last executing test programs: 3m44.350087752s ago: executing program 0 (id=198): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "1fb9091b04ca6e76567ce487a7430edc"}, @NL80211_ATTR_PMK={0x14, 0xfe, "4158478ab4834b74ff8395908d3fb5e3"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6ca43595e11ed24e357920498bd329cb"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x17, 0x5f}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) 3m44.26597575s ago: executing program 0 (id=199): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$fuse(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000ac0)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)={0x19}) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601010405050724040501f49b"], 0x0) socket$kcm(0x2b, 0x1, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 3m40.794636759s ago: executing program 0 (id=208): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) unshare(0x22020600) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) r2 = fsopen(&(0x7f0000000040)='omfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='2', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x80c, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7a0, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, {0x4e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_ELEM_EXPRESSIONS={0x488, 0xb, 0x0, 0x1, [{0x3e8, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x3d8, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RANGE_FROM_DATA={0x190, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9a, 0x1, "1bdfe9fb4425f5633960ed32c4875bb86cc77bde75aa1c021c4bea5cb19b4abdb746a47678468482bb8511c083a4865c84f082ef8708a3b82b30379e83b0ea442c997c644906ea7912964fc9496c0a5dfbe789a459900cf14a474091f8e846e664ecfb721d242e3a78c5caf0750064c38e256166f6c1a7791de09c17961fff8521989b2eb1887589a30ee79efefa6c288c9e71cf2ee0"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x51, 0x1, "33318e4196f2fde2ee8e5c2ed439e8ea97aaad0f55c3d7e2b3c3197aa27156290b5fef922fb2c6e3fe240db803722de0e7c4126a26175f17559066fe0712f84210aac89ff85f52a35a4e4338c1"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "c8b3ff2ea8b0a8fa2055f1048063f0ca5a690e72a561d6f4"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RANGE_FROM_DATA={0x21c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "ae511f1bfbd8d28dfb690dcb06ff387ea3aacf14a645b481fc47b9eea14db416af5d4a6734bf8ac27506e97a23203a1fb3a36fe58bf2af048c7ecf5c2b9d03f02123a581d4633803625ae4c5ef8bd308e06e807105e4641a7b67c5f673"}, @NFTA_DATA_VALUE={0xdd, 0x1, "0336bafc339e8d2088caee3a062d3e36fe16add1ac695992aad89451ddc4cff7fc1f9502a99133912bf1b08fbf45bf572003c62c5892dc29b0e85c69353b92be986996edba9f774f7d0a3077629a084d7615770cc45d6f43f79fde6a2041c2576d28c91711508cbae2e45e5569d6c315fd05cffd584ac12b31e14bdb57c684f433a65228a031f22f0c6066e8d1d07a2a80f2e7a5546b2441ab93ac5e444f66f6c00f171677bc472d6f1e7bcceb4d355ac3d427090a2c7e1af8103398b4e3edb1b98eb9db034a45b4c34b9c353dbb09ee56587e06ca536eee30"}, @NFTA_DATA_VALUE={0xd4, 0x1, "c79e1f03b779f5017f341fbac3655618e54cfbf143d51af979e34a11246f3792f7f5faa8f24cb87962321e0098c84b7c9bc6cfc804c5aa6f23de3bfa299e2558bc8688e4a43080e128d92daa916126b938e5fb0b594fdcc3c2d3c2e4ae72aed31c86f43dae16ef3d8a3806ac344ce9feab383bdaec17c6ff67e2acbdf75b61be16057988a5ecab2181ad1eb63e8276d12955743bc15a21fb555ada44b1f8c425074dbfed2ac5ee97ed10636da5ba87115c56a7b341f61aadb9b3f97fe1658f474c25bce9d646ca4cd7039af4b41b16f1"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x48, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7d}]}}}, {0x34, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x20, 0x6, 0x1, 0x0, "e79feca05716f99db260d890a744af61db8f6d3a44fdbcc32f4ce2f2"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x298, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_ELEM_DATA={0x180, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "856d02a78cd2b04ab1ff64610d9fcaf88e8e8dee9bc7d5643985dc3545c0497372874c6a03e64913905490d4c7773d031bc933a4c1ec0ce493f51918fdecd17376ea7f5fa7cea97b799e8587dce0c1cdd1b12762f59d5c3dceb79a104289a20a57495ee6823073de98ffd7a07bd314b40a01d9b12d951f9aa0e5a585231c780bd677708cfe11fb3676e294affe1e71f57610fb540bdb3213f34edd2d37acc91cb3a3683110633db4b574329a4639a33e651c2a0833e6dfba"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x47, 0x1, "3a83e138ea42b5585537bb622d20868bc707c3d2fae8a4f72571d57e7bd8d8343e4b48f55a7c8290c4e03d59173b8b5dd5b9cefc8b5fa1fc97b68d00cdf63201a6000c"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x60, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x80}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4a4}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x2b8, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1a4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}]}], {0x14}}, 0xb20}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 3m40.256685477s ago: executing program 0 (id=214): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x4, 0x2, 0x8, 0xc, 0x2, 0xac, 0xc5, 0x9, 0xf5, 0x3, 0x9, 0x3, 0xfb, 0x3}, 0xe) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x21, 0x7}, 0x4) setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f0000000600)=0x5bb, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r5, r4, 0x0, 0x7ffffffd) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000000680)={{r0}, "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"}) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={r6, @in={{0x2, 0x4e20, @empty}}, [0x9, 0x8, 0x233666cf, 0x4, 0x8001, 0x1, 0x4, 0x8000000000000000, 0x3, 0x1, 0x6, 0x3, 0x2000dc3, 0x8, 0x7]}, &(0x7f0000000300)=0x100) 3m39.42915434s ago: executing program 0 (id=220): mount_setattr(0xffffffffffffffff, 0x0, 0x8900, &(0x7f0000000000)={0x0, 0x10004a, 0x80000}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000010000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x80, 0x80, 0x0, 0xfe, 0x5, 0xfe}, [@RTA_DST={0x8, 0x1, @local}, @RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 3m39.166081214s ago: executing program 0 (id=221): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYBLOB="00000000000001000d00000020000180140002007866726d3000000000000000000000000800"], 0x34}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r1], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ff030000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000008500000007000200bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000005c0)={0x8604}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c00fb001a0001000000000000000001000000000000ff0000240000"], 0x1c}}, 0x0) syz_open_pts(0xffffffffffffffff, 0x400200) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000340)={0x0, 0x80006, 0x1, 0x2, '\x00', '\x00', '\x00', 0x7, 0x0, 0x2000100, 0x0, "a900"}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x6ce102, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r7, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0xd37, 0x10580) fstat(r7, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) 3m38.606238484s ago: executing program 32 (id=221): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYBLOB="00000000000001000d00000020000180140002007866726d3000000000000000000000000800"], 0x34}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r1], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ff030000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000008500000007000200bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000005c0)={0x8604}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c00fb001a0001000000000000000001000000000000ff0000240000"], 0x1c}}, 0x0) syz_open_pts(0xffffffffffffffff, 0x400200) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000340)={0x0, 0x80006, 0x1, 0x2, '\x00', '\x00', '\x00', 0x7, 0x0, 0x2000100, 0x0, "a900"}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x6ce102, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r7, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0xd37, 0x10580) fstat(r7, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) 1m30.494173313s ago: executing program 2 (id=830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x17, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800070500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m30.454471918s ago: executing program 2 (id=831): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m30.380569401s ago: executing program 2 (id=832): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020000000000000000000202000a09058202", @ANYRESDEC, @ANYBLOB="58a3b86aee88c0a19ac3d892b3a7dec2d231f77c9c55d4e2f3aced18e38f64310f574110c6ee547fb08abc9b85525c288f48c6bb63fa6d31261dd5d93a039f3a8f8b54e6b63b33757bcf18cdeee661cb2c3af6cbe92cff98335682b26a5f023043a5ec519570a122bca7c0f4b06225e653ad48b313ed2920f90fb61fc11005199d7cb1a1930117f09c9752a14177739c22f93dc8b944cfe3cb76494e4c77ef48c1675d71e2ad6ea0b4872951cbe10f366802871f58e175bb486c616cf77ae6c925e4433cdc7760b44a574c5bad1049f3717e", @ANYRESDEC=0x0], 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4024587b, &(0x7f0000001000)={{0xffffffffffffffff, &(0x7f0000000440)='caif0\x00', 0x200, &(0x7f0000000480)={@_ha_fsid={[0x8000, 0x7]}, {0x7, 0x5}}, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4}, 0x7, &(0x7f0000000f40)=[{0x1, 0x5e, &(0x7f00000005c0)='/dev/kvm\x00', &(0x7f0000000600)="d05a1c28d9f67eecd4e2f5342cf2b2a9539dec63c3bb4f2e024e19ea1e04c384bc3e85eeb52eec75ea42479719e5c9a7db9909745ed66b220404005f48034f776c5150d41200cc08b197eeaa38ffb693b6c240443212c9d9b1b0195e5ebbd77760ea4c78d2ecce6bfebe6370b936768d7c4c56eb460f510a85e0f43148b08716225dcc3ae538421bbcc037b360371f868f21cd79b7b35e30bc4cbefc0cad8f89eb7d596a2cee8a9b3b84f929985219ca4769c14679fa07ce9b", 0xb9, 0x10}, {0x2, 0xde, &(0x7f00000006c0)='-+]\x00', &(0x7f0000000700)="c982dc83a6acca64bf8739f67dec5d32d3ae011d484c9587e437d3a65a4e3fcca875634eb36b6b376036feaf36e71930ad28ef2d686ff0a4a20715f38e709c6c898d1c2eeb88ef55a1cf5fad0a747600e8cbae05cdbfe5ca1baad84e05c5e9022fe161219ad70a598151a6c25c44967f678c19e3af33fda37b8dc5f63bc8621eee6336aa85585b40bd2dbe714df8", 0x8e, 0x32}, {0x1, 0x10001, &(0x7f00000007c0)='$\'(\x00', &(0x7f0000000b40)="0174d5c60402bcbc74d38d45f1d33380ffac6e3d9fd28d75f1e7d876292d5d0962abf322", 0x24, 0x10}, {0x2, 0x3, &(0x7f0000000b80)='$^[/+(-*,\\,\x00', &(0x7f0000000bc0)="e28a31ca8c85ae04d0aa5d10b9920206ec2147daa49635c731544910541599d2eb812e07b49b637fc824660d4bccaa7a108888786647c4de1795e0d59fd0d2c5caa58871f0c261d8bcbb0faea0c24e2ee0a80956471353d77288d76016dbac1df1018889c0896e70df44b774d5a9edd031474ff3d0596bd6770a04935b1a21340848de5a", 0x84, 0xa}, {0x2, 0x6, &(0x7f0000000c80)='/dev/ptmx\x00', &(0x7f0000000d00)="cdfe8823163e2ac9f57b80219153c4aad905cfc56d0cc2377ef18ac637c2edb370b19c6626a20036d5e404d46a4cf76cf47a3e18439143d421f8fbe717eac55dd56bea5b785b2526f914922c4842160d4a15b9a53ad21d5b970558ec44460e13563308812d21552ca286967ab9740555c9736c266d4e86af4757ea75a47a7ad97c00f4f0e27f9c7493f1d10ea0350071084d0fa571dd05addba69cf7680539487e469e510b55eaed71a87b54680f954ebe22fd7936730e0bad6e439f4681471c", 0xc0, 0x2}, {0x1, 0x5, &(0x7f0000000dc0)='/dev/ptmx\x00', &(0x7f0000000e00)="22afb078edf2dd6184e7bf89c9375e6c9ed0dc0fff45f4c6cdacd4f2092496aa0830aa09ee694ecafa91eb6d45c3dacf5795abc6c326", 0x36, 0x20}, {0x3, 0x5, &(0x7f0000000e40)='\x00', &(0x7f0000000e80)="b64790d93248f4f5333aab200937e9cb692be992bcbe0c8f7d1ee549f59d5d12a47721c7c963eb6358ed79d77d2586e2089c56a23893a01e091b1007d22e79c7180e2fca865899b384ade5e3a8f96806987e5a008ff825ac9793c575b83f06d1b64934a1f188e31709d772cef26f20d631ff7fa917b658739bdee792cb218a1a13d3e6415bc13902a3b8f2cfb773e83bebc3f46275730053ac1a304854c706bb2113dc57", 0xa4, 0x8}]}) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000001040)) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x4b564d06, 0x0, 0x6}]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="370a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x0, 0x16, 0x28, "c0601b1ae0ffb056a6b77029d5a022642f70036bb568c0a31c209541071fc882d5133b4d33388f9f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)={0x0, 0x29, 0x1b, "00000000f6ffffffffffffff87c4d1ea489ca806377b5108f44b3e"}, 0x0, 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000040)=""/3, 0x4000, 0x800, 0xffffffff, 0x1}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f000000fe80)={0x0, 0x0, &(0x7f000000fe40)={&(0x7f000000fb40)=ANY=[@ANYBLOB="380100002100090027bd7000fbdbdf25200100000000000000000000000000017f0000010000000000000000000000004e2200014e2200c10000a08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b16b6e0000000000e80011000a010101000000000000000000000000fc0200000000000000000000000000010a010101000000000000000000000000e0000002000000000000000000000000000000000235000002000a00fc020000000000000000000000000001fc01000000000000000000000000000120010000000000000000000000000001000000000000000000000000000000003c00000006350000020002000a010101000000000000000000000000fc020000000000000000000000000000e0000002000000000000000000000000000000000000000000000000000000016c020000ff34000002000a00"], 0x138}, 0x1, 0x0, 0x0, 0x882}, 0x4000000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000000)) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000004140)={0x7fbf, 0x9, 0x4, 0x9, 0xa, "dbc02b00"}) r8 = ioctl$TIOCGPTPEER(r7, 0x5441, 0x9) write(r8, &(0x7f0000000100)="a788b9a48d", 0x5) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r10, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r13, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000600", @ANYRES16=r13, @ANYBLOB="0100000000000000000017000000440006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x24c, r13, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x49}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x409}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5957}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x5}, 0x4014) dup(r6) 1m27.185991603s ago: executing program 2 (id=849): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) unshare(0x22020600) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='2', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x8a4, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x838, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, {0x584, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_ELEM_EXPRESSIONS={0x524, 0xb, 0x0, 0x1, [{0x484, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x474, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RANGE_FROM_DATA={0x190, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9a, 0x1, "1bdfe9fb4425f5633960ed32c4875bb86cc77bde75aa1c021c4bea5cb19b4abdb746a47678468482bb8511c083a4865c84f082ef8708a3b82b30379e83b0ea442c997c644906ea7912964fc9496c0a5dfbe789a459900cf14a474091f8e846e664ecfb721d242e3a78c5caf0750064c38e256166f6c1a7791de09c17961fff8521989b2eb1887589a30ee79efefa6c288c9e71cf2ee0"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x51, 0x1, "33318e4196f2fde2ee8e5c2ed439e8ea97aaad0f55c3d7e2b3c3197aa27156290b5fef922fb2c6e3fe240db803722de0e7c4126a26175f17559066fe0712f84210aac89ff85f52a35a4e4338c1"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "c8b3ff2ea8b0a8fa2055f1048063f0ca5a690e72a561d6f4"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RANGE_FROM_DATA={0x2b0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "ae511f1bfbd8d28dfb690dcb06ff387ea3aacf14a645b481fc47b9eea14db416af5d4a6734bf8ac27506e97a23203a1fb3a36fe58bf2af048c7ecf5c2b9d03f02123a581d4633803625ae4c5ef8bd308e06e807105e4641a7b67c5f673"}, @NFTA_DATA_VALUE={0xdd, 0x1, "0336bafc339e8d2088caee3a062d3e36fe16add1ac695992aad89451ddc4cff7fc1f9502a99133912bf1b08fbf45bf572003c62c5892dc29b0e85c69353b92be986996edba9f774f7d0a3077629a084d7615770cc45d6f43f79fde6a2041c2576d28c91711508cbae2e45e5569d6c315fd05cffd584ac12b31e14bdb57c684f433a65228a031f22f0c6066e8d1d07a2a80f2e7a5546b2441ab93ac5e444f66f6c00f171677bc472d6f1e7bcceb4d355ac3d427090a2c7e1af8103398b4e3edb1b98eb9db034a45b4c34b9c353dbb09ee56587e06ca536eee30"}, @NFTA_DATA_VALUE={0xd4, 0x1, "c79e1f03b779f5017f341fbac3655618e54cfbf143d51af979e34a11246f3792f7f5faa8f24cb87962321e0098c84b7c9bc6cfc804c5aa6f23de3bfa299e2558bc8688e4a43080e128d92daa916126b938e5fb0b594fdcc3c2d3c2e4ae72aed31c86f43dae16ef3d8a3806ac344ce9feab383bdaec17c6ff67e2acbdf75b61be16057988a5ecab2181ad1eb63e8276d12955743bc15a21fb555ada44b1f8c425074dbfed2ac5ee97ed10636da5ba87115c56a7b341f61aadb9b3f97fe1658f474c25bce9d646ca4cd7039af4b41b16f1"}, @NFTA_DATA_VALUE={0x93, 0x1, "c0c053c88a074280e5376683bf49e23201c4c94af47efed8832130ca8241b80aabfbedaee4a18e39bd1ff9b9b1c28d7970b444e3480060fae5cf5d232e85ff7b02ddc37711881771b77634e025ce7f3e3e28c580e28390c71a07a69e3baf29ee947268037fd217482696e4cf85598a79cc93e946fe751adc42943d487937e930af4f3d5377319ab385cb3b0c48330e"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}]}}}, {0x48, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7d}]}}}, {0x34, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x20, 0x6, 0x1, 0x0, "e79feca05716f99db260d890a744af61db8f6d3a44fdbcc32f4ce2f2"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x294, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8}]}}}]}, @NFTA_SET_ELEM_DATA={0x18c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "856d02a78cd2b04ab1ff64610d9fcaf88e8e8dee9bc7d5643985dc3545c0497372874c6a03e64913905490d4c7773d031bc933a4c1ec0ce493f51918fdecd17376ea7f5fa7cea97b799e8587dce0c1cdd1b12762f59d5c3dceb79a104289a20a57495ee6823073de98ffd7a07bd314b40a01d9b12d951f9aa0e5a585231c780bd677708cfe11fb3676e294affe1e71f57610fb540bdb3213f34edd2d37acc91cb3a3683110633db4b574329a4639a33e651c2a0833e6dfba"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x45, 0x1, "3a83e138ea42b5585537bb622d20868bc707c3d2fae8a4f72571d57e7bd8d8343e4b48f55a7c8290c4e03d59173b8b5dd5b9cefc8b5fa1fc97b68d00cdf63201a6"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x60, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x80}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4a4}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x2b8, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1a4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}]}], {0x14}}, 0xbb8}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 1m27.029814301s ago: executing program 2 (id=850): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_delroute={0x34, 0x19, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x14, 0x1c, 0x0, 0xff, 0x1, 0xc8, 0x8}, [@RTA_OIF={0x8, 0x1e}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x30000001}, 0x20000800) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x8}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@overlay={0x1, 0xa, 0x4, 0x2000, 0x1, {0x0, 0xea60}, {0x2, 0x1, 0x1, 0x4, 0x8, 0x1, "16a683cf"}, 0x7fe, 0x3, {}, 0x4}) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) 1m26.83073811s ago: executing program 2 (id=852): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000540)={0x3, 0x0, [{0x58000, 0xb6, &(0x7f0000000480)=""/182}, {0xd000, 0x7f, &(0x7f0000000400)=""/127}, {0x5000, 0x91, &(0x7f0000000640)=""/145}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) write$tun(r6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be04782bff060000000000000000000000000008aaff020000000000000000000000000001078e"], 0xfdef) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000000)={0x2198, &(0x7f0000000040)}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x59) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) socket(0x14, 0x80000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m11.724327689s ago: executing program 33 (id=852): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000540)={0x3, 0x0, [{0x58000, 0xb6, &(0x7f0000000480)=""/182}, {0xd000, 0x7f, &(0x7f0000000400)=""/127}, {0x5000, 0x91, &(0x7f0000000640)=""/145}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) write$tun(r6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be04782bff060000000000000000000000000008aaff020000000000000000000000000001078e"], 0xfdef) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000000)={0x2198, &(0x7f0000000040)}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x59) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) socket(0x14, 0x80000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.625313992s ago: executing program 6 (id=1318): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r1 = dup(r0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000003c0)={'filter\x00', 0x0, [0x1, 0xf0, 0x5, 0x8]}, &(0x7f00000004c0)=0x54) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905", @ANYRES8], 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r5 = userfaultfd(0x1) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev2(r6, &(0x7f0000001340)=[{&(0x7f0000001280)='B', 0x1}], 0x1, 0x5406, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10000, 0x0, 0x3}, &(0x7f0000000080), &(0x7f0000000380), &(0x7f0000000000)) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x200, 0x4) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000240), 0x0, &(0x7f0000000500)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x10001}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@rr={0x7, 0x13, 0xb5, [@rand_addr=0x64010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast]}, @timestamp_addr={0x44, 0x14, 0x59, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0xd}, {@empty, 0x7}]}, @timestamp_prespec={0x44, 0x44, 0xfb, 0x3, 0x5, [{@loopback, 0xffffff7f}, {@private=0xa010100, 0x14a}, {@broadcast, 0x8000}, {@multicast1, 0x27}, {@multicast2, 0x7e8d}, {@remote, 0xa0}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @lsrr={0x83, 0x7, 0x93, [@broadcast]}, @rr={0x7, 0x23, 0x6c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @local]}, @timestamp={0x44, 0x14, 0x40, 0x0, 0x8, [0x8, 0x7bf7, 0x8, 0x200]}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x14}, @broadcast}}}], 0xe0}}, {{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000640)="3cc4ed9edf230be935edf620a9abd6f3e9345f21b60db7e8818f4d422e7d1fc9f861debe85412ed0122fe7d70a7625fe741acef3e501e42ea137f9b34df7051cb268f15bd59f6b500b99304c37ea3ebf64f8180516633d21c286be8f1bff016715f8a36dbe8f61cb72ed95fc787596ba8cb743eca980e3883ef01bca9ffd269b344674cd9b59", 0x86}, {&(0x7f0000000700)="2c9442fcf2a6812c0d9b19bf873072f05673591357d2310544fed277d35f2f16331445e05216a1572848779dbf8740434040602808218db9d617d619309c0b6c8e9cb9b3c32490dd52c581b44873e4400331fd87d03f08d81aff93e0fbd0992acae9793b423ef8d8954016d31d", 0x6d}, {&(0x7f0000000780)="745b3b528bf39c2ebd5c75cb66c18ddfccef14871afd58f67a4150e30e9b8ebc6e812046cafcb2e5ad9d5eec4d33adc89d23f8b609b94643683bcdf3cc95d5c7f644a9da25be1803620ad0be204b4a7df6e7e2077cac4684b90824ba8d55ea8bf4e12d3487", 0x65}, {&(0x7f0000000800)="f247825da8b9160110dcc5c52150fc032c90d0b717f40bb39e5affffd9823d0e4a9a5d80ebae93a2258a343f891f50d06dc730b6537c7a8400bffe9297704ed1de3745b33d0efac7bd9857d0e58a0f71646f807df6e0743cf1a5", 0x5a}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001900)="fef66da1294554dc68baa23660ed129f71221436969f83dcb89827718eb87e3f12a573f7ea0d12621b74263a06f5b7cec427b209d12e674e8aed5aa237bdfc73d29c315e", 0x44}, {&(0x7f0000001980)="7d7c831d9902263dea688567a7ca4dda432132dfe986854ee229d2654425e12fe11466ed529b4c5fbf47d40a02b05e0d78751a2b1f8f030337f6580225bd955430bf828480f08923c5d539236a183c76ce8414af558069ff55aee3dcb2a7ca8f9cac93b1056113b8d3829b9792df8613b5b8dc72c7cdfb75447595d4c5b60180738a2f4542dfff2c085029ffd381019e3ad66cc9770bdd1ae589c41a49508524363ec14a8cfee51933d5c46525e0b858c10d", 0xb2}, {&(0x7f0000001a40)="c5a98b5b0fcbeef4f33899d72f5b8b30028a9e2b90ff468c172f0688ba00b669549f3b83095f2932186fc0014da1c5d27d08e089c64fcc42cf0795f177d4c5871491cc81f38f1e2a2949695b6b011aec247449987ef3fca649351e4c4730ed3312d9853dd2681dc6262a407975306fe5eafc9d9b07812de4932ba54fdb64ae125e8d65cb84921d9a0aa623664885d1cef55ccf7f2767c70462401b251321199ba6066e8aac2ba15079e3bd2f9a9d39bda7893bf09445e7133c560f4c54b170", 0xbf}, {0x0}], 0x9, &(0x7f0000001c40)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x55, [@remote, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xc}}], 0x3c}}, {{&(0x7f0000001c80)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002080)=[{&(0x7f0000001cc0)="098bf2d0a11b58c58dc615be98a830bb1cc1e4f0d71014d26b9d5426de627a87c043f66c64c2fa8a", 0x28}, {&(0x7f0000001d00)="3724b242040b94c658cfe915cab3223ada619b8e18111aeb1796f5ae8091098b9095774ed5e48b1cd3f03d846b05d277268717984fc3a58e19dcc375dae8153f16737ee870025f1cbc2fe0f46ed5578242e259b41a934c8542d4c3c44045508a10d5453c454c5f1e19f9c7b3", 0x6c}, {&(0x7f0000001d80)="308bfab44c67cba8a28437b35153685605b8824b571bdaa3f2225b8dfbaad4cbd5705eed8645345624dadd83b87c664d1a491465512456dc3f5c4848d579ac55f226cc88bd54bbee5ca882578919b82326ab539ad76f1f067ef202ff0dbd491f879805948889b346d39750b91162c43732cc60af6e90", 0x76}, {&(0x7f0000001e00)="8a4f9517ff0fc3e56206c89664cdf54721c33f2ddaf996ddce9c0ed15f71bce09173e6efde1e389abb138860546299fa91dd6106afd45a46a023e66d5d0d6eea6b3efdbcb3e2d125b0a3b690e97cebf9a7801bdfd4e5e98fa7c1255156f64de07ead22aa89163f258b6b25ee30d89be731c7f8e4b89b374403a6dbdbcb0373eb22ee2e973877a6267eda29383e3e5b7a227afbb44916b5793374f4f788f58ed5821d5ff59d03e31df1efedeba37fc350377f3783cc1961f552b1b1b3d65432b552cb581207860398304018d2b2166785dc108b234a", 0xd5}, {&(0x7f0000001f00)="3aa9bc4888dc599c4ce08c6f5afa3967b1b8e37695480e8c478787f4203af770cbd08b03362332148b61d82c25e3361c3b935504c1317e351e193b2a3debacd56c69f02fe485f36f3f80aadee140a39dd6e03ab0cffed9f890d2ef5f07d1c4c65a7f1527155c78f5248414fdf578464ff4f5c70e76e9ff3e8c", 0x79}, {&(0x7f0000001f80)="4a7af88fbd59d471adab60dbd0b794ee4a713a106e093bac1299edb94541a8acb77e83774a3eae29fac49ff4b61bdcc398dad511a59f35f4ede6ef8a81179dae28410236bbf529ff1dc95b2f6a60ff67b91c8ddc004b0c44ba2d84a7b2469339deb342f9916fd85eee029c80801874a558249ca4d8ab65cc4722d9758a168f98585810146d757c5d1f1234817fa3c4a180c13c8874eff62413307fded3ff32dfd8b100f2eafc0fff50393a30e8d58332c8eb1068ceb856d0378d480df10f19549373fe", 0xc3}], 0x6, &(0x7f00000020c0)=[@ip_tos_u8={{0xd}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r4, @broadcast, @multicast1}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4d}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x24, 0xe0, 0x3, 0x9, [{@rand_addr=0x64010101}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x4}, {@private=0xa010100, 0x3}]}, @timestamp_addr={0x44, 0x54, 0xf1, 0x1, 0x5, [{@local, 0xcd}, {@multicast2, 0xf599}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1c53}, {@loopback, 0x5}, {@multicast1, 0x1}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0x2b}, {@private=0xa010101, 0xd9}, {@multicast1, 0x7}]}, @timestamp={0x44, 0x10, 0xc8, 0x0, 0xc, [0x2, 0x90d, 0x911]}, @timestamp_prespec={0x44, 0x24, 0xd2, 0x3, 0x6, [{@local, 0x1400}, {@multicast2, 0x2}, {@rand_addr=0x64010101}, {@local, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x3}}], 0x108}}, {{&(0x7f0000002200)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000002240)="2e57f23fc20d70bb701e0abb5af949e7a506a82589da2adda3c94cdc827fe3cbc386b6d4", 0x24}, {&(0x7f0000002280)="320249eec7b08b7d26e9e72daa99f7c80b50", 0x12}], 0x2, &(0x7f0000002300)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0xf7}}], 0x10}}], 0x4, 0x400a055) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.103225847s ago: executing program 3 (id=1323): unshare(0x20000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 5.921084992s ago: executing program 3 (id=1325): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x80000000}) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0x80000000, 0xf, 0x8, 0x80, 0x2, 0x318, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0xbc5b, 0x80000001, 0x25, 0x11, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x2, 0x8, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x7fffffff, 0x6, 0x6, 0x2, 0x9, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x9, 0x5, 0xfffffff7, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0xfffff001, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x0, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x5, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0xf94, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x3, 0x5, 0x1, 0x486, 0x3, 0x303c, 0x3e7, 0x4, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d04, 0x6, 0x38, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x9, 0x5, 0x1c, 0x120000, 0x3, 0x7f, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x69d9, 0xb, 0x5, 0x4, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x14000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7fffffff, 0x1, 0x98, 0xa1f, 0xf40, 0x2, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000340)=[{0x28, 0x80, 0x0, 0x4}, {0x5, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r8, &(0x7f0000000140), 0x0, 0x40840) 4.025381308s ago: executing program 5 (id=1332): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000100)) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'veth0_to_bridge\x00', &(0x7f00000006c0)=@ethtool_eeprom={0x43, 0xf9, 0x5, 0x19c, "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"}}) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000280)='async\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040), &(0x7f0000000080)=0x4) dup3(r3, r1, 0x80000) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x17, r4, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(r3, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SET_IO_FLUSHER(0x4f, 0x80240000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) 3.924691774s ago: executing program 5 (id=1334): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2dc, 0xec, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x214, 0x202, 0x225, 0x214, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x4, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x338) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\a'], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x1}) 3.791736474s ago: executing program 1 (id=1336): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000002140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f0000000100)="fdff", 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) kexec_load(0x0, 0x0, 0x0, 0x2a0000) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x1, 0x9, 0x4, 0x1, 0x102000000000002, 0x80000009, 0x400002004c8, 0x10001, 0x100000000003, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x50fd24f7], 0x60000, 0xc42d4}) writev(r2, &(0x7f0000000700), 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'sha224\x00'}}) r5 = socket(0xb, 0x800, 0xa5) setsockopt$IPT_SO_SET_REPLACE(r5, 0x29, 0x1f, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) 3.728693775s ago: executing program 5 (id=1338): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$unix(0x1, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000181004600080045000034006500000f06907864010101ac1414aa00004322", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c02ffff90780000080a00010009000000520000"], 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000300)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) r5 = socket$pptp(0x18, 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$pptp(r5, &(0x7f0000000100)={0x18, 0x2, {0x7ff, @loopback}}, 0x1e) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r6 = syz_open_dev$swradio(&(0x7f0000000800), 0x0, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, &(0x7f00000000c0)={0x40980001, 0x0, "bf5dff0f258c6b1765c2141433ae000000000000000000000000000000008000"}) io_setup(0x10, &(0x7f0000000400)=0x0) r8 = eventfd(0x9) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r9, 0xc2c45512, &(0x7f0000002280)={{0x3, 0x0, 0xda}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0xe79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x2, 0x0, 0x1000000, 0x0, 0x0, 0x400000, 0x8, 0x400, 0x4, 0x3, 0x10, 0xe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc13, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x9, 0x8, 0x0, 0x26, 0x0, 0xfffffffe, 0xe, 0x0, 0x8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) io_cancel(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0xc16c, r4, &(0x7f0000000440)="86b4249117f659820fd0", 0xa, 0x7, 0x0, 0x0, r8}, &(0x7f00000004c0)) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0x1e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0xda, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000010200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r10, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) 3.397220529s ago: executing program 6 (id=1341): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xd5c7, 0x10}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r1, 0xff9f}, 0x8) r2 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000200)={0xd9c9, 0x9, 0x9, 0x9, 0x62cc}) 3.385847919s ago: executing program 5 (id=1342): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) r1 = syz_clone(0xa0000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)="9d3181da8c7a6f7608f1cb362f24b8c9b9995c0a741c03706197a25bb12bf0c7bf30856a92ceb1e9eb86fadf66633f6a2a271934f4cc6a25ee381d29d347e7ebadf79a557bff58d0b8121b26558b2be49b3af81057814b8ecf0e741da606040afd8bb74402ef693bcab04b01c49691a514bb10dfb045cf6468306d9bb7d4079034dee1d48fbdf64ac8eedee0ecc6f2dd24a24559e003b17a4aa5ae4cf53247fa0b7ababead7af1d1d355256141d5317851ad0a696a0ed485680ee74338f40da853596834", 0xc4, r5) sendto$inet6(r4, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 3.227396622s ago: executing program 6 (id=1344): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$full(0xffffff9c, &(0x7f0000000080), 0x109440, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getpeername$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) timer_gettime(0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2, 0x0, 0xe7}}}}}}, 0x0) 3.108435158s ago: executing program 6 (id=1346): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (fail_nth: 4) 2.67987018s ago: executing program 4 (id=1347): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) unshare(0x22020600) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='2', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x8b0, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x844, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, {0x580, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_ELEM_EXPRESSIONS={0x524, 0xb, 0x0, 0x1, [{0x484, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x474, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RANGE_FROM_DATA={0x190, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9a, 0x1, "1bdfe9fb4425f5633960ed32c4875bb86cc77bde75aa1c021c4bea5cb19b4abdb746a47678468482bb8511c083a4865c84f082ef8708a3b82b30379e83b0ea442c997c644906ea7912964fc9496c0a5dfbe789a459900cf14a474091f8e846e664ecfb721d242e3a78c5caf0750064c38e256166f6c1a7791de09c17961fff8521989b2eb1887589a30ee79efefa6c288c9e71cf2ee0"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x51, 0x1, "33318e4196f2fde2ee8e5c2ed439e8ea97aaad0f55c3d7e2b3c3197aa27156290b5fef922fb2c6e3fe240db803722de0e7c4126a26175f17559066fe0712f84210aac89ff85f52a35a4e4338c1"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "c8b3ff2ea8b0a8fa2055f1048063f0ca5a690e72a561d6f4"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RANGE_FROM_DATA={0x2b0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "ae511f1bfbd8d28dfb690dcb06ff387ea3aacf14a645b481fc47b9eea14db416af5d4a6734bf8ac27506e97a23203a1fb3a36fe58bf2af048c7ecf5c2b9d03f02123a581d4633803625ae4c5ef8bd308e06e807105e4641a7b67c5f673"}, @NFTA_DATA_VALUE={0xdd, 0x1, "0336bafc339e8d2088caee3a062d3e36fe16add1ac695992aad89451ddc4cff7fc1f9502a99133912bf1b08fbf45bf572003c62c5892dc29b0e85c69353b92be986996edba9f774f7d0a3077629a084d7615770cc45d6f43f79fde6a2041c2576d28c91711508cbae2e45e5569d6c315fd05cffd584ac12b31e14bdb57c684f433a65228a031f22f0c6066e8d1d07a2a80f2e7a5546b2441ab93ac5e444f66f6c00f171677bc472d6f1e7bcceb4d355ac3d427090a2c7e1af8103398b4e3edb1b98eb9db034a45b4c34b9c353dbb09ee56587e06ca536eee30"}, @NFTA_DATA_VALUE={0xd4, 0x1, "c79e1f03b779f5017f341fbac3655618e54cfbf143d51af979e34a11246f3792f7f5faa8f24cb87962321e0098c84b7c9bc6cfc804c5aa6f23de3bfa299e2558bc8688e4a43080e128d92daa916126b938e5fb0b594fdcc3c2d3c2e4ae72aed31c86f43dae16ef3d8a3806ac344ce9feab383bdaec17c6ff67e2acbdf75b61be16057988a5ecab2181ad1eb63e8276d12955743bc15a21fb555ada44b1f8c425074dbfed2ac5ee97ed10636da5ba87115c56a7b341f61aadb9b3f97fe1658f474c25bce9d646ca4cd7039af4b41b16f1"}, @NFTA_DATA_VALUE={0x93, 0x1, "c0c053c88a074280e5376683bf49e23201c4c94af47efed8832130ca8241b80aabfbedaee4a18e39bd1ff9b9b1c28d7970b444e3480060fae5cf5d232e85ff7b02ddc37711881771b77634e025ce7f3e3e28c580e28390c71a07a69e3baf29ee947268037fd217482696e4cf85598a79cc93e946fe751adc42943d487937e930af4f3d5377319ab385cb3b0c48330e"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}]}}}, {0x48, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7d}]}}}, {0x34, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x19, 0x6, 0x1, 0x0, "e79feca05716f99db260d890a744af61db8f6d3a44"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x2a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_ELEM_DATA={0x18c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "856d02a78cd2b04ab1ff64610d9fcaf88e8e8dee9bc7d5643985dc3545c0497372874c6a03e64913905490d4c7773d031bc933a4c1ec0ce493f51918fdecd17376ea7f5fa7cea97b799e8587dce0c1cdd1b12762f59d5c3dceb79a104289a20a57495ee6823073de98ffd7a07bd314b40a01d9b12d951f9aa0e5a585231c780bd677708cfe11fb3676e294affe1e71f57610fb540bdb3213f34edd2d37acc91cb3a3683110633db4b574329a4639a33e651c2a0833e6dfba"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x45, 0x1, "3a83e138ea42b5585537bb622d20868bc707c3d2fae8a4f72571d57e7bd8d8343e4b48f55a7c8290c4e03d59173b8b5dd5b9cefc8b5fa1fc97b68d00cdf63201a6"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x60, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x80}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4a4}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x2b8, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1a4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}]}], {0x14}}, 0xbc4}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 2.647851159s ago: executing program 3 (id=1348): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_hci(r0, 0x0, 0x15, &(0x7f0000001800)=""/2, &(0x7f0000001840)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) (async) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000003e00070127bd700000000000017c00000400fc800c000180e6ffeeff", @ANYRES32=r1, @ANYBLOB="080002"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2.589996987s ago: executing program 6 (id=1349): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6, 0x10000}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000940)="a010", 0x2}], 0x1}, 0xd0a0) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0xf5, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=',\x00', 0x5a5}], 0x1}, 0x0) 2.516738925s ago: executing program 4 (id=1350): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) unshare(0x22020600) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) r2 = fsopen(&(0x7f0000000040)='omfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='2', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x89c, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x830, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, {0x578, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_ELEM_EXPRESSIONS={0x518, 0xb, 0x0, 0x1, [{0x478, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x468, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RANGE_FROM_DATA={0x190, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9a, 0x1, "1bdfe9fb4425f5633960ed32c4875bb86cc77bde75aa1c021c4bea5cb19b4abdb746a47678468482bb8511c083a4865c84f082ef8708a3b82b30379e83b0ea442c997c644906ea7912964fc9496c0a5dfbe789a459900cf14a474091f8e846e664ecfb721d242e3a78c5caf0750064c38e256166f6c1a7791de09c17961fff8521989b2eb1887589a30ee79efefa6c288c9e71cf2ee0"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x51, 0x1, "33318e4196f2fde2ee8e5c2ed439e8ea97aaad0f55c3d7e2b3c3197aa27156290b5fef922fb2c6e3fe240db803722de0e7c4126a26175f17559066fe0712f84210aac89ff85f52a35a4e4338c1"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "c8b3ff2ea8b0a8fa2055f1048063f0ca5a690e72a561d6f4"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RANGE_FROM_DATA={0x2ac, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5f, 0x1, "ae511f1bfbd8d28dfb690dcb06ff387ea3aacf14a645b481fc47b9eea14db416af5d4a6734bf8ac27506e97a23203a1fb3a36fe58bf2af048c7ecf5c2b9d03f02123a581d4633803625ae4c5ef8bd308e06e807105e4641a7b67c5"}, @NFTA_DATA_VALUE={0xdd, 0x1, "0336bafc339e8d2088caee3a062d3e36fe16add1ac695992aad89451ddc4cff7fc1f9502a99133912bf1b08fbf45bf572003c62c5892dc29b0e85c69353b92be986996edba9f774f7d0a3077629a084d7615770cc45d6f43f79fde6a2041c2576d28c91711508cbae2e45e5569d6c315fd05cffd584ac12b31e14bdb57c684f433a65228a031f22f0c6066e8d1d07a2a80f2e7a5546b2441ab93ac5e444f66f6c00f171677bc472d6f1e7bcceb4d355ac3d427090a2c7e1af8103398b4e3edb1b98eb9db034a45b4c34b9c353dbb09ee56587e06ca536eee30"}, @NFTA_DATA_VALUE={0xd4, 0x1, "c79e1f03b779f5017f341fbac3655618e54cfbf143d51af979e34a11246f3792f7f5faa8f24cb87962321e0098c84b7c9bc6cfc804c5aa6f23de3bfa299e2558bc8688e4a43080e128d92daa916126b938e5fb0b594fdcc3c2d3c2e4ae72aed31c86f43dae16ef3d8a3806ac344ce9feab383bdaec17c6ff67e2acbdf75b61be16057988a5ecab2181ad1eb63e8276d12955743bc15a21fb555ada44b1f8c425074dbfed2ac5ee97ed10636da5ba87115c56a7b341f61aadb9b3f97fe1658f474c25bce9d646ca4cd7039af4b41b16f1"}, @NFTA_DATA_VALUE={0x93, 0x1, "c0c053c88a074280e5376683bf49e23201c4c94af47efed8832130ca8241b80aabfbedaee4a18e39bd1ff9b9b1c28d7970b444e3480060fae5cf5d232e85ff7b02ddc37711881771b77634e025ce7f3e3e28c580e28390c71a07a69e3baf29ee947268037fd217482696e4cf85598a79cc93e946fe751adc42943d487937e930af4f3d5377319ab385cb3b0c48330e"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x48, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7d}]}}}, {0x34, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x20, 0x6, 0x1, 0x0, "e79feca05716f99db260d890a744af61db8f6d3a44fdbcc32f4ce2f2"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x298, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_ELEM_DATA={0x180, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "856d02a78cd2b04ab1ff64610d9fcaf88e8e8dee9bc7d5643985dc3545c0497372874c6a03e64913905490d4c7773d031bc933a4c1ec0ce493f51918fdecd17376ea7f5fa7cea97b799e8587dce0c1cdd1b12762f59d5c3dceb79a104289a20a57495ee6823073de98ffd7a07bd314b40a01d9b12d951f9aa0e5a585231c780bd677708cfe11fb3676e294affe1e71f57610fb540bdb3213f34edd2d37acc91cb3a3683110633db4b574329a4639a33e651c2a0833e6dfba"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x47, 0x1, "3a83e138ea42b5585537bb622d20868bc707c3d2fae8a4f72571d57e7bd8d8343e4b48f55a7c8290c4e03d59173b8b5dd5b9cefc8b5fa1fc97b68d00cdf63201a6000c"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x60, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x80}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4a4}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x2b8, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1a4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}]}], {0x14}}, 0xbb0}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 2.405194419s ago: executing program 3 (id=1351): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000400)) r4 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r4, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x14}) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r10, 0x917, 0x70bd28, 0x4000000, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000980)=0x1) 2.395653875s ago: executing program 6 (id=1352): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r1 = dup(r0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000003c0)={'filter\x00', 0x0, [0x1, 0xf0, 0x5, 0x8]}, &(0x7f00000004c0)=0x54) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905", @ANYRES8], 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r5 = userfaultfd(0x1) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev2(r6, &(0x7f0000001340)=[{&(0x7f0000001280)='B', 0x1}], 0x1, 0x5406, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10000, 0x0, 0x3}, &(0x7f0000000080), &(0x7f0000000380), &(0x7f0000000000)) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x200, 0x4) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000240), 0x0, &(0x7f0000000500)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x10001}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@rr={0x7, 0x13, 0xb5, [@rand_addr=0x64010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast]}, @timestamp_addr={0x44, 0x14, 0x59, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0xd}, {@empty, 0x7}]}, @timestamp_prespec={0x44, 0x44, 0xfb, 0x3, 0x5, [{@loopback, 0xffffff7f}, {@private=0xa010100, 0x14a}, {@broadcast, 0x8000}, {@multicast1, 0x27}, {@multicast2, 0x7e8d}, {@remote, 0xa0}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @lsrr={0x83, 0x7, 0x93, [@broadcast]}, @rr={0x7, 0x23, 0x6c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @local]}, @timestamp={0x44, 0x14, 0x40, 0x0, 0x8, [0x8, 0x7bf7, 0x8, 0x200]}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x14}, @broadcast}}}], 0xe0}}, {{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000640)="3cc4ed9edf230be935edf620a9abd6f3e9345f21b60db7e8818f4d422e7d1fc9f861debe85412ed0122fe7d70a7625fe741acef3e501e42ea137f9b34df7051cb268f15bd59f6b500b99304c37ea3ebf64f8180516633d21c286be8f1bff016715f8a36dbe8f61cb72ed95fc787596ba8cb743eca980e3883ef01bca9ffd269b344674cd9b59", 0x86}, {&(0x7f0000000700)="2c9442fcf2a6812c0d9b19bf873072f05673591357d2310544fed277d35f2f16331445e05216a1572848779dbf8740434040602808218db9d617d619309c0b6c8e9cb9b3c32490dd52c581b44873e4400331fd87d03f08d81aff93e0fbd0992acae9793b423ef8d8954016d31d", 0x6d}, {&(0x7f0000000780)="745b3b528bf39c2ebd5c75cb66c18ddfccef14871afd58f67a4150e30e9b8ebc6e812046cafcb2e5ad9d5eec4d33adc89d23f8b609b94643683bcdf3cc95d5c7f644a9da25be1803620ad0be204b4a7df6e7e2077cac4684b90824ba8d55ea8bf4e12d3487", 0x65}, {&(0x7f0000000800)="f247825da8b9160110dcc5c52150fc032c90d0b717f40bb39e5affffd9823d0e4a9a5d80ebae93a2258a343f891f50d06dc730b6537c7a8400bffe9297704ed1de3745b33d0efac7bd9857d0e58a0f71646f807df6e0743cf1a5", 0x5a}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001900)="fef66da1294554dc68baa23660ed129f71221436969f83dcb89827718eb87e3f12a573f7ea0d12621b74263a06f5b7cec427b209d12e674e8aed5aa237bdfc73d29c315e", 0x44}, {&(0x7f0000001980)="7d7c831d9902263dea688567a7ca4dda432132dfe986854ee229d2654425e12fe11466ed529b4c5fbf47d40a02b05e0d78751a2b1f8f030337f6580225bd955430bf828480f08923c5d539236a183c76ce8414af558069ff55aee3dcb2a7ca8f9cac93b1056113b8d3829b9792df8613b5b8dc72c7cdfb75447595d4c5b60180738a2f4542dfff2c085029ffd381019e3ad66cc9770bdd1ae589c41a49508524363ec14a8cfee51933d5c46525e0b858c10d", 0xb2}, {&(0x7f0000001a40)="c5a98b5b0fcbeef4f33899d72f5b8b30028a9e2b90ff468c172f0688ba00b669549f3b83095f2932186fc0014da1c5d27d08e089c64fcc42cf0795f177d4c5871491cc81f38f1e2a2949695b6b011aec247449987ef3fca649351e4c4730ed3312d9853dd2681dc6262a407975306fe5eafc9d9b07812de4932ba54fdb64ae125e8d65cb84921d9a0aa623664885d1cef55ccf7f2767c70462401b251321199ba6066e8aac2ba15079e3bd2f9a9d39bda7893bf09445e7133c560f4c54b170", 0xbf}, {0x0}], 0x9, &(0x7f0000001c40)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x55, [@remote, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xc}}], 0x3c}}, {{&(0x7f0000001c80)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002080)=[{&(0x7f0000001cc0)="098bf2d0a11b58c58dc615be98a830bb1cc1e4f0d71014d26b9d5426de627a87c043f66c64c2fa8a", 0x28}, {&(0x7f0000001d00)="3724b242040b94c658cfe915cab3223ada619b8e18111aeb1796f5ae8091098b9095774ed5e48b1cd3f03d846b05d277268717984fc3a58e19dcc375dae8153f16737ee870025f1cbc2fe0f46ed5578242e259b41a934c8542d4c3c44045508a10d5453c454c5f1e19f9c7b3", 0x6c}, {&(0x7f0000001d80)="308bfab44c67cba8a28437b35153685605b8824b571bdaa3f2225b8dfbaad4cbd5705eed8645345624dadd83b87c664d1a491465512456dc3f5c4848d579ac55f226cc88bd54bbee5ca882578919b82326ab539ad76f1f067ef202ff0dbd491f879805948889b346d39750b91162c43732cc60af6e90", 0x76}, {&(0x7f0000001e00)="8a4f9517ff0fc3e56206c89664cdf54721c33f2ddaf996ddce9c0ed15f71bce09173e6efde1e389abb138860546299fa91dd6106afd45a46a023e66d5d0d6eea6b3efdbcb3e2d125b0a3b690e97cebf9a7801bdfd4e5e98fa7c1255156f64de07ead22aa89163f258b6b25ee30d89be731c7f8e4b89b374403a6dbdbcb0373eb22ee2e973877a6267eda29383e3e5b7a227afbb44916b5793374f4f788f58ed5821d5ff59d03e31df1efedeba37fc350377f3783cc1961f552b1b1b3d65432b552cb581207860398304018d2b2166785dc108b234a", 0xd5}, {&(0x7f0000001f00)="3aa9bc4888dc599c4ce08c6f5afa3967b1b8e37695480e8c478787f4203af770cbd08b03362332148b61d82c25e3361c3b935504c1317e351e193b2a3debacd56c69f02fe485f36f3f80aadee140a39dd6e03ab0cffed9f890d2ef5f07d1c4c65a7f1527155c78f5248414fdf578464ff4f5c70e76e9ff3e8c", 0x79}, {&(0x7f0000001f80)="4a7af88fbd59d471adab60dbd0b794ee4a713a106e093bac1299edb94541a8acb77e83774a3eae29fac49ff4b61bdcc398dad511a59f35f4ede6ef8a81179dae28410236bbf529ff1dc95b2f6a60ff67b91c8ddc004b0c44ba2d84a7b2469339deb342f9916fd85eee029c80801874a558249ca4d8ab65cc4722d9758a168f98585810146d757c5d1f1234817fa3c4a180c13c8874eff62413307fded3ff32dfd8b100f2eafc0fff50393a30e8d58332c8eb1068ceb856d0378d480df10f19549373fe", 0xc3}], 0x6, &(0x7f00000020c0)=[@ip_tos_u8={{0xd}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r4, @broadcast, @multicast1}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4d}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x24, 0xe0, 0x3, 0x9, [{@rand_addr=0x64010101}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x4}, {@private=0xa010100, 0x3}]}, @timestamp_addr={0x44, 0x54, 0xf1, 0x1, 0x5, [{@local, 0xcd}, {@multicast2, 0xf599}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1c53}, {@loopback, 0x5}, {@multicast1, 0x1}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0x2b}, {@private=0xa010101, 0xd9}, {@multicast1, 0x7}]}, @timestamp={0x44, 0x10, 0xc8, 0x0, 0xc, [0x2, 0x90d, 0x911]}, @timestamp_prespec={0x44, 0x24, 0xd2, 0x3, 0x6, [{@local, 0x1400}, {@multicast2, 0x2}, {@rand_addr=0x64010101}, {@local, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x3}}], 0x108}}, {{&(0x7f0000002200)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000002240)="2e57f23fc20d70bb701e0abb5af949e7a506a82589da2adda3c94cdc827fe3cbc386b6d4", 0x24}, {&(0x7f0000002280)="320249eec7b08b7d26e9e72daa99f7c80b50", 0x12}], 0x2, &(0x7f0000002300)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0xf7}}], 0x10}}], 0x4, 0x400a055) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.302306405s ago: executing program 4 (id=1353): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b703000008000000850000006a00000095"], &(0x7f0000005d80)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="afaf92", 0x3}, {0x0}], 0x2}}, {{&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4, 0x79, 0x1, 0xf}]}}}], 0x14}}], 0x2, 0x4048800) 2.187714791s ago: executing program 4 (id=1354): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x400000, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) 1.984657293s ago: executing program 1 (id=1355): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000340)=""/250) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="380200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000010000000000000000000000000000008000000000000000000000000000000000000000000000000000000284010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000000000008000000080000fcffffff000000000000000000000000000000000000000032000000000000007f0000010000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033000000000000000a010101000000000000000000000000043500000001010000000000bf0a00000000000100000000000000000000000000000001000004d43c00000000000000e000000100000000006109518b0000000000000003000000000108000b0000000000000000040000fe8000000000000000000000000000bb00000000330000"], 0x238}}, 0x4000) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$cgroup_root(0xffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc01c586a, &(0x7f00000004c0)={r0, &(0x7f0000000280)='!\x00', 0x2000, &(0x7f00000002c0)={@_ha_fsid={[0x5fa2, 0x7fff]}, {0x0, 0x5b8, 0xc, 0x5}}, 0x80000001, &(0x7f0000000440), &(0x7f0000000480)=0x5}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000640)) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8, 0x0, {0x0, 0x1}}, 0x18) connect$can_j1939(r7, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r6}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r10 = socket$tipc(0x1e, 0x5, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x9) bind$tipc(r10, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r10, &(0x7f00000005c0)={&(0x7f0000000680), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r6], &(0x7f00000005c0)=[0x9], &(0x7f0000000580)=[r9], &(0x7f0000000040)}) renameat2(0xffffffffffffffff, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', 0x4) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) ioctl$VIDIOC_G_AUDIO(r4, 0x80345621, &(0x7f0000000600)) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xba1b474e0b1c775a) 1.845651471s ago: executing program 1 (id=1356): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000340)=""/250) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="380200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000010000000000000000000000000000008000000000000000000000000000000000000000000000000000000284010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000000000008000000080000fcffffff000000000000000000000000000000000000000032000000000000007f0000010000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033000000000000000a010101000000000000000000000000043500000001010000000000bf0a00000000000100000000000000000000000000000001000004d43c00000000000000e000000100000000006109518b0000000000000003000000000108000b0000000000000000040000fe8000000000000000000000000000bb00000000330000"], 0x238}}, 0x4000) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$cgroup_root(0xffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc01c586a, &(0x7f00000004c0)={r0, &(0x7f0000000280)='!\x00', 0x2000, &(0x7f00000002c0)={@_ha_fsid={[0x5fa2, 0x7fff]}, {0x0, 0x5b8, 0xc, 0x5}}, 0x80000001, &(0x7f0000000440), &(0x7f0000000480)=0x5}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000640)) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8, 0x0, {0x0, 0x1}}, 0x18) connect$can_j1939(r7, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r6}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r10 = socket$tipc(0x1e, 0x5, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x9) bind$tipc(r10, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r10, &(0x7f00000005c0)={&(0x7f0000000680), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r6], &(0x7f00000005c0)=[0x9], &(0x7f0000000580)=[r9], &(0x7f0000000040)}) renameat2(0xffffffffffffffff, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', 0x4) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) ioctl$VIDIOC_G_AUDIO(r4, 0x80345621, &(0x7f0000000600)) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xba1b474e0b1c775a) 1.667962179s ago: executing program 1 (id=1357): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x22, &(0x7f0000000040)={0x0, 0x1445e, 0x1d410, 0x0, 0x8a}) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1000, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000140)={0x0, {0xb, 0x9}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xffffffff80000019, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000000)={r5, 0x1000, &(0x7f0000002a80)=""/4096}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) r9 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000080)=[r8, r10, r7], 0x3}) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r12, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r13, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r11, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r14], &(0x7f00000002c0)=[0xf, 0x0, 0x655, 0x1d7c3910], &(0x7f0000000340)=[r15, r15], &(0x7f0000000180)=[0x31], 0x0, 0xff}) r16 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r16, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r16, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], &(0x7f0000007d40)=[{}, {}, {}, {}, {}], &(0x7f00000000c0), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x3c3c3c3c3c3c49c, 0x0, 0x1, 0x0, r17}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[r5, 0x0, 0x0, r10, r15, r17, 0x0, r18], 0x8}) 1.566600791s ago: executing program 1 (id=1358): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000100)) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'veth0_to_bridge\x00', &(0x7f00000006c0)=@ethtool_eeprom={0x43, 0xf9, 0x5, 0x19c, "f2475c4bf337688dd9f2cf4a01d781d1166adf990aa1abd90dab2a0321603809cb6e7e4215e7a048de8a3129df62eaa1ab3351211608518eebc251723be54c46169b57e04bab5bdba9afa93fb10782eee8995565c6a9bba846acb34cb46ede198f0f609afa04e23e149a5e3b1f2433da9addea4b0633a3530a93ed13a3f822f72fbefe15ff568bdcf5ba81a07c0395a7cdd38e387731aa4039d87ca7d61d793ad3e3a1aa36eb86146288b990695c16a5c153a9b7a6f41c3400176dfba6812a5b6c5d7b91737ff43c63556ad822972dd44d1ed0ed359041c858ef39159f79e004bd622fce538a1abedfc536f71db5531642695080b1449fba154309949031d89fcc70685d41455f27fd17b05f04f735315a450dfd84b560c828bac14989060b2b7f40c1c39f20c6b36bb2737b0281f1b16abdb5b4d505d6ad635357d75a3263cce942602674025272254ecf71f6c1625488fd4f44142201d709f6331c95875debf2429141f6247a9920d4152da141cc7351f06fc2eab81d425085f69aa3ad488f362c8dd7c88edae2ef928710bcbbda61ecc6133094f854afb24f3fc4"}}) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000280)='async\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040), &(0x7f0000000080)=0x4) dup3(r3, r1, 0x80000) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x17, r4, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(r3, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SET_IO_FLUSHER(0x4f, 0x80240000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) 1.376128373s ago: executing program 1 (id=1359): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x102, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x80000000}) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0x80000000, 0xf, 0x8, 0x80, 0x2, 0x318, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0xbc5b, 0x80000001, 0x25, 0x11, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x2, 0x8, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x7fffffff, 0x6, 0x6, 0x2, 0x9, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x9, 0x5, 0xfffffff7, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0xfffff001, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x0, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x5, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0xf94, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x3, 0x5, 0x1, 0x486, 0x3, 0x303c, 0x3e7, 0x4, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d04, 0x6, 0x38, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x9, 0x5, 0x1c, 0x120000, 0x3, 0x7f, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x69d9, 0xb, 0x5, 0x4, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x14000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7fffffff, 0x1, 0x98, 0xa1f, 0xf40, 0x2, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000340)=[{0x28, 0x80, 0x0, 0x4}, {0x5, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r8, &(0x7f0000000140), 0x0, 0x40840) 1.193794902s ago: executing program 4 (id=1360): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) unshare(0x22020600) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='2', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x8b0, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x844, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, {0x580, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_ELEM_EXPRESSIONS={0x524, 0xb, 0x0, 0x1, [{0x484, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x474, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RANGE_FROM_DATA={0x190, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9a, 0x1, "1bdfe9fb4425f5633960ed32c4875bb86cc77bde75aa1c021c4bea5cb19b4abdb746a47678468482bb8511c083a4865c84f082ef8708a3b82b30379e83b0ea442c997c644906ea7912964fc9496c0a5dfbe789a459900cf14a474091f8e846e664ecfb721d242e3a78c5caf0750064c38e256166f6c1a7791de09c17961fff8521989b2eb1887589a30ee79efefa6c288c9e71cf2ee0"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x51, 0x1, "33318e4196f2fde2ee8e5c2ed439e8ea97aaad0f55c3d7e2b3c3197aa27156290b5fef922fb2c6e3fe240db803722de0e7c4126a26175f17559066fe0712f84210aac89ff85f52a35a4e4338c1"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "c8b3ff2ea8b0a8fa2055f1048063f0ca5a690e72a561d6f4"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RANGE_FROM_DATA={0x2b0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "ae511f1bfbd8d28dfb690dcb06ff387ea3aacf14a645b481fc47b9eea14db416af5d4a6734bf8ac27506e97a23203a1fb3a36fe58bf2af048c7ecf5c2b9d03f02123a581d4633803625ae4c5ef8bd308e06e807105e4641a7b67c5f673"}, @NFTA_DATA_VALUE={0xdd, 0x1, "0336bafc339e8d2088caee3a062d3e36fe16add1ac695992aad89451ddc4cff7fc1f9502a99133912bf1b08fbf45bf572003c62c5892dc29b0e85c69353b92be986996edba9f774f7d0a3077629a084d7615770cc45d6f43f79fde6a2041c2576d28c91711508cbae2e45e5569d6c315fd05cffd584ac12b31e14bdb57c684f433a65228a031f22f0c6066e8d1d07a2a80f2e7a5546b2441ab93ac5e444f66f6c00f171677bc472d6f1e7bcceb4d355ac3d427090a2c7e1af8103398b4e3edb1b98eb9db034a45b4c34b9c353dbb09ee56587e06ca536eee30"}, @NFTA_DATA_VALUE={0xd4, 0x1, "c79e1f03b779f5017f341fbac3655618e54cfbf143d51af979e34a11246f3792f7f5faa8f24cb87962321e0098c84b7c9bc6cfc804c5aa6f23de3bfa299e2558bc8688e4a43080e128d92daa916126b938e5fb0b594fdcc3c2d3c2e4ae72aed31c86f43dae16ef3d8a3806ac344ce9feab383bdaec17c6ff67e2acbdf75b61be16057988a5ecab2181ad1eb63e8276d12955743bc15a21fb555ada44b1f8c425074dbfed2ac5ee97ed10636da5ba87115c56a7b341f61aadb9b3f97fe1658f474c25bce9d646ca4cd7039af4b41b16f1"}, @NFTA_DATA_VALUE={0x93, 0x1, "c0c053c88a074280e5376683bf49e23201c4c94af47efed8832130ca8241b80aabfbedaee4a18e39bd1ff9b9b1c28d7970b444e3480060fae5cf5d232e85ff7b02ddc37711881771b77634e025ce7f3e3e28c580e28390c71a07a69e3baf29ee947268037fd217482696e4cf85598a79cc93e946fe751adc42943d487937e930af4f3d5377319ab385cb3b0c48330e"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}]}}}, {0x48, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7d}]}}}, {0x34, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x19, 0x6, 0x1, 0x0, "e79feca05716f99db260d890a744af61db8f6d3a44"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x2a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_ELEM_DATA={0x18c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "856d02a78cd2b04ab1ff64610d9fcaf88e8e8dee9bc7d5643985dc3545c0497372874c6a03e64913905490d4c7773d031bc933a4c1ec0ce493f51918fdecd17376ea7f5fa7cea97b799e8587dce0c1cdd1b12762f59d5c3dceb79a104289a20a57495ee6823073de98ffd7a07bd314b40a01d9b12d951f9aa0e5a585231c780bd677708cfe11fb3676e294affe1e71f57610fb540bdb3213f34edd2d37acc91cb3a3683110633db4b574329a4639a33e651c2a0833e6dfba"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x45, 0x1, "3a83e138ea42b5585537bb622d20868bc707c3d2fae8a4f72571d57e7bd8d8343e4b48f55a7c8290c4e03d59173b8b5dd5b9cefc8b5fa1fc97b68d00cdf63201a6"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x60, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x80}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4a4}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x2b8, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1a4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}]}], {0x14}}, 0xbc4}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 984.536809ms ago: executing program 4 (id=1361): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x4000840) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) socket$nl_generic(0x10, 0x3, 0x10) openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) socket$unix(0x1, 0x2, 0x0) r3 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x6bb8, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10}) io_uring_enter(r3, 0x742f, 0x77ae, 0x1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 678.344603ms ago: executing program 3 (id=1362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x7c0, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x754, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, {0x4c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x470, 0xb, 0x0, 0x1, [{0x3e0, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x3d0, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RANGE_FROM_DATA={0xec, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x37, 0x1, "1bdfe9fb4425f5633960ed32c4875bb86cc77bde75aa1c021c4bea5cb19b4abdb746a47678468482bb8511c083a4865c84f082"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x51, 0x1, "33318e4196f2fde2ee8e5c2ed439e8ea97aaad0f55c3d7e2b3c3197aa27156290b5fef922fb2c6e3fe240db803722de0e7c4126a26175f17559066fe0712f84210aac89ff85f52a35a4e4338c1"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "c8b3ff2ea8b0a8fa2055f1048063f0ca5a690e72a561d6f4"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RANGE_FROM_DATA={0x2b0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "ae511f1bfbd8d28dfb690dcb06ff387ea3aacf14a645b481fc47b9eea14db416af5d4a6734bf8ac27506e97a23203a1fb3a36fe58bf2af048c7ecf5c2b9d03f02123a581d4633803625ae4c5ef8bd308e06e807105e4641a7b67c5f673"}, @NFTA_DATA_VALUE={0xdd, 0x1, "0336bafc339e8d2088caee3a062d3e36fe16add1ac695992aad89451ddc4cff7fc1f9502a99133912bf1b08fbf45bf572003c62c5892dc29b0e85c69353b92be986996edba9f774f7d0a3077629a084d7615770cc45d6f43f79fde6a2041c2576d28c91711508cbae2e45e5569d6c315fd05cffd584ac12b31e14bdb57c684f433a65228a031f22f0c6066e8d1d07a2a80f2e7a5546b2441ab93ac5e444f66f6c00f171677bc472d6f1e7bcceb4d355ac3d427090a2c7e1af8103398b4e3edb1b98eb9db034a45b4c34b9c353dbb09ee56587e06ca536eee30"}, @NFTA_DATA_VALUE={0xd4, 0x1, "c79e1f03b779f5017f341fbac3655618e54cfbf143d51af979e34a11246f3792f7f5faa8f24cb87962321e0098c84b7c9bc6cfc804c5aa6f23de3bfa299e2558bc8688e4a43080e128d92daa916126b938e5fb0b594fdcc3c2d3c2e4ae72aed31c86f43dae16ef3d8a3806ac344ce9feab383bdaec17c6ff67e2acbdf75b61be16057988a5ecab2181ad1eb63e8276d12955743bc15a21fb555ada44b1f8c425074dbfed2ac5ee97ed10636da5ba87115c56a7b341f61aadb9b3f97fe1658f474c25bce9d646ca4cd7039af4b41b16f1"}, @NFTA_DATA_VALUE={0x93, 0x1, "c0c053c88a074280e5376683bf49e23201c4c94af47efed8832130ca8241b80aabfbedaee4a18e39bd1ff9b9b1c28d7970b444e3480060fae5cf5d232e85ff7b02ddc37711881771b77634e025ce7f3e3e28c580e28390c71a07a69e3baf29ee947268037fd217482696e4cf85598a79cc93e946fe751adc42943d487937e930af4f3d5377319ab385cb3b0c48330e"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}]}}}, {0x48, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7d}]}}}, {0x34, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x20, 0x6, 0x1, 0x0, "e79feca05716f99db260d890a744af61db8f6d3a44fdbcc32f4ce2f2"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x270, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_SET_ELEM_DATA={0x18c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "856d02a78cd2b04ab1ff64610d9fcaf88e8e8dee9bc7d5643985dc3545c0497372874c6a03e64913905490d4c7773d031bc933a4c1ec0ce493f51918fdecd17376ea7f5fa7cea97b799e8587dce0c1cdd1b12762f59d5c3dceb79a104289a20a57495ee6823073de98ffd7a07bd314b40a01d9b12d951f9aa0e5a585231c780bd677708cfe11fb3676e294affe1e71f57610fb540bdb3213f34edd2d37acc91cb3a3683110633db4b574329a4639a33e651c2a0833e6dfba"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x47, 0x1, "3a83e138ea42b5585537bb622d20868bc707c3d2fae8a4f72571d57e7bd8d8343e4b48f55a7c8290c4e03d59173b8b5dd5b9cefc8b5fa1fc97b68d00cdf63201a6000c"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xbc, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x54, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4a4}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x1bc, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'wg1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14}}, 0x9f8}}, 0x0) 587.631632ms ago: executing program 3 (id=1363): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000400)=0x0) syz_clone3(&(0x7f0000000300)={0x80010000, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0x3e}, &(0x7f0000000180)=""/133, 0x85, &(0x7f0000000240)=""/88, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0xa}, 0x58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) ftruncate(r8, 0x7000000) r9 = dup(r8) read$FUSE(r9, &(0x7f0000000140)={0x2020}, 0x2020) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="034888a81200050000001400000060000000080033"], 0xfdef) sched_setattr(r7, &(0x7f0000000380)={0x38, 0x0, 0x10, 0x7f, 0x7, 0x5, 0x6, 0x1, 0x1a4, 0x3}, 0x0) syz_open_dev$vim2m(&(0x7f0000000b40), 0x7fffffff, 0x2) 243.060656ms ago: executing program 5 (id=1364): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000004dc0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="1a326d384a805032", 0x8}, {&(0x7f0000000480)="8bddb365d770c45824340beffbae38b5511604b627a4682b6c6451c73371699656b94bccab9ea721dff62c0ab07e4876da55e97c4afe9796ec9f1c7b4d6bc48affe142b148d8d0d35413f46b5334df4ffaebfa89e4204c21d8ba7ca2e53c8a07e080fb3a92d5ad6cb63574eb3f6b7039ac8b848000020a5b387b9ee88a2fd5e1a293c386b5acdde1f147804e0d69a82b96a4890814f87e4894e828ec1845a0cf35abb6e4564cda2ca9f985c7da7e0d1bb2aba561f2c3c01b4bf6809ce8fb6cb4", 0xc0}], 0x2, 0x0, 0x0, 0x480c0}], 0x1, 0x48080) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000180)=""/150, 0x96}, {&(0x7f0000000340)=""/132, 0x84}], 0x2}, 0x2120) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f88a8068986dd0300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 0s ago: executing program 5 (id=1365): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, [@dstopts={0x11, 0x1ea, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0x5, 0xffff, [0x3, 0x9f, 0x40, 0x2, 0x4, 0x2, 0x4, 0x1000, 0x2]}}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x7f, 0xefa, "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"}]}]}}}}}}, 0xfce) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) kernel console output (not intermixed with test programs): enl_rcv+0xd/0x40 [ 249.024544][ T8719] genl_rcv+0x28/0x40 [ 249.024565][ T8719] netlink_unicast+0x75c/0x8e0 [ 249.024595][ T8719] netlink_sendmsg+0x813/0xb40 [ 249.024627][ T8719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.024654][ T8719] ? aa_sock_msg_perm+0xf1/0x1b0 [ 249.024682][ T8719] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.024708][ T8719] ____sys_sendmsg+0x972/0x9f0 [ 249.024742][ T8719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.024770][ T8719] ? kstrtoull+0x12f/0x1d0 [ 249.024802][ T8719] ___sys_sendmsg+0x2a5/0x360 [ 249.024825][ T8719] ? __lock_acquire+0x6b5/0x2cf0 [ 249.024856][ T8719] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.024882][ T8719] ? get_pid_task+0x20/0x1f0 [ 249.024903][ T8719] ? get_pid_task+0x20/0x1f0 [ 249.024921][ T8719] ? get_pid_task+0x20/0x1f0 [ 249.024969][ T8719] ? __fget_files+0x2a/0x420 [ 249.024988][ T8719] ? __fget_files+0x3a0/0x420 [ 249.025018][ T8719] __sys_sendmsg+0x183/0x260 [ 249.025045][ T8719] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.025089][ T8719] __do_fast_syscall_32+0x229/0x6e0 [ 249.025108][ T8719] ? do_fast_syscall_32+0x33/0x70 [ 249.025125][ T8719] ? lockdep_hardirqs_on+0x7a/0x110 [ 249.025150][ T8719] ? asm_int80_emulation+0x1a/0x20 [ 249.025167][ T8719] ? do_int80_emulation+0x286/0x530 [ 249.025184][ T8719] ? trace_irq_disable+0x3b/0x140 [ 249.025211][ T8719] do_fast_syscall_32+0x33/0x70 [ 249.025230][ T8719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.025252][ T8719] RIP: 0023:0xf708f01c [ 249.025269][ T8719] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 249.025286][ T8719] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 249.025306][ T8719] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 249.025319][ T8719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.025330][ T8719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.025340][ T8719] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 249.025352][ T8719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.025381][ T8719] [ 249.893542][ T8736] input: syz0 as /devices/virtual/input/input24 [ 250.087931][ T8740] netlink: 'syz.1.826': attribute type 4 has an invalid length. [ 250.097499][ T8740] netlink: 17 bytes leftover after parsing attributes in process `syz.1.826'. [ 250.169895][ T5910] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 250.339956][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 250.354273][ T5910] usb 4-1: config 1 has an invalid descriptor of length 211, skipping remainder of the config [ 250.369507][ T5910] usb 4-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.391066][ T5910] usb 4-1: config 1 interface 0 has no altsetting 0 [ 250.406883][ T5910] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.40 [ 250.424729][ T5910] usb 4-1: New USB device strings: Mfr=152, Product=176, SerialNumber=3 [ 250.438903][ T5910] usb 4-1: Product: syz [ 250.446948][ T5910] usb 4-1: Manufacturer: syz [ 250.453697][ T5910] usb 4-1: SerialNumber: syz [ 250.821940][ T8737] delete_channel: no stack [ 252.533478][ T8775] xt_TCPMSS: Only works on TCP SYN packets [ 252.659244][ T8759] delete_channel: no stack [ 252.847629][ T5910] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input25 [ 252.918145][ T5193] bcm5974 4-1:1.0: could not read from device [ 252.951497][ T5193] bcm5974 4-1:1.0: could not read from device [ 252.977530][ T5910] usb 4-1: USB disconnect, device number 43 [ 253.052595][ T8777] syzkaller0: entered promiscuous mode [ 253.063313][ T8777] syzkaller0: entered allmulticast mode [ 253.272528][ T8761] delete_channel: no stack [ 253.321988][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 253.322006][ T30] audit: type=1326 audit(1776675621.777:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7401c code=0x7ffc0000 [ 253.391090][ T8782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.404902][ T30] audit: type=1326 audit(1776675621.777:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7401c code=0x7ffc0000 [ 253.428305][ T8782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.454660][ T30] audit: type=1326 audit(1776675621.777:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f7401c code=0x7ffc0000 [ 253.515562][ T30] audit: type=1326 audit(1776675621.777:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7401c code=0x7ffc0000 [ 253.538315][ T30] audit: type=1326 audit(1776675621.777:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7401c code=0x7ffc0000 [ 253.564051][ T30] audit: type=1326 audit(1776675621.807:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f7401c code=0x7ffc0000 [ 253.592761][ T30] audit: type=1326 audit(1776675621.807:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7401c code=0x7ffc0000 [ 253.627901][ T8786] FAULT_INJECTION: forcing a failure. [ 253.627901][ T8786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.627972][ T30] audit: type=1326 audit(1776675621.807:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7401c code=0x7ffc0000 [ 253.666261][ T30] audit: type=1326 audit(1776675621.807:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f7401c code=0x7ffc0000 [ 253.692012][ T30] audit: type=1326 audit(1776675621.807:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.5.839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7401c code=0x7ffc0000 [ 253.727565][ T8786] CPU: 1 UID: 0 PID: 8786 Comm: syz.3.841 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.727596][ T8786] Tainted: [L]=SOFTLOCKUP [ 253.727602][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 253.727612][ T8786] Call Trace: [ 253.727619][ T8786] [ 253.727627][ T8786] dump_stack_lvl+0xe8/0x150 [ 253.727656][ T8786] should_fail_ex+0x412/0x560 [ 253.727675][ T8786] _copy_to_user+0x31/0xb0 [ 253.727686][ T8786] bpf_test_finish+0x1db/0x6b0 [ 253.727704][ T8786] ? __pfx_bpf_test_finish+0x10/0x10 [ 253.727715][ T8786] ? eth_type_trans+0x484/0x7e0 [ 253.727734][ T8786] bpf_prog_test_run_skb+0x1250/0x2260 [ 253.727761][ T8786] ? __fget_files+0x3a0/0x420 [ 253.727771][ T8786] ? __fget_files+0x2a/0x420 [ 253.727783][ T8786] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 253.727795][ T8786] bpf_prog_test_run+0x2c7/0x340 [ 253.727812][ T8786] __sys_bpf+0x643/0x950 [ 253.727826][ T8786] ? __pfx___sys_bpf+0x10/0x10 [ 253.727845][ T8786] ? fput+0xa0/0xd0 [ 253.727855][ T8786] ? ksys_write+0x242/0x270 [ 253.727872][ T8786] __ia32_sys_bpf+0x7c/0x90 [ 253.727884][ T8786] __do_fast_syscall_32+0x229/0x6e0 [ 253.727900][ T8786] ? do_fast_syscall_32+0x33/0x70 [ 253.727917][ T8786] ? lockdep_hardirqs_on+0x7a/0x110 [ 253.727933][ T8786] ? asm_int80_emulation+0x1a/0x20 [ 253.727942][ T8786] ? do_int80_emulation+0x286/0x530 [ 253.727954][ T8786] do_fast_syscall_32+0x33/0x70 [ 253.727963][ T8786] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 253.727976][ T8786] RIP: 0023:0xf7f8601c [ 253.727986][ T8786] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 253.727995][ T8786] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 253.728008][ T8786] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 253.728015][ T8786] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 253.728021][ T8786] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.728027][ T8786] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 253.728033][ T8786] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.728047][ T8786] [ 254.846017][ T8807] binder: 8789:8807 ioctl c0306201 800003c0 returned -14 [ 255.180611][ T8815] binder: 8800:8815 ioctl c0306201 800003c0 returned -14 [ 255.209545][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 255.268849][ T8828] hsr0: entered promiscuous mode [ 255.284349][ T8828] macvlan2: entered allmulticast mode [ 255.311074][ T8828] hsr0: entered allmulticast mode [ 255.334015][ T8828] hsr_slave_0: entered allmulticast mode [ 255.345788][ T8828] hsr_slave_1: entered allmulticast mode [ 255.442730][ T8832] syzkaller1: entered allmulticast mode [ 255.780401][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.787592][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.864142][ T8837] fuse: Bad value for 'rootmode' [ 256.289980][ T8841] 8021q: VLANs not supported on ip6tnl0 [ 257.548225][ T8863] binder: 8862:8863 ioctl 40046205 0 returned -22 [ 257.603474][ T8865] input: syz0 as /devices/virtual/input/input26 [ 257.815813][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.866'. [ 257.850078][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 257.905660][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.867'. [ 258.012369][ T24] usb 2-1: config 0 has no interfaces? [ 258.027955][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 258.048367][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.064352][ T8877] netlink: 'syz.3.868': attribute type 4 has an invalid length. [ 258.075740][ T24] usb 2-1: config 0 descriptor?? [ 258.081434][ T8877] netlink: 17 bytes leftover after parsing attributes in process `syz.3.868'. [ 258.356487][ T5909] usb 2-1: USB disconnect, device number 35 [ 258.804978][ T8872] delete_channel: no stack [ 258.966651][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 258.966668][ T30] audit: type=1326 audit(1776675627.417:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.3.870" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f8601c code=0x0 [ 260.174687][ T8904] fuse: Bad value for 'rootmode' [ 260.596152][ T8911] syzkaller0: entered promiscuous mode [ 260.601836][ T8911] syzkaller0: entered allmulticast mode [ 260.805699][ T8915] input: syz0 as /devices/virtual/input/input27 [ 261.034830][ T30] audit: type=1326 audit(1776675629.487:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.1.883" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x0 [ 261.265519][ T8923] binder: 8912:8923 ioctl c0306201 800003c0 returned -14 [ 262.228012][ T8939] FAULT_INJECTION: forcing a failure. [ 262.228012][ T8939] name failslab, interval 1, probability 0, space 0, times 0 [ 262.254573][ T8939] CPU: 0 UID: 0 PID: 8939 Comm: syz.1.890 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.254603][ T8939] Tainted: [L]=SOFTLOCKUP [ 262.254609][ T8939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 262.254615][ T8939] Call Trace: [ 262.254621][ T8939] [ 262.254626][ T8939] dump_stack_lvl+0xe8/0x150 [ 262.254647][ T8939] should_fail_ex+0x412/0x560 [ 262.254665][ T8939] should_failslab+0xa8/0x100 [ 262.254680][ T8939] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 262.254693][ T8939] ? __alloc_skb+0x186/0x7d0 [ 262.254704][ T8939] ? __alloc_skb+0x1d0/0x7d0 [ 262.254714][ T8939] ? __local_bh_enable_ip+0xd0/0x130 [ 262.254731][ T8939] __alloc_skb+0x1d0/0x7d0 [ 262.254742][ T8939] ? netlink_ack_tlv_len+0x6c/0x210 [ 262.254755][ T8939] netlink_ack+0x146/0xa50 [ 262.254769][ T8939] ? __kmalloc_cache_noprof+0x31c/0x660 [ 262.254785][ T8939] nfnetlink_rcv+0x251a/0x27b0 [ 262.254811][ T8939] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 262.254829][ T8939] ? ref_tracker_free+0x693/0x840 [ 262.254858][ T8939] ? __netlink_deliver_tap+0x807/0x850 [ 262.254873][ T8939] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.254884][ T8939] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.254898][ T8939] netlink_unicast+0x75c/0x8e0 [ 262.254913][ T8939] netlink_sendmsg+0x813/0xb40 [ 262.254930][ T8939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.254943][ T8939] ? aa_sock_msg_perm+0xf1/0x1b0 [ 262.254960][ T8939] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.254973][ T8939] ____sys_sendmsg+0x972/0x9f0 [ 262.254990][ T8939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.255005][ T8939] ? kstrtoull+0x12f/0x1d0 [ 262.255021][ T8939] ___sys_sendmsg+0x2a5/0x360 [ 262.255033][ T8939] ? __lock_acquire+0x6b5/0x2cf0 [ 262.255051][ T8939] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.255064][ T8939] ? get_pid_task+0x20/0x1f0 [ 262.255075][ T8939] ? get_pid_task+0x20/0x1f0 [ 262.255084][ T8939] ? get_pid_task+0x20/0x1f0 [ 262.255112][ T8939] ? __fget_files+0x2a/0x420 [ 262.255121][ T8939] ? __fget_files+0x3a0/0x420 [ 262.255136][ T8939] __sys_sendmsg+0x183/0x260 [ 262.255150][ T8939] ? __pfx___sys_sendmsg+0x10/0x10 [ 262.255172][ T8939] __do_fast_syscall_32+0x229/0x6e0 [ 262.255184][ T8939] ? do_fast_syscall_32+0x33/0x70 [ 262.255192][ T8939] ? lockdep_hardirqs_on+0x7a/0x110 [ 262.255207][ T8939] ? asm_int80_emulation+0x1a/0x20 [ 262.255216][ T8939] ? do_int80_emulation+0x286/0x530 [ 262.255225][ T8939] ? trace_irq_disable+0x3b/0x140 [ 262.255240][ T8939] do_fast_syscall_32+0x33/0x70 [ 262.255250][ T8939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.255262][ T8939] RIP: 0023:0xf708f01c [ 262.255273][ T8939] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 262.255282][ T8939] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 262.255294][ T8939] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 262.255301][ T8939] RDX: 0000000024000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.255307][ T8939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.255313][ T8939] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 262.255319][ T8939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.255333][ T8939] [ 262.901422][ T8951] tipc: Enabled bearer , priority 10 [ 263.278581][ T8963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.901'. [ 264.022557][ T5918] tipc: Node number set to 772861040 [ 264.814500][ T9003] input: syz0 as /devices/virtual/input/input28 [ 265.089894][ T5838] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 265.242575][ T5838] usb 2-1: config 0 has no interfaces? [ 265.248117][ T5838] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 265.257636][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.267801][ T5838] usb 2-1: config 0 descriptor?? [ 265.531894][ T5890] usb 2-1: USB disconnect, device number 36 [ 266.220271][ T9027] FAULT_INJECTION: forcing a failure. [ 266.220271][ T9027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.234890][ T9027] CPU: 1 UID: 0 PID: 9027 Comm: syz.1.926 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.234918][ T9027] Tainted: [L]=SOFTLOCKUP [ 266.234924][ T9027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 266.234934][ T9027] Call Trace: [ 266.234941][ T9027] [ 266.234948][ T9027] dump_stack_lvl+0xe8/0x150 [ 266.234980][ T9027] should_fail_ex+0x412/0x560 [ 266.235017][ T9027] _copy_from_user+0x2d/0xb0 [ 266.235038][ T9027] msr_io+0xab/0x8b0 [ 266.235065][ T9027] ? kvm_arch_vcpu_ioctl+0x731/0x2ff0 [ 266.235092][ T9027] ? __pfx_do_set_msr+0x10/0x10 [ 266.235113][ T9027] ? kvm_arch_vcpu_ioctl+0x731/0x2ff0 [ 266.235134][ T9027] ? __pfx_msr_io+0x10/0x10 [ 266.235159][ T9027] ? __srcu_check_read_flavor+0x10b/0x250 [ 266.235183][ T9027] kvm_arch_vcpu_ioctl+0x76b/0x2ff0 [ 266.235206][ T9027] ? kvm_arch_vcpu_ioctl+0x731/0x2ff0 [ 266.235227][ T9027] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 266.235249][ T9027] ? __lock_acquire+0x6b5/0x2cf0 [ 266.235278][ T9027] ? unwind_next_frame+0xa6/0x2550 [ 266.235298][ T9027] ? unwind_next_frame+0xa6/0x2550 [ 266.235315][ T9027] ? is_bpf_text_address+0x26/0x2b0 [ 266.235343][ T9027] ? is_bpf_text_address+0x26/0x2b0 [ 266.235366][ T9027] ? is_bpf_text_address+0x292/0x2b0 [ 266.235385][ T9027] ? is_bpf_text_address+0x26/0x2b0 [ 266.235407][ T9027] ? kernel_text_address+0xa5/0xe0 [ 266.235425][ T9027] ? __kernel_text_address+0xd/0x30 [ 266.235441][ T9027] ? unwind_get_return_address+0x4d/0x90 [ 266.235457][ T9027] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 266.235480][ T9027] ? __lock_acquire+0x6b5/0x2cf0 [ 266.235506][ T9027] ? stack_trace_save+0xa9/0x100 [ 266.235523][ T9027] ? __pfx_stack_trace_save+0x10/0x10 [ 266.235539][ T9027] ? kasan_save_free_info+0x46/0x50 [ 266.235556][ T9027] ? stack_depot_save_flags+0x33/0x810 [ 266.235582][ T9027] ? __mutex_trylock_common+0x158/0x260 [ 266.235600][ T9027] ? __pfx___mutex_trylock_common+0x10/0x10 [ 266.235618][ T9027] ? rcu_is_watching+0x15/0xb0 [ 266.235633][ T9027] ? trace_contention_end+0x3d/0x140 [ 266.235651][ T9027] ? __mutex_lock+0x319/0x1550 [ 266.235676][ T9027] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 266.235694][ T9027] ? __pfx___mutex_lock+0x10/0x10 [ 266.235713][ T9027] ? kasan_quarantine_put+0xbb/0x1f0 [ 266.235737][ T9027] kvm_vcpu_ioctl+0x7e4/0xfd0 [ 266.235758][ T9027] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 266.235774][ T9027] ? do_vfs_ioctl+0x1166/0x1530 [ 266.235799][ T9027] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 266.235843][ T9027] kvm_vcpu_compat_ioctl+0x204/0x390 [ 266.235862][ T9027] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 266.235880][ T9027] ? __fget_files+0x3a0/0x420 [ 266.235894][ T9027] ? __fget_files+0x2a/0x420 [ 266.235910][ T9027] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 266.235933][ T9027] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 266.235958][ T9027] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 266.235980][ T9027] ? __fget_files+0x3a0/0x420 [ 266.236000][ T9027] ? fput+0xa0/0xd0 [ 266.236019][ T9027] ? ksys_write+0x242/0x270 [ 266.236045][ T9027] __do_fast_syscall_32+0x229/0x6e0 [ 266.236061][ T9027] ? do_fast_syscall_32+0x33/0x70 [ 266.236074][ T9027] ? lockdep_hardirqs_on+0x7a/0x110 [ 266.236093][ T9027] ? asm_int80_emulation+0x1a/0x20 [ 266.236108][ T9027] ? do_int80_emulation+0x286/0x530 [ 266.236121][ T9027] ? trace_irq_disable+0x3b/0x140 [ 266.236146][ T9027] do_fast_syscall_32+0x33/0x70 [ 266.236160][ T9027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.236178][ T9027] RIP: 0023:0xf708f01c [ 266.236192][ T9027] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 266.236205][ T9027] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 266.236221][ T9027] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae89 [ 266.236231][ T9027] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.236240][ T9027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.236248][ T9027] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 266.236256][ T9027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.236278][ T9027] [ 266.708279][ T9029] FAULT_INJECTION: forcing a failure. [ 266.708279][ T9029] name failslab, interval 1, probability 0, space 0, times 0 [ 266.721095][ T9029] CPU: 0 UID: 0 PID: 9029 Comm: syz.1.927 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.721114][ T9029] Tainted: [L]=SOFTLOCKUP [ 266.721117][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 266.721124][ T9029] Call Trace: [ 266.721129][ T9029] [ 266.721135][ T9029] dump_stack_lvl+0xe8/0x150 [ 266.721155][ T9029] should_fail_ex+0x412/0x560 [ 266.721174][ T9029] should_failslab+0xa8/0x100 [ 266.721189][ T9029] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 266.721201][ T9029] ? kmem_cache_alloc_noprof+0x307/0x650 [ 266.721211][ T9029] ? ovs_flow_alloc+0x24/0x1f0 [ 266.721222][ T9029] ? ovs_flow_alloc+0x103/0x1f0 [ 266.721234][ T9029] ovs_flow_alloc+0x103/0x1f0 [ 266.721247][ T9029] ovs_flow_cmd_new+0x2b9/0xe80 [ 266.721260][ T9029] ? kasan_save_track+0x3e/0x80 [ 266.721276][ T9029] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 266.721316][ T9029] ? __nla_parse+0x40/0x60 [ 266.721327][ T9029] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 266.721343][ T9029] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 266.721361][ T9029] genl_family_rcv_msg_doit+0x22a/0x330 [ 266.721380][ T9029] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 266.721401][ T9029] ? bpf_lsm_capable+0x9/0x20 [ 266.721415][ T9029] ? security_capable+0x7e/0x2c0 [ 266.721432][ T9029] genl_rcv_msg+0x61c/0x7a0 [ 266.721450][ T9029] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.721463][ T9029] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 266.721477][ T9029] ? __pfx_ref_tracker_free+0x10/0x10 [ 266.721492][ T9029] ? __asan_memcpy+0x40/0x70 [ 266.721501][ T9029] ? __skb_clone+0x63/0x7a0 [ 266.721518][ T9029] netlink_rcv_skb+0x232/0x4b0 [ 266.721531][ T9029] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.721550][ T9029] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.721584][ T9029] ? down_read+0x270/0x2e0 [ 266.721601][ T9029] ? genl_rcv+0xd/0x40 [ 266.721624][ T9029] genl_rcv+0x28/0x40 [ 266.721637][ T9029] netlink_unicast+0x75c/0x8e0 [ 266.721653][ T9029] netlink_sendmsg+0x813/0xb40 [ 266.721670][ T9029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.721683][ T9029] ? aa_sock_msg_perm+0xf1/0x1b0 [ 266.721699][ T9029] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 266.721715][ T9029] ____sys_sendmsg+0x972/0x9f0 [ 266.721733][ T9029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.721747][ T9029] ? kstrtoull+0x12f/0x1d0 [ 266.721764][ T9029] ___sys_sendmsg+0x2a5/0x360 [ 266.721777][ T9029] ? __lock_acquire+0x6b5/0x2cf0 [ 266.721795][ T9029] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.721809][ T9029] ? get_pid_task+0x20/0x1f0 [ 266.721820][ T9029] ? get_pid_task+0x20/0x1f0 [ 266.721829][ T9029] ? get_pid_task+0x20/0x1f0 [ 266.721852][ T9029] ? __fget_files+0x2a/0x420 [ 266.721863][ T9029] ? __fget_files+0x3a0/0x420 [ 266.721877][ T9029] __sys_sendmsg+0x183/0x260 [ 266.721891][ T9029] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.721915][ T9029] __do_fast_syscall_32+0x229/0x6e0 [ 266.721926][ T9029] ? do_fast_syscall_32+0x33/0x70 [ 266.721935][ T9029] ? lockdep_hardirqs_on+0x7a/0x110 [ 266.721949][ T9029] ? asm_int80_emulation+0x1a/0x20 [ 266.721974][ T9029] ? do_int80_emulation+0x286/0x530 [ 266.721983][ T9029] ? trace_irq_disable+0x3b/0x140 [ 266.721998][ T9029] do_fast_syscall_32+0x33/0x70 [ 266.722008][ T9029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.722021][ T9029] RIP: 0023:0xf708f01c [ 266.722031][ T9029] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 266.722039][ T9029] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 266.722051][ T9029] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 266.722059][ T9029] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.722065][ T9029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.722071][ T9029] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 266.722077][ T9029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.722091][ T9029] [ 267.300862][ T5838] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 267.310682][ T5838] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 267.813171][ T30] audit: type=1326 audit(1776675636.267:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9039 comm="syz.5.930" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f7401c code=0x0 [ 268.707380][ T9061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.938'. [ 268.933593][ T9069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.945007][ T9069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.113222][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'. [ 269.125168][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'. [ 269.144475][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'. [ 269.474897][ T30] audit: type=1326 audit(1776675637.927:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.3.950" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f8601c code=0x0 [ 270.319331][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.328783][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.342086][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.351386][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.363179][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.404122][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.414941][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.428605][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.442545][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.451803][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.608777][ T9102] chnl_net:caif_netlink_parms(): no params data found [ 270.676817][ T9102] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.684079][ T9102] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.691413][ T9102] bridge_slave_0: entered allmulticast mode [ 270.698809][ T9102] bridge_slave_0: entered promiscuous mode [ 270.706634][ T9102] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.713790][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 270.721856][ T9102] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.729445][ T9102] bridge_slave_1: entered allmulticast mode [ 270.736754][ T9102] bridge_slave_1: entered promiscuous mode [ 270.765511][ T9102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.777310][ T9102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.806009][ T9102] team0: Port device team_slave_0 added [ 270.813881][ T9102] team0: Port device team_slave_1 added [ 270.837125][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.844132][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.873095][ T24] usb 4-1: device descriptor read/64, error -71 [ 270.879401][ T9102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.891723][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.898670][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.924775][ T9102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.963347][ T9102] hsr_slave_0: entered promiscuous mode [ 270.969586][ T9102] hsr_slave_1: entered promiscuous mode [ 270.975879][ T9102] debugfs: 'hsr0' already exists in 'hsr' [ 270.981666][ T9102] Cannot create hsr debugfs directory [ 271.129922][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 271.234083][ T9102] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 271.245959][ T9102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 271.254877][ T9102] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 271.265801][ T9102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 271.273856][ T9102] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 271.281200][ T24] usb 4-1: device descriptor read/64, error -71 [ 271.291777][ T9102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 271.300429][ T9102] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 271.310513][ T9102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 271.347302][ T9102] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.354589][ T9102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.362091][ T9102] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.369246][ T9102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.390675][ T24] usb usb4-port1: attempt power cycle [ 271.453494][ T9102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.471029][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.478686][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.493612][ T9102] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.505990][ T6868] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.513188][ T6868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.526732][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.533970][ T6862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.604542][ T9102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.644185][ T9102] veth0_vlan: entered promiscuous mode [ 271.655277][ T9102] veth1_vlan: entered promiscuous mode [ 271.687270][ T9102] veth0_macvtap: entered promiscuous mode [ 271.696690][ T9102] veth1_macvtap: entered promiscuous mode [ 271.713445][ T9102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.728509][ T9102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.736824][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 271.752800][ T6862] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.765048][ T6862] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.775138][ T24] usb 4-1: device descriptor read/8, error -71 [ 271.783059][ T6862] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.792054][ T6862] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.945130][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.968926][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.020664][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 272.028930][ T6868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.038442][ T6868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.051959][ T24] usb 4-1: device descriptor read/8, error -71 [ 272.171825][ T24] usb usb4-port1: unable to enumerate USB device [ 272.182045][ T9123] FAULT_INJECTION: forcing a failure. [ 272.182045][ T9123] name failslab, interval 1, probability 0, space 0, times 0 [ 272.210877][ T9123] CPU: 1 UID: 0 PID: 9123 Comm: syz.1.958 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.210909][ T9123] Tainted: [L]=SOFTLOCKUP [ 272.210916][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 272.210927][ T9123] Call Trace: [ 272.210934][ T9123] [ 272.210942][ T9123] dump_stack_lvl+0xe8/0x150 [ 272.210975][ T9123] should_fail_ex+0x412/0x560 [ 272.211007][ T9123] should_failslab+0xa8/0x100 [ 272.211033][ T9123] __kmalloc_noprof+0xe8/0x760 [ 272.211056][ T9123] ? ima_write_template_field_data+0x47/0x490 [ 272.211108][ T9123] ima_write_template_field_data+0x47/0x490 [ 272.211142][ T9123] ima_eventname_init_common+0x1dd/0x250 [ 272.211173][ T9123] ? __pfx_ima_eventname_init_common+0x10/0x10 [ 272.211207][ T9123] ? __kmalloc_noprof+0x37d/0x760 [ 272.211228][ T9123] ? ima_alloc_init_template+0x183/0x700 [ 272.211248][ T9123] ? __kmalloc_noprof+0x1b8/0x760 [ 272.211270][ T9123] ? __pfx_ima_eventname_ng_init+0x10/0x10 [ 272.211297][ T9123] ima_alloc_init_template+0x323/0x700 [ 272.211328][ T9123] ima_store_measurement+0x1ce/0x670 [ 272.211359][ T9123] ? __pfx_ima_store_measurement+0x10/0x10 [ 272.211380][ T9123] ? ima_d_path+0x16b/0x230 [ 272.211412][ T9123] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 272.211448][ T9123] process_measurement+0x13e5/0x1c80 [ 272.211492][ T9123] ? __pfx_process_measurement+0x10/0x10 [ 272.211513][ T9123] ? aa_file_perm+0x192/0x15e0 [ 272.211565][ T9123] ? get_pid_task+0x20/0x1f0 [ 272.211597][ T9123] ima_file_mmap+0x1b0/0x200 [ 272.211619][ T9123] ? __pfx_ima_file_mmap+0x10/0x10 [ 272.211645][ T9123] ? apparmor_mmap_file+0x2da/0x3e0 [ 272.211671][ T9123] security_mmap_file+0x773/0xa20 [ 272.211696][ T9123] vm_mmap_pgoff+0x134/0x4f0 [ 272.211729][ T9123] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 272.211756][ T9123] ? __fget_files+0x2a/0x420 [ 272.211778][ T9123] ? __fget_files+0x2a/0x420 [ 272.211797][ T9123] ? __fget_files+0x2a/0x420 [ 272.211817][ T9123] ksys_mmap_pgoff+0x51e/0x760 [ 272.211843][ T9123] __do_fast_syscall_32+0x229/0x6e0 [ 272.211863][ T9123] ? do_fast_syscall_32+0x33/0x70 [ 272.211879][ T9123] ? lockdep_hardirqs_on+0x7a/0x110 [ 272.211904][ T9123] ? asm_int80_emulation+0x1a/0x20 [ 272.211922][ T9123] ? do_int80_emulation+0x286/0x530 [ 272.211939][ T9123] ? trace_irq_disable+0x3b/0x140 [ 272.211965][ T9123] do_fast_syscall_32+0x33/0x70 [ 272.211984][ T9123] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 272.212007][ T9123] RIP: 0023:0xf708f01c [ 272.212023][ T9123] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 272.212040][ T9123] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 272.212060][ T9123] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000003000 [ 272.212073][ T9123] RDX: 0000000001000004 RSI: 0000000000010012 RDI: 0000000000000004 [ 272.212085][ T9123] RBP: 0000000080a41000 R08: 0000000000000000 R09: 0000000000000000 [ 272.212097][ T9123] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 272.212108][ T9123] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 272.212137][ T9123] [ 272.214424][ T30] audit: type=1804 audit(1776675640.667:473): pid=9123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.958" name="/newroot/212/net_prio.prioidx" dev="tmpfs" ino=1122 res=0 errno=0 [ 272.416419][ T9131] netlink: 'syz.1.960': attribute type 31 has an invalid length. [ 272.422863][ T30] audit: type=1326 audit(1776675640.867:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.6.951" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x0 [ 272.581031][ T5845] Bluetooth: hci5: command tx timeout [ 272.680351][ T24] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 272.694907][ T24] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 273.218500][ T9142] binder: 9133:9142 ioctl c0306201 800003c0 returned -14 [ 274.243729][ T9164] FAULT_INJECTION: forcing a failure. [ 274.243729][ T9164] name failslab, interval 1, probability 0, space 0, times 0 [ 274.258257][ T9164] CPU: 0 UID: 0 PID: 9164 Comm: syz.4.970 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.258287][ T9164] Tainted: [L]=SOFTLOCKUP [ 274.258299][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 274.258310][ T9164] Call Trace: [ 274.258318][ T9164] [ 274.258326][ T9164] dump_stack_lvl+0xe8/0x150 [ 274.258361][ T9164] should_fail_ex+0x412/0x560 [ 274.258393][ T9164] should_failslab+0xa8/0x100 [ 274.258417][ T9164] ? skb_clone+0x212/0x3a0 [ 274.258441][ T9164] kmem_cache_alloc_noprof+0x87/0x650 [ 274.258472][ T9164] skb_clone+0x212/0x3a0 [ 274.258499][ T9164] __netlink_deliver_tap+0x404/0x850 [ 274.258533][ T9164] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.258556][ T9164] netlink_deliver_tap+0x19c/0x1b0 [ 274.258580][ T9164] netlink_sendskb+0x68/0x140 [ 274.258601][ T9164] nlmsg_notify+0x12e/0x1a0 [ 274.258626][ T9164] nf_tables_commit+0x8e95/0xa400 [ 274.258684][ T9164] ? __pfx_nf_tables_commit+0x10/0x10 [ 274.258712][ T9164] ? __free_frozen_pages+0x749/0xd30 [ 274.258741][ T9164] ? nf_tables_newrule+0x2590/0x28b0 [ 274.258782][ T9164] ? __pfx_nf_tables_newrule+0x10/0x10 [ 274.258806][ T9164] ? nfnl_pernet+0x23/0x240 [ 274.258848][ T9164] nfnetlink_rcv+0x1c19/0x27b0 [ 274.258902][ T9164] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 274.258936][ T9164] ? ref_tracker_free+0x693/0x840 [ 274.258993][ T9164] ? __netlink_deliver_tap+0x807/0x850 [ 274.259024][ T9164] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.259045][ T9164] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.259073][ T9164] netlink_unicast+0x75c/0x8e0 [ 274.259109][ T9164] netlink_sendmsg+0x813/0xb40 [ 274.259141][ T9164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.259167][ T9164] ? aa_sock_msg_perm+0xf1/0x1b0 [ 274.259196][ T9164] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.259221][ T9164] ____sys_sendmsg+0x972/0x9f0 [ 274.259255][ T9164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.259284][ T9164] ? kstrtoull+0x12f/0x1d0 [ 274.259316][ T9164] ___sys_sendmsg+0x2a5/0x360 [ 274.259337][ T9164] ? __lock_acquire+0x6b5/0x2cf0 [ 274.259369][ T9164] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.259395][ T9164] ? get_pid_task+0x20/0x1f0 [ 274.259415][ T9164] ? get_pid_task+0x20/0x1f0 [ 274.259433][ T9164] ? get_pid_task+0x20/0x1f0 [ 274.259481][ T9164] ? __fget_files+0x2a/0x420 [ 274.259499][ T9164] ? __fget_files+0x3a0/0x420 [ 274.259528][ T9164] __sys_sendmsg+0x183/0x260 [ 274.259554][ T9164] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.259600][ T9164] __do_fast_syscall_32+0x229/0x6e0 [ 274.259620][ T9164] ? do_fast_syscall_32+0x33/0x70 [ 274.259637][ T9164] ? lockdep_hardirqs_on+0x7a/0x110 [ 274.259662][ T9164] ? asm_int80_emulation+0x1a/0x20 [ 274.259680][ T9164] ? do_int80_emulation+0x286/0x530 [ 274.259697][ T9164] ? trace_irq_disable+0x3b/0x140 [ 274.259724][ T9164] do_fast_syscall_32+0x33/0x70 [ 274.259743][ T9164] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 274.259765][ T9164] RIP: 0023:0xf7fe501c [ 274.259780][ T9164] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 274.259794][ T9164] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 274.259813][ T9164] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 274.259825][ T9164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.259835][ T9164] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 274.259845][ T9164] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 274.259855][ T9164] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.259882][ T9164] [ 274.610701][ T5845] Bluetooth: hci5: command tx timeout [ 275.312478][ T9194] netlink: 32 bytes leftover after parsing attributes in process `syz.6.978'. [ 275.379233][ T9191] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 275.474622][ T30] audit: type=1326 audit(1776675643.927:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9193 comm="syz.5.982" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f7401c code=0x0 [ 275.790339][ T24] psmouse serio2: Failed to reset mouse on : -5 [ 275.819970][ T9117] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 275.982102][ T9117] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.994489][ T9117] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 276.003795][ T9117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.011987][ T9117] usb 4-1: Product: syz [ 276.016258][ T9117] usb 4-1: Manufacturer: syz [ 276.020977][ T9117] usb 4-1: SerialNumber: syz [ 276.031664][ T9117] usb 4-1: config 0 descriptor?? [ 276.043710][ T9117] hub 4-1:0.0: bad descriptor, ignoring hub [ 276.056075][ T9117] hub 4-1:0.0: probe with driver hub failed with error -5 [ 276.162416][ T9117] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 276.254327][ T9117] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 276.332633][ T9117] usb 4-1: USB disconnect, device number 48 [ 276.380924][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.590441][ T5942] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 276.691395][ T5845] Bluetooth: hci5: command tx timeout [ 276.714489][ T9223] FAULT_INJECTION: forcing a failure. [ 276.714489][ T9223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.728084][ T9223] CPU: 1 UID: 0 PID: 9223 Comm: syz.4.993 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.728122][ T9223] Tainted: [L]=SOFTLOCKUP [ 276.728128][ T9223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 276.728139][ T9223] Call Trace: [ 276.728146][ T9223] [ 276.728154][ T9223] dump_stack_lvl+0xe8/0x150 [ 276.728186][ T9223] should_fail_ex+0x412/0x560 [ 276.728218][ T9223] _copy_from_user+0x2d/0xb0 [ 276.728238][ T9223] kstrtouint_from_user+0xd6/0x180 [ 276.728265][ T9223] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 276.728304][ T9223] proc_fail_nth_write+0x8e/0x210 [ 276.728323][ T9223] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 276.728348][ T9223] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 276.728369][ T9223] vfs_write+0x29a/0xb90 [ 276.728401][ T9223] ? __pfx_vfs_write+0x10/0x10 [ 276.728425][ T9223] ? __fget_files+0x2a/0x420 [ 276.728448][ T9223] ? __fget_files+0x3a0/0x420 [ 276.728464][ T9223] ? __fget_files+0x2a/0x420 [ 276.728491][ T9223] ksys_write+0x150/0x270 [ 276.728515][ T9223] ? __pfx_ksys_write+0x10/0x10 [ 276.728541][ T9223] ? asm_int80_emulation+0x1a/0x20 [ 276.728564][ T9223] do_int80_emulation+0x181/0x530 [ 276.728583][ T9223] ? trace_irq_disable+0x3b/0x140 [ 276.728605][ T9223] ? asm_int80_emulation+0x1a/0x20 [ 276.728622][ T9223] ? clear_bhb_loop+0x40/0x90 [ 276.728639][ T9223] ? clear_bhb_loop+0x40/0x90 [ 276.728661][ T9223] asm_int80_emulation+0x1a/0x20 [ 276.728679][ T9223] RIP: 0023:0xf71e5cab [ 276.728696][ T9223] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 276.728710][ T9223] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 276.728729][ T9223] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0 [ 276.728742][ T9223] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 276.728753][ T9223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.728763][ T9223] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 276.728774][ T9223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.728800][ T9223] [ 276.964055][ T9226] FAULT_INJECTION: forcing a failure. [ 276.964055][ T9226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.977421][ T9226] CPU: 1 UID: 0 PID: 9226 Comm: syz.5.994 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.977451][ T9226] Tainted: [L]=SOFTLOCKUP [ 276.977459][ T9226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 276.977470][ T9226] Call Trace: [ 276.977477][ T9226] [ 276.977484][ T9226] dump_stack_lvl+0xe8/0x150 [ 276.977516][ T9226] should_fail_ex+0x412/0x560 [ 276.977547][ T9226] _copy_to_user+0x31/0xb0 [ 276.977569][ T9226] simple_read_from_buffer+0xe1/0x170 [ 276.977594][ T9226] proc_fail_nth_read+0x1bb/0x230 [ 276.977617][ T9226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.977640][ T9226] ? rw_verify_area+0x2a6/0x4d0 [ 276.977661][ T9226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.977683][ T9226] vfs_read+0x20c/0xa70 [ 276.977709][ T9226] ? __pfx___mutex_lock+0x10/0x10 [ 276.977729][ T9226] ? __pfx_vfs_read+0x10/0x10 [ 276.977751][ T9226] ? __fget_files+0x2a/0x420 [ 276.977773][ T9226] ? __fget_files+0x3a0/0x420 [ 276.977790][ T9226] ? __fget_files+0x2a/0x420 [ 276.977817][ T9226] ksys_read+0x150/0x270 [ 276.977841][ T9226] ? __pfx_ksys_read+0x10/0x10 [ 276.977866][ T9226] ? asm_int80_emulation+0x1a/0x20 [ 276.977897][ T9226] do_int80_emulation+0x181/0x530 [ 276.977914][ T9226] ? trace_irq_disable+0x3b/0x140 [ 276.977935][ T9226] ? asm_int80_emulation+0x1a/0x20 [ 276.977952][ T9226] ? clear_bhb_loop+0x40/0x90 [ 276.977970][ T9226] ? clear_bhb_loop+0x40/0x90 [ 276.977992][ T9226] asm_int80_emulation+0x1a/0x20 [ 276.978009][ T9226] RIP: 0023:0xf7175cab [ 276.978025][ T9226] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 276.978041][ T9226] RSP: 002b:00000000f54364bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 276.978060][ T9226] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f54365d0 [ 276.978072][ T9226] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 276.978083][ T9226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.978093][ T9226] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 276.978104][ T9226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.978130][ T9226] [ 276.979149][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 277.031217][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.992'. [ 277.037349][ T5942] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.068644][ T9221] macvlan0: entered promiscuous mode [ 277.072539][ T5942] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 277.140891][ T9221] netlink: 'syz.6.992': attribute type 1 has an invalid length. [ 277.148831][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.223304][ T9221] netlink: 'syz.6.992': attribute type 2 has an invalid length. [ 277.244097][ T5942] usb 2-1: Product: syz [ 277.268897][ T5942] usb 2-1: Manufacturer: syz [ 277.275177][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.992'. [ 277.286119][ T5942] usb 2-1: SerialNumber: syz [ 277.293896][ T5942] usb 2-1: config 0 descriptor?? [ 277.313396][ T5942] cdc_ether 2-1:0.0: missing cdc header descriptor [ 277.330865][ T5942] usb 2-1: unsupported MDLM descriptors [ 277.494189][ T9241] netlink: 28 bytes leftover after parsing attributes in process `syz.5.997'. [ 277.502133][ T9243] netlink: 12 bytes leftover after parsing attributes in process `syz.6.998'. [ 277.720949][ T9214] Invalid argument reading file caps for ./file0 [ 278.012798][ T5942] usb 2-1: USB disconnect, device number 37 [ 278.344779][ T9257] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1000'. [ 278.747866][ T9269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1006'. [ 278.770073][ T5845] Bluetooth: hci5: command tx timeout [ 278.907782][ T9272] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1007'. [ 279.433390][ T5918] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 279.471271][ T5918] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 279.590228][ T24] misc userio: Buffer overflowed, userio client isn't keeping up [ 280.656061][ T24] input: PS/2 Generic Mouse as /devices/serio2/input/input29 [ 280.880084][ T24] psmouse serio2: Failed to enable mouse on [ 281.211572][ T5838] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 281.308578][ T9312] netlink: 'syz.1.1020': attribute type 4 has an invalid length. [ 281.318496][ T9312] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1020'. [ 281.379842][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 281.392209][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.404155][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.414416][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 281.436983][ T5838] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 281.452567][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.470615][ T5838] usb 4-1: config 0 descriptor?? [ 281.899311][ T5838] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 281.916148][ T5838] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 281.934118][ T5838] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 281.960716][ T5838] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 281.968365][ T5838] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 281.977104][ T5838] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 281.986662][ T5838] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 281.997117][ T5838] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 282.007446][ T5838] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 282.063384][ T9309] delete_channel: no stack [ 282.118453][ T5838] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 282.179038][ T5838] microsoft 0003:045E:07DA.0011: no inputs found [ 282.198504][ T5838] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 282.227300][ T9316] netlink: 'syz.4.1021': attribute type 4 has an invalid length. [ 282.308753][ T9316] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1021'. [ 282.699879][ T24] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 282.851175][ T24] usb 2-1: device descriptor read/64, error -71 [ 283.100066][ T24] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 283.135529][ T9313] delete_channel: no stack [ 283.250425][ T24] usb 2-1: device descriptor read/64, error -71 [ 283.299927][ T5918] hid-generic 0000:0000:0000.0012: hidraw1: HID v0.00 Device [syz1] on syz0 [ 283.366149][ T9328] input: syz0 as /devices/virtual/input/input30 [ 283.381880][ T24] usb usb2-port1: attempt power cycle [ 283.422304][ T9326] fido_id[9326]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 283.653834][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 283.665754][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 283.740152][ T24] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 283.772881][ T24] usb 2-1: device descriptor read/8, error -71 [ 283.877073][ T30] audit: type=1326 audit(1776675652.327:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.4.1030" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe501c code=0x0 [ 284.009935][ T24] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 284.030624][ T24] usb 2-1: device descriptor read/8, error -71 [ 284.044068][ T5909] usb 4-1: USB disconnect, device number 49 [ 284.142647][ T24] usb usb2-port1: unable to enumerate USB device [ 284.409889][ T5909] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 284.570132][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 284.581786][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.604029][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.614652][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 284.627679][ T5909] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 284.636888][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.658324][ T5909] usb 4-1: config 0 descriptor?? [ 285.112155][ T5909] usbhid 4-1:0.0: can't add hid device: -71 [ 285.118691][ T5909] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 285.133288][ T5909] usb 4-1: USB disconnect, device number 50 [ 285.469476][ T5942] hid_parser_main: 5 callbacks suppressed [ 285.469498][ T5942] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 285.498050][ T5942] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 285.595876][ T9361] fido_id[9361]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 286.072141][ T9373] macsec1: entered promiscuous mode [ 286.737580][ T30] audit: type=1326 audit(1776675655.187:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.6.1045" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x0 [ 287.553794][ T30] audit: type=1326 audit(1776675656.007:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.4.1053" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe501c code=0x0 [ 288.086373][ T9427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1059'. [ 289.238088][ T5909] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 289.405354][ T5909] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 289.424719][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.454089][ T5909] usb 4-1: Product: syz [ 289.460211][ T5909] usb 4-1: Manufacturer: syz [ 289.472245][ T5909] usb 4-1: SerialNumber: syz [ 289.537929][ T9456] FAULT_INJECTION: forcing a failure. [ 289.537929][ T9456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.551699][ T9456] CPU: 1 UID: 0 PID: 9456 Comm: syz.1.1069 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.551729][ T9456] Tainted: [L]=SOFTLOCKUP [ 289.551734][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 289.551741][ T9456] Call Trace: [ 289.551745][ T9456] [ 289.551750][ T9456] dump_stack_lvl+0xe8/0x150 [ 289.551778][ T9456] should_fail_ex+0x412/0x560 [ 289.551811][ T9456] _copy_from_iter+0x1d3/0x1670 [ 289.551841][ T9456] ? rcu_is_watching+0x15/0xb0 [ 289.551866][ T9456] ? __pfx__copy_from_iter+0x10/0x10 [ 289.551894][ T9456] ? netlink_sendmsg+0x650/0xb40 [ 289.551906][ T9456] ? skb_put+0x11b/0x210 [ 289.551920][ T9456] netlink_sendmsg+0x6c0/0xb40 [ 289.551935][ T9456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.551951][ T9456] ? aa_sock_msg_perm+0xf1/0x1b0 [ 289.551979][ T9456] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.552004][ T9456] ____sys_sendmsg+0x972/0x9f0 [ 289.552035][ T9456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.552051][ T9456] ? kstrtoull+0x12f/0x1d0 [ 289.552068][ T9456] ___sys_sendmsg+0x2a5/0x360 [ 289.552080][ T9456] ? __lock_acquire+0x6b5/0x2cf0 [ 289.552097][ T9456] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.552121][ T9456] ? get_pid_task+0x20/0x1f0 [ 289.552141][ T9456] ? get_pid_task+0x20/0x1f0 [ 289.552158][ T9456] ? get_pid_task+0x20/0x1f0 [ 289.552195][ T9456] ? __fget_files+0x2a/0x420 [ 289.552206][ T9456] ? __fget_files+0x3a0/0x420 [ 289.552220][ T9456] __sys_sendmsg+0x183/0x260 [ 289.552234][ T9456] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.552264][ T9456] __do_fast_syscall_32+0x229/0x6e0 [ 289.552284][ T9456] ? do_fast_syscall_32+0x33/0x70 [ 289.552301][ T9456] ? lockdep_hardirqs_on+0x7a/0x110 [ 289.552326][ T9456] ? asm_int80_emulation+0x1a/0x20 [ 289.552340][ T9456] ? do_int80_emulation+0x286/0x530 [ 289.552349][ T9456] ? trace_irq_disable+0x3b/0x140 [ 289.552364][ T9456] do_fast_syscall_32+0x33/0x70 [ 289.552374][ T9456] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.552386][ T9456] RIP: 0023:0xf708f01c [ 289.552403][ T9456] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 289.552417][ T9456] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 289.552437][ T9456] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 289.552448][ T9456] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.552458][ T9456] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.552469][ T9456] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 289.552480][ T9456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.552508][ T9456] [ 289.974507][ T9459] syzkaller0: entered promiscuous mode [ 289.980608][ T9459] syzkaller0: entered allmulticast mode [ 290.046624][ T5909] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 290.087378][ T5909] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 290.103096][ T5909] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 290.115537][ T5909] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 290.127057][ T5909] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 290.143847][ T5909] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 290.440046][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 290.599975][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 290.606598][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 290.615414][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.625325][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.635381][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.645516][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.658699][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 290.667854][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.887818][ T24] usb 2-1: usb_control_msg returned -32 [ 290.894867][ T24] usbtmc 2-1:16.0: can't read capabilities [ 290.909736][ T24] usb 2-1: USB disconnect, device number 42 [ 292.268401][ T9502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.298853][ T9502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.318964][ T9500] fuse: Bad value for 'source' [ 292.901555][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 293.127265][ T5909] usb 4-1: USB disconnect, device number 51 [ 293.527402][ T30] audit: type=1800 audit(1776675661.977:479): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1086" name="bus" dev="tmpfs" ino=1348 res=0 errno=0 [ 293.727676][ T9520] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1089'. [ 293.751777][ T9519] delete_channel: no stack [ 293.967593][ T9533] binder: 9532:9533 ioctl 4018480c 80000180 returned -22 [ 294.921669][ T9550] FAULT_INJECTION: forcing a failure. [ 294.921669][ T9550] name failslab, interval 1, probability 0, space 0, times 0 [ 294.941917][ T9550] CPU: 0 UID: 0 PID: 9550 Comm: syz.5.1097 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.941937][ T9550] Tainted: [L]=SOFTLOCKUP [ 294.941941][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 294.941947][ T9550] Call Trace: [ 294.941952][ T9550] [ 294.941957][ T9550] dump_stack_lvl+0xe8/0x150 [ 294.941978][ T9550] should_fail_ex+0x412/0x560 [ 294.942002][ T9550] should_failslab+0xa8/0x100 [ 294.942029][ T9550] __kmalloc_noprof+0xe8/0x760 [ 294.942052][ T9550] ? tomoyo_encode+0x28b/0x550 [ 294.942069][ T9550] ? tomoyo_realpath_from_path+0x5a2/0x5d0 [ 294.942083][ T9550] tomoyo_encode+0x28b/0x550 [ 294.942095][ T9550] tomoyo_mount_permission+0x4c1/0x9d0 [ 294.942113][ T9550] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 294.942127][ T9550] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 294.942168][ T9550] security_sb_mount+0xe4/0x320 [ 294.942185][ T9550] path_mount+0xbc/0x10e0 [ 294.942204][ T9550] ? user_path_at+0xd4/0x160 [ 294.942217][ T9550] __se_sys_mount+0x31d/0x420 [ 294.942229][ T9550] ? __pfx___se_sys_mount+0x10/0x10 [ 294.942242][ T9550] ? __ia32_sys_mount+0x20/0xc0 [ 294.942252][ T9550] __do_fast_syscall_32+0x229/0x6e0 [ 294.942263][ T9550] ? do_fast_syscall_32+0x33/0x70 [ 294.942272][ T9550] ? lockdep_hardirqs_on+0x7a/0x110 [ 294.942286][ T9550] ? asm_int80_emulation+0x1a/0x20 [ 294.942296][ T9550] ? do_int80_emulation+0x286/0x530 [ 294.942305][ T9550] ? trace_irq_disable+0x3b/0x140 [ 294.942320][ T9550] do_fast_syscall_32+0x33/0x70 [ 294.942330][ T9550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.942344][ T9550] RIP: 0023:0xf7f7401c [ 294.942354][ T9550] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 294.942363][ T9550] RSP: 002b:00000000f541550c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 294.942375][ T9550] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000500 [ 294.942383][ T9550] RDX: 0000000000000000 RSI: 0000000000000061 RDI: 0000000000000000 [ 294.942389][ T9550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 294.942395][ T9550] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 294.942400][ T9550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.942415][ T9550] [ 295.260532][ T9546] binder: 9542:9546 ioctl c0306201 800003c0 returned -14 [ 295.356055][ T9557] netlink: 'syz.1.1098': attribute type 4 has an invalid length. [ 295.368002][ T9557] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1098'. [ 295.974654][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1102'. [ 296.191066][ T9572] veth0_vlan: entered allmulticast mode [ 296.215415][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1104'. [ 296.317630][ T9572] veth0_vlan (unregistering): left allmulticast mode [ 296.490929][ T9553] delete_channel: no stack [ 296.728488][ T5919] usb 5-1: ezusb_ihex_firmware_download - request "keyspan/usa18x.fw" failed [ 296.758912][ T54] go7007-loader 3-1:128.55: unable to load firmware from file "go7007/px-tv402u.fw" [ 296.776968][ T5919] usb 5-1: failed to load firmware "keyspan/usa18x.fw" [ 296.787666][ T5889] usb 6-1: ezusb_ihex_firmware_download - request "keyspan/usa18x.fw" failed [ 296.813417][ T54] go7007-loader 3-1:128.55: probe failed [ 296.829533][ T5919] keyspan 5-1:91.110: probe with driver keyspan failed with error -2 [ 296.841765][ T5889] usb 6-1: failed to load firmware "keyspan/usa18x.fw" [ 296.854413][ T54] usb 3-1: USB disconnect, device number 25 [ 296.872160][ T5889] keyspan 6-1:91.110: probe with driver keyspan failed with error -2 [ 296.906207][ T5919] keyspan 5-1:91.137: Keyspan - (without firmware) converter detected [ 296.926383][ T5919] usb 5-1: Direct firmware load for keyspan/usa18x.fw failed with error -2 [ 296.946557][ T5919] usb 5-1: Falling back to sysfs fallback for: keyspan/usa18x.fw [ 296.955352][ T5889] keyspan 6-1:91.137: Keyspan - (without firmware) converter detected [ 297.086183][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1107'. [ 297.313552][ T9596] vivid-003: disconnect [ 297.337025][ T9596] vivid-003: reconnect [ 297.339905][ T5909] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 297.482069][ T5909] usb 4-1: device descriptor read/64, error -71 [ 297.491946][ T9601] ipvlan0: entered allmulticast mode [ 297.508226][ T9601] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 297.567437][ T9601] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 297.601510][ T9593] binder: 9580:9593 ioctl c0306201 800003c0 returned -14 [ 297.730375][ T5909] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 297.870472][ T5909] usb 4-1: device descriptor read/64, error -71 [ 298.001373][ T5909] usb usb4-port1: attempt power cycle [ 298.157883][ T5917] IPVS: starting estimator thread 0... [ 298.216196][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'. [ 298.225209][ T5918] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 298.236648][ T9612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1116'. [ 298.260035][ T9613] IPVS: using max 53 ests per chain, 127200 per kthread [ 298.350948][ T5909] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 298.379865][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 298.386030][ T5909] usb 4-1: device descriptor read/8, error -71 [ 298.394710][ T5918] usb 2-1: config 0 has no interfaces? [ 298.403754][ T5918] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 298.422411][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.441316][ T5918] usb 2-1: config 0 descriptor?? [ 298.652338][ T5909] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 298.701630][ T5909] usb 4-1: device descriptor read/8, error -71 [ 298.820079][ T5909] usb usb4-port1: unable to enumerate USB device [ 299.145092][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1121'. [ 299.304709][ T9625] netlink: 'syz.6.1121': attribute type 1 has an invalid length. [ 299.434014][ T9633] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 299.459272][ T9633] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 299.478132][ T9633] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1123'. [ 299.487797][ T9633] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1123'. [ 299.497904][ T9633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1123'. [ 299.523957][ T9633] geneve3: entered promiscuous mode [ 300.693753][ T9644] fuse: Unknown parameter 'rcotmode' [ 300.927965][ T5918] usb 2-1: USB disconnect, device number 43 [ 301.245390][ T9653] netlink: 'syz.1.1129': attribute type 4 has an invalid length. [ 301.259323][ T9653] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1129'. [ 301.987216][ T9649] delete_channel: no stack [ 302.316602][ T9667] FAULT_INJECTION: forcing a failure. [ 302.316602][ T9667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.371324][ T9667] CPU: 0 UID: 0 PID: 9667 Comm: syz.1.1134 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.371355][ T9667] Tainted: [L]=SOFTLOCKUP [ 302.371361][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 302.371372][ T9667] Call Trace: [ 302.371379][ T9667] [ 302.371383][ T9667] dump_stack_lvl+0xe8/0x150 [ 302.371404][ T9667] should_fail_ex+0x412/0x560 [ 302.371422][ T9667] _copy_from_user+0x2d/0xb0 [ 302.371433][ T9667] fb_set_user_cmap+0x2a6/0x4f0 [ 302.371451][ T9667] ? __pfx_fb_set_user_cmap+0x10/0x10 [ 302.371472][ T9667] fb_compat_ioctl+0x43a/0x820 [ 302.371486][ T9667] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 302.371505][ T9667] ? __fget_files+0x2a/0x420 [ 302.371518][ T9667] ? __fget_files+0x3a0/0x420 [ 302.371527][ T9667] ? __fget_files+0x2a/0x420 [ 302.371538][ T9667] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 302.371554][ T9667] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 302.371569][ T9667] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 302.371584][ T9667] ? __fget_files+0x3a0/0x420 [ 302.371597][ T9667] ? fput+0xa0/0xd0 [ 302.371606][ T9667] ? ksys_write+0x242/0x270 [ 302.371624][ T9667] __do_fast_syscall_32+0x229/0x6e0 [ 302.371635][ T9667] ? do_fast_syscall_32+0x33/0x70 [ 302.371646][ T9667] ? lockdep_hardirqs_on+0x7a/0x110 [ 302.371669][ T9667] ? asm_int80_emulation+0x1a/0x20 [ 302.371686][ T9667] ? do_int80_emulation+0x286/0x530 [ 302.371702][ T9667] ? trace_irq_disable+0x3b/0x140 [ 302.371727][ T9667] do_fast_syscall_32+0x33/0x70 [ 302.371745][ T9667] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.371767][ T9667] RIP: 0023:0xf708f01c [ 302.371778][ T9667] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 302.371787][ T9667] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 302.371799][ T9667] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004605 [ 302.371806][ T9667] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.371813][ T9667] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.371819][ T9667] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 302.371824][ T9667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.371838][ T9667] [ 302.821761][ T9670] syzkaller1: entered promiscuous mode [ 302.839161][ T9670] syzkaller1: entered allmulticast mode [ 303.212191][ T9681] binder: 9671:9681 ioctl c0306201 800003c0 returned -14 [ 303.289924][ T5942] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 303.459862][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 303.473577][ T5942] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 303.498904][ T5942] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 303.513690][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 303.532470][ T9686] veth0_vlan: entered allmulticast mode [ 303.534932][ T5942] usb 2-1: Product: syz [ 303.545887][ T5942] usb 2-1: Manufacturer: syz [ 303.552391][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1140'. [ 303.554639][ T5942] usb 2-1: SerialNumber: syz [ 303.593590][ T5942] usb 2-1: config 0 descriptor?? [ 303.614652][ T9676] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 303.628782][ T5942] hub 2-1:0.0: bad descriptor, ignoring hub [ 303.655181][ T5942] hub 2-1:0.0: probe with driver hub failed with error -5 [ 303.656114][ T9686] veth0_vlan (unregistering): left allmulticast mode [ 304.332098][ T9676] usb 2-1: reset high-speed USB device number 44 using dummy_hcd [ 304.514508][ T5918] IPVS: starting estimator thread 0... [ 304.544068][ T9709] netlink: 'syz.4.1144': attribute type 4 has an invalid length. [ 304.575757][ T9676] usb 2-1: device firmware changed [ 304.582825][ T9709] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1144'. [ 304.616342][ T5942] usb 2-1: USB disconnect, device number 44 [ 304.629922][ T9712] IPVS: using max 36 ests per chain, 86400 per kthread [ 304.809918][ T5942] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 305.003081][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 305.014344][ T5942] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 305.048233][ T5942] usb 2-1: string descriptor 0 read error: -22 [ 305.067640][ T5942] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 305.100970][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 305.121528][ T5942] usb 2-1: config 0 descriptor?? [ 305.135650][ T9678] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 305.165260][ T5942] hub 2-1:0.0: bad descriptor, ignoring hub [ 305.196996][ T5942] hub 2-1:0.0: probe with driver hub failed with error -5 [ 305.292768][ T9704] delete_channel: no stack [ 305.576625][ T9721] input: syz0 as /devices/virtual/input/input32 [ 305.597872][ T9676] syzkaller1: entered promiscuous mode [ 305.639381][ T9676] syzkaller1: entered allmulticast mode [ 305.820054][ T5942] usb 2-1: USB disconnect, device number 45 [ 305.859906][ T5918] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 306.035554][ T5918] usb 4-1: config 0 has no interfaces? [ 306.053845][ T5918] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 306.073854][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.095097][ T5918] usb 4-1: config 0 descriptor?? [ 306.344183][ T5838] usb 4-1: USB disconnect, device number 56 [ 306.511166][ T9733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1151'. [ 306.545305][ T9733] FAULT_INJECTION: forcing a failure. [ 306.545305][ T9733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.589277][ T9733] CPU: 1 UID: 0 PID: 9733 Comm: syz.1.1151 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.589308][ T9733] Tainted: [L]=SOFTLOCKUP [ 306.589315][ T9733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 306.589326][ T9733] Call Trace: [ 306.589334][ T9733] [ 306.589342][ T9733] dump_stack_lvl+0xe8/0x150 [ 306.589377][ T9733] should_fail_ex+0x412/0x560 [ 306.589408][ T9733] _copy_to_user+0x31/0xb0 [ 306.589429][ T9733] simple_read_from_buffer+0xe1/0x170 [ 306.589453][ T9733] proc_fail_nth_read+0x1bb/0x230 [ 306.589475][ T9733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.589499][ T9733] ? rw_verify_area+0x2a6/0x4d0 [ 306.589520][ T9733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.589541][ T9733] vfs_read+0x20c/0xa70 [ 306.589570][ T9733] ? __pfx_vfs_read+0x10/0x10 [ 306.589596][ T9733] ? __sys_sendmsg+0x19e/0x260 [ 306.589620][ T9733] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.589649][ T9733] ksys_read+0x150/0x270 [ 306.589676][ T9733] ? __pfx_ksys_read+0x10/0x10 [ 306.589709][ T9733] ? asm_int80_emulation+0x1a/0x20 [ 306.589732][ T9733] do_int80_emulation+0x181/0x530 [ 306.589751][ T9733] ? trace_irq_disable+0x3b/0x140 [ 306.589772][ T9733] ? asm_int80_emulation+0x1a/0x20 [ 306.589786][ T9733] ? clear_bhb_loop+0x40/0x90 [ 306.589802][ T9733] ? clear_bhb_loop+0x40/0x90 [ 306.589821][ T9733] asm_int80_emulation+0x1a/0x20 [ 306.589837][ T9733] RIP: 0023:0xf71c5cab [ 306.589852][ T9733] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 306.589867][ T9733] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 306.589887][ T9733] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f547d5d0 [ 306.589900][ T9733] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 306.589910][ T9733] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.589920][ T9733] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 306.589931][ T9733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.589958][ T9733] [ 306.632179][ T9737] netlink: 'syz.1.1151': attribute type 11 has an invalid length. [ 307.777065][ T30] audit: type=1326 audit(1776675676.227:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.6.1160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 307.807234][ T30] audit: type=1326 audit(1776675676.227:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.6.1160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 307.833185][ T30] audit: type=1326 audit(1776675676.227:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9758 comm="syz.6.1160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 308.028396][ T9767] FAULT_INJECTION: forcing a failure. [ 308.028396][ T9767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.037033][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 308.053688][ T9767] CPU: 1 UID: 0 PID: 9767 Comm: syz.4.1163 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.053715][ T9767] Tainted: [L]=SOFTLOCKUP [ 308.053721][ T9767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 308.053730][ T9767] Call Trace: [ 308.053736][ T9767] [ 308.053743][ T9767] dump_stack_lvl+0xe8/0x150 [ 308.053771][ T9767] should_fail_ex+0x412/0x560 [ 308.053799][ T9767] _copy_from_user+0x2d/0xb0 [ 308.053816][ T9767] get_compat_msghdr+0xb3/0x4c0 [ 308.053839][ T9767] ? _parse_integer_limit+0x1ae/0x1f0 [ 308.053859][ T9767] ? __pfx_get_compat_msghdr+0x10/0x10 [ 308.053881][ T9767] ? kstrtoull+0x12f/0x1d0 [ 308.053905][ T9767] ___sys_sendmsg+0x201/0x360 [ 308.053926][ T9767] ? __lock_acquire+0x6b5/0x2cf0 [ 308.053952][ T9767] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.053975][ T9767] ? get_pid_task+0x20/0x1f0 [ 308.053993][ T9767] ? get_pid_task+0x20/0x1f0 [ 308.054008][ T9767] ? get_pid_task+0x20/0x1f0 [ 308.054048][ T9767] ? __fget_files+0x2a/0x420 [ 308.054066][ T9767] ? __fget_files+0x3a0/0x420 [ 308.054094][ T9767] __sys_sendmsg+0x183/0x260 [ 308.054119][ T9767] ? __pfx___sys_sendmsg+0x10/0x10 [ 308.054168][ T9767] __do_fast_syscall_32+0x229/0x6e0 [ 308.054188][ T9767] ? do_fast_syscall_32+0x33/0x70 [ 308.054205][ T9767] ? lockdep_hardirqs_on+0x7a/0x110 [ 308.054230][ T9767] ? asm_int80_emulation+0x1a/0x20 [ 308.054247][ T9767] ? do_int80_emulation+0x286/0x530 [ 308.054264][ T9767] ? trace_irq_disable+0x3b/0x140 [ 308.054297][ T9767] do_fast_syscall_32+0x33/0x70 [ 308.054316][ T9767] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 308.054338][ T9767] RIP: 0023:0xf7fe501c [ 308.054353][ T9767] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 308.054368][ T9767] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 308.054387][ T9767] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 308.054400][ T9767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.054411][ T9767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 308.054421][ T9767] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 308.054431][ T9767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 308.054459][ T9767] [ 308.063821][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 308.378352][ T9772] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1166'. [ 308.688498][ T30] audit: type=1326 audit(1776675677.137:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.6.1171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 308.712959][ T9784] input: syz0 as /devices/virtual/input/input33 [ 308.727181][ T30] audit: type=1326 audit(1776675677.137:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.6.1171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 308.804965][ T30] audit: type=1326 audit(1776675677.137:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.6.1171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 308.855007][ T30] audit: type=1326 audit(1776675677.137:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.6.1171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 308.936565][ T30] audit: type=1326 audit(1776675677.137:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.6.1171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 308.990054][ T5942] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 309.071154][ T9789] hub 9-0:1.0: USB hub found [ 309.084975][ T9789] hub 9-0:1.0: 1 port detected [ 309.142451][ T5942] usb 4-1: config 0 has no interfaces? [ 309.152524][ T5942] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 309.189321][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.195456][ T5942] usb 4-1: config 0 descriptor?? [ 309.240032][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 309.391696][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.411512][ T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 309.438143][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.453941][ T24] usb 2-1: config 0 descriptor?? [ 309.512263][ T54] usb 4-1: USB disconnect, device number 57 [ 309.673320][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 309.680274][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 309.697031][ T24] usb 2-1: USB disconnect, device number 46 [ 310.139909][ T5918] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 310.299874][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 310.311464][ T5918] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.331601][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 310.343351][ T5918] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 310.359234][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.371395][ T5918] usb 2-1: config 0 descriptor?? [ 310.792451][ T5918] mcp2221 0003:04D8:00DD.0014: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 311.199293][ T9793] netlink: 'syz.1.1173': attribute type 4 has an invalid length. [ 311.219419][ T9793] netlink: 'syz.1.1173': attribute type 4 has an invalid length. [ 311.231125][ T30] audit: type=1326 audit(1776675679.687:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8601c code=0x7ffc0000 [ 311.255195][ T24] usb 2-1: USB disconnect, device number 47 [ 311.272367][ T30] audit: type=1326 audit(1776675679.717:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.1184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf7f8601c code=0x7ffc0000 [ 311.408958][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1186'. [ 311.936625][ T9835] netlink: 'syz.1.1187': attribute type 4 has an invalid length. [ 311.945002][ T9835] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1187'. [ 312.244306][ T9829] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 312.258058][ T9829] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 312.291817][ T9829] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 312.592745][ T9842] FAULT_INJECTION: forcing a failure. [ 312.592745][ T9842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.610031][ T9842] CPU: 1 UID: 0 PID: 9842 Comm: syz.3.1190 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.610061][ T9842] Tainted: [L]=SOFTLOCKUP [ 312.610068][ T9842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 312.610080][ T9842] Call Trace: [ 312.610088][ T9842] [ 312.610095][ T9842] dump_stack_lvl+0xe8/0x150 [ 312.610128][ T9842] should_fail_ex+0x412/0x560 [ 312.610155][ T9842] _copy_from_user+0x2d/0xb0 [ 312.610172][ T9842] kstrtouint_from_user+0xd6/0x180 [ 312.610194][ T9842] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 312.610226][ T9842] proc_fail_nth_write+0x8e/0x210 [ 312.610243][ T9842] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 312.610263][ T9842] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 312.610280][ T9842] vfs_write+0x29a/0xb90 [ 312.610304][ T9842] ? __pfx_vfs_write+0x10/0x10 [ 312.610322][ T9842] ? __fget_files+0x2a/0x420 [ 312.610341][ T9842] ? __fget_files+0x3a0/0x420 [ 312.610355][ T9842] ? __fget_files+0x2a/0x420 [ 312.610376][ T9842] ksys_write+0x150/0x270 [ 312.610395][ T9842] ? __pfx_ksys_write+0x10/0x10 [ 312.610415][ T9842] ? asm_int80_emulation+0x1a/0x20 [ 312.610434][ T9842] do_int80_emulation+0x181/0x530 [ 312.610450][ T9842] ? asm_int80_emulation+0x1a/0x20 [ 312.610463][ T9842] ? clear_bhb_loop+0x40/0x90 [ 312.610478][ T9842] ? clear_bhb_loop+0x40/0x90 [ 312.610497][ T9842] asm_int80_emulation+0x1a/0x20 [ 312.610514][ T9842] RIP: 0023:0xf7185cab [ 312.610537][ T9842] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 312.610550][ T9842] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 312.610566][ T9842] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54465d0 [ 312.610577][ T9842] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.610586][ T9842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.610594][ T9842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 312.610603][ T9842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.610626][ T9842] [ 312.910298][ T9832] delete_channel: no stack [ 313.202874][ T24] IPVS: starting estimator thread 0... [ 313.217968][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 313.217980][ T30] audit: type=1326 audit(1776675681.667:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 313.251278][ T30] audit: type=1326 audit(1776675681.667:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 313.294719][ T30] audit: type=1326 audit(1776675681.697:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 313.340059][ T9859] IPVS: using max 32 ests per chain, 76800 per kthread [ 313.439909][ T9117] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 313.589881][ T9117] usb 4-1: Using ep0 maxpacket: 16 [ 313.602688][ T9117] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 313.611369][ T9117] usb 4-1: config 8 has no interface number 0 [ 313.617744][ T9117] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 313.629697][ T9117] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 313.641170][ T9117] usb 4-1: config 8 interface 39 has no altsetting 0 [ 313.650269][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 313.658874][ T9117] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 313.668171][ T9117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.680021][ T9117] usb 4-1: Product: syz [ 313.686823][ T9117] usb 4-1: Manufacturer: syz [ 313.694772][ T9117] usb 4-1: SerialNumber: syz [ 313.917068][ T9857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.939041][ T9857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.960152][ T9117] ipheth 4-1:8.39: Unable to find endpoints [ 313.997431][ T9117] usb 4-1: USB disconnect, device number 58 [ 314.042884][ T30] audit: type=1326 audit(1776675682.497:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 314.068312][ T30] audit: type=1326 audit(1776675682.497:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 314.351899][ T9876] netlink: 'syz.4.1200': attribute type 4 has an invalid length. [ 314.385363][ T9876] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1200'. [ 314.844996][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1203'. [ 314.877513][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1203'. [ 314.992338][ T9897] netlink: 'syz.5.1203': attribute type 4 has an invalid length. [ 315.086219][ T9872] delete_channel: no stack [ 315.730184][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 316.355395][ T9922] tun0: tun_chr_ioctl cmd 21731 [ 316.599894][ T5918] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 316.759898][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 316.766718][ T5918] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 316.777000][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.787499][ T5918] usb 2-1: config 0 has no interface number 0 [ 316.793722][ T5918] usb 2-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 316.807565][ T5918] usb 2-1: config 0 interface 85 has no altsetting 0 [ 316.816611][ T5918] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 316.825986][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.834258][ T5918] usb 2-1: Product: syz [ 316.838554][ T5918] usb 2-1: Manufacturer: syz [ 316.843565][ T5918] usb 2-1: SerialNumber: syz [ 316.854887][ T5918] usb 2-1: config 0 descriptor?? [ 316.864519][ T5918] appletouch 2-1:0.85: Could not find int-in endpoint [ 316.871451][ T5918] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 316.880603][ T5918] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 317.072391][ T5918] usb 2-1: USB disconnect, device number 48 [ 317.180684][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.187058][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.809871][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 318.001416][ T9950] netlink: 'syz.5.1226': attribute type 4 has an invalid length. [ 318.139906][ T9117] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 318.300750][ T9117] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 318.316529][ T9117] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.329919][ T9117] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.348803][ T9117] usb 2-1: config 0 interface 0 has no altsetting 0 [ 318.366873][ T9117] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.379258][ T9117] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.398077][ T9117] usb 2-1: config 0 interface 0 has no altsetting 0 [ 318.404212][ T9953] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1228'. [ 318.425766][ T9117] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.435251][ T9117] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.471903][ T9117] usb 2-1: config 0 interface 0 has no altsetting 0 [ 318.514723][ T9117] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.524168][ T9117] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.563921][ T9117] usb 2-1: config 0 interface 0 has no altsetting 0 [ 318.581204][ T9117] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.590993][ T9117] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.602372][ T9117] usb 2-1: config 0 interface 0 has no altsetting 0 [ 318.620944][ T9117] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.630304][ T9117] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.641446][ T9117] usb 2-1: config 0 interface 0 has no altsetting 0 [ 318.650978][ T9117] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.677085][ T9117] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.709540][ T9117] usb 2-1: config 0 interface 0 has no altsetting 0 [ 318.731223][ T9117] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.740367][ T9117] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.751299][ T9117] usb 2-1: config 0 interface 0 has no altsetting 0 [ 318.760541][ T9117] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 318.770048][ T9117] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 318.795943][ T9117] usb 2-1: Product: syz [ 318.800430][ T9117] usb 2-1: Manufacturer: syz [ 318.805078][ T9117] usb 2-1: SerialNumber: syz [ 318.825709][ T9117] usb 2-1: config 0 descriptor?? [ 318.843458][ T9117] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 319.079545][ T9948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.092812][ T9948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.617928][ T24] usb 2-1: USB disconnect, device number 49 [ 319.640666][ T24] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 320.699942][ T54] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 320.709298][ T30] audit: type=1326 audit(1776675689.157:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9976 comm="syz.1.1237" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x0 [ 320.849964][ T54] usb 4-1: Using ep0 maxpacket: 8 [ 320.857572][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.873269][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.883433][ T54] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 320.897414][ T54] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 320.907513][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.934569][ T54] usb 4-1: config 0 descriptor?? [ 321.294809][ T9987] netlink: 'syz.5.1239': attribute type 4 has an invalid length. [ 321.313515][ T9987] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1239'. [ 321.406351][ T54] usbhid 4-1:0.0: can't add hid device: -71 [ 321.418511][ T54] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 321.433847][ T54] usb 4-1: USB disconnect, device number 59 [ 322.138176][T10002] FAULT_INJECTION: forcing a failure. [ 322.138176][T10002] name failslab, interval 1, probability 0, space 0, times 0 [ 322.162075][T10002] CPU: 1 UID: 0 PID: 10002 Comm: syz.3.1245 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.162104][T10002] Tainted: [L]=SOFTLOCKUP [ 322.162111][T10002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 322.162121][T10002] Call Trace: [ 322.162128][T10002] [ 322.162135][T10002] dump_stack_lvl+0xe8/0x150 [ 322.162167][T10002] should_fail_ex+0x412/0x560 [ 322.162198][T10002] should_failslab+0xa8/0x100 [ 322.162221][T10002] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 322.162243][T10002] ? __alloc_skb+0x1d0/0x7d0 [ 322.162261][T10002] ? __local_bh_enable_ip+0xd0/0x130 [ 322.162289][T10002] __alloc_skb+0x1d0/0x7d0 [ 322.162312][T10002] netlink_dump+0x1d8/0xe10 [ 322.162344][T10002] ? __netlink_lookup+0xc6/0x8b0 [ 322.162366][T10002] ? __netlink_lookup+0x7e4/0x8b0 [ 322.162389][T10002] ? __pfx_netlink_dump+0x10/0x10 [ 322.162421][T10002] ? netlink_lookup+0x30/0x200 [ 322.162441][T10002] ? netlink_lookup+0x30/0x200 [ 322.162459][T10002] ? netlink_lookup+0x30/0x200 [ 322.162484][T10002] __netlink_dump_start+0x5cb/0x7e0 [ 322.162514][T10002] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 322.162536][T10002] ? __pfx_neigh_dump_info+0x10/0x10 [ 322.162558][T10002] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 322.162576][T10002] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 322.162593][T10002] ? ref_tracker_free+0x693/0x840 [ 322.162620][T10002] ? __pfx_neigh_dump_info+0x10/0x10 [ 322.162643][T10002] ? __asan_memcpy+0x40/0x70 [ 322.162659][T10002] ? __skb_clone+0x63/0x7a0 [ 322.162685][T10002] netlink_rcv_skb+0x232/0x4b0 [ 322.162707][T10002] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 322.162727][T10002] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 322.162759][T10002] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.162780][T10002] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.162807][T10002] netlink_unicast+0x75c/0x8e0 [ 322.162839][T10002] netlink_sendmsg+0x813/0xb40 [ 322.162869][T10002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.162891][T10002] ? aa_sock_msg_perm+0xf1/0x1b0 [ 322.162920][T10002] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 322.162945][T10002] ____sys_sendmsg+0x972/0x9f0 [ 322.162978][T10002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.163007][T10002] ? kstrtoull+0x12f/0x1d0 [ 322.163038][T10002] ___sys_sendmsg+0x2a5/0x360 [ 322.163061][T10002] ? __lock_acquire+0x6b5/0x2cf0 [ 322.163091][T10002] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.163116][T10002] ? get_pid_task+0x20/0x1f0 [ 322.163136][T10002] ? get_pid_task+0x20/0x1f0 [ 322.163155][T10002] ? get_pid_task+0x20/0x1f0 [ 322.163202][T10002] ? __fget_files+0x2a/0x420 [ 322.163221][T10002] ? __fget_files+0x3a0/0x420 [ 322.163250][T10002] __sys_sendmsg+0x183/0x260 [ 322.163276][T10002] ? __pfx___sys_sendmsg+0x10/0x10 [ 322.163328][T10002] __do_fast_syscall_32+0x229/0x6e0 [ 322.163348][T10002] ? do_fast_syscall_32+0x33/0x70 [ 322.163365][T10002] ? lockdep_hardirqs_on+0x7a/0x110 [ 322.163389][T10002] ? asm_int80_emulation+0x1a/0x20 [ 322.163407][T10002] ? do_int80_emulation+0x286/0x530 [ 322.163423][T10002] ? trace_irq_disable+0x3b/0x140 [ 322.163450][T10002] do_fast_syscall_32+0x33/0x70 [ 322.163468][T10002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.163490][T10002] RIP: 0023:0xf7f8601c [ 322.163507][T10002] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 322.163524][T10002] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 322.163543][T10002] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 322.163557][T10002] RDX: 0000000000000044 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.163568][T10002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.163579][T10002] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 322.163590][T10002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.163618][T10002] [ 322.655077][ T9984] delete_channel: no stack [ 322.766329][T10011] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1248'. [ 322.784032][T10011] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 323.083071][ T9117] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 323.188302][ T30] audit: type=1326 audit(1776675691.637:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1249" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe501c code=0x0 [ 323.251499][ T9117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.264805][ T9117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 323.284212][ T9117] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 323.295085][ T9117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.353615][ T9117] usb 4-1: config 0 descriptor?? [ 323.364306][T10011] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 323.798589][ T9117] stadia 0003:18D1:9400.0015: unknown main item tag 0x4 [ 323.834419][ T9117] stadia 0003:18D1:9400.0015: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.3-1/input0 [ 323.883393][ T9117] stadia 0003:18D1:9400.0015: no inputs found [ 323.902422][ T9117] stadia 0003:18D1:9400.0015: force feedback init failed [ 323.935037][ T9117] usb 4-1: USB disconnect, device number 60 [ 324.029644][T10031] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1255'. [ 324.257009][T10040] FAULT_INJECTION: forcing a failure. [ 324.257009][T10040] name failslab, interval 1, probability 0, space 0, times 0 [ 324.270542][T10040] CPU: 1 UID: 0 PID: 10040 Comm: syz.5.1259 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.270562][T10040] Tainted: [L]=SOFTLOCKUP [ 324.270566][T10040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 324.270573][T10040] Call Trace: [ 324.270577][T10040] [ 324.270582][T10040] dump_stack_lvl+0xe8/0x150 [ 324.270604][T10040] should_fail_ex+0x412/0x560 [ 324.270622][T10040] should_failslab+0xa8/0x100 [ 324.270637][T10040] __kmalloc_cache_noprof+0x88/0x660 [ 324.270649][T10040] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 324.270665][T10040] ? sctp_add_bind_addr+0x8c/0x370 [ 324.270682][T10040] sctp_add_bind_addr+0x8c/0x370 [ 324.270699][T10040] sctp_copy_local_addr_list+0x314/0x4f0 [ 324.270715][T10040] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 324.270730][T10040] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 324.270746][T10040] ? sctp_v6_is_any+0x64/0x80 [ 324.270755][T10040] ? sctp_copy_one_addr+0x93/0x360 [ 324.270771][T10040] sctp_bind_addr_copy+0xb3/0x3c0 [ 324.270786][T10040] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 324.270801][T10040] sctp_connect_new_asoc+0x2ff/0x6b0 [ 324.270813][T10040] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 324.270827][T10040] ? __local_bh_enable_ip+0xd0/0x130 [ 324.270842][T10040] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 324.270855][T10040] ? security_sctp_bind_connect+0x7e/0x2c0 [ 324.270869][T10040] sctp_sendmsg+0x1528/0x2c10 [ 324.270887][T10040] ? __pfx_sctp_sendmsg+0x10/0x10 [ 324.270899][T10040] ? aa_sk_perm+0x6d5/0x900 [ 324.270914][T10040] ? __might_fault+0xaf/0x130 [ 324.270930][T10040] ? __pfx_aa_sk_perm+0x10/0x10 [ 324.270946][T10040] ? sock_rps_record_flow+0x19/0x350 [ 324.270962][T10040] ? inet_sendmsg+0x2f4/0x370 [ 324.270977][T10040] ____sys_sendmsg+0x80a/0x9f0 [ 324.270995][T10040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.271016][T10040] ___sys_sendmsg+0x2a5/0x360 [ 324.271029][T10040] ? __lock_acquire+0x6b5/0x2cf0 [ 324.271046][T10040] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.271062][T10040] ? kstrtoull+0x12f/0x1d0 [ 324.271088][T10040] ? __fget_files+0x2a/0x420 [ 324.271098][T10040] ? __fget_files+0x3a0/0x420 [ 324.271113][T10040] __sys_sendmmsg+0x2e7/0x4e0 [ 324.271129][T10040] ? __pfx___sys_sendmmsg+0x10/0x10 [ 324.271155][T10040] ? fput+0xa0/0xd0 [ 324.271165][T10040] ? ksys_write+0x242/0x270 [ 324.271187][T10040] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 324.271202][T10040] __do_fast_syscall_32+0x229/0x6e0 [ 324.271213][T10040] ? do_fast_syscall_32+0x33/0x70 [ 324.271222][T10040] ? lockdep_hardirqs_on+0x7a/0x110 [ 324.271237][T10040] ? asm_int80_emulation+0x1a/0x20 [ 324.271247][T10040] ? do_int80_emulation+0x286/0x530 [ 324.271256][T10040] ? trace_irq_disable+0x3b/0x140 [ 324.271270][T10040] do_fast_syscall_32+0x33/0x70 [ 324.271280][T10040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.271293][T10040] RIP: 0023:0xf7f7401c [ 324.271306][T10040] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 324.271315][T10040] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 324.271327][T10040] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004800 [ 324.271334][T10040] RDX: 0000000000000002 RSI: 0000000000008060 RDI: 0000000000000000 [ 324.271340][T10040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 324.271346][T10040] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 324.271352][T10040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.271367][T10040] [ 324.759919][ T9117] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 324.909885][ T9117] usb 4-1: Using ep0 maxpacket: 8 [ 324.917004][ T9117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.928286][ T9117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.938690][ T9117] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 324.951610][ T9117] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 324.960928][ T9117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.986174][ T9117] usb 4-1: config 0 descriptor?? [ 325.323947][T10050] binder: 10044:10050 ioctl c0306201 800003c0 returned -14 [ 325.429340][ T9117] usbhid 4-1:0.0: can't add hid device: -71 [ 325.444906][ T9117] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 325.461319][ T9117] usb 4-1: USB disconnect, device number 61 [ 326.118258][T10055] FAULT_INJECTION: forcing a failure. [ 326.118258][T10055] name failslab, interval 1, probability 0, space 0, times 0 [ 326.132554][T10055] CPU: 0 UID: 0 PID: 10055 Comm: syz.3.1264 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.132583][T10055] Tainted: [L]=SOFTLOCKUP [ 326.132590][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 326.132602][T10055] Call Trace: [ 326.132610][T10055] [ 326.132617][T10055] dump_stack_lvl+0xe8/0x150 [ 326.132648][T10055] should_fail_ex+0x412/0x560 [ 326.132677][T10055] should_failslab+0xa8/0x100 [ 326.132703][T10055] __kmalloc_noprof+0xe8/0x760 [ 326.132724][T10055] ? tomoyo_encode+0x28b/0x550 [ 326.132745][T10055] tomoyo_encode+0x28b/0x550 [ 326.132767][T10055] tomoyo_realpath_from_path+0x58d/0x5d0 [ 326.132798][T10055] tomoyo_check_open_permission+0x229/0x470 [ 326.132821][T10055] ? tomoyo_check_open_permission+0x1d3/0x470 [ 326.132844][T10055] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 326.132868][T10055] ? __asan_memset+0x22/0x50 [ 326.132920][T10055] security_file_open+0xa9/0x240 [ 326.132944][T10055] do_dentry_open+0x384/0x14e0 [ 326.132977][T10055] ? vfs_open+0x31/0x340 [ 326.133006][T10055] vfs_open+0x3b/0x340 [ 326.133029][T10055] ? path_openat+0x2df0/0x3860 [ 326.133053][T10055] path_openat+0x2e08/0x3860 [ 326.133097][T10055] ? __pfx_stack_trace_save+0x10/0x10 [ 326.133125][T10055] ? stack_depot_save_flags+0x33/0x810 [ 326.133158][T10055] ? __pfx_path_openat+0x10/0x10 [ 326.133178][T10055] ? __ia32_compat_sys_openat+0x131/0x160 [ 326.133203][T10055] ? __lock_acquire+0x6b5/0x2cf0 [ 326.133242][T10055] do_file_open+0x23e/0x4a0 [ 326.133269][T10055] ? __pfx_do_file_open+0x10/0x10 [ 326.133312][T10055] ? _raw_spin_unlock+0x28/0x50 [ 326.133336][T10055] ? alloc_fd+0x64b/0x6c0 [ 326.133364][T10055] do_sys_openat2+0x113/0x200 [ 326.133386][T10055] ? __pfx_do_sys_openat2+0x10/0x10 [ 326.133405][T10055] ? exc_page_fault+0x6a/0xc0 [ 326.133435][T10055] ? do_user_addr_fault+0xc6f/0x1340 [ 326.133465][T10055] __ia32_compat_sys_openat+0x131/0x160 [ 326.133491][T10055] do_int80_emulation+0x181/0x530 [ 326.133509][T10055] ? trace_irq_disable+0x3b/0x140 [ 326.133531][T10055] ? asm_int80_emulation+0x1a/0x20 [ 326.133549][T10055] ? clear_bhb_loop+0x40/0x90 [ 326.133567][T10055] ? clear_bhb_loop+0x40/0x90 [ 326.133589][T10055] asm_int80_emulation+0x1a/0x20 [ 326.133611][T10055] RIP: 0023:0xf7185cab [ 326.133627][T10055] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 326.133643][T10055] RSP: 002b:00000000f544438c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 326.133663][T10055] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f724f193 [ 326.133677][T10055] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.133688][T10055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.133698][T10055] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 326.133708][T10055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.133731][T10055] [ 326.133763][T10055] ERROR: Out of memory at tomoyo_realpath_from_path. [ 326.513951][T10065] sctp: [Deprecated]: syz.4.1269 (pid 10065) Use of int in maxseg socket option. [ 326.513951][T10065] Use struct sctp_assoc_value instead [ 326.531746][T10065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1269'. [ 326.596030][T10067] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 326.680129][ T5838] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 326.843017][ T5838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 326.865656][ T5838] usb 4-1: not running at top speed; connect to a high speed hub [ 326.881826][ T5838] usb 4-1: config 12 has an invalid interface number: 81 but max is 0 [ 326.897722][ T5838] usb 4-1: config 12 has no interface number 0 [ 326.908947][ T5838] usb 4-1: config 12 interface 81 has no altsetting 0 [ 326.924115][ T5838] usb 4-1: New USB device found, idVendor=1e2d, idProduct=0055, bcdDevice=40.9e [ 326.937881][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.955861][ T5838] usb 4-1: Product: syz [ 326.964629][ T5838] usb 4-1: Manufacturer: syz [ 326.973695][ T5838] usb 4-1: SerialNumber: syz [ 327.104033][T10074] netlink: 'syz.1.1271': attribute type 4 has an invalid length. [ 327.132579][T10074] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1271'. [ 327.195881][ T5838] usb 4-1: No union descriptors [ 327.228188][ T5838] usb 4-1: USB disconnect, device number 62 [ 327.986981][T10071] delete_channel: no stack [ 328.180302][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 329.079909][ T9117] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 329.240049][ T9117] usb 4-1: Using ep0 maxpacket: 8 [ 329.249027][ T9117] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 329.260460][ T9117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.268518][ T9117] usb 4-1: Product: syz [ 329.272866][ T9117] usb 4-1: Manufacturer: syz [ 329.277486][ T9117] usb 4-1: SerialNumber: syz [ 329.284603][ T9117] usb 4-1: config 0 descriptor?? [ 329.348894][ T54] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 329.368331][ T54] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 329.501329][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1285'. [ 329.535361][T10121] x_tables: duplicate underflow at hook 2 [ 329.535825][ T9117] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 329.850517][ T5838] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 330.001684][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.013059][ T5838] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 330.024029][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.035115][ T5838] usb 2-1: config 0 descriptor?? [ 330.302589][T10134] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1295'. [ 330.451838][ T5838] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 330.473038][ T5838] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0017/input/input34 [ 330.581678][ T5838] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 330.664774][T10123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.687189][T10123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.064618][ T5917] usb 2-1: USB disconnect, device number 50 [ 331.208208][ T9117] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 331.238452][ T9117] usb 4-1: USB disconnect, device number 63 [ 331.745763][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1300'. Stopping sshd: [ 331.775642][T10151] netlink: 'syz.1.1300': attribute type 25 has an invalid length. [ 331.784637][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. stopped /usr/sbin/sshd (pid 5589) OK [ 332.160777][ T9117] usb 4-1: new high-speed USB device number 64 using dummy_hcd Stopping crond: stopped /usr/sbin/crond (pid 5577) [ 332.262206][T10169] netlink: 'syz.5.1305': attribute type 1 has an invalid length. OK [ 332.282084][T10169] vxlan0: entered promiscuous mode [ 332.287653][T10169] bridge0: port 4(vxlan0) entered blocking state [ 332.295515][T10169] bridge0: port 4(vxlan0) entered disabled state [ 332.302889][T10169] vxlan0: entered allmulticast mode [ 332.329886][ T9117] usb 4-1: Using ep0 maxpacket: 8 [ 332.341078][ T9117] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 332.357493][ T9117] usb 4-1: config 0 has no interface number 0 [ 332.371750][ T9117] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 332.395692][ T9117] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 332.423970][ T9117] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 332.450305][ T9117] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 332.468197][ T9117] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 332.479256][ T9117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.507232][ T9117] usb 4-1: config 0 descriptor?? [ 332.554028][ T9117] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 Stopping dhcpcd... [ 332.649389][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1307'. stopped /sbin/dhcpcd (pid 5502) Stopping network: [ 333.491117][T10193] netlink: 'syz.4.1309': attribute type 4 has an invalid length. [ 333.514137][T10193] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1309'. [ 333.789678][ T30] audit: type=1326 audit(1776675702.237:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10204 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 333.867370][ T30] audit: type=1326 audit(1776675702.267:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10204 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 333.962178][ T30] audit: type=1326 audit(1776675702.267:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10204 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 334.515312][T10186] delete_channel: no stack OK Stopping iptables: [ 335.026685][ T5838] usb 4-1: USB disconnect, device number 64 OK [ 335.108895][ T5838] ldusb 4-1:0.55: LD USB Device #0 now disconnected Stopping system message bus: done [ 336.134390][ T30] audit: type=1326 audit(1776675704.577:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.4.1324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 336.190259][ T30] audit: type=1326 audit(1776675704.617:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.4.1324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 336.260493][ T30] audit: type=1326 audit(1776675704.627:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.4.1324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 336.299903][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 336.328693][ T30] audit: type=1326 audit(1776675704.627:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.4.1324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 336.393510][ T30] audit: type=1326 audit(1776675704.627:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.4.1324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 336.446806][ T30] audit: type=1326 audit(1776675704.627:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.4.1324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 336.487568][ T30] audit: type=1326 audit(1776675704.637:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.4.1324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe501c code=0x7ffc0000 [ 336.510264][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 336.526143][ T24] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 336.534680][ T24] usb 4-1: config 0 has no interface number 0 [ 336.542200][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.566180][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 336.579261][ T24] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 336.607675][ T24] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 336.632175][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 336.653947][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.680719][ T24] usb 4-1: config 0 descriptor?? [ 336.698683][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 336.718308][ T24] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 336.780638][T10261] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1324'. [ 336.866765][T10270] Invalid argument reading file caps for ./file0 Stopping klogd: OK Stopping acpid: [ 338.050339][T10295] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1335'. [ 338.314633][T10309] Invalid argument reading file caps for ./file0 [ 338.317775][T10304] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1338'. [ 338.470732][T10311] delete_channel: no stack OK [ 338.836628][T10327] FAULT_INJECTION: forcing a failure. [ 338.836628][T10327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.875449][T10327] CPU: 0 UID: 0 PID: 10327 Comm: syz.6.1346 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.875482][T10327] Tainted: [L]=SOFTLOCKUP [ 338.875489][T10327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 338.875500][T10327] Call Trace: [ 338.875508][T10327] [ 338.875517][T10327] dump_stack_lvl+0xe8/0x150 [ 338.875551][T10327] should_fail_ex+0x412/0x560 [ 338.875582][T10327] _copy_from_user+0x2d/0xb0 [ 338.875604][T10327] __se_sys_mount+0x18b/0x420 [ 338.875623][T10327] ? fput+0xa0/0xd0 [ 338.875644][T10327] ? __pfx___se_sys_mount+0x10/0x10 [ 338.875667][T10327] ? __ia32_sys_mount+0x20/0xc0 [ 338.875688][T10327] __do_fast_syscall_32+0x229/0x6e0 [ 338.875708][T10327] ? do_fast_syscall_32+0x33/0x70 [ 338.875725][T10327] ? lockdep_hardirqs_on+0x7a/0x110 [ 338.875757][T10327] ? asm_int80_emulation+0x1a/0x20 [ 338.875774][T10327] ? do_int80_emulation+0x286/0x530 [ 338.875792][T10327] ? trace_irq_disable+0x3b/0x140 [ 338.875819][T10327] do_fast_syscall_32+0x33/0x70 [ 338.875838][T10327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 338.875861][T10327] RIP: 0023:0xf700f01c [ 338.875877][T10327] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 338.875894][T10327] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 338.875914][T10327] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 338.875927][T10327] RDX: 0000000080002100 RSI: 0000000000000000 RDI: 0000000080002140 [ 338.875939][T10327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 338.875950][T10327] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 338.875960][T10327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.875985][T10327] [ 339.155540][ T9117] usb 4-1: USB disconnect, device number 65 Stopping syslogd: [ 339.193981][ T9117] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 339.350331][T10334] æÿîÿ: entered promiscuous mode stopped /sbin/syslogd (pid 5190) OK umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 340.809905][ T5917] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 340.850010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 340.980118][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 340.996881][ T5917] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 341.018414][ T5917] usb 2-1: config 0 has no interface number 0 [ 341.039385][ T5917] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 341.075007][ T5917] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 341.110210][ T5917] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.142594][ T5917] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 341.176757][ T5917] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 341.189099][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.207257][ T5917] usb 2-1: config 0 descriptor?? [ 341.228841][ T5917] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 341.750886][T10381] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1364'. umount: can't remount sysfs read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 341.981297][ T5208] udevd[5208]: could not touch /run/udev/queue: Read-only file system Sent SIGTERM to all processes Connection to 10.128.0.200 closed by remote host. [ 342.209712][ T5917] usb 2-1: USB disconnect, device number 51 [ 342.264363][ T5917] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 343.343604][ T43] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 343.551403][ T43] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.633904][ T43] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.713419][ T43] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.787633][ T43] dummy0: left allmulticast mode [ 343.793786][ T43] bridge0: port 3(dummy0) entered disabled state [ 343.801703][ T43] bridge_slave_1: left promiscuous mode [ 343.807421][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.816892][ T43] bridge_slave_0: left allmulticast mode [ 343.822793][ T43] bridge_slave_0: left promiscuous mode [ 343.828798][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.066209][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.076814][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.087551][ T43] bond0 (unregistering): Released all slaves [ 344.167842][ T43] tipc: Left network mode [ 344.382827][ T5889] usb 6-1: ezusb_ihex_firmware_download - request "keyspan/usa18x.fw" failed [ 344.383400][T10384] smc: removing smcd device lo [ 344.393920][ T5919] usb 5-1: ezusb_ihex_firmware_download - request "keyspan/usa18x.fw" failed [ 344.407831][ T5889] usb 6-1: failed to load firmware "keyspan/usa18x.fw" [ 344.421656][ T5919] usb 5-1: failed to load firmware "keyspan/usa18x.fw" [ 344.430472][ T5889] keyspan 6-1:91.137: probe with driver keyspan failed with error -2 [ 344.450820][ T5919] keyspan 5-1:91.137: probe with driver keyspan failed with error -2 [ 344.463453][ T5889] keyspan 6-1:91.175: Keyspan - (without firmware) converter detected [ 344.477438][ T5919] keyspan 5-1:91.175: Keyspan - (without firmware) converter detected [ 344.487618][ T5889] usb 6-1: Direct firmware load for keyspan/usa18x.fw failed with error -2 [ 344.496413][ T5889] usb 6-1: Falling back to sysfs fallback for: keyspan/usa18x.fw [ 344.504979][ T5889] ------------[ cut here ]------------ [ 344.510500][ T5889] ret [ 344.510525][ T5889] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0xa30, CPU#1: kworker/1:3/5889 [ 344.525883][ T5889] Modules linked in: [ 344.531181][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.542600][ T5889] Tainted: [L]=SOFTLOCKUP [ 344.546935][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 344.557253][ T5889] Workqueue: usb_hub_wq hub_event [ 344.562588][ T5889] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30 [ 344.568828][ T5889] Code: bc fb e9 5d fc ff ff e8 88 d4 bc fb c6 05 2d 4e 14 0a 01 48 c7 c7 20 d4 53 8c e8 45 d6 1e fb e9 85 fc ff ff e8 6b d4 bc fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 20 d5 53 8c 4c 89 e2 e8 d5 75 23 fb e9 [ 344.588745][ T5889] RSP: 0018:ffffc900047268d0 EFLAGS: 00010246 [ 344.594874][ T5889] RAX: ffffffff8608ea55 RBX: dffffc0000000000 RCX: 0000000000100000 [ 344.602911][ T5889] RDX: ffffc9001b180000 RSI: 00000000000fffff RDI: 0000000000100000 [ 344.611213][ T5889] RBP: 0000000000000001 R08: ffffffff903353f7 R09: 1ffffffff2066a7e [ 344.619179][ T5889] R10: dffffc0000000000 R11: fffffbfff2066a7f R12: ffffffff8c8a2880 [ 344.627253][ T5889] R13: 0000000000001770 R14: ffff88802587d0b0 R15: 00000000fffffff5 [ 344.635303][ T5889] FS: 0000000000000000(0000) GS:ffff88812531e000(0000) knlGS:0000000000000000 [ 344.644308][ T5889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.650951][ T5889] CR2: 0000000057eb51b4 CR3: 00000000329dc000 CR4: 00000000003526f0 [ 344.659011][ T5889] DR0: 0000000040000005 DR1: 0000000100000000 DR2: 0000000000000898 [ 344.667192][ T5889] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 344.675449][ T5889] Call Trace: [ 344.678770][ T5889] [ 344.681742][ T5889] ? kfree+0x1c5/0x640 [ 344.685804][ T5889] ? _request_firmware+0xf11/0x1780 [ 344.691252][ T5889] ? __kmalloc_cache_noprof+0x15b/0x660 [ 344.696814][ T5889] _request_firmware+0x1052/0x1780 [ 344.702056][ T5889] ? __pfx__request_firmware+0x10/0x10 [ 344.707539][ T5889] ? request_firmware+0x17/0x50 [ 344.712424][ T5889] request_firmware+0x36/0x50 [ 344.717088][ T5889] ezusb_fx1_ihex_firmware_download+0xbb/0xd60 [ 344.723323][ T5889] ? __pfx_ezusb_fx1_ihex_firmware_download+0x10/0x10 [ 344.730109][ T5889] ? __raw_spin_lock_init+0x45/0x100 [ 344.735395][ T5889] ? __init_waitqueue_head+0xa9/0x150 [ 344.740820][ T5889] keyspan_fake_startup+0x230/0x4a0 [ 344.746200][ T5889] usb_serial_probe+0x2537/0x2e50 [ 344.751290][ T5889] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 344.757123][ T5889] usb_probe_interface+0x659/0xc70 [ 344.762303][ T5889] ? __pfx_usb_probe_interface+0x10/0x10 [ 344.768206][ T5889] really_probe+0x267/0xaf0 [ 344.773002][ T5889] __driver_probe_device+0x1ef/0x380 [ 344.778314][ T5889] driver_probe_device+0x4f/0x240 [ 344.783397][ T5889] __device_attach_driver+0x279/0x430 [ 344.788796][ T5889] bus_for_each_drv+0x258/0x2f0 [ 344.793687][ T5889] ? __pfx___device_attach_driver+0x10/0x10 [ 344.799576][ T5889] ? __pfx_bus_for_each_drv+0x10/0x10 [ 344.805005][ T5889] ? lockdep_hardirqs_on+0x7a/0x110 [ 344.810241][ T5889] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 344.816077][ T5889] __device_attach+0x2c5/0x450 [ 344.820932][ T5889] ? __pfx___device_attach+0x10/0x10 [ 344.826214][ T5889] ? _raw_spin_unlock+0x28/0x50 [ 344.831100][ T5889] device_initial_probe+0xa1/0xd0 [ 344.836123][ T5889] bus_probe_device+0x12a/0x220 [ 344.841020][ T5889] device_add+0x7e9/0xbb0 [ 344.845352][ T5889] usb_set_configuration+0x1a87/0x2110 [ 344.850875][ T5889] usb_generic_driver_probe+0x8d/0x150 [ 344.856438][ T5889] usb_probe_device+0x1c4/0x3b0 [ 344.861344][ T5889] ? __pfx_usb_probe_device+0x10/0x10 [ 344.866937][ T5889] really_probe+0x267/0xaf0 [ 344.871651][ T5889] __driver_probe_device+0x1ef/0x380 [ 344.876962][ T5889] driver_probe_device+0x4f/0x240 [ 344.882067][ T5889] __device_attach_driver+0x279/0x430 [ 344.887519][ T5889] bus_for_each_drv+0x258/0x2f0 [ 344.892398][ T5889] ? __pfx___device_attach_driver+0x10/0x10 [ 344.898284][ T5889] ? __pfx_bus_for_each_drv+0x10/0x10 [ 344.903711][ T5889] ? lockdep_hardirqs_on+0x7a/0x110 [ 344.908902][ T5889] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 344.914747][ T5889] __device_attach+0x2c5/0x450 [ 344.919512][ T5889] ? __pfx___device_attach+0x10/0x10 [ 344.924892][ T5889] ? _raw_spin_unlock+0x28/0x50 [ 344.929743][ T5889] device_initial_probe+0xa1/0xd0 [ 344.934908][ T5889] bus_probe_device+0x12a/0x220 [ 344.939868][ T5889] device_add+0x7e9/0xbb0 [ 344.944214][ T5889] usb_new_device+0xa08/0x16f0 [ 344.948973][ T5889] ? __pfx_usb_new_device+0x10/0x10 [ 344.954207][ T5889] ? _raw_spin_unlock_irq+0x23/0x50 [ 344.959395][ T5889] hub_event+0x2a1c/0x4f30 [ 344.963842][ T5889] ? do_raw_spin_unlock+0xf5/0x210 [ 344.969133][ T5889] ? __pfx_hub_event+0x10/0x10 [ 344.974076][ T5889] ? process_scheduled_works+0xa70/0x1860 [ 344.979877][ T5889] ? process_scheduled_works+0xa70/0x1860 [ 344.985610][ T5889] ? process_scheduled_works+0xa70/0x1860 [ 344.991371][ T5889] process_scheduled_works+0xb5d/0x1860 [ 344.996922][ T5889] ? __pfx_process_scheduled_works+0x10/0x10 [ 345.002966][ T5889] ? assign_work+0x3d5/0x5e0 [ 345.007597][ T5889] worker_thread+0xa53/0xfc0 [ 345.012281][ T5889] kthread+0x388/0x470 [ 345.016351][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 345.021507][ T5889] ? __pfx_kthread+0x10/0x10 [ 345.026086][ T5889] ret_from_fork+0x514/0xb70 [ 345.030726][ T5889] ? __pfx_ret_from_fork+0x10/0x10 [ 345.035824][ T5889] ? load_gs_index+0x97/0xc0 [ 345.040463][ T5889] ? __switch_to+0xc79/0x1410 [ 345.045131][ T5889] ? __pfx_kthread+0x10/0x10 [ 345.049703][ T5889] ret_from_fork_asm+0x1a/0x30 [ 345.054504][ T5889] [ 345.057509][ T5889] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 345.064775][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.075691][ T5889] Tainted: [L]=SOFTLOCKUP [ 345.080000][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 345.090071][ T5889] Workqueue: usb_hub_wq hub_event [ 345.095106][ T5889] Call Trace: [ 345.098368][ T5889] [ 345.101289][ T5889] vpanic+0x56c/0xa60 [ 345.105278][ T5889] ? __pfx__printk+0x10/0x10 [ 345.109855][ T5889] ? __pfx_vpanic+0x10/0x10 [ 345.114363][ T5889] ? is_bpf_text_address+0x292/0x2b0 [ 345.119665][ T5889] ? is_bpf_text_address+0x26/0x2b0 [ 345.124859][ T5889] panic+0xc5/0xd0 [ 345.128569][ T5889] ? __pfx_panic+0x10/0x10 [ 345.132982][ T5889] ? ret_from_fork_asm+0x1a/0x30 [ 345.137900][ T5889] __warn+0x315/0x4c0 [ 345.141865][ T5889] ? firmware_fallback_sysfs+0x746/0xa30 [ 345.147484][ T5889] ? firmware_fallback_sysfs+0x746/0xa30 [ 345.153102][ T5889] __report_bug+0x29a/0x540 [ 345.157602][ T5889] ? firmware_fallback_sysfs+0x746/0xa30 [ 345.163221][ T5889] ? __pfx___report_bug+0x10/0x10 [ 345.168233][ T5889] ? __up_read+0x291/0x6b0 [ 345.172640][ T5889] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 345.178435][ T5889] ? firmware_fallback_sysfs+0x746/0xa30 [ 345.184057][ T5889] report_bug+0x16a/0x220 [ 345.188376][ T5889] ? firmware_fallback_sysfs+0x746/0xa30 [ 345.193992][ T5889] ? firmware_fallback_sysfs+0x748/0xa30 [ 345.199605][ T5889] handle_bug+0x9c/0x200 [ 345.203832][ T5889] exc_invalid_op+0x1a/0x50 [ 345.208317][ T5889] asm_exc_invalid_op+0x1a/0x20 [ 345.213148][ T5889] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30 [ 345.219381][ T5889] Code: bc fb e9 5d fc ff ff e8 88 d4 bc fb c6 05 2d 4e 14 0a 01 48 c7 c7 20 d4 53 8c e8 45 d6 1e fb e9 85 fc ff ff e8 6b d4 bc fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 20 d5 53 8c 4c 89 e2 e8 d5 75 23 fb e9 [ 345.238972][ T5889] RSP: 0018:ffffc900047268d0 EFLAGS: 00010246 [ 345.245041][ T5889] RAX: ffffffff8608ea55 RBX: dffffc0000000000 RCX: 0000000000100000 [ 345.252994][ T5889] RDX: ffffc9001b180000 RSI: 00000000000fffff RDI: 0000000000100000 [ 345.260964][ T5889] RBP: 0000000000000001 R08: ffffffff903353f7 R09: 1ffffffff2066a7e [ 345.268942][ T5889] R10: dffffc0000000000 R11: fffffbfff2066a7f R12: ffffffff8c8a2880 [ 345.276900][ T5889] R13: 0000000000001770 R14: ffff88802587d0b0 R15: 00000000fffffff5 [ 345.284863][ T5889] ? firmware_fallback_sysfs+0x745/0xa30 [ 345.290491][ T5889] ? kfree+0x1c5/0x640 [ 345.294540][ T5889] ? _request_firmware+0xf11/0x1780 [ 345.299713][ T5889] ? __kmalloc_cache_noprof+0x15b/0x660 [ 345.305242][ T5889] _request_firmware+0x1052/0x1780 [ 345.310359][ T5889] ? __pfx__request_firmware+0x10/0x10 [ 345.315825][ T5889] ? request_firmware+0x17/0x50 [ 345.320695][ T5889] request_firmware+0x36/0x50 [ 345.325355][ T5889] ezusb_fx1_ihex_firmware_download+0xbb/0xd60 [ 345.331502][ T5889] ? __pfx_ezusb_fx1_ihex_firmware_download+0x10/0x10 [ 345.338256][ T5889] ? __raw_spin_lock_init+0x45/0x100 [ 345.343527][ T5889] ? __init_waitqueue_head+0xa9/0x150 [ 345.348908][ T5889] keyspan_fake_startup+0x230/0x4a0 [ 345.354091][ T5889] usb_serial_probe+0x2537/0x2e50 [ 345.359131][ T5889] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 345.364937][ T5889] usb_probe_interface+0x659/0xc70 [ 345.370041][ T5889] ? __pfx_usb_probe_interface+0x10/0x10 [ 345.375660][ T5889] really_probe+0x267/0xaf0 [ 345.380185][ T5889] __driver_probe_device+0x1ef/0x380 [ 345.385465][ T5889] driver_probe_device+0x4f/0x240 [ 345.390488][ T5889] __device_attach_driver+0x279/0x430 [ 345.395849][ T5889] bus_for_each_drv+0x258/0x2f0 [ 345.400688][ T5889] ? __pfx___device_attach_driver+0x10/0x10 [ 345.406570][ T5889] ? __pfx_bus_for_each_drv+0x10/0x10 [ 345.411940][ T5889] ? lockdep_hardirqs_on+0x7a/0x110 [ 345.417157][ T5889] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 345.422957][ T5889] __device_attach+0x2c5/0x450 [ 345.427714][ T5889] ? __pfx___device_attach+0x10/0x10 [ 345.433003][ T5889] ? _raw_spin_unlock+0x28/0x50 [ 345.437843][ T5889] device_initial_probe+0xa1/0xd0 [ 345.442855][ T5889] bus_probe_device+0x12a/0x220 [ 345.447694][ T5889] device_add+0x7e9/0xbb0 [ 345.452012][ T5889] usb_set_configuration+0x1a87/0x2110 [ 345.457461][ T5889] usb_generic_driver_probe+0x8d/0x150 [ 345.462910][ T5889] usb_probe_device+0x1c4/0x3b0 [ 345.467750][ T5889] ? __pfx_usb_probe_device+0x10/0x10 [ 345.473107][ T5889] really_probe+0x267/0xaf0 [ 345.477602][ T5889] __driver_probe_device+0x1ef/0x380 [ 345.482872][ T5889] driver_probe_device+0x4f/0x240 [ 345.487890][ T5889] __device_attach_driver+0x279/0x430 [ 345.493248][ T5889] bus_for_each_drv+0x258/0x2f0 [ 345.498079][ T5889] ? __pfx___device_attach_driver+0x10/0x10 [ 345.503957][ T5889] ? __pfx_bus_for_each_drv+0x10/0x10 [ 345.509312][ T5889] ? lockdep_hardirqs_on+0x7a/0x110 [ 345.514504][ T5889] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 345.520304][ T5889] __device_attach+0x2c5/0x450 [ 345.525057][ T5889] ? __pfx___device_attach+0x10/0x10 [ 345.530325][ T5889] ? _raw_spin_unlock+0x28/0x50 [ 345.535171][ T5889] device_initial_probe+0xa1/0xd0 [ 345.540180][ T5889] bus_probe_device+0x12a/0x220 [ 345.545022][ T5889] device_add+0x7e9/0xbb0 [ 345.549357][ T5889] usb_new_device+0xa08/0x16f0 [ 345.554110][ T5889] ? __pfx_usb_new_device+0x10/0x10 [ 345.559292][ T5889] ? _raw_spin_unlock_irq+0x23/0x50 [ 345.564488][ T5889] hub_event+0x2a1c/0x4f30 [ 345.568927][ T5889] ? do_raw_spin_unlock+0xf5/0x210 [ 345.574053][ T5889] ? __pfx_hub_event+0x10/0x10 [ 345.578811][ T5889] ? process_scheduled_works+0xa70/0x1860 [ 345.584531][ T5889] ? process_scheduled_works+0xa70/0x1860 [ 345.590245][ T5889] ? process_scheduled_works+0xa70/0x1860 [ 345.596393][ T5889] process_scheduled_works+0xb5d/0x1860 [ 345.601945][ T5889] ? __pfx_process_scheduled_works+0x10/0x10 [ 345.607918][ T5889] ? assign_work+0x3d5/0x5e0 [ 345.612502][ T5889] worker_thread+0xa53/0xfc0 [ 345.617100][ T5889] kthread+0x388/0x470 [ 345.621156][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 345.626274][ T5889] ? __pfx_kthread+0x10/0x10 [ 345.630851][ T5889] ret_from_fork+0x514/0xb70 [ 345.635430][ T5889] ? __pfx_ret_from_fork+0x10/0x10 [ 345.640527][ T5889] ? load_gs_index+0x97/0xc0 [ 345.645125][ T5889] ? __switch_to+0xc79/0x1410 [ 345.649791][ T5889] ? __pfx_kthread+0x10/0x10 [ 345.654379][ T5889] ret_from_fork_asm+0x1a/0x30 [ 345.659134][ T5889] [ 345.662659][ T5889] Kernel Offset: disabled [ 345.666984][ T5889] Rebooting in 86400 seconds..