T17901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 964.716571][T17901] ____sys_sendmsg+0xaaf/0xc90 [ 964.721329][T17901] ? copy_msghdr_from_user+0x10b/0x160 [ 964.726771][T17901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 964.732066][T17901] ___sys_sendmsg+0x135/0x1e0 [ 964.736727][T17901] ? __pfx____sys_sendmsg+0x10/0x10 [ 964.741908][T17901] ? __pfx_lock_release+0x10/0x10 [ 964.746931][T17901] ? trace_lock_acquire+0x14a/0x1d0 [ 964.752244][T17901] ? __fget_files+0x206/0x3a0 [ 964.756958][T17901] __sys_sendmsg+0x16e/0x220 [ 964.761561][T17901] ? __pfx___sys_sendmsg+0x10/0x10 [ 964.766705][T17901] do_syscall_64+0xcd/0x250 [ 964.771225][T17901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.777121][T17901] RIP: 0033:0x7f419357e819 [ 964.781513][T17901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.801113][T17901] RSP: 002b:00007f41942b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 964.809520][T17901] RAX: ffffffffffffffda RBX: 00007f4193736160 RCX: 00007f419357e819 [ 964.817500][T17901] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 964.825479][T17901] RBP: 00007f41942b8090 R08: 0000000000000000 R09: 0000000000000000 [ 964.833453][T17901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.841432][T17901] R13: 0000000000000000 R14: 00007f4193736160 R15: 00007ffe2aaf43b8 [ 964.849427][T17901] [ 964.942700][ T29] audit: type=1400 audit(2000000236.169:1052): avc: denied { write } for pid=17904 comm="syz.5.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 965.018260][ T5884] cp210x 3-1:0.1: failed to get vendor val 0x3711 size 2: -32 [ 965.028243][ T5884] cp210x 3-1:0.1: GPIO initialisation failed: -32 [ 965.061191][ T5884] usb 3-1: cp210x converter now attached to ttyUSB0 [ 965.203306][ T29] audit: type=1400 audit(2000000236.169:1053): avc: denied { nlmsg_read } for pid=17904 comm="syz.5.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 965.855247][ T29] audit: type=1400 audit(2000000237.029:1054): avc: denied { create } for pid=17923 comm="syz.6.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 965.881722][ T29] audit: type=1400 audit(2000000237.079:1055): avc: denied { connect } for pid=17923 comm="syz.6.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 966.068461][T17945] netlink: 6 bytes leftover after parsing attributes in process `syz.7.2980'. [ 966.110276][ T29] audit: type=1400 audit(2000000237.289:1056): avc: denied { ioctl } for pid=17944 comm="syz.7.2980" path="socket:[59015]" dev="sockfs" ino=59015 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 966.256494][T10495] usb 3-1: USB disconnect, device number 82 [ 966.258397][T10495] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 966.258716][T10495] cp210x 3-1:0.1: device disconnected [ 966.409249][ T29] audit: type=1400 audit(2000000237.629:1057): avc: denied { create } for pid=17950 comm="syz.2.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 966.434697][ T29] audit: type=1400 audit(2000000237.669:1058): avc: denied { connect } for pid=17950 comm="syz.2.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 966.569328][T17954] overlayfs: missing 'lowerdir' [ 967.910756][T17169] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 968.216348][T17169] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 968.237278][T17169] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 968.279454][T17169] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.299914][T17169] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 968.319338][T17169] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 968.979079][T17169] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.013228][ T29] audit: type=1400 audit(2000000239.749:1059): avc: denied { setopt } for pid=17963 comm="syz.2.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 969.033363][ T29] audit: type=1400 audit(2000000239.839:1060): avc: denied { write } for pid=17963 comm="syz.2.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 969.072066][T17169] usb 6-1: config 0 descriptor?? [ 969.101317][T17169] usbhid 6-1:0.0: can't add hid device: -22 [ 969.107330][T17169] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 969.972034][T17968] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2983'. [ 969.981250][T17968] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2983'. [ 970.629901][ T5882] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 971.536320][ T5884] usb 6-1: USB disconnect, device number 68 [ 971.692452][ T5882] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 971.701770][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.717608][ T5882] usb 3-1: config 0 descriptor?? [ 972.397165][T18014] syz_tun: entered promiscuous mode [ 972.432292][T18014] batadv_slave_0: entered promiscuous mode [ 972.448866][T18014] hsr1: entered allmulticast mode [ 972.461676][T18014] syz_tun: entered allmulticast mode [ 972.582178][ T5882] gs_usb 3-1:0.0: Configuring for 67 interfaces [ 972.588613][ T5882] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 972.597249][ T5882] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 972.693198][ T29] audit: type=1400 audit(2000000243.919:1061): avc: denied { name_bind } for pid=18011 comm="syz.6.2995" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 972.701526][T18014] batadv_slave_0: entered allmulticast mode [ 972.966778][T18031] netlink: 'syz.5.2997': attribute type 10 has an invalid length. [ 972.975490][T18031] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2997'. [ 973.177376][ T29] audit: type=1400 audit(2000000244.309:1062): avc: denied { accept } for pid=18027 comm="syz.5.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 973.543297][T18041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2990'. [ 973.552670][T18041] netlink: 'syz.2.2990': attribute type 3 has an invalid length. [ 975.481810][ T5884] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 975.537789][ T29] audit: type=1400 audit(2000000246.239:1063): avc: denied { create } for pid=18054 comm="syz.0.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 975.557728][ T29] audit: type=1400 audit(2000000246.249:1064): avc: denied { setopt } for pid=18054 comm="syz.0.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 975.577806][ T29] audit: type=1400 audit(2000000246.259:1065): avc: denied { read } for pid=18054 comm="syz.0.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 975.603038][ T5912] usb 3-1: USB disconnect, device number 83 [ 975.662093][ T29] audit: type=1400 audit(2000000246.769:1066): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 976.463255][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 976.476290][ T5884] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 976.487369][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 976.573708][T18074] pim6reg: entered allmulticast mode [ 976.666427][T18074] pim6reg: left allmulticast mode [ 976.870991][ T5884] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 976.880218][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.891145][ T5884] usb 6-1: Product: syz [ 976.895384][ T5884] usb 6-1: Manufacturer: syz [ 976.900619][ T5884] usb 6-1: SerialNumber: syz [ 976.902130][T18077] netlink: 'syz.6.3006': attribute type 4 has an invalid length. [ 976.922136][ T5884] usb 6-1: config 0 descriptor?? [ 976.946402][ T5884] kvaser_usb 6-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 977.830786][T18087] tmpfs: Bad value for 'mpol' [ 977.941445][ T29] audit: type=1400 audit(2000000249.049:1067): avc: denied { ioctl } for pid=18051 comm="syz.5.3001" path="/dev/sg0" dev="devtmpfs" ino=737 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 978.160579][ T29] audit: type=1400 audit(2000000249.049:1068): avc: denied { mounton } for pid=18051 comm="syz.5.3001" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 978.231006][ T5884] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 978.392634][ T5884] usb 7-1: unable to get BOS descriptor or descriptor too short [ 978.401254][ T5884] usb 7-1: not running at top speed; connect to a high speed hub [ 978.456686][ T5884] usb 7-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 978.477636][ T5884] usb 7-1: config 219 interface 0 has no altsetting 0 [ 978.498434][ T5884] usb 7-1: config 219 interface 0 has no altsetting 1 [ 978.519934][ T5884] usb 7-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 978.532332][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.545568][ T5884] usb 7-1: Product: syz [ 978.549836][ T5884] usb 7-1: Manufacturer: syz [ 978.561276][ T5884] usb 7-1: SerialNumber: syz [ 978.701755][ T5912] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 978.822373][T18083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.831371][T18083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.848314][ T5884] usb 7-1: selecting invalid altsetting 0 [ 978.855046][ T5884] usb 7-1: selecting invalid altsetting 0 [ 978.873684][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 978.886431][ T5884] usb 7-1: USB disconnect, device number 38 [ 978.909198][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 978.926130][ T5912] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 978.935405][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 978.943756][ T5912] usb 3-1: SerialNumber: syz [ 979.179191][ T5912] usb 3-1: 0:2 : does not exist [ 979.282103][ T5884] usb 6-1: USB disconnect, device number 69 [ 979.314366][T18094] netlink: 'syz.5.3012': attribute type 21 has an invalid length. [ 979.323367][T18094] netlink: 'syz.5.3012': attribute type 6 has an invalid length. [ 979.331480][T18094] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3012'. [ 979.686286][ T29] audit: type=1400 audit(2000000250.909:1069): avc: denied { connect } for pid=18103 comm="syz.0.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 979.932735][ T29] audit: type=1400 audit(2000000250.939:1070): avc: denied { write } for pid=18103 comm="syz.0.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 980.285970][ T29] audit: type=1400 audit(2000000251.509:1071): avc: denied { create } for pid=18111 comm="syz.0.3016" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 980.353792][ T29] audit: type=1400 audit(2000000251.509:1072): avc: denied { mounton } for pid=18111 comm="syz.0.3016" path="/39/file0" dev="tmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 980.418010][ T29] audit: type=1400 audit(2000000251.639:1073): avc: denied { write } for pid=18115 comm="syz.5.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 980.470361][ T29] audit: type=1400 audit(2000000251.689:1074): avc: denied { unlink } for pid=17037 comm="syz-executor" name="file0" dev="tmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 980.931397][ T1196] usb 3-1: USB disconnect, device number 84 [ 980.960779][ T5882] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 981.238646][ T5882] usb 6-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 981.250857][ T5882] usb 6-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 981.262272][ T5882] usb 6-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 981.275455][ T5882] usb 6-1: config 0 interface 0 has no altsetting 0 [ 981.284050][ T5882] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 981.293311][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.301821][ T5882] usb 6-1: Product: syz [ 981.306029][ T5882] usb 6-1: Manufacturer: syz [ 981.311114][ T5882] usb 6-1: SerialNumber: syz [ 981.323397][ T5882] usb 6-1: config 0 descriptor?? [ 981.332380][T18116] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 981.672630][ T5882] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input39 [ 981.864430][ T29] audit: type=1400 audit(2000000253.089:1075): avc: denied { read } for pid=5194 comm="acpid" name="mouse1" dev="devtmpfs" ino=3741 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 981.888743][ T29] audit: type=1400 audit(2000000253.089:1076): avc: denied { open } for pid=5194 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3741 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 982.216460][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 982.684339][T18150] erspan0: Device is already in use. [ 983.925058][ T1196] usb 6-1: USB disconnect, device number 70 [ 984.067680][T18163] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3031'. [ 984.109188][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 984.109197][ T29] audit: type=1400 audit(2000000255.329:1085): avc: denied { create } for pid=18165 comm="syz.2.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 984.177211][T18166] FAULT_INJECTION: forcing a failure. [ 984.177211][T18166] name failslab, interval 1, probability 0, space 0, times 0 [ 984.196946][T18166] CPU: 1 UID: 0 PID: 18166 Comm: syz.2.3032 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 984.207375][T18166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 984.217406][T18166] Call Trace: [ 984.220689][T18166] [ 984.223609][T18166] dump_stack_lvl+0x16c/0x1f0 [ 984.228267][T18166] should_fail_ex+0x497/0x5b0 [ 984.232923][T18166] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 984.238531][T18166] should_failslab+0xc2/0x120 [ 984.243200][T18166] __kmalloc_node_track_caller_noprof+0xcf/0x430 [ 984.249565][T18166] ? sidtab_sid2str_get+0x17a/0x680 [ 984.254775][T18166] kmemdup_noprof+0x29/0x60 [ 984.259299][T18166] sidtab_sid2str_get+0x17a/0x680 [ 984.264330][T18166] sidtab_entry_to_string+0x33/0x110 [ 984.269605][T18166] security_sid_to_context_core+0x35c/0x640 [ 984.275477][T18166] avc_audit_post_callback+0x1ac/0x8c0 [ 984.280918][T18166] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 984.286887][T18166] ? audit_log_format+0xe9/0x130 [ 984.291810][T18166] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 984.297771][T18166] ? skb_put+0x138/0x1b0 [ 984.302027][T18166] ? audit_log_n_string+0x251/0x540 [ 984.307220][T18166] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 984.313197][T18166] common_lsm_audit+0x260/0x2210 [ 984.318126][T18166] ? __pfx_common_lsm_audit+0x10/0x10 [ 984.323475][T18166] ? __pfx_lock_release+0x10/0x10 [ 984.328479][T18166] ? rcu_is_watching+0x12/0xc0 [ 984.333223][T18166] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 984.339008][T18166] ? lockdep_hardirqs_on+0x7c/0x110 [ 984.344219][T18166] ? slow_avc_audit+0x17d/0x210 [ 984.349062][T18166] slow_avc_audit+0x17d/0x210 [ 984.353735][T18166] ? __pfx_slow_avc_audit+0x10/0x10 [ 984.358922][T18166] ? avc_denied+0x138/0x180 [ 984.363405][T18166] ? avc_has_perm_noaudit+0x2f8/0x3a0 [ 984.368757][T18166] avc_has_perm+0x18d/0x1c0 [ 984.373239][T18166] ? __pfx_avc_has_perm+0x10/0x10 [ 984.378248][T18166] inode_has_perm+0x168/0x1d0 [ 984.382924][T18166] file_has_perm+0x2e8/0x350 [ 984.387490][T18166] ? __pfx_file_has_perm+0x10/0x10 [ 984.392595][T18166] selinux_file_permission+0x40d/0x580 [ 984.398034][T18166] security_file_permission+0x1e3/0x210 [ 984.403559][T18166] rw_verify_area+0xbc/0x700 [ 984.408155][T18166] io_write+0x232/0x13d0 [ 984.412389][T18166] io_issue_sqe+0x175/0x1200 [ 984.416982][T18166] io_submit_sqes+0x961/0x25d0 [ 984.421740][T18166] __do_sys_io_uring_enter+0xd2d/0x1530 [ 984.427291][T18166] ? __fget_files+0x206/0x3a0 [ 984.431955][T18166] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 984.437921][T18166] ? fput+0x67/0x440 [ 984.441799][T18166] ? ksys_write+0x1ba/0x250 [ 984.446281][T18166] ? __pfx_ksys_write+0x10/0x10 [ 984.451116][T18166] do_syscall_64+0xcd/0x250 [ 984.455603][T18166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.461475][T18166] RIP: 0033:0x7f6de8f7e819 [ 984.465867][T18166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.485448][T18166] RSP: 002b:00007f6de9cf0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 984.493834][T18166] RAX: ffffffffffffffda RBX: 00007f6de9135fa0 RCX: 00007f6de8f7e819 [ 984.501780][T18166] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000004 [ 984.509723][T18166] RBP: 00007f6de9cf0090 R08: 0000000000000000 R09: 0000000000000000 [ 984.517678][T18166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.525622][T18166] R13: 0000000000000000 R14: 00007f6de9135fa0 R15: 00007fffb36a4798 [ 984.533577][T18166] [ 984.536675][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.589495][ T29] audit: type=1400 audit(2000000255.399:1086): avc: denied { write } for pid=18165 comm="syz.2.3032" path="socket:[60566]" dev="sockfs" ino=60566 scontext=root:sysadm_r:sysadm_t tsid=146 tclass=dccp_socket permissive=1 [ 984.720824][ T29] audit: type=1400 audit(2000000255.939:1087): avc: denied { map } for pid=18175 comm="syz.2.3035" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 984.781121][ T29] audit: type=1400 audit(2000000255.979:1088): avc: denied { call } for pid=18175 comm="syz.2.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 984.846790][ T29] audit: type=1400 audit(2000000255.979:1089): avc: denied { transfer } for pid=18175 comm="syz.2.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 984.931212][ T1196] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 985.007616][T18185] netlink: 'syz.7.3037': attribute type 10 has an invalid length. [ 985.084015][ T1196] usb 6-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 985.097912][T18185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.114228][ T1196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.158716][ T1196] usb 6-1: config 0 descriptor?? [ 985.181453][T18185] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 985.635891][ T1196] gs_usb 6-1:0.0: Configuring for 67 interfaces [ 985.651889][ T1196] gs_usb 6-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 985.679078][ T1196] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 986.088983][T18215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3034'. [ 986.098802][T18215] netlink: 'syz.5.3034': attribute type 3 has an invalid length. [ 986.837021][ T29] audit: type=1400 audit(2000000258.059:1090): avc: denied { getopt } for pid=18216 comm="syz.6.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 987.681083][ T29] audit: type=1400 audit(2000000258.299:1091): avc: denied { read } for pid=18216 comm="syz.6.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 987.751144][T10495] usb 6-1: USB disconnect, device number 71 [ 990.896407][T10495] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 991.161974][ T29] audit: type=1400 audit(2000000262.359:1092): avc: denied { listen } for pid=18248 comm="syz.5.3048" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 991.240313][ T29] audit: type=1400 audit(2000000262.359:1093): avc: denied { ioctl } for pid=18248 comm="syz.5.3048" path="socket:[61757]" dev="sockfs" ino=61757 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 991.347196][ T5884] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 991.532666][ T5884] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 991.568401][ T5884] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 991.576613][T10495] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 991.682646][T10495] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 991.708361][T10495] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 991.750757][T10495] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 991.768137][T10495] usb 3-1: SerialNumber: syz [ 992.301969][ T5884] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 992.327791][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 992.342511][T10495] usb 3-1: can't set config #1, error -71 [ 992.349027][T18292] netlink: 'syz.7.3053': attribute type 12 has an invalid length. [ 992.350267][T10495] usb 3-1: USB disconnect, device number 85 [ 992.356914][T18292] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3053'. [ 992.451993][ T5884] usb 7-1: SerialNumber: syz [ 992.683913][ T5884] usb 7-1: 0:2 : does not exist [ 992.697840][ T29] audit: type=1400 audit(2000000263.919:1094): avc: denied { unlink } for pid=18290 comm="syz.0.3052" name="#3d" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 992.981761][ T29] audit: type=1400 audit(2000000264.159:1095): avc: denied { mount } for pid=18290 comm="syz.0.3052" name="/" dev="overlay" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 993.135233][ T29] audit: type=1400 audit(2000000264.349:1096): avc: denied { connect } for pid=18303 comm="syz.7.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 993.224085][ T29] audit: type=1400 audit(2000000264.439:1097): avc: denied { unmount } for pid=17037 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 993.311344][ T45] usb 7-1: USB disconnect, device number 39 [ 993.499845][ T29] audit: type=1400 audit(2000000264.719:1098): avc: denied { mount } for pid=18303 comm="syz.7.3056" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 993.551545][ T1196] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 993.601004][ T29] audit: type=1400 audit(2000000264.759:1099): avc: denied { read } for pid=18313 comm="syz.0.3057" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 993.668954][ T29] audit: type=1400 audit(2000000264.759:1100): avc: denied { open } for pid=18313 comm="syz.0.3057" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 993.701441][ T1196] usb 6-1: Using ep0 maxpacket: 32 [ 993.708113][ T1196] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 993.736616][ T29] audit: type=1400 audit(2000000264.759:1101): avc: denied { ioctl } for pid=18313 comm="syz.0.3057" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 993.761922][T10495] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 993.786608][ T1196] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 993.796206][ T1196] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 993.804473][ T1196] usb 6-1: Product: syz [ 993.810087][ T1196] usb 6-1: Manufacturer: syz [ 993.814759][ T1196] usb 6-1: SerialNumber: syz [ 993.826651][ T1196] usb 6-1: config 0 descriptor?? [ 993.842090][T18312] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 993.932225][T10495] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 993.960779][T10495] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.014483][T10495] usb 3-1: config 0 descriptor?? [ 994.352401][T18342] block device autoloading is deprecated and will be removed. [ 994.541182][ T5912] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 994.760985][T10495] gs_usb 3-1:0.0: Configuring for 67 interfaces [ 994.767295][T10495] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 994.781148][T10495] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 994.902997][ T5912] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 994.910578][ T5912] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 994.946723][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.084121][ T5912] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 995.177144][T18352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'. [ 995.186309][T18352] netlink: 'syz.2.3055': attribute type 3 has an invalid length. [ 995.591868][ T5912] usb 7-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 995.601022][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.627339][ T5912] usb 7-1: config 0 descriptor?? [ 995.652501][ T5912] usbhid 7-1:0.0: can't add hid device: -22 [ 995.658582][ T5912] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 996.338726][ T5912] usb 6-1: USB disconnect, device number 72 [ 996.638698][T10495] usb 3-1: USB disconnect, device number 86 [ 996.971091][ T5912] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 997.130798][ T5882] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 997.153910][ T5912] usb 6-1: unable to get BOS descriptor or descriptor too short [ 997.162443][ T5912] usb 6-1: not running at top speed; connect to a high speed hub [ 997.175503][ T5912] usb 6-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 997.190895][ T5912] usb 6-1: config 219 interface 0 has no altsetting 0 [ 997.197812][ T5912] usb 6-1: config 219 interface 0 has no altsetting 1 [ 997.209649][ T5912] usb 6-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 997.228641][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.242238][ T5912] usb 6-1: Product: syz [ 997.250911][ T5912] usb 6-1: Manufacturer: syz [ 997.260002][ T5912] usb 6-1: SerialNumber: syz [ 997.281118][ T5882] usb 3-1: device descriptor read/64, error -71 [ 997.488481][T18367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.512051][T18367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.526629][ T29] audit: type=1400 audit(2000000268.749:1102): avc: denied { write } for pid=18384 comm="syz.7.3066" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 997.560995][ T5882] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 997.561787][T18385] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3066'. [ 997.577209][T18024] usb 7-1: USB disconnect, device number 40 [ 997.653730][ T5912] usb 6-1: selecting invalid altsetting 0 [ 997.681027][ T5912] usb 6-1: selecting invalid altsetting 0 [ 997.741360][ T5882] usb 3-1: device descriptor read/64, error -71 [ 997.747991][ T5912] usb 6-1: USB disconnect, device number 73 [ 997.851032][ T5882] usb usb3-port1: attempt power cycle [ 998.222046][ T5882] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 998.294116][ T5882] usb 3-1: device descriptor read/8, error -71 [ 998.681200][ T5882] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 999.243939][ T5882] usb 3-1: device descriptor read/8, error -71 [ 999.402412][ T5882] usb usb3-port1: unable to enumerate USB device [ 1000.514228][ T29] audit: type=1400 audit(2000000271.639:1103): avc: denied { accept } for pid=18406 comm="syz.0.3070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1000.741290][ T29] audit: type=1326 audit(2000000271.889:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18418 comm="syz.5.3073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f940d57e819 code=0x0 [ 1002.662274][ T29] audit: type=1400 audit(2000000273.839:1105): avc: denied { sys_module } for pid=18435 comm="syz.7.3078" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1003.326125][T18456] netlink: 'syz.2.3082': attribute type 12 has an invalid length. [ 1003.334079][T18456] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3082'. [ 1006.331009][T18492] 9pnet_fd: Insufficient options for proto=fd [ 1006.941099][ T29] audit: type=1400 audit(2000000278.119:1106): avc: denied { bind } for pid=18504 comm="syz.5.3091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1006.960624][ T29] audit: type=1400 audit(2000000278.119:1107): avc: denied { name_bind } for pid=18504 comm="syz.5.3091" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1006.982011][ T29] audit: type=1400 audit(2000000278.119:1108): avc: denied { node_bind } for pid=18504 comm="syz.5.3091" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 1007.003259][ T29] audit: type=1400 audit(2000000278.119:1109): avc: denied { listen } for pid=18504 comm="syz.5.3091" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1007.024576][ T29] audit: type=1400 audit(2000000278.119:1110): avc: denied { accept } for pid=18504 comm="syz.5.3091" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1007.095023][ T29] audit: type=1400 audit(2000000278.129:1111): avc: denied { connect } for pid=18504 comm="syz.5.3091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1007.124698][ T29] audit: type=1400 audit(2000000278.129:1112): avc: denied { name_connect } for pid=18504 comm="syz.5.3091" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1007.633188][T18503] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3090'. [ 1008.052342][ T29] audit: type=1400 audit(2000000279.229:1113): avc: denied { read } for pid=18502 comm="syz.6.3090" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1008.075558][ C1] vkms_vblank_simulate: vblank timer overrun [ 1008.090800][ T29] audit: type=1400 audit(2000000279.229:1114): avc: denied { open } for pid=18502 comm="syz.6.3090" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1008.210342][ T29] audit: type=1400 audit(2000000279.229:1115): avc: denied { ioctl } for pid=18502 comm="syz.6.3090" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1008.237438][ T29] audit: type=1400 audit(2000000279.229:1116): avc: denied { bind } for pid=18502 comm="syz.6.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1008.261621][ T29] audit: type=1400 audit(2000000279.229:1117): avc: denied { setopt } for pid=18502 comm="syz.6.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1008.780773][ T29] audit: type=1400 audit(2000000279.969:1118): avc: denied { create } for pid=18514 comm="syz.0.3092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1008.807005][ T1196] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1009.321523][ T1196] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1009.331910][ T1196] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1009.342138][ T1196] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1009.351700][ T1196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1009.359947][ T1196] usb 3-1: SerialNumber: syz [ 1009.673165][ T1196] usb 3-1: 0:2 : does not exist [ 1010.608756][ T29] audit: type=1400 audit(2000000281.809:1119): avc: denied { create } for pid=18547 comm="syz.0.3099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1011.434073][ T29] audit: type=1400 audit(2000000282.099:1120): avc: denied { setopt } for pid=18547 comm="syz.0.3099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1011.704115][ T1196] usb 3-1: USB disconnect, device number 91 [ 1011.781930][ T29] audit: type=1400 audit(2000000283.009:1121): avc: denied { ioctl } for pid=18530 comm="syz.7.3097" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1011.962400][T13592] udevd[13592]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1012.067167][T18565] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3097'. [ 1012.691274][T10495] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1012.721779][T18575] netlink: 'syz.2.3104': attribute type 10 has an invalid length. [ 1012.729693][T18575] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3104'. [ 1012.951046][T10495] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1012.959357][T10495] usb 6-1: not running at top speed; connect to a high speed hub [ 1013.026403][T10495] usb 6-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 1013.056270][T10495] usb 6-1: config 219 interface 0 has no altsetting 0 [ 1013.089753][T10495] usb 6-1: config 219 interface 0 has no altsetting 1 [ 1013.107341][ T29] audit: type=1400 audit(2000000284.329:1122): avc: denied { create } for pid=18580 comm="syz.6.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1013.148013][T10495] usb 6-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 1013.170786][T10495] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.196933][ T29] audit: type=1400 audit(2000000284.329:1123): avc: denied { read } for pid=18580 comm="syz.6.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1013.235518][T10495] usb 6-1: Product: syz [ 1013.249921][T10495] usb 6-1: Manufacturer: syz [ 1013.260083][T10495] usb 6-1: SerialNumber: syz [ 1013.513367][T18567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.539019][T18567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.644114][T10495] usb 6-1: selecting invalid altsetting 0 [ 1013.650068][T10495] usb 6-1: selecting invalid altsetting 0 [ 1013.736001][T10495] usb 6-1: USB disconnect, device number 74 [ 1013.871269][T18601] FAULT_INJECTION: forcing a failure. [ 1013.871269][T18601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.967515][T18601] CPU: 0 UID: 0 PID: 18601 Comm: syz.7.3106 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 1013.977974][T18601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1013.988042][T18601] Call Trace: [ 1013.991328][T18601] [ 1013.994261][T18601] dump_stack_lvl+0x16c/0x1f0 [ 1013.998956][T18601] should_fail_ex+0x497/0x5b0 [ 1014.003659][T18601] _copy_from_user+0x2e/0xd0 [ 1014.008260][T18601] copy_msghdr_from_user+0x99/0x160 [ 1014.013476][T18601] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1014.019293][T18601] ? __pfx___lock_acquire+0x10/0x10 [ 1014.024509][T18601] ___sys_recvmsg+0xdc/0x1a0 [ 1014.029110][T18601] ? __pfx____sys_recvmsg+0x10/0x10 [ 1014.034323][T18601] ? __pfx_lock_release+0x10/0x10 [ 1014.039359][T18601] ? get_pid_task+0xfc/0x250 [ 1014.043979][T18601] do_recvmmsg+0x2f8/0x740 [ 1014.048410][T18601] ? __pfx_do_recvmmsg+0x10/0x10 [ 1014.053353][T18601] ? vfs_write+0x306/0x1150 [ 1014.057866][T18601] ? __mutex_unlock_slowpath+0x164/0x690 [ 1014.063514][T18601] ? __fget_files+0x206/0x3a0 [ 1014.068201][T18601] __x64_sys_recvmmsg+0x239/0x290 [ 1014.073240][T18601] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1014.078802][T18601] do_syscall_64+0xcd/0x250 [ 1014.083325][T18601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.089242][T18601] RIP: 0033:0x7f419357e819 [ 1014.093683][T18601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1014.113301][T18601] RSP: 002b:00007f41942fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1014.121726][T18601] RAX: ffffffffffffffda RBX: 00007f4193735fa0 RCX: 00007f419357e819 [ 1014.129715][T18601] RDX: 0000000000000002 RSI: 0000000020004280 RDI: 0000000000000004 [ 1014.137705][T18601] RBP: 00007f41942fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.145682][T18601] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 1014.153649][T18601] R13: 0000000000000000 R14: 00007f4193735fa0 R15: 00007ffe2aaf43b8 [ 1014.161606][T18601] [ 1014.164673][ C0] vkms_vblank_simulate: vblank timer overrun [ 1014.686845][ T29] audit: type=1400 audit(2000000285.909:1124): avc: denied { ioctl } for pid=18609 comm="syz.7.3110" path="socket:[62435]" dev="sockfs" ino=62435 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1014.783995][ T29] audit: type=1400 audit(2000000285.939:1125): avc: denied { setopt } for pid=18609 comm="syz.7.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1014.983066][T18623] netlink: 'syz.7.3110': attribute type 8 has an invalid length. [ 1015.018687][T18623] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3110'. [ 1015.140752][ T5912] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1015.943708][ T5912] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 1015.954735][ T5912] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 1016.006278][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.158658][T18643] netlink: 'syz.6.3115': attribute type 10 has an invalid length. [ 1016.166717][T18643] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3115'. [ 1016.290994][ T5912] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 1016.580031][ T5884] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1016.590944][ T5912] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1016.608205][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.637114][ T5912] usb 6-1: config 0 descriptor?? [ 1016.665940][ T5912] usbhid 6-1:0.0: can't add hid device: -22 [ 1016.685489][ T5912] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 1016.752792][ T5884] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 1016.802869][ T5884] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 1016.834275][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.863618][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 1017.211893][ T5884] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1017.221027][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.260466][ T5884] usb 3-1: config 0 descriptor?? [ 1017.268464][ T5884] usbhid 3-1:0.0: can't add hid device: -22 [ 1017.279706][ T5884] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 1018.414503][T10495] usb 6-1: USB disconnect, device number 75 [ 1018.621993][ T5884] usb 3-1: USB disconnect, device number 92 [ 1019.588859][T18688] vivid-000: ================= START STATUS ================= [ 1019.626619][T17038] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1019.644330][T18688] vivid-000: Radio HW Seek Mode: Bounded [ 1019.650451][T18688] vivid-000: Radio Programmable HW Seek: false [ 1019.657007][T18688] vivid-000: RDS Rx I/O Mode: Block I/O [ 1019.662619][T18688] vivid-000: Generate RBDS Instead of RDS: false [ 1019.670373][T17038] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1019.675090][ T29] audit: type=1400 audit(2000000290.889:1126): avc: denied { ioctl } for pid=18690 comm="syz-executor" path="socket:[61258]" dev="sockfs" ino=61258 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1019.680596][T18688] vivid-000: RDS Reception: true [ 1019.708075][T17038] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1019.717713][T18688] vivid-000: RDS Program Type: 0 inactive [ 1019.723878][T18688] vivid-000: RDS PS Name: inactive [ 1019.729120][T18688] vivid-000: RDS Radio Text: inactive [ 1019.735746][T18688] vivid-000: RDS Traffic Announcement: false inactive [ 1019.743254][T18688] vivid-000: RDS Traffic Program: false inactive [ 1019.749623][T18688] vivid-000: RDS Music: false inactive [ 1019.755660][T18688] vivid-000: ================== END STATUS ================== [ 1019.763549][T17038] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1019.800958][T10495] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1019.865436][T17038] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1019.933278][T17038] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1019.984486][T10495] usb 7-1: Using ep0 maxpacket: 32 [ 1020.007318][T10495] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1020.021099][T10495] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1020.030217][T10495] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.049577][T10495] usb 7-1: config 0 descriptor?? [ 1020.071646][T10495] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1020.339139][ T29] audit: type=1400 audit(2000000291.449:1127): avc: denied { mounton } for pid=18690 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1020.732287][T18705] 9pnet_fd: Insufficient options for proto=fd [ 1021.075879][T18690] ip_vti0 speed is unknown, defaulting to 1000 [ 1021.428403][T18706] sd 0:0:1:0: PR command failed: 1026 [ 1021.434048][ T29] audit: type=1400 audit(2000000292.649:1128): avc: denied { read write } for pid=18701 comm="syz.0.3127" name="file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1021.457137][T18706] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1021.493272][T18706] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1021.518750][T18690] chnl_net:caif_netlink_parms(): no params data found [ 1021.519548][ T29] audit: type=1400 audit(2000000292.649:1129): avc: denied { ioctl open } for pid=18701 comm="syz.0.3127" path="/59/file0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1022.038551][T10495] usb 7-1: USB disconnect, device number 41 [ 1022.262592][T12101] Bluetooth: hci2: command tx timeout [ 1023.475726][T18690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.497281][T18690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.530776][ T1196] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1023.544397][T18690] bridge_slave_0: entered allmulticast mode [ 1023.570044][T18690] bridge_slave_0: entered promiscuous mode [ 1023.579957][T18690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.587769][T18690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.602411][T18690] bridge_slave_1: entered allmulticast mode [ 1023.609869][T18690] bridge_slave_1: entered promiscuous mode [ 1023.651637][T18690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.662771][T18690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.712123][ T1196] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 1023.719472][ T1196] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 1023.731449][ T1196] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.741997][T18690] team0: Port device team_slave_0 added [ 1023.749736][ T1196] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 1023.750416][T18690] team0: Port device team_slave_1 added [ 1023.773664][ T1196] usb 7-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1023.868558][ T1196] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.881117][ T45] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1023.928542][ T1196] usb 7-1: config 0 descriptor?? [ 1024.560440][ T1196] usbhid 7-1:0.0: can't add hid device: -22 [ 1024.566547][ T1196] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 1024.569341][T12101] Bluetooth: hci2: command tx timeout [ 1024.640827][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 1024.651837][ T45] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1024.689187][T18690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.692229][ T45] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1024.710285][ T45] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1024.719520][T18690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.751411][ T45] usb 6-1: Product: syz [ 1024.755561][ T45] usb 6-1: Manufacturer: syz [ 1024.761096][T18690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.792477][T18690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.795918][ T45] usb 6-1: SerialNumber: syz [ 1024.802181][T18690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.831048][T18690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.839571][ T45] usb 6-1: config 0 descriptor?? [ 1024.861108][T18690] hsr_slave_0: entered promiscuous mode [ 1024.877409][T18734] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1024.881444][T18690] hsr_slave_1: entered promiscuous mode [ 1024.891152][T18690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1024.898723][T18690] Cannot create hsr debugfs directory [ 1024.997995][T18690] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.056964][T18690] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.116071][T18690] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.170246][ T1196] usb 6-1: USB disconnect, device number 76 [ 1025.192596][T18690] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.302734][T18690] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1025.319232][T18690] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1025.327916][T18690] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1025.337180][T18690] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1025.386532][T18690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.404802][T18690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.414854][ T9079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.421959][ T9079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.438288][T13282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.445431][T13282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.554221][T18690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.584523][T18690] veth0_vlan: entered promiscuous mode [ 1025.593992][T18690] veth1_vlan: entered promiscuous mode [ 1025.618128][T18690] veth0_macvtap: entered promiscuous mode [ 1025.628419][T18690] veth1_macvtap: entered promiscuous mode [ 1025.640251][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.650975][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.662291][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.673411][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.683962][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.695241][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.705291][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.715880][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.726545][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.737936][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.748106][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.758994][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.771524][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.783769][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.879308][T18690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.892372][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.910779][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.917703][T10495] usb 7-1: USB disconnect, device number 42 [ 1025.920939][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.969957][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.134650][T18754] 9pnet_fd: Insufficient options for proto=fd [ 1026.487637][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.498621][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.508664][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.519345][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.529854][T18690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.649365][T18690] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.659250][T18690] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.692226][T12101] Bluetooth: hci2: command tx timeout [ 1026.710303][T18690] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.788638][T18690] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.210224][ T9079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.229958][ T9079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.328310][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.379271][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.426377][ T29] audit: type=1400 audit(2000000299.649:1130): avc: denied { mounton } for pid=18690 comm="syz-executor" path="/root/syzkaller.w3TjV8/syz-tmp" dev="sda1" ino=1958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1028.528631][ T29] audit: type=1400 audit(2000000299.649:1131): avc: denied { mounton } for pid=18690 comm="syz-executor" path="/root/syzkaller.w3TjV8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1028.638368][ T5884] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1028.667406][ T29] audit: type=1400 audit(2000000299.649:1132): avc: denied { mounton } for pid=18690 comm="syz-executor" path="/root/syzkaller.w3TjV8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=64024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1028.720234][ T29] audit: type=1400 audit(2000000299.679:1133): avc: denied { mounton } for pid=18690 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1028.747355][T17038] Bluetooth: hci2: command tx timeout [ 1029.112778][ T1196] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1029.187102][ T5884] usb 6-1: Using ep0 maxpacket: 16 [ 1029.188411][ T29] audit: type=1400 audit(2000000299.699:1134): avc: denied { mount } for pid=18690 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1029.212421][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.216888][ T29] audit: type=1400 audit(2000000299.699:1135): avc: denied { mounton } for pid=18690 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1029.242463][ T5884] usb 6-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 1029.543877][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.554006][ T5884] usb 6-1: Product: syz [ 1029.565991][ T5884] usb 6-1: Manufacturer: syz [ 1029.570586][ T5884] usb 6-1: SerialNumber: syz [ 1029.581432][ T1196] usb 7-1: Using ep0 maxpacket: 32 [ 1029.587764][ T1196] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1029.600111][ T1196] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1029.609396][ T1196] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1029.624197][ T1196] usb 7-1: Product: syz [ 1029.630534][ T5884] usb 6-1: config 0 descriptor?? [ 1029.635929][ T1196] usb 7-1: Manufacturer: syz [ 1029.646966][ T1196] usb 7-1: SerialNumber: syz [ 1029.658730][ T5884] peak_usb 6-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1029.674690][ T1196] usb 7-1: config 0 descriptor?? [ 1029.684594][ T5884] peak_usb 6-1:0.0: unable to read PCAN-USB serial number (err -22) [ 1029.693479][T18784] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1029.741137][T18786] netlink: 'syz.2.3121': attribute type 10 has an invalid length. [ 1029.748960][T18786] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3121'. [ 1029.775659][T18786] team0: Port device geneve0 added [ 1029.804111][ T5884] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 1029.912912][ T29] audit: type=1400 audit(2000000301.139:1136): avc: denied { map } for pid=18783 comm="syz.6.3145" path="/dev/chaoskey0" dev="devtmpfs" ino=3825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1029.914036][ T5884] usb 7-1: USB disconnect, device number 43 [ 1030.796927][T17038] Bluetooth: hci0: command 0x0406 tx timeout [ 1030.841468][T10495] usb 6-1: USB disconnect, device number 77 [ 1032.161659][T18818] loop2: detected capacity change from 0 to 7 [ 1032.255582][T18818] Dev loop2: unable to read RDB block 7 [ 1032.307206][T18818] loop2: unable to read partition table [ 1032.533305][T18825] 9pnet_fd: Insufficient options for proto=fd [ 1032.931032][T14989] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1033.094135][T14989] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 1033.098555][T18818] loop2: partition table beyond EOD, truncated [ 1033.102178][T14989] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 1033.107828][T18818] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1033.164001][T14989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.176621][T14989] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 1033.587736][T14989] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1033.621908][T14989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.634006][T14989] usb 3-1: config 0 descriptor?? [ 1033.650965][T14989] usbhid 3-1:0.0: can't add hid device: -22 [ 1033.657024][T14989] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 1033.799802][T18837] bridge1: entered allmulticast mode [ 1034.387283][T14989] usb 3-1: USB disconnect, device number 93 [ 1036.930969][T17169] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1037.062997][T18880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3168'. [ 1037.127165][T17169] usb 6-1: Using ep0 maxpacket: 32 [ 1037.151497][T17169] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.162891][T17169] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.260500][ T29] audit: type=1400 audit(2000000308.469:1137): avc: denied { create } for pid=18884 comm="syz.0.3169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1037.286513][T17169] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1037.496970][T17169] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.875136][ T45] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1037.877626][T17169] usb 6-1: config 0 descriptor?? [ 1038.177318][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 1038.225754][ T45] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1038.235681][ T45] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1038.291477][ T45] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1038.317868][ T45] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1038.354594][ T45] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1038.380684][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.511409][ T1196] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1038.628918][ T29] audit: type=1400 audit(2000000309.849:1138): avc: denied { read } for pid=18894 comm="syz.0.3172" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1038.659440][T17169] usbhid 6-1:0.0: can't add hid device: -71 [ 1038.692741][T17169] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1038.702251][ T1196] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1038.706462][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3172'. [ 1038.721991][T18895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3172'. [ 1038.737707][ T45] usb 3-1: GET_CAPABILITIES returned 0 [ 1038.743701][ T45] usbtmc 3-1:16.0: can't read capabilities [ 1038.753776][ T29] audit: type=1400 audit(2000000309.929:1139): avc: denied { open } for pid=18894 comm="syz.0.3172" path="/dev/usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1038.780780][ T1196] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1038.890445][T17169] usb 6-1: USB disconnect, device number 78 [ 1038.896526][ T29] audit: type=1400 audit(2000000309.929:1140): avc: denied { ioctl } for pid=18894 comm="syz.0.3172" path="/dev/usbmon3" dev="devtmpfs" ino=725 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1038.923708][ T1196] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1038.935271][ T1196] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1038.961439][ T1196] usb 7-1: SerialNumber: syz [ 1039.143214][T18882] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1039.532322][ T1196] usb 7-1: 0:2 : does not exist [ 1039.617286][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1039.626998][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1039.636088][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1039.645148][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1039.654217][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1039.663275][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1039.672362][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1039.681441][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1039.690505][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1039.699573][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1039.708863][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.715854][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1039.724949][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1039.734044][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1039.743143][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1039.752235][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1039.761327][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 1039.770340][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.856767][ T5884] usb 3-1: USB disconnect, device number 94 [ 1040.759735][ T1196] usb 7-1: USB disconnect, device number 44 [ 1041.016119][T13592] udevd[13592]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1042.731951][T18931] netlink: 'syz.0.3180': attribute type 10 has an invalid length. [ 1042.739905][T18931] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3180'. [ 1043.783239][ T29] audit: type=1400 audit(2000000314.339:1141): avc: denied { name_bind } for pid=18932 comm="syz.2.3182" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1044.152958][T18942] overlayfs: missing 'lowerdir' [ 1044.161527][T18944] FAULT_INJECTION: forcing a failure. [ 1044.161527][T18944] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.174965][T18944] CPU: 1 UID: 0 PID: 18944 Comm: syz.2.3184 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 1044.185380][T18944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1044.195438][T18944] Call Trace: [ 1044.198711][T18944] [ 1044.201639][T18944] dump_stack_lvl+0x16c/0x1f0 [ 1044.206326][T18944] should_fail_ex+0x497/0x5b0 [ 1044.211010][T18944] ? find_held_lock+0x2d/0x110 [ 1044.215780][T18944] should_failslab+0xc2/0x120 [ 1044.220456][T18944] kmem_cache_alloc_node_noprof+0x71/0x310 [ 1044.226281][T18944] ? __alloc_skb+0x2b1/0x380 [ 1044.230896][T18944] __alloc_skb+0x2b1/0x380 [ 1044.235319][T18944] ? __pfx___alloc_skb+0x10/0x10 [ 1044.240266][T18944] ? __sock_queue_rcv_skb+0x54f/0xa80 [ 1044.245667][T18944] create_monitor_event+0x440/0x8e0 [ 1044.250882][T18944] ? sock_queue_rcv_skb_reason+0x7d/0xe0 [ 1044.256529][T18944] hci_sock_bind+0x1074/0x16f0 [ 1044.261319][T18944] ? __pfx_hci_sock_bind+0x10/0x10 [ 1044.266451][T18944] __sys_bind+0x213/0x260 [ 1044.270789][T18944] ? __pfx___sys_bind+0x10/0x10 [ 1044.275638][T18944] ? __fget_files+0x206/0x3a0 [ 1044.280337][T18944] ? __pfx_ksys_write+0x10/0x10 [ 1044.285206][T18944] __x64_sys_bind+0x72/0xb0 [ 1044.289712][T18944] ? lockdep_hardirqs_on+0x7c/0x110 [ 1044.294917][T18944] do_syscall_64+0xcd/0x250 [ 1044.299430][T18944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.305333][T18944] RIP: 0033:0x7f5ca757e819 [ 1044.309748][T18944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.329370][T18944] RSP: 002b:00007f5ca8409038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1044.337793][T18944] RAX: ffffffffffffffda RBX: 00007f5ca7735fa0 RCX: 00007f5ca757e819 [ 1044.345770][T18944] RDX: 0000000000000006 RSI: 0000000020000140 RDI: 0000000000000004 [ 1044.353744][T18944] RBP: 00007f5ca8409090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.361718][T18944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1044.369694][T18944] R13: 0000000000000000 R14: 00007f5ca7735fa0 R15: 00007fff251c0618 [ 1044.377690][T18944] [ 1044.380761][ C1] vkms_vblank_simulate: vblank timer overrun [ 1045.069382][T18958] overlayfs: failed to resolve './file0': -2 [ 1045.093347][T18958] rdma_op ffff88805b4961f0 conn xmit_rdma 0000000000000000 [ 1045.560727][ T1196] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1045.583523][T18977] overlayfs: missing 'lowerdir' [ 1045.721091][ T1196] usb 6-1: Using ep0 maxpacket: 16 [ 1045.734932][ T1196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.746066][ T1196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.911093][T17038] Bluetooth: hci1: command 0x0406 tx timeout [ 1045.927318][ T1196] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1046.072410][ T1196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.087674][ T1196] usb 6-1: config 0 descriptor?? [ 1046.586054][ T1196] samsung 0003:0419:0001.0020: unknown main item tag 0x0 [ 1046.591199][ T29] audit: type=1400 audit(2000000317.809:1142): avc: denied { ioctl } for pid=18994 comm="syz.6.3201" path="socket:[64591]" dev="sockfs" ino=64591 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1046.594221][ T1196] samsung 0003:0419:0001.0020: unknown main item tag 0x0 [ 1046.656974][ T1196] samsung 0003:0419:0001.0020: unknown main item tag 0x0 [ 1046.671086][ T1196] samsung 0003:0419:0001.0020: unknown main item tag 0x0 [ 1046.685712][ T1196] samsung 0003:0419:0001.0020: unknown main item tag 0x0 [ 1046.705245][ T1196] samsung 0003:0419:0001.0020: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.5-1/input0 [ 1046.926653][ T1196] usb 6-1: USB disconnect, device number 79 [ 1047.141101][T10495] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1047.360697][ T29] audit: type=1400 audit(2000000318.569:1143): avc: denied { write } for pid=19006 comm="syz.5.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1047.421540][T10495] usb 3-1: Using ep0 maxpacket: 32 [ 1047.464414][T10495] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1047.492457][T10495] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1047.501893][T10495] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1047.510059][T10495] usb 3-1: Product: syz [ 1047.525550][T10495] usb 3-1: Manufacturer: syz [ 1047.530254][T10495] usb 3-1: SerialNumber: syz [ 1047.558903][T10495] usb 3-1: config 0 descriptor?? [ 1047.572908][T19002] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1047.990869][ T1196] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1048.140943][ T1196] usb 7-1: Using ep0 maxpacket: 32 [ 1048.150045][ T1196] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1048.164960][ T1196] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1048.174407][ T1196] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1048.186708][ T1196] usb 7-1: Product: syz [ 1048.200808][ T1196] usb 7-1: Manufacturer: syz [ 1048.210950][ T1196] usb 7-1: SerialNumber: syz [ 1048.219831][ T1196] usb 7-1: config 0 descriptor?? [ 1048.233672][T19014] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1048.249496][ T1196] chaoskey 7-1:0.0: Unable to register with hwrng [ 1048.292344][T19008] syz.5.3204 (19008): drop_caches: 2 [ 1048.364752][T19012] syz.5.3204 (19012): drop_caches: 2 [ 1048.469227][ T1196] usb 7-1: USB disconnect, device number 45 [ 1048.509385][T19019] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1048.545611][T19019] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1048.561245][T19019] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1049.186064][T19028] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3209'. [ 1049.280189][ T29] audit: type=1400 audit(2000000320.049:1144): avc: denied { read } for pid=19021 comm="syz.7.3209" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1049.383316][ T29] audit: type=1400 audit(2000000320.049:1145): avc: denied { open } for pid=19021 comm="syz.7.3209" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1049.402695][T19030] netlink: 'syz.5.3210': attribute type 10 has an invalid length. [ 1049.437484][T19030] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3210'. [ 1049.446770][ T29] audit: type=1400 audit(2000000320.059:1146): avc: denied { ioctl } for pid=19021 comm="syz.7.3209" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1049.999902][T10495] usb 3-1: USB disconnect, device number 95 [ 1050.611688][ T29] audit: type=1400 audit(2000000321.829:1147): avc: denied { mount } for pid=19045 comm="syz.7.3217" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1050.614775][T19051] devpts: called with bogus options [ 1050.636517][T19039] syz.6.3213 (19039) used greatest stack depth: 19072 bytes left [ 1050.738497][ T29] audit: type=1400 audit(2000000321.839:1148): avc: denied { unmount } for pid=19045 comm="syz.7.3217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1050.980771][ T29] audit: type=1400 audit(2000000321.839:1149): avc: denied { remount } for pid=19045 comm="syz.7.3217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1051.132274][T19058] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1051.148808][T19058] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1051.165009][T19058] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1051.501477][ T1196] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1051.650864][ T45] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1051.860949][ T1196] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1051.861130][ T45] usb 7-1: Using ep0 maxpacket: 32 [ 1051.916449][ T45] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1051.917156][ T1196] usb 3-1: not running at top speed; connect to a high speed hub [ 1051.951591][ T45] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1051.954692][ T1196] usb 3-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 1051.966278][ T45] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1051.975371][ T1196] usb 3-1: config 219 interface 0 has no altsetting 0 [ 1051.985135][ T1196] usb 3-1: config 219 interface 0 has no altsetting 1 [ 1051.988588][ T45] usb 7-1: Product: syz [ 1052.008500][ T1196] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 1052.010672][ T45] usb 7-1: Manufacturer: syz [ 1052.033995][ T1196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.042985][ T45] usb 7-1: SerialNumber: syz [ 1052.057499][ T45] usb 7-1: config 0 descriptor?? [ 1052.075932][T19066] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1052.089574][ T1196] usb 3-1: Product: syz [ 1052.107848][ T1196] usb 3-1: Manufacturer: syz [ 1052.112855][ T1196] usb 3-1: SerialNumber: syz [ 1052.339402][T19053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.349624][T19053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.352533][ T45] usb 7-1: USB disconnect, device number 46 [ 1052.381104][ T1196] usb 3-1: selecting invalid altsetting 0 [ 1052.387180][ T1196] usb 3-1: selecting invalid altsetting 0 [ 1052.556184][ T29] audit: type=1400 audit(2000000323.709:1150): avc: denied { execute_no_trans } for pid=19074 comm="syz.5.3226" path="/442/file0" dev="tmpfs" ino=2391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1052.790353][ T29] audit: type=1400 audit(2000000323.729:1151): avc: denied { name_bind } for pid=19074 comm="syz.5.3226" src=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 1052.891113][ T1196] usb 3-1: USB disconnect, device number 96 [ 1053.305414][ T29] audit: type=1400 audit(2000000324.529:1152): avc: denied { bind } for pid=19084 comm="syz.5.3230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1054.371489][ T29] audit: type=1400 audit(2000000325.589:1153): avc: denied { setopt } for pid=19092 comm="syz.5.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1054.390964][ C0] vkms_vblank_simulate: vblank timer overrun [ 1055.415038][T19103] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1055.424508][T19103] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1055.436158][T19103] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1056.241254][T10495] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1056.423623][T10495] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1056.455271][T10495] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1056.507292][T10495] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1056.541000][T10495] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1056.620495][T10495] usb 7-1: SerialNumber: syz [ 1056.847955][T10495] usb 7-1: 0:2 : does not exist [ 1056.853449][T18024] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1057.161294][T18024] usb 3-1: Using ep0 maxpacket: 32 [ 1057.177632][T18024] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1057.192968][T18024] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1057.220990][T18024] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1057.239559][T18024] usb 3-1: Product: syz [ 1057.246906][ T29] audit: type=1400 audit(2000000328.469:1154): avc: denied { create } for pid=19126 comm="syz.0.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1057.267545][T18024] usb 3-1: Manufacturer: syz [ 1057.276824][T18024] usb 3-1: SerialNumber: syz [ 1057.287847][T18024] usb 3-1: config 0 descriptor?? [ 1057.299158][T19121] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1057.800325][ T45] usb 3-1: USB disconnect, device number 97 [ 1058.551124][ T45] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 1058.737048][ T5884] usb 7-1: USB disconnect, device number 47 [ 1058.766291][T19143] netlink: 'syz.2.3246': attribute type 10 has an invalid length. [ 1058.772332][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1058.782358][T19143] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3246'. [ 1058.858624][ T45] usb 6-1: not running at top speed; connect to a high speed hub [ 1058.879871][ T45] usb 6-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 1058.893565][ T45] usb 6-1: config 219 interface 0 has no altsetting 0 [ 1059.216683][ T45] usb 6-1: config 219 interface 0 has no altsetting 1 [ 1059.295686][T19150] netlink: 'syz.7.3248': attribute type 10 has an invalid length. [ 1059.452022][T19150] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3248'. [ 1059.597796][ T45] usb 6-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 1059.628808][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.675746][ T45] usb 6-1: Product: syz [ 1059.680362][ T45] usb 6-1: Manufacturer: syz [ 1059.685772][ T45] usb 6-1: SerialNumber: syz [ 1059.776228][T19150] team0: Port device geneve0 added [ 1059.902588][T19137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.016643][T19137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.108800][ T45] usb 6-1: selecting invalid altsetting 0 [ 1060.121526][ T45] usb 6-1: selecting invalid altsetting 0 [ 1060.665212][T19172] netlink: 'syz.6.3254': attribute type 12 has an invalid length. [ 1060.673330][T19172] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3254'. [ 1060.877520][ T45] usb 6-1: USB disconnect, device number 80 [ 1061.380798][ T5884] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1061.560138][ T5884] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1061.626752][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.693236][ T5884] usb 3-1: config 0 descriptor?? [ 1062.298973][T13530] udevd[13530]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1062.652754][ T5884] gs_usb 3-1:0.0: Configuring for 67 interfaces [ 1062.659073][ T5884] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1062.672037][ T5884] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 1063.003270][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3252'. [ 1063.012291][T19170] netlink: 'syz.2.3252': attribute type 3 has an invalid length. [ 1063.030052][ T45] usb 3-1: USB disconnect, device number 98 [ 1065.561765][T19236] netlink: 'syz.6.3263': attribute type 10 has an invalid length. [ 1065.569785][T19236] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3263'. [ 1066.194151][ T29] audit: type=1400 audit(2000000337.419:1155): avc: denied { getopt } for pid=19241 comm="syz.2.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1066.695780][T13282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.704567][T13282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.150993][T18024] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1067.182640][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3270'. [ 1067.922616][T18024] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1067.938268][T18024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.951812][T18024] usb 3-1: Product: syz [ 1067.956004][T18024] usb 3-1: Manufacturer: syz [ 1067.961008][T18024] usb 3-1: SerialNumber: syz [ 1067.977153][T18024] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1068.088938][T10495] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1068.230779][ T5884] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1068.380858][ T5884] usb 6-1: Using ep0 maxpacket: 32 [ 1069.021174][ T5884] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1069.096140][ T5884] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1069.115494][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1069.161561][T10495] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1069.193246][T10495] ath9k_htc: Failed to initialize the device [ 1069.340301][ T5884] usb 6-1: Product: syz [ 1069.344049][T10495] usb 3-1: ath9k_htc: USB layer deinitialized [ 1069.451062][ T5884] usb 6-1: Manufacturer: syz [ 1069.462963][ T1196] usb 3-1: USB disconnect, device number 99 [ 1069.488171][ T5884] usb 6-1: SerialNumber: syz [ 1069.542043][ T5884] usb 6-1: config 0 descriptor?? [ 1069.548744][T19277] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1069.788137][ T29] audit: type=1400 audit(2000000340.999:1156): avc: denied { create } for pid=19289 comm="syz.7.3279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1070.521812][ T29] audit: type=1400 audit(2000000341.009:1157): avc: denied { connect } for pid=19289 comm="syz.7.3279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1070.653563][T18024] usb 6-1: USB disconnect, device number 81 [ 1072.476248][ T5884] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1073.134304][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3287'. [ 1073.187043][T19326] binder: BINDER_SET_CONTEXT_MGR already set [ 1073.195390][T19326] binder: 19324:19326 ioctl 4018620d 20004a80 returned -16 [ 1073.210737][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 1073.218471][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.229793][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.229831][ T5884] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1073.229854][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.301748][ T5884] usb 3-1: config 0 descriptor?? [ 1073.620017][ T29] audit: type=1400 audit(2000000344.839:1158): avc: denied { append } for pid=19331 comm="syz.6.3290" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1073.655897][T19333] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3290'. [ 1073.683928][T19335] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3290'. [ 1073.955972][T19342] 9pnet_fd: Insufficient options for proto=fd [ 1074.446714][ T5884] usbhid 3-1:0.0: can't add hid device: -71 [ 1074.453034][ T5884] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1074.897248][ T5884] usb 3-1: USB disconnect, device number 100 [ 1075.435921][ T5884] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1075.453948][ T29] audit: type=1400 audit(2000000346.599:1159): avc: denied { getopt } for pid=19358 comm="syz.7.3300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1076.006734][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1076.017813][ T5884] usb 3-1: not running at top speed; connect to a high speed hub [ 1076.035060][ T5884] usb 3-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 1076.069437][ T5884] usb 3-1: config 219 interface 0 has no altsetting 0 [ 1076.087907][ T5884] usb 3-1: config 219 interface 0 has no altsetting 1 [ 1076.105885][ T5884] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 1076.115471][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.123861][ T5884] usb 3-1: Product: syz [ 1076.128120][ T5884] usb 3-1: Manufacturer: syz [ 1076.133317][ T5884] usb 3-1: SerialNumber: syz [ 1076.330817][T18024] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1076.403740][T19351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.452506][T19351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.482395][ T5884] usb 3-1: selecting invalid altsetting 0 [ 1076.488339][ T5884] usb 3-1: selecting invalid altsetting 0 [ 1077.111963][T18024] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.137643][T18024] usb 7-1: config 0 has no interfaces? [ 1077.146599][T18024] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1077.161921][T18024] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.169927][T18024] usb 7-1: Product: syz [ 1077.207441][T18024] usb 7-1: Manufacturer: syz [ 1077.217259][ T5884] usb 3-1: USB disconnect, device number 101 [ 1077.251572][T18024] usb 7-1: SerialNumber: syz [ 1077.285770][T18024] usb 7-1: config 0 descriptor?? [ 1077.301070][T19373] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3303'. [ 1077.428209][T13530] udevd[13530]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1077.521544][T19367] FAULT_INJECTION: forcing a failure. [ 1077.521544][T19367] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.075314][T19367] CPU: 1 UID: 0 PID: 19367 Comm: syz.6.3301 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 1078.085760][T19367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1078.095806][T19367] Call Trace: [ 1078.099068][T19367] [ 1078.101988][T19367] dump_stack_lvl+0x16c/0x1f0 [ 1078.106661][T19367] should_fail_ex+0x497/0x5b0 [ 1078.111327][T19367] ? fs_reclaim_acquire+0xae/0x150 [ 1078.116430][T19367] should_failslab+0xc2/0x120 [ 1078.121092][T19367] __kmalloc_cache_noprof+0x6b/0x300 [ 1078.126365][T19367] ? copy_mount_options+0x55/0x190 [ 1078.131460][T19367] ? _copy_from_user+0x59/0xd0 [ 1078.136207][T19367] copy_mount_options+0x55/0x190 [ 1078.141130][T19367] __x64_sys_mount+0x1ad/0x320 [ 1078.145883][T19367] ? __pfx___x64_sys_mount+0x10/0x10 [ 1078.151175][T19367] do_syscall_64+0xcd/0x250 [ 1078.155691][T19367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.161588][T19367] RIP: 0033:0x7f680ad7e819 [ 1078.166004][T19367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1078.185615][T19367] RSP: 002b:00007f680bb40038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1078.194019][T19367] RAX: ffffffffffffffda RBX: 00007f680af35fa0 RCX: 00007f680ad7e819 [ 1078.201976][T19367] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 1078.209930][T19367] RBP: 00007f680bb40090 R08: 0000000020000000 R09: 0000000000000000 [ 1078.217884][T19367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.225842][T19367] R13: 0000000000000000 R14: 00007f680af35fa0 R15: 00007ffccd9b2fb8 [ 1078.233805][T19367] [ 1078.284087][ T29] audit: type=1400 audit(2000000349.509:1160): avc: denied { write } for pid=19385 comm="syz.0.3307" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1078.312189][ T5884] usb 7-1: USB disconnect, device number 48 [ 1078.325230][ T29] audit: type=1400 audit(2000000349.549:1161): avc: denied { map } for pid=19385 comm="syz.0.3307" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1078.348239][ C0] vkms_vblank_simulate: vblank timer overrun [ 1078.367487][ T29] audit: type=1400 audit(2000000349.549:1162): avc: denied { execute } for pid=19385 comm="syz.0.3307" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1078.808157][ T29] audit: type=1400 audit(2000000350.029:1163): avc: denied { write } for pid=19393 comm="syz.5.3308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1078.856102][ T29] audit: type=1400 audit(2000000350.069:1164): avc: denied { connect } for pid=19393 comm="syz.5.3308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1078.881561][T19395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3309'. [ 1078.890452][T19395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3309'. [ 1080.005870][T19420] netlink: 'syz.5.3319': attribute type 10 has an invalid length. [ 1080.014007][T19420] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3319'. [ 1080.096279][T19423] overlay: ./bus is not a directory [ 1080.122303][ T29] audit: type=1400 audit(2000000351.349:1165): avc: denied { read } for pid=19422 comm="syz.5.3320" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1080.145108][ C0] vkms_vblank_simulate: vblank timer overrun [ 1080.168138][ T29] audit: type=1400 audit(2000000351.379:1166): avc: denied { open } for pid=19422 comm="syz.5.3320" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1080.212872][ T29] audit: type=1400 audit(2000000351.389:1167): avc: denied { create } for pid=19416 comm="syz.2.3318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1080.371013][ T29] audit: type=1400 audit(2000000351.419:1168): avc: denied { ioctl } for pid=19416 comm="syz.2.3318" path="socket:[65311]" dev="sockfs" ino=65311 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1080.395953][ C0] vkms_vblank_simulate: vblank timer overrun [ 1081.076005][T19439] kvm: emulating exchange as write [ 1081.124422][ T29] audit: type=1400 audit(2000000352.349:1169): avc: denied { ioctl } for pid=19422 comm="syz.5.3320" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1081.971023][T16170] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1082.601191][T16170] usb 3-1: Using ep0 maxpacket: 32 [ 1082.609829][T16170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.626338][T16170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.730394][T16170] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1082.760676][T16170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.813987][T16170] usb 3-1: config 0 descriptor?? [ 1082.886758][T19462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3329'. [ 1083.324887][T19462] nbd: couldn't find a device at index 99 [ 1083.687905][T19467] netlink: 'syz.5.3331': attribute type 10 has an invalid length. [ 1083.696064][T19467] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3331'. [ 1084.069942][T16170] usbhid 3-1:0.0: can't add hid device: -71 [ 1084.076768][T16170] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1084.101599][T16170] usb 3-1: USB disconnect, device number 102 [ 1087.168066][ T29] audit: type=1400 audit(2000000358.369:1170): avc: denied { create } for pid=19505 comm="syz.6.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1087.443162][T19510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3342'. [ 1087.455932][T19510] ufs: You didn't specify the type of your ufs filesystem [ 1087.455932][T19510] [ 1087.455932][T19510] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1087.455932][T19510] [ 1087.455932][T19510] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1087.486890][ C0] vkms_vblank_simulate: vblank timer overrun [ 1087.495740][T19510] ufs: ufs_fill_super(): bad magic number [ 1088.021272][ T29] audit: type=1400 audit(2000000358.369:1171): avc: denied { write } for pid=19505 comm="syz.6.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1088.237634][ T29] audit: type=1400 audit(2000000358.369:1172): avc: denied { setopt } for pid=19505 comm="syz.6.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1088.257928][ T29] audit: type=1400 audit(2000000358.369:1173): avc: denied { read } for pid=19505 comm="syz.6.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1088.480891][T19516] netlink: 'syz.7.3346': attribute type 10 has an invalid length. [ 1088.488752][T19516] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3346'. [ 1090.664947][ T29] audit: type=1400 audit(2000000361.849:1174): avc: denied { read } for pid=19534 comm="syz.0.3351" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1090.947664][ T29] audit: type=1400 audit(2000000361.859:1175): avc: denied { open } for pid=19534 comm="syz.0.3351" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1091.083492][ T29] audit: type=1400 audit(2000000361.859:1176): avc: denied { ioctl } for pid=19534 comm="syz.0.3351" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1091.649686][T19554] 9pnet_fd: Insufficient options for proto=fd [ 1092.491971][T19555] ip_vti0 speed is unknown, defaulting to 1000 [ 1092.675646][T19556] tipc: Started in network mode [ 1092.732759][T19556] tipc: Node identity ffffffff, cluster identity 4711 [ 1092.739566][T19556] tipc: Node number set to 4294967295 [ 1092.920752][T19566] netlink: 'syz.2.3357': attribute type 12 has an invalid length. [ 1092.928679][T19566] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3357'. [ 1093.892977][T19574] netlink: 'syz.6.3358': attribute type 12 has an invalid length. [ 1093.900924][T19574] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3358'. [ 1095.320837][T19586] netlink: 'syz.7.3361': attribute type 10 has an invalid length. [ 1095.328720][T19586] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3361'. [ 1095.932466][T18024] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1096.070739][ T29] audit: type=1400 audit(2000000367.289:1177): avc: denied { write } for pid=19590 comm="syz.7.3365" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1096.120769][T18024] usb 3-1: Using ep0 maxpacket: 32 [ 1096.131166][T18024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.158285][T18024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.181888][T18024] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1096.190942][T18024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.202751][T18024] usb 3-1: config 0 descriptor?? [ 1096.706330][T19601] netlink: 'syz.5.3367': attribute type 33 has an invalid length. [ 1096.720918][T19601] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3367'. [ 1096.841964][T19601] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3367'. [ 1096.874614][ T29] audit: type=1326 audit(2000000368.099:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19600 comm="syz.5.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d57e819 code=0x7ffc0000 [ 1096.915474][ T29] audit: type=1326 audit(2000000368.129:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19600 comm="syz.5.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f940d57e819 code=0x7ffc0000 [ 1097.014772][ T29] audit: type=1326 audit(2000000368.129:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19600 comm="syz.5.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d57e819 code=0x7ffc0000 [ 1097.018686][T18024] usbhid 3-1:0.0: can't add hid device: -71 [ 1097.221418][T18024] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1097.265206][T18024] usb 3-1: USB disconnect, device number 103 [ 1097.709891][ T29] audit: type=1326 audit(2000000368.129:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19600 comm="syz.5.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f940d57e819 code=0x7ffc0000 [ 1097.821793][ T29] audit: type=1326 audit(2000000368.129:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19600 comm="syz.5.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d57e819 code=0x7ffc0000 [ 1097.852962][ T29] audit: type=1326 audit(2000000368.129:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19600 comm="syz.5.3367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f940d57e819 code=0x7ffc0000 [ 1097.876929][ T29] audit: type=1400 audit(2000000368.269:1184): avc: denied { getopt } for pid=19600 comm="syz.5.3367" laddr=172.20.20.10 lport=38130 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1099.371020][T18024] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1099.534305][T18024] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1099.700668][T18024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.912197][T18024] usb 3-1: config 0 descriptor?? [ 1100.104434][T19633] FAULT_INJECTION: forcing a failure. [ 1100.104434][T19633] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.346113][T18024] gs_usb 3-1:0.0: Configuring for 67 interfaces [ 1100.360672][T18024] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1100.368524][T18024] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 1100.410911][T19633] CPU: 1 UID: 0 PID: 19633 Comm: syz.7.3377 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 1100.421361][T19633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1100.431412][T19633] Call Trace: [ 1100.434686][T19633] [ 1100.437611][T19633] dump_stack_lvl+0x16c/0x1f0 [ 1100.442298][T19633] should_fail_ex+0x497/0x5b0 [ 1100.446984][T19633] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1100.452618][T19633] should_failslab+0xc2/0x120 [ 1100.457292][T19633] __kmalloc_node_track_caller_noprof+0xcf/0x430 [ 1100.463616][T19633] ? sidtab_sid2str_get+0x17a/0x680 [ 1100.468823][T19633] kmemdup_noprof+0x29/0x60 [ 1100.473343][T19633] sidtab_sid2str_get+0x17a/0x680 [ 1100.478384][T19633] sidtab_entry_to_string+0x33/0x110 [ 1100.483675][T19633] security_sid_to_context_core+0x35c/0x640 [ 1100.489572][T19633] avc_audit_post_callback+0x1ac/0x8c0 [ 1100.495036][T19633] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1100.501021][T19633] ? audit_log_format+0xe9/0x130 [ 1100.505977][T19633] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1100.511971][T19633] ? skb_put+0x138/0x1b0 [ 1100.516227][T19633] ? audit_log_n_string+0x251/0x540 [ 1100.521445][T19633] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1100.527445][T19633] common_lsm_audit+0x260/0x2210 [ 1100.532396][T19633] ? __pfx_common_lsm_audit+0x10/0x10 [ 1100.537774][T19633] ? __pfx_lock_release+0x10/0x10 [ 1100.542797][T19633] ? __pfx_avc_node_free+0x10/0x10 [ 1100.547917][T19633] ? rcu_is_watching+0x12/0xc0 [ 1100.552691][T19633] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1100.558529][T19633] ? lockdep_hardirqs_on+0x7c/0x110 [ 1100.563734][T19633] ? slow_avc_audit+0x17d/0x210 [ 1100.568588][T19633] slow_avc_audit+0x17d/0x210 [ 1100.573277][T19633] ? __pfx_slow_avc_audit+0x10/0x10 [ 1100.578487][T19633] ? avc_denied+0x138/0x180 [ 1100.583004][T19633] ? avc_has_perm_noaudit+0x2f8/0x3a0 [ 1100.588386][T19633] avc_has_perm+0x18d/0x1c0 [ 1100.592899][T19633] ? __pfx_avc_has_perm+0x10/0x10 [ 1100.597930][T19633] ? __lock_acquire+0xcc5/0x3c40 [ 1100.602888][T19633] inode_has_perm+0x168/0x1d0 [ 1100.607580][T19633] selinux_mmap_file+0x10b/0x1b0 [ 1100.612523][T19633] ? __pfx_selinux_mmap_file+0x10/0x10 [ 1100.617987][T19633] ? __pfx_lock_release+0x10/0x10 [ 1100.623027][T19633] ? find_held_lock+0x2d/0x110 [ 1100.627812][T19633] security_mmap_file+0x85b/0x990 [ 1100.632854][T19633] vm_mmap_pgoff+0xdb/0x360 [ 1100.637367][T19633] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1100.642485][T19633] ? __fget_files+0x206/0x3a0 [ 1100.647174][T19633] ksys_mmap_pgoff+0x32c/0x5c0 [ 1100.651953][T19633] ? __pfx_ksys_write+0x10/0x10 [ 1100.656817][T19633] __x64_sys_mmap+0x125/0x190 [ 1100.661504][T19633] do_syscall_64+0xcd/0x250 [ 1100.666022][T19633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.671929][T19633] RIP: 0033:0x7f419357e819 [ 1100.676356][T19633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1100.695981][T19633] RSP: 002b:00007f41942fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1100.704511][T19633] RAX: ffffffffffffffda RBX: 00007f4193735fa0 RCX: 00007f419357e819 [ 1100.706810][T19639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3378'. [ 1100.712474][T19633] RDX: bfdb2ec4b0ddc176 RSI: 0000000000001000 RDI: 0000000020ffd000 [ 1100.712497][T19633] RBP: 00007f41942fa090 R08: 0000000000000003 R09: 0000000000000000 [ 1100.712508][T19633] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 1100.712519][T19633] R13: 0000000000000000 R14: 00007f4193735fa0 R15: 00007ffe2aaf43b8 [ 1100.712543][T19633] [ 1100.712635][ C1] vkms_vblank_simulate: vblank timer overrun [ 1100.721927][T19638] ------------[ cut here ]------------ [ 1100.769233][T19638] platform vkms: [drm] vblank wait timed out on crtc 0 [ 1100.776271][T19638] WARNING: CPU: 0 PID: 19638 at drivers/gpu/drm/drm_vblank.c:1307 drm_wait_one_vblank+0x334/0x550 [ 1100.787207][T19638] Modules linked in: [ 1100.791147][T19638] CPU: 0 UID: 0 PID: 19638 Comm: syz.0.3378 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 1100.801701][T19638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1100.811910][T19638] RIP: 0010:drm_wait_one_vblank+0x334/0x550 [ 1100.817892][T19638] Code: 85 ed 0f 84 54 01 00 00 e8 f9 2c 5e fc 4c 89 e7 e8 d1 12 87 00 89 e9 4c 89 ea 48 c7 c7 e0 af e7 8b 48 89 c6 e8 ad d4 1e fc 90 <0f> 0b 90 90 e9 0d fe ff ff e8 ce 2c 5e fc 90 48 8d 7b 08 48 b8 00 [ 1100.837658][T19638] RSP: 0018:ffffc9000bd5fb28 EFLAGS: 00010286 [ 1100.843992][T19638] RAX: 0000000000000000 RBX: ffff888025360000 RCX: ffffc9000c349000 [ 1100.852052][T19638] RDX: 0000000000080000 RSI: ffffffff814e95c6 RDI: 0000000000000001 [ 1100.860005][T19638] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1100.868070][T19638] R10: 0000000000000000 R11: 0000000000027010 R12: ffff888142361010 [ 1100.876313][T19638] R13: ffff888020b4d840 R14: 1ffff920017abf67 R15: 000000000000ff8c [ 1100.884514][T19638] FS: 00007f24642d26c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1100.893504][T19638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1100.900081][T19638] CR2: 0000001b33cfcff8 CR3: 000000006356a000 CR4: 00000000003526f0 [ 1100.908404][T19638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1100.916389][T19638] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1100.924381][T19638] Call Trace: [ 1100.927645][T19638] [ 1100.930566][T19638] ? __warn+0xea/0x3d0 [ 1100.934781][T19638] ? lock_acquire.part.0+0x11b/0x380 [ 1100.940046][T19638] ? drm_wait_one_vblank+0x334/0x550 [ 1100.945350][T19638] ? report_bug+0x3c0/0x580 [ 1100.950098][T19638] ? handle_bug+0x54/0xa0 [ 1100.954451][T19638] ? exc_invalid_op+0x17/0x50 [ 1100.959131][T19638] ? asm_exc_invalid_op+0x1a/0x20 [ 1100.964315][T19638] ? __warn_printk+0x1a6/0x350 [ 1100.969061][T19638] ? drm_wait_one_vblank+0x334/0x550 [ 1100.974361][T19638] ? drm_wait_one_vblank+0x333/0x550 [ 1100.979625][T19638] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1100.985361][T19638] ? mark_held_locks+0x9f/0xe0 [ 1100.990242][T19638] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1100.996473][T19638] ? lockdep_hardirqs_on+0x7c/0x110 [ 1101.001719][T19638] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1101.007538][T19638] ? drm_vblank_get+0x150/0x280 [ 1101.012469][T19638] drm_fb_helper_ioctl+0x156/0x1a0 [ 1101.017598][T19638] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 1101.023697][T19638] do_fb_ioctl+0x3d4/0x7d0 [ 1101.028141][T19638] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1101.033140][T19638] ? do_vfs_ioctl+0x513/0x1990 [ 1101.037922][T19638] ? selinux_file_ioctl+0x180/0x270 [ 1101.043129][T19638] fb_ioctl+0xe5/0x150 [ 1101.047177][T19638] ? __pfx_fb_ioctl+0x10/0x10 [ 1101.052007][T19638] __x64_sys_ioctl+0x190/0x200 [ 1101.056758][T19638] do_syscall_64+0xcd/0x250 [ 1101.061293][T19638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.067170][T19638] RIP: 0033:0x7f246357e819 [ 1101.071592][T19638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1101.091432][T19638] RSP: 002b:00007f24642d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.099826][T19638] RAX: ffffffffffffffda RBX: 00007f2463736080 RCX: 00007f246357e819 [ 1101.107860][T19638] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000009 [ 1101.115844][T19638] RBP: 00007f24635f175e R08: 0000000000000000 R09: 0000000000000000 [ 1101.123981][T19638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1101.131967][T19638] R13: 0000000000000000 R14: 00007f2463736080 R15: 00007ffe575ad6c8 [ 1101.139943][T19638] [ 1101.142996][T19638] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1101.150257][T19638] CPU: 0 UID: 0 PID: 19638 Comm: syz.0.3378 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 1101.160655][T19638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1101.170692][T19638] Call Trace: [ 1101.173959][T19638] [ 1101.176881][T19638] dump_stack_lvl+0x3d/0x1f0 [ 1101.181464][T19638] panic+0x71d/0x800 [ 1101.185337][T19638] ? __pfx_panic+0x10/0x10 [ 1101.189731][T19638] ? show_trace_log_lvl+0x29d/0x3d0 [ 1101.194911][T19638] ? drm_wait_one_vblank+0x334/0x550 [ 1101.200173][T19638] check_panic_on_warn+0xab/0xb0 [ 1101.205093][T19638] __warn+0xf6/0x3d0 [ 1101.208980][T19638] ? lock_acquire.part.0+0x11b/0x380 [ 1101.214241][T19638] ? drm_wait_one_vblank+0x334/0x550 [ 1101.219510][T19638] report_bug+0x3c0/0x580 [ 1101.223819][T19638] handle_bug+0x54/0xa0 [ 1101.227954][T19638] exc_invalid_op+0x17/0x50 [ 1101.232440][T19638] asm_exc_invalid_op+0x1a/0x20 [ 1101.237268][T19638] RIP: 0010:drm_wait_one_vblank+0x334/0x550 [ 1101.243149][T19638] Code: 85 ed 0f 84 54 01 00 00 e8 f9 2c 5e fc 4c 89 e7 e8 d1 12 87 00 89 e9 4c 89 ea 48 c7 c7 e0 af e7 8b 48 89 c6 e8 ad d4 1e fc 90 <0f> 0b 90 90 e9 0d fe ff ff e8 ce 2c 5e fc 90 48 8d 7b 08 48 b8 00 [ 1101.262747][T19638] RSP: 0018:ffffc9000bd5fb28 EFLAGS: 00010286 [ 1101.268790][T19638] RAX: 0000000000000000 RBX: ffff888025360000 RCX: ffffc9000c349000 [ 1101.276925][T19638] RDX: 0000000000080000 RSI: ffffffff814e95c6 RDI: 0000000000000001 [ 1101.284869][T19638] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1101.292821][T19638] R10: 0000000000000000 R11: 0000000000027010 R12: ffff888142361010 [ 1101.300781][T19638] R13: ffff888020b4d840 R14: 1ffff920017abf67 R15: 000000000000ff8c [ 1101.308750][T19638] ? __warn_printk+0x1a6/0x350 [ 1101.313508][T19638] ? drm_wait_one_vblank+0x333/0x550 [ 1101.318770][T19638] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1101.324376][T19638] ? mark_held_locks+0x9f/0xe0 [ 1101.329208][T19638] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1101.335248][T19638] ? lockdep_hardirqs_on+0x7c/0x110 [ 1101.340431][T19638] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1101.346224][T19638] ? drm_vblank_get+0x150/0x280 [ 1101.351053][T19638] drm_fb_helper_ioctl+0x156/0x1a0 [ 1101.356140][T19638] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 1101.361746][T19638] do_fb_ioctl+0x3d4/0x7d0 [ 1101.366138][T19638] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1101.371052][T19638] ? do_vfs_ioctl+0x513/0x1990 [ 1101.375803][T19638] ? selinux_file_ioctl+0x180/0x270 [ 1101.380979][T19638] fb_ioctl+0xe5/0x150 [ 1101.385022][T19638] ? __pfx_fb_ioctl+0x10/0x10 [ 1101.389760][T19638] __x64_sys_ioctl+0x190/0x200 [ 1101.394499][T19638] do_syscall_64+0xcd/0x250 [ 1101.398987][T19638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.404876][T19638] RIP: 0033:0x7f246357e819 [ 1101.409270][T19638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1101.428860][T19638] RSP: 002b:00007f24642d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.437260][T19638] RAX: ffffffffffffffda RBX: 00007f2463736080 RCX: 00007f246357e819 [ 1101.445206][T19638] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000009 [ 1101.453152][T19638] RBP: 00007f24635f175e R08: 0000000000000000 R09: 0000000000000000 [ 1101.461105][T19638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1101.469060][T19638] R13: 0000000000000000 R14: 00007f2463736080 R15: 00007ffe575ad6c8 [ 1101.477013][T19638] [ 1101.480211][T19638] Kernel Offset: disabled [ 1101.484587][T19638] Rebooting in 86400 seconds..