last executing test programs: 17.196650417s ago: executing program 1 (id=244): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) getpeername(r0, &(0x7f00000000c0)=@phonet, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) socket$kcm(0x10, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0xa001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) 15.585076145s ago: executing program 1 (id=250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,posixacl,smackfsro', @ANYRESDEC]) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) 10.656583641s ago: executing program 1 (id=260): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f0000000109021200010000000009"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000002c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.380301804s ago: executing program 4 (id=266): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r2 = socket(0x10, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 6.2908307s ago: executing program 0 (id=269): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x58) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xc, 0x0, 0x0, 0x0, 0x7fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) semctl$SETALL(0x0, 0x0, 0x11, 0x0) socket$l2tp(0x2, 0x2, 0x73) 6.219732197s ago: executing program 1 (id=270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,posixacl,smackfsro', @ANYRESDEC]) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) 6.095222384s ago: executing program 4 (id=271): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$audio(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0xf0, 0x10, 0x413, 0x70bd26, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0xa0, 0x1d}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xff, 0x7f}, {0x0, 0xffffffffffffffff, 0x2}, {0xf6, 0x4, 0x8}, 0x0, 0x3501, 0xa, 0x1, 0xfe}}, 0xf0}}, 0x40844) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 5.662738825s ago: executing program 0 (id=272): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 5.543850172s ago: executing program 3 (id=273): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xa) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0xff, 0x0, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r1, 0x7, 0x4, 0x9}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.262213471s ago: executing program 4 (id=274): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff000000000000000010000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 5.236943993s ago: executing program 0 (id=275): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, 0x0, 0x4008004) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) getpgrp(0xffffffffffffffff) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e617400"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) 5.088365086s ago: executing program 2 (id=276): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(0x0, 0x800) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000040)={0x4, r1, 0x1}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x2004) ioprio_get$pid(0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt(r4, 0x4000, 0xffffffff, 0x0, 0x0) 4.793965946s ago: executing program 2 (id=277): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) 3.825024857s ago: executing program 2 (id=278): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x61, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9d2050744d45be81f49a0fa06ee6d97eb1fcd4bb7391bf432ec3b851f9ede9c3b7d9deba726f8bea4e3c1ae84590d04e52b25dd097e755f75a5b3a82996770501ba3f61be6a8fa87"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff4a16}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x600, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x1560, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x35c, 0x3, 0x0, 0x1, [{0x358, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY={0x2fc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "bb0d8d544303c8d637a481d829c9ddda71553b76e941f51f02f2e7b51a3fc62525db4ec360"}, @NFTA_DATA_VALUE={0x35, 0x1, "8e292ec425b239909bdd75b7f4458c2b1334e9902bcd65d2618efc5c5bff18f94e9b9cddfc7d90da941bf01cd99caa02df"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "b7959c41db5b87b23791b23872b1c385b142c6c5e3d10fff46baf3812d5182211702c463b6859a582fcdc6b275e0f4e56f222a4ab639627d9d9d0e68bf4c379d762df155db36281c6447099a772006bb2aaa54c71a5e60725950d551db06efe970fefaffeae540b823f524d116fc01e9061914ffc70f1abbddc6ef818a9a1785613a97c5a724115a1d22236cd472c4daced5365aa2a0655035897cf7729630d7fd1289810e26e3e51dd136e1bb389459724ec9726d9649d68416c2b3831f3babc53f7b8b6717e4af6974fedfc1362fbec9"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xe5, 0x1, "17338e37172f23b8abdecf834e3ca7a74c73037d3a4f99f66fa7d23d2ddff74921d0e28074286563701d2ba1036b5d3e09f0f634ffde7a4c9e9f2e50ba9e3ae79ecd281b90179e7b47d6f02874fda0b230acb2353cf7f7e9ea18afc2dee45978bf550138e09bd44fdca2faf5ee449c15d92a2c1eb546ad557863695114461d0c2fdb0837bbdb3acffa28fa39455554f7379554bfe80c6480c552d5f70ebf279cc34b4c2193b64ae5aa5de36c0134c610f3e5b32c2e83e6a1dcf81a218edcc6db05f9221fff9f05420a014598538054eb9923536c0ef5b6e0ae790aa814a793f85a"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1168, 0x3, 0x0, 0x1, [{0x334, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x64, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x25, 0x1, "71c92cae9b3b550cf7b1f9336a9fa5d3db035a6d869a1a339af600b45413106708"}]}, @NFTA_SET_ELEM_KEY_END={0xe0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa6, 0x1, "879dc3147ec50cdf35ce64bbdd210bdf57178c35b26f2aad3137d5d6ed5b9bac7c2581da20e387f8e6d231d54cc24293d57633a5d12a1472f53085cac17815df0124aaa05146144f7b8037b6390e5fa43bd03990d561f61438f58b90485b5eb8eeb54a40fbfb314ce8cb71e45a0c8b7aa2658940815cd0877682b6fa6cc311111566e08023effefc0845911d44f0ab5684b3b47e2ba3e38f7613efd1e715659f5dc7"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "58c28461e2a7e19df7d349ab92ce4980dcf7cabde264a466a52921bfef9c1d7a90d69d4030211c6794bb210e7846b730d7718c0ccffd49cab9a286fe2d2bca29261f31d97c5a7dd02ab65032df3348a4f990c770252920df219c7550e21d536d7815510d8c481dc40232b01c413e788caf68757d253588ff0b5c2493f286e4a0ee"}, @NFTA_DATA_VALUE={0x9d, 0x1, "0d889b1e8988ffd6d89e4da17f0ff2842cf49e4af1be7946f1bf8f129381c022f56cdd5538b4ebf696914dbf1e41e60e72735fec07fba6c23f9a1d830a30387a22c869ae16fd02735df900f575012cef3536b7eef55d6181e84c309b4db6984465b8f824a8d4112b37f7f862b565d282c9bbbb49ff6aa8023569059bef91de9718a83d19a7c7138ecc4e47069fb86e2c0971afd7a97796ebff"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xd, 0x2, 0x1, 0x0, '/dev/sg#\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x800}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7f}, @NFTA_LOG_SNAPLEN={0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x534, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "400d5a5a6c82b528db"}, @NFTA_DATA_VALUE={0x9, 0x1, "1dcd5394ba"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "f59066141f597fd4bb55dd7d5988367486998faf204c7076044da57d580e99e374fa1d74c7ede4870f5d89fd6d4e609479ebb5072ebe57f08351540e585f86767e57b6ff6b0d3ab0e35b3b90b07255d8acea9d2c5352a580793e144b4a165781253187e83904fb9d6bf0968643a9df84b67d7b38b662ffc9f85aa7303a20930d7bd5beb8427f4395b4a8c08feede45f1046120b58e5510d6328c05f672f9eda95ec040cf06a3f4f22227559780"}, @NFTA_DATA_VALUE={0xa1, 0x1, "5a4d1622c3809ebd03a708e39c3baf1b05626d61c0c6fdfc49328fb1148c575f66069e07ee4e8838041b80a34605a75e97e359435a54757da4b2ca89a4357c500e8bcddbabe844b2107b3c2f28742ef8ba57e1d9f32d06775275960402da730b607a7a7d94779adc9367ac00bb5819cf636e7978aa9e7d4d839a0f632f532cb5e241e89046d62e099b162cbd516eff52662b01ae884c07bb14ec480120"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x270, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "7d9c6a23ee8fc18227c3c755e8a34d0ee87ec480ae99efedfae4316aa37b77f22ffdf5d4aea189fa985399c163d99ee688448a94f01d20c5e74c051cd56b2a28158f72da2d361427740d08d71aa5284be883438dea6ecf08876c88993bcdee3330a7045f7d90c3fe24ec984593b1cf6266fd188a997c7553cd0ab3d9a028bb5d2f4c34d3c4c1674842fd043c387f2acac89b3c7c686255bef226dba277df43213110390b6fa42434a17520a26012135155ef6e7ecd2ab19fe507157daebca30b0e4195940556d92f53bba37d040f025ec3fcbfe6bf929a99afedb52f95b424a84bcd018feb473585d5"}, @NFTA_DATA_VALUE={0x35, 0x1, "4e9957e22609836e805cd35ab84e6993cf56638c3211e44da3fa80c8a73aa2f954779f7c58f1d5155f1e6e117c21aadde5"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "35f42d63ba4bf949e96a0b9efae2beba22d039440430bc8e9729953af21cea8e82aa9d1157c87d4917"}, @NFTA_DATA_VALUE={0xd1, 0x1, "6d8b41f25f316ceba6198cf71c34eae2fec89c8c9a361a39e41e068464d412dcf9428cbb7e039e2a63b3ada5e9e9fc09b48ad8f9d2fc664ca8d287dee7af7f60efa7a3355ba70c7dc5459d30801e4282b15ef7e453870c636f3ff7fbef35493587afa4a07093790f38cea6881fc360cfd9fd22b6ff513d63e241de7be73b31afdef74b1e9d03a7441fbb2115b019abf6970ec747f4f5de9dfb7ee15a53bbc4cb7599a725e20e008f04fbdfb31b4afda55b4f8681c0d0b57d83a54b6d0b5af088b74316d2c50fa81cd7c2b19dca"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x3a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x220, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "9c668180943534491d385454d80479ce52db48be9f33af5f941fceff58619993d3831cd7b8809da1ad9fd8907dfdb68f51a009314ec4d036bbfd448cddc51bc6cdb6e5fef18cdb3471a7945083f237b9038df5464ab82510979db946e95c9338ce64cbbd0d80bccf467d64344b89bb792f4dad33a0b24a36aefc6e3c61b131a890adb1a518c3f99115b94ec91f44d18c29098f109124cf0de61657d50d970158751e8cf6bc63bcfd28bb610e6f1e68059a"}, @NFTA_DATA_VALUE={0xd9, 0x1, "9fd9840f2eee05f7c79090178ef651719692618d1e954c4cb06e4dcabbff2415243092cb8dd87b1a3fe640cddc3de5a8493a3841d77d2e1e13e0ffbb8f4c9414988c65cd575407ce8bbf53efb54e8bb9b470567d27aa618ece22b9f0fb3156c29701fd608225a5490d0b04c8017bcde20bd55f5febe467a370210b8e0d2fcfc6586fed3fb2a3840b388ae57d88cbb431fc86a226c4abdc9667cef0f0b9d332523862aec7407d15b29804b90b1df31a12a959fe49bfc033fb51ceba007333e9f91e6315aa63583381769cd8e5780cdc751f14491542"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "935a6908a7c66a3ca70dc3778a2f6851e62a7823a1d43c0bc1ae10c53bbc82aed9d8ab9847f841bd2f11fc938ce9d5a01b267ea38af2aad637c010685a"}]}, @NFTA_SET_ELEM_KEY={0x180, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "cb6a172b62d997201d09ec637d0a515ff782f4c1c38c9eae15cdd58a5e668da3662cd96be4c74cc39051b8eab525c74b7c4083fed66fe62be69dc18b8d32cd4f7085ee077b6f70b7029f45f6e404734c77ab50a27aa6c928fda1215ac6cfd4eb91b8f4d18ba7be3ca627610fc3d217a509333ddc12311d59d5f2078d595900ac2ad60b866b2683e15fecae9b4531821f5c7984365fd3997f3f3dbc6443e1f97a1f"}, @NFTA_DATA_VALUE={0xc5, 0x1, "6c80eda3273c221e91844d6ffa0071d2bb7cf40b9bb037731be2c0d1bc09a0e9b61a056e49afcbdecc1b53d3e0d321d3d983e66facf1bd16cdb3eb74b990b5a536ae8a44e6a924ae7181cac1e80733d233d2406f73f31738351db91314a65dd4d421e8b11e4864b8bc5dca8e2c50936c63adf68506a2644b1e3b35679d0bfdc5e08692fbf39d3f654833b3c0ee04712d191be45987757578b700cbcc3cb347c5645291fe505aafecbe4ba2dcb19f7d6dd13928458e04f0093c4df27833ad4f0528"}]}]}, {0x26c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x240, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4d, 0x1, "ac6d474db7942dd5e86ed999d3431e80cf9df42749f065fd095dbeced54a22dc02613349eb8d3c4f9497dfb9d1e23f0070b8b6119cf9ed5391045425ac6ed0d820249ed8fa030a902a"}, @NFTA_DATA_VALUE={0xf1, 0x1, "8797e47763589a8df8869756af52727e919d3ed9e00d982ca20fdb991b263955f18240a01fb1582cddc500990147501b4e37b78d745c2f319484be5474658d3c4817395d54e043e0319d430eaebbff9a0c53f3856f796b6e90c9e9d241453c588fcdfee3217a2f38c8f487e09ee007043586e647169c09431b1a3c28157e83960fdf2f93043b78a3da97affa4a19c92429f4bb4b51b72862cd3f8a379d8bdb258bc399554f00be42b33bc04cfe1af6e96b672c578b418ed22c6c8275be2450a73562920f9834d5b0d4beddbfc5b9e0df0c5cd0c277ba76530584cd2f85d7e967d3e666a69662388df10e3da8e2"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x95, 0x1, "efa3011438f72b5455339097519ee3878ade055d6beb08e4cb092190be018db8b4ca1d5bc59003c8ca9919f354bfeb2dbcde7b3ee29216bd7a207359d719cec5d7abb151a5579bf6f6079e001b53a61549f6bbe23da7ee7b4c73e8b251ef1fa6f4440aaf9b735049a2acb9f1b362d8b05c87e74535214747d137446eb2a8a57716c7eece421128fd0738a573f21ad6df35"}, @NFTA_DATA_VALUE={0x5, 0x1, "d6"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x372}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x2a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x51, 0x6, 0x1, 0x0, "6f92a53afc4085084a74b2d5491d44dc5850473955d5021bed0b73a5ac198b88188c8d26b8e74c58672d50670ef9f235d5600242810afa0949646be22c2f0099d73569e76b437426db40fa77b4"}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_KEY_END={0x15c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x11, 0x1, "52fb905e7348db874093bcb40d"}, @NFTA_DATA_VALUE={0x89, 0x1, "2bb1eb2d0aa7fb27713ae6900c35befd0112784f813bc1466068ca22fcd30905af3ecadb3debc28593f891e74e522b2f124f6ad6eb24a08287fb369cf485fe3a76af431217d26eb894f0b9798b067468358f12ab8101899787096d314087a97c0b127e138b47b260ddbcd66403776a5d5928375dd7ec459c555440aacaf5d74d3a1771421d"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x49, 0x1, "48a3eeec8d13ec7a1fcb10d9bd5edbc6922b6282895315100ec04b20fa8f5fa919f8aef563d23582c347e64793da6c297416d2def67d76d8ddb9e61acb9a856c016792513c"}]}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_USERDATA={0x59, 0x6, 0x1, 0x0, "0117441eac5bf63a713d876bd7ae9e2aa5ab0c5b7aeeb2da52ee01f9cd22c92977076f6112504879f0e2e9a6adfd20cf9faef9b7eb972d90686a4d985f6fd15d129a1dbf11c7587fb3fc052b3268a17fe38e92a1b2"}, @NFTA_SET_ELEM_USERDATA={0x31, 0x6, 0x1, 0x0, "d5510775ae1b7e730779aa2791452089999b3ce61e74b53d518f175dc662cefef921a4f087123d282d0cee3b34"}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "08348c570d3ad3b51f1f32c18353f69523aafaf1753d1a8cf19d8fc3aa6f9396dec2baa42e61d4a3e96610c52f6883c18f3458b45fc4e3ccc4322eef63df9fdca2b0fd8691a5c1e7f793d52d3265f2624c"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1788}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 3.824017491s ago: executing program 1 (id=279): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x1, 0xe000) 3.741693752s ago: executing program 0 (id=280): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb146000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, 0x0, 0x4008004) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getpgrp(0xffffffffffffffff) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e617400"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04131d07c9000a00c9800500c8001000c8000500c800005c17ed622021c9ff30b638735bfdc9354e6d3ec836b2927e7260054e061c000000"], 0x20) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0) 3.667567704s ago: executing program 4 (id=281): io_setup(0x7f, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0xc562, 0x13090, 0x0, 0x71}, &(0x7f0000000100), 0x0, 0x0) io_getevents(r0, 0x3, 0x3, &(0x7f0000000580)=[{}, {}, {}], 0x0) poll(&(0x7f0000000f00)=[{0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4000}, {r1}, {0xffffffffffffffff, 0x26e0}], 0x4, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000040), 0x1000, r2}, 0x38) 2.646814386s ago: executing program 2 (id=282): gettid() timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) 2.206642402s ago: executing program 3 (id=283): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb146000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, 0x0, 0x4008004) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) getpgrp(0xffffffffffffffff) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0x20) 2.113212203s ago: executing program 1 (id=284): syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0xfffffffd, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x1, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000440)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012cafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5b", 0x7e) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @multicast1}}) 1.926224453s ago: executing program 0 (id=285): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.912483931s ago: executing program 3 (id=286): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$audio(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0xf0, 0x10, 0x413, 0x70bd26, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0xa0, 0x1d}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xff, 0x7f}, {0x0, 0xffffffffffffffff, 0x2}, {0xf6, 0x4, 0x8}, 0x0, 0x3501, 0xa, 0x1, 0xfe}}, 0xf0}}, 0x40844) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 983.926342ms ago: executing program 2 (id=287): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(0x0, 0x800) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000040)={0x4, r1, 0x1}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x2004) ioprio_get$pid(0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt(r4, 0x4000, 0xffffffff, 0x0, 0x0) 715.659726ms ago: executing program 3 (id=288): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x9) 713.78193ms ago: executing program 4 (id=289): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 660.149171ms ago: executing program 2 (id=290): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, 0x0, 0x4008004) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) getpgrp(0xffffffffffffffff) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e617400"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) 581.009683ms ago: executing program 0 (id=291): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) 288.436291ms ago: executing program 3 (id=292): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x61, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9d2050744d45be81f49a0fa06ee6d97eb1fcd4bb7391bf432ec3b851f9ede9c3b7d9deba726f8bea4e3c1ae84590d04e52b25dd097e755f75a5b3a82996770501ba3f61be6a8fa87"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff4a16}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x600, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x1560, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x35c, 0x3, 0x0, 0x1, [{0x358, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY={0x2fc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "bb0d8d544303c8d637a481d829c9ddda71553b76e941f51f02f2e7b51a3fc62525db4ec360"}, @NFTA_DATA_VALUE={0x35, 0x1, "8e292ec425b239909bdd75b7f4458c2b1334e9902bcd65d2618efc5c5bff18f94e9b9cddfc7d90da941bf01cd99caa02df"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "b7959c41db5b87b23791b23872b1c385b142c6c5e3d10fff46baf3812d5182211702c463b6859a582fcdc6b275e0f4e56f222a4ab639627d9d9d0e68bf4c379d762df155db36281c6447099a772006bb2aaa54c71a5e60725950d551db06efe970fefaffeae540b823f524d116fc01e9061914ffc70f1abbddc6ef818a9a1785613a97c5a724115a1d22236cd472c4daced5365aa2a0655035897cf7729630d7fd1289810e26e3e51dd136e1bb389459724ec9726d9649d68416c2b3831f3babc53f7b8b6717e4af6974fedfc1362fbec9"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xe5, 0x1, "17338e37172f23b8abdecf834e3ca7a74c73037d3a4f99f66fa7d23d2ddff74921d0e28074286563701d2ba1036b5d3e09f0f634ffde7a4c9e9f2e50ba9e3ae79ecd281b90179e7b47d6f02874fda0b230acb2353cf7f7e9ea18afc2dee45978bf550138e09bd44fdca2faf5ee449c15d92a2c1eb546ad557863695114461d0c2fdb0837bbdb3acffa28fa39455554f7379554bfe80c6480c552d5f70ebf279cc34b4c2193b64ae5aa5de36c0134c610f3e5b32c2e83e6a1dcf81a218edcc6db05f9221fff9f05420a014598538054eb9923536c0ef5b6e0ae790aa814a793f85a"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1168, 0x3, 0x0, 0x1, [{0x334, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x64, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x25, 0x1, "71c92cae9b3b550cf7b1f9336a9fa5d3db035a6d869a1a339af600b45413106708"}]}, @NFTA_SET_ELEM_KEY_END={0xe0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa6, 0x1, "879dc3147ec50cdf35ce64bbdd210bdf57178c35b26f2aad3137d5d6ed5b9bac7c2581da20e387f8e6d231d54cc24293d57633a5d12a1472f53085cac17815df0124aaa05146144f7b8037b6390e5fa43bd03990d561f61438f58b90485b5eb8eeb54a40fbfb314ce8cb71e45a0c8b7aa2658940815cd0877682b6fa6cc311111566e08023effefc0845911d44f0ab5684b3b47e2ba3e38f7613efd1e715659f5dc7"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "58c28461e2a7e19df7d349ab92ce4980dcf7cabde264a466a52921bfef9c1d7a90d69d4030211c6794bb210e7846b730d7718c0ccffd49cab9a286fe2d2bca29261f31d97c5a7dd02ab65032df3348a4f990c770252920df219c7550e21d536d7815510d8c481dc40232b01c413e788caf68757d253588ff0b5c2493f286e4a0ee"}, @NFTA_DATA_VALUE={0x9d, 0x1, "0d889b1e8988ffd6d89e4da17f0ff2842cf49e4af1be7946f1bf8f129381c022f56cdd5538b4ebf696914dbf1e41e60e72735fec07fba6c23f9a1d830a30387a22c869ae16fd02735df900f575012cef3536b7eef55d6181e84c309b4db6984465b8f824a8d4112b37f7f862b565d282c9bbbb49ff6aa8023569059bef91de9718a83d19a7c7138ecc4e47069fb86e2c0971afd7a97796ebff"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xd, 0x2, 0x1, 0x0, '/dev/sg#\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x800}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7f}, @NFTA_LOG_SNAPLEN={0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x534, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "400d5a5a6c82b528db"}, @NFTA_DATA_VALUE={0x9, 0x1, "1dcd5394ba"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "f59066141f597fd4bb55dd7d5988367486998faf204c7076044da57d580e99e374fa1d74c7ede4870f5d89fd6d4e609479ebb5072ebe57f08351540e585f86767e57b6ff6b0d3ab0e35b3b90b07255d8acea9d2c5352a580793e144b4a165781253187e83904fb9d6bf0968643a9df84b67d7b38b662ffc9f85aa7303a20930d7bd5beb8427f4395b4a8c08feede45f1046120b58e5510d6328c05f672f9eda95ec040cf06a3f4f22227559780"}, @NFTA_DATA_VALUE={0xa1, 0x1, "5a4d1622c3809ebd03a708e39c3baf1b05626d61c0c6fdfc49328fb1148c575f66069e07ee4e8838041b80a34605a75e97e359435a54757da4b2ca89a4357c500e8bcddbabe844b2107b3c2f28742ef8ba57e1d9f32d06775275960402da730b607a7a7d94779adc9367ac00bb5819cf636e7978aa9e7d4d839a0f632f532cb5e241e89046d62e099b162cbd516eff52662b01ae884c07bb14ec480120"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x270, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "7d9c6a23ee8fc18227c3c755e8a34d0ee87ec480ae99efedfae4316aa37b77f22ffdf5d4aea189fa985399c163d99ee688448a94f01d20c5e74c051cd56b2a28158f72da2d361427740d08d71aa5284be883438dea6ecf08876c88993bcdee3330a7045f7d90c3fe24ec984593b1cf6266fd188a997c7553cd0ab3d9a028bb5d2f4c34d3c4c1674842fd043c387f2acac89b3c7c686255bef226dba277df43213110390b6fa42434a17520a26012135155ef6e7ecd2ab19fe507157daebca30b0e4195940556d92f53bba37d040f025ec3fcbfe6bf929a99afedb52f95b424a84bcd018feb473585d5"}, @NFTA_DATA_VALUE={0x35, 0x1, "4e9957e22609836e805cd35ab84e6993cf56638c3211e44da3fa80c8a73aa2f954779f7c58f1d5155f1e6e117c21aadde5"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "35f42d63ba4bf949e96a0b9efae2beba22d039440430bc8e9729953af21cea8e82aa9d1157c87d4917"}, @NFTA_DATA_VALUE={0xd1, 0x1, "6d8b41f25f316ceba6198cf71c34eae2fec89c8c9a361a39e41e068464d412dcf9428cbb7e039e2a63b3ada5e9e9fc09b48ad8f9d2fc664ca8d287dee7af7f60efa7a3355ba70c7dc5459d30801e4282b15ef7e453870c636f3ff7fbef35493587afa4a07093790f38cea6881fc360cfd9fd22b6ff513d63e241de7be73b31afdef74b1e9d03a7441fbb2115b019abf6970ec747f4f5de9dfb7ee15a53bbc4cb7599a725e20e008f04fbdfb31b4afda55b4f8681c0d0b57d83a54b6d0b5af088b74316d2c50fa81cd7c2b19dca"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x3a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x220, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "9c668180943534491d385454d80479ce52db48be9f33af5f941fceff58619993d3831cd7b8809da1ad9fd8907dfdb68f51a009314ec4d036bbfd448cddc51bc6cdb6e5fef18cdb3471a7945083f237b9038df5464ab82510979db946e95c9338ce64cbbd0d80bccf467d64344b89bb792f4dad33a0b24a36aefc6e3c61b131a890adb1a518c3f99115b94ec91f44d18c29098f109124cf0de61657d50d970158751e8cf6bc63bcfd28bb610e6f1e68059a"}, @NFTA_DATA_VALUE={0xd9, 0x1, "9fd9840f2eee05f7c79090178ef651719692618d1e954c4cb06e4dcabbff2415243092cb8dd87b1a3fe640cddc3de5a8493a3841d77d2e1e13e0ffbb8f4c9414988c65cd575407ce8bbf53efb54e8bb9b470567d27aa618ece22b9f0fb3156c29701fd608225a5490d0b04c8017bcde20bd55f5febe467a370210b8e0d2fcfc6586fed3fb2a3840b388ae57d88cbb431fc86a226c4abdc9667cef0f0b9d332523862aec7407d15b29804b90b1df31a12a959fe49bfc033fb51ceba007333e9f91e6315aa63583381769cd8e5780cdc751f14491542"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "935a6908a7c66a3ca70dc3778a2f6851e62a7823a1d43c0bc1ae10c53bbc82aed9d8ab9847f841bd2f11fc938ce9d5a01b267ea38af2aad637c010685a"}]}, @NFTA_SET_ELEM_KEY={0x180, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "cb6a172b62d997201d09ec637d0a515ff782f4c1c38c9eae15cdd58a5e668da3662cd96be4c74cc39051b8eab525c74b7c4083fed66fe62be69dc18b8d32cd4f7085ee077b6f70b7029f45f6e404734c77ab50a27aa6c928fda1215ac6cfd4eb91b8f4d18ba7be3ca627610fc3d217a509333ddc12311d59d5f2078d595900ac2ad60b866b2683e15fecae9b4531821f5c7984365fd3997f3f3dbc6443e1f97a1f"}, @NFTA_DATA_VALUE={0xc5, 0x1, "6c80eda3273c221e91844d6ffa0071d2bb7cf40b9bb037731be2c0d1bc09a0e9b61a056e49afcbdecc1b53d3e0d321d3d983e66facf1bd16cdb3eb74b990b5a536ae8a44e6a924ae7181cac1e80733d233d2406f73f31738351db91314a65dd4d421e8b11e4864b8bc5dca8e2c50936c63adf68506a2644b1e3b35679d0bfdc5e08692fbf39d3f654833b3c0ee04712d191be45987757578b700cbcc3cb347c5645291fe505aafecbe4ba2dcb19f7d6dd13928458e04f0093c4df27833ad4f0528"}]}]}, {0x26c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x240, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4d, 0x1, "ac6d474db7942dd5e86ed999d3431e80cf9df42749f065fd095dbeced54a22dc02613349eb8d3c4f9497dfb9d1e23f0070b8b6119cf9ed5391045425ac6ed0d820249ed8fa030a902a"}, @NFTA_DATA_VALUE={0xf1, 0x1, "8797e47763589a8df8869756af52727e919d3ed9e00d982ca20fdb991b263955f18240a01fb1582cddc500990147501b4e37b78d745c2f319484be5474658d3c4817395d54e043e0319d430eaebbff9a0c53f3856f796b6e90c9e9d241453c588fcdfee3217a2f38c8f487e09ee007043586e647169c09431b1a3c28157e83960fdf2f93043b78a3da97affa4a19c92429f4bb4b51b72862cd3f8a379d8bdb258bc399554f00be42b33bc04cfe1af6e96b672c578b418ed22c6c8275be2450a73562920f9834d5b0d4beddbfc5b9e0df0c5cd0c277ba76530584cd2f85d7e967d3e666a69662388df10e3da8e2"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x95, 0x1, "efa3011438f72b5455339097519ee3878ade055d6beb08e4cb092190be018db8b4ca1d5bc59003c8ca9919f354bfeb2dbcde7b3ee29216bd7a207359d719cec5d7abb151a5579bf6f6079e001b53a61549f6bbe23da7ee7b4c73e8b251ef1fa6f4440aaf9b735049a2acb9f1b362d8b05c87e74535214747d137446eb2a8a57716c7eece421128fd0738a573f21ad6df35"}, @NFTA_DATA_VALUE={0x5, 0x1, "d6"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x372}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x2a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x51, 0x6, 0x1, 0x0, "6f92a53afc4085084a74b2d5491d44dc5850473955d5021bed0b73a5ac198b88188c8d26b8e74c58672d50670ef9f235d5600242810afa0949646be22c2f0099d73569e76b437426db40fa77b4"}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_KEY_END={0x15c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x11, 0x1, "52fb905e7348db874093bcb40d"}, @NFTA_DATA_VALUE={0x89, 0x1, "2bb1eb2d0aa7fb27713ae6900c35befd0112784f813bc1466068ca22fcd30905af3ecadb3debc28593f891e74e522b2f124f6ad6eb24a08287fb369cf485fe3a76af431217d26eb894f0b9798b067468358f12ab8101899787096d314087a97c0b127e138b47b260ddbcd66403776a5d5928375dd7ec459c555440aacaf5d74d3a1771421d"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x49, 0x1, "48a3eeec8d13ec7a1fcb10d9bd5edbc6922b6282895315100ec04b20fa8f5fa919f8aef563d23582c347e64793da6c297416d2def67d76d8ddb9e61acb9a856c016792513c"}]}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_USERDATA={0x59, 0x6, 0x1, 0x0, "0117441eac5bf63a713d876bd7ae9e2aa5ab0c5b7aeeb2da52ee01f9cd22c92977076f6112504879f0e2e9a6adfd20cf9faef9b7eb972d90686a4d985f6fd15d129a1dbf11c7587fb3fc052b3268a17fe38e92a1b2"}, @NFTA_SET_ELEM_USERDATA={0x31, 0x6, 0x1, 0x0, "d5510775ae1b7e730779aa2791452089999b3ce61e74b53d518f175dc662cefef921a4f087123d282d0cee3b34"}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "08348c570d3ad3b51f1f32c18353f69523aafaf1753d1a8cf19d8fc3aa6f9396dec2baa42e61d4a3e96610c52f6883c18f3458b45fc4e3ccc4322eef63df9fdca2b0fd8691a5c1e7f793d52d3265f2624c"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1788}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 204.568803ms ago: executing program 4 (id=293): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xa) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0xff, 0x0, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r1, 0x7, 0x4, 0x9}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=294): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x1, 0xe000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. [ 83.656178][ T5598] cgroup: Unknown subsys name 'net' [ 83.895867][ T5598] cgroup: Unknown subsys name 'cpuset' [ 83.951678][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.900300][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.580686][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.610376][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.619396][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.643362][ T4928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.644875][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.650054][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.709072][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.720581][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.732881][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.736724][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.764289][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.797760][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.799462][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.836547][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.849317][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.873497][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.880046][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.890334][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.925035][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.925139][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.929610][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.932570][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.934810][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.976777][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.977915][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.772187][ T5623] Bluetooth: hci0: command tx timeout [ 91.851999][ T5623] Bluetooth: hci1: command tx timeout [ 91.875359][ T32] cfg80211: failed to load regulatory.db [ 91.933264][ T5623] Bluetooth: hci2: command tx timeout [ 92.023106][ T5623] Bluetooth: hci3: command tx timeout [ 92.090975][ T5623] Bluetooth: hci4: command tx timeout [ 92.393189][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.394486][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.395107][ T5610] bridge_slave_0: entered allmulticast mode [ 92.397661][ T5610] bridge_slave_0: entered promiscuous mode [ 92.478894][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.479115][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.479306][ T5610] bridge_slave_1: entered allmulticast mode [ 92.490169][ T5610] bridge_slave_1: entered promiscuous mode [ 92.687980][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.754338][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.881901][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.882153][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.882394][ T5615] bridge_slave_0: entered allmulticast mode [ 92.886306][ T5615] bridge_slave_0: entered promiscuous mode [ 92.946106][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.946345][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.946551][ T5616] bridge_slave_0: entered allmulticast mode [ 92.948978][ T5616] bridge_slave_0: entered promiscuous mode [ 92.994504][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.994743][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.994952][ T5615] bridge_slave_1: entered allmulticast mode [ 92.997336][ T5615] bridge_slave_1: entered promiscuous mode [ 93.052242][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.052605][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.052859][ T5616] bridge_slave_1: entered allmulticast mode [ 93.055127][ T5616] bridge_slave_1: entered promiscuous mode [ 93.056692][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.056916][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.057303][ T5617] bridge_slave_0: entered allmulticast mode [ 93.059566][ T5617] bridge_slave_0: entered promiscuous mode [ 93.122024][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.122230][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.122495][ T5614] bridge_slave_0: entered allmulticast mode [ 93.124782][ T5614] bridge_slave_0: entered promiscuous mode [ 93.130326][ T5610] team0: Port device team_slave_0 added [ 93.183415][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.183642][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.183826][ T5617] bridge_slave_1: entered allmulticast mode [ 93.187500][ T5617] bridge_slave_1: entered promiscuous mode [ 93.246412][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.246707][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.246970][ T5614] bridge_slave_1: entered allmulticast mode [ 93.253034][ T5614] bridge_slave_1: entered promiscuous mode [ 93.279670][ T5610] team0: Port device team_slave_1 added [ 93.323117][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.368853][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.399557][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.447792][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.462837][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.495940][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.498226][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.498239][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.498258][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.566863][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.595211][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.596802][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.596812][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.596830][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.672792][ T5615] team0: Port device team_slave_0 added [ 93.715957][ T5616] team0: Port device team_slave_0 added [ 93.741469][ T5615] team0: Port device team_slave_1 added [ 93.769275][ T5616] team0: Port device team_slave_1 added [ 93.780626][ T5617] team0: Port device team_slave_0 added [ 93.807743][ T5614] team0: Port device team_slave_0 added [ 93.836358][ T5617] team0: Port device team_slave_1 added [ 93.851954][ T5623] Bluetooth: hci0: command tx timeout [ 93.867575][ T5614] team0: Port device team_slave_1 added [ 93.931160][ T5623] Bluetooth: hci1: command tx timeout [ 94.011105][ T5623] Bluetooth: hci2: command tx timeout [ 94.091317][ T5623] Bluetooth: hci3: command tx timeout [ 94.171020][ T5623] Bluetooth: hci4: command tx timeout [ 94.495266][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.495280][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.495301][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.564635][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.564652][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.564672][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.621213][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.621225][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.621244][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.685826][ T5610] hsr_slave_0: entered promiscuous mode [ 94.687633][ T5610] hsr_slave_1: entered promiscuous mode [ 94.695060][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.695098][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.695269][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.707081][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.707118][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.707193][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.783389][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.783432][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.783504][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.841086][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.841101][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.841128][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.844520][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.844531][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.844550][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.129767][ T5615] hsr_slave_0: entered promiscuous mode [ 95.133956][ T5615] hsr_slave_1: entered promiscuous mode [ 95.139465][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 95.139737][ T5615] Cannot create hsr debugfs directory [ 95.186166][ T5616] hsr_slave_0: entered promiscuous mode [ 95.187678][ T5616] hsr_slave_1: entered promiscuous mode [ 95.188820][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 95.188848][ T5616] Cannot create hsr debugfs directory [ 95.265133][ T5617] hsr_slave_0: entered promiscuous mode [ 95.266735][ T5617] hsr_slave_1: entered promiscuous mode [ 95.268634][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 95.268659][ T5617] Cannot create hsr debugfs directory [ 95.298926][ T5614] hsr_slave_0: entered promiscuous mode [ 95.300408][ T5614] hsr_slave_1: entered promiscuous mode [ 95.305147][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 95.305212][ T5614] Cannot create hsr debugfs directory [ 95.931000][ T5623] Bluetooth: hci0: command tx timeout [ 96.011030][ T5623] Bluetooth: hci1: command tx timeout [ 96.101063][ T5623] Bluetooth: hci2: command tx timeout [ 96.171325][ T5623] Bluetooth: hci3: command tx timeout [ 96.253275][ T5623] Bluetooth: hci4: command tx timeout [ 96.387456][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.447895][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.465357][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.507331][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.521677][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.559040][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.589997][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.619080][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.764194][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.805355][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.819087][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.846805][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.860026][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.890302][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.919158][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.957158][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.172729][ T5615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.209898][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.232952][ T5615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.266116][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.270313][ T5615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.305814][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.337145][ T5615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.382348][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.580110][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.615797][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.632402][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.654895][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.672171][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.708919][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.753709][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.785888][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.817217][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.989307][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.012057][ T5623] Bluetooth: hci0: command tx timeout [ 98.036850][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.046835][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.059260][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.088375][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.092886][ T5623] Bluetooth: hci1: command tx timeout [ 98.115697][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.137184][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.155682][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.181451][ T5623] Bluetooth: hci2: command tx timeout [ 98.200513][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.232417][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.232663][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.255675][ T5623] Bluetooth: hci3: command tx timeout [ 98.303975][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.307469][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.307607][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.331930][ T5623] Bluetooth: hci4: command tx timeout [ 98.460430][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.552444][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.552562][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.605379][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.638755][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.647163][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.775826][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.874312][ T3332] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.874568][ T3332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.918722][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.959422][ T3332] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.959654][ T3332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.130305][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.204483][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.205000][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.264987][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.338344][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.338553][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.479222][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.549996][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.550242][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.646350][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.646565][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.997611][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.535882][ T5610] veth0_vlan: entered promiscuous mode [ 100.600000][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.669196][ T5610] veth1_vlan: entered promiscuous mode [ 100.775820][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.149605][ T5610] veth0_macvtap: entered promiscuous mode [ 101.206402][ T5610] veth1_macvtap: entered promiscuous mode [ 101.227683][ T5616] veth0_vlan: entered promiscuous mode [ 101.263842][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.350611][ T5616] veth1_vlan: entered promiscuous mode [ 101.410199][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.488837][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.526526][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.573911][ T172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.580440][ T172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.619008][ T172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.639815][ T172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.776288][ T5616] veth0_macvtap: entered promiscuous mode [ 101.846504][ T5614] veth0_vlan: entered promiscuous mode [ 101.874295][ T5616] veth1_macvtap: entered promiscuous mode [ 102.052102][ T5615] veth0_vlan: entered promiscuous mode [ 102.083935][ T5614] veth1_vlan: entered promiscuous mode [ 102.190381][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.196851][ T5615] veth1_vlan: entered promiscuous mode [ 102.239740][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.239760][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.285825][ T5617] veth0_vlan: entered promiscuous mode [ 102.296072][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.382409][ T172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.408173][ T172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.426057][ T3322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.426079][ T3322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.431487][ T172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.433251][ T5617] veth1_vlan: entered promiscuous mode [ 102.488423][ T172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.618636][ T5614] veth0_macvtap: entered promiscuous mode [ 102.744981][ T5614] veth1_macvtap: entered promiscuous mode [ 102.841979][ T5615] veth0_macvtap: entered promiscuous mode [ 103.014052][ T5615] veth1_macvtap: entered promiscuous mode [ 103.175040][ T5617] veth0_macvtap: entered promiscuous mode [ 103.226510][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.277939][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.277958][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.339986][ T5617] veth1_macvtap: entered promiscuous mode [ 103.369009][ T5806] loop1: detected capacity change from 0 to 164 [ 103.396333][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.419941][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.557879][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.570408][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.595293][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.595420][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.595437][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.614153][ T5806] rock: directory entry would overflow storage [ 103.614193][ T5806] rock: sig=0x66, size=4, remaining=3 [ 103.647390][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.674660][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.717065][ T3332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.717595][ T3332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.717646][ T3332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.717702][ T3332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.763803][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.822917][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.092977][ T1191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.130890][ T1191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.287714][ T1191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.342134][ T3322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.844869][ T3322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.844891][ T3322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.023761][ T1191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.023780][ T1191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.279074][ T3322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.279092][ T3322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.654395][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.654412][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.828685][ T5824] Zero length message leads to an empty skb [ 106.975012][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.975050][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.223569][ T5831] loop1: detected capacity change from 0 to 164 [ 107.319785][ T5831] rock: directory entry would overflow storage [ 107.319800][ T5831] rock: sig=0x66, size=4, remaining=3 [ 108.862466][ T1362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.862485][ T1362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.537379][ T5844] loop1: detected capacity change from 0 to 2048 [ 109.883152][ T5844] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 109.981178][ T5844] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.368803][ T5844] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 111.729599][ T5863] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 111.729621][ T5863] netlink: 'syz.0.18': attribute type 2 has an invalid length. [ 113.403816][ T5856] binder: 5854:5856 ioctl c0285840 200000000000 returned -22 [ 115.939848][ T5878] loop2: detected capacity change from 0 to 164 [ 116.161772][ T5882] capability: warning: `syz.3.27' uses 32-bit capabilities (legacy support in use) [ 116.163321][ T5882] program syz.3.27 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.295130][ T5884] netlink: 52 bytes leftover after parsing attributes in process `syz.0.25'. [ 116.297709][ T5884] netlink: 52 bytes leftover after parsing attributes in process `syz.0.25'. [ 116.412714][ T5878] rock: directory entry would overflow storage [ 116.412728][ T5878] rock: sig=0x66, size=4, remaining=3 [ 117.202564][ T5878] rock: directory entry would overflow storage [ 117.202604][ T5878] rock: sig=0x66, size=4, remaining=3 [ 117.287356][ T5886] program syz.1.26 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.591180][ T5913] binder: 5909:5913 ioctl c0285840 200000000000 returned -22 [ 120.783905][ T5915] loop1: detected capacity change from 0 to 164 [ 120.961169][ T5918] program syz.4.40 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.166737][ T5915] rock: directory entry would overflow storage [ 121.166752][ T5915] rock: sig=0x66, size=4, remaining=3 [ 123.620031][ T5915] rock: directory entry would overflow storage [ 123.620045][ T5915] rock: sig=0x66, size=4, remaining=3 [ 123.892726][ T5925] program syz.2.38 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.598835][ T5931] netlink: 52 bytes leftover after parsing attributes in process `syz.4.43'. [ 125.598876][ T5931] netlink: 52 bytes leftover after parsing attributes in process `syz.4.43'. [ 126.043512][ T5939] loop3: detected capacity change from 0 to 4096 [ 128.442747][ T5965] netlink: 52 bytes leftover after parsing attributes in process `syz.2.47'. [ 128.442810][ T5965] netlink: 52 bytes leftover after parsing attributes in process `syz.2.47'. [ 128.569596][ T5623] Bluetooth: hci2: hcon ffff8880408ec000 sent 1 < count 10 [ 128.569711][ T5623] Bluetooth: hci2: hcon ffff8880408b0000 sent 1 < count 16 [ 128.569778][ T5623] Bluetooth: hci2: hcon ffff8880408b0000 sent 0 < count 5 [ 128.569814][ T5623] Bluetooth: hci2: hcon ffff8880408b0000 sent 0 < count 23552 [ 128.908808][ T5966] qnx6: unable to read the first superblock [ 129.493340][ T5967] program syz.1.51 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.768742][ T5970] loop0: detected capacity change from 0 to 512 [ 130.243110][ T5974] program syz.2.54 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.603747][ T5970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.610649][ T5970] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.875307][ T5984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.52'. [ 132.806261][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.59'. [ 133.074207][ T5989] binder: 5983:5989 ioctl c0285840 200000000000 returned -22 [ 133.086250][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.091244][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.417870][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.692340][ T6003] syz_tun: entered allmulticast mode [ 134.799518][ T6005] program syz.2.63 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.412583][ T5999] syz_tun: left allmulticast mode [ 136.495362][ T6017] program syz.2.66 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.601860][ T6019] netlink: 52 bytes leftover after parsing attributes in process `syz.0.64'. [ 137.602259][ T6019] netlink: 52 bytes leftover after parsing attributes in process `syz.0.64'. [ 137.651424][ T5623] Bluetooth: hci3: hcon ffff8880408cc000 sent 1 < count 10 [ 137.655315][ T5623] Bluetooth: hci3: hcon ffff8880408e8000 sent 1 < count 16 [ 137.655386][ T5623] Bluetooth: hci3: hcon ffff8880408e8000 sent 0 < count 5 [ 137.655475][ T5623] Bluetooth: hci3: hcon ffff8880408e8000 sent 0 < count 23552 [ 137.810878][ T6020] qnx6: unable to read the first superblock [ 141.956340][ T6050] program syz.1.75 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.222295][ T6091] program syz.2.79 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.074728][ T6112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.372038][ T1247] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 147.691121][ T1247] usb 4-1: Using ep0 maxpacket: 32 [ 147.752192][ T1247] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 147.752257][ T1247] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.752287][ T1247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.752316][ T1247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 147.781412][ T1247] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 147.781496][ T1247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.781558][ T1247] usb 4-1: Product: syz [ 147.781598][ T1247] usb 4-1: Manufacturer: syz [ 147.781632][ T1247] usb 4-1: SerialNumber: syz [ 149.053543][ T1247] usb 4-1: config 0 descriptor?? [ 149.170024][ T6127] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.348715][ T1247] hub 4-1:0.0: bad descriptor, ignoring hub [ 149.348754][ T1247] hub 4-1:0.0: probe with driver hub failed with error -5 [ 149.642471][ T1247] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 150.712190][ T6127] loop3: detected capacity change from 0 to 4096 [ 151.585444][ T6174] netlink: 52 bytes leftover after parsing attributes in process `syz.0.94'. [ 151.585622][ T6174] netlink: 52 bytes leftover after parsing attributes in process `syz.0.94'. [ 151.656465][ T5623] Bluetooth: hci3: hcon ffff8880408cc000 sent 0 < count 10 [ 151.656522][ T5623] Bluetooth: hci3: hcon ffff8880408e8000 sent 0 < count 16 [ 151.656699][ T5623] Bluetooth: hci3: hcon ffff8880408e8000 sent 0 < count 5 [ 151.656881][ T5623] Bluetooth: hci3: hcon ffff8880408e8000 sent 0 < count 23552 [ 152.652834][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 152.671770][ T1247] usb 4-1: USB disconnect, device number 2 [ 154.142024][ T6196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.899273][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 157.138055][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 157.148945][ T10] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 157.149005][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.149032][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 157.149057][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 157.227794][ T10] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 157.227824][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.227845][ T10] usb 1-1: Product: syz [ 157.227860][ T10] usb 1-1: Manufacturer: syz [ 157.227875][ T10] usb 1-1: SerialNumber: syz [ 157.360347][ T10] usb 1-1: config 0 descriptor?? [ 157.379977][ T6212] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.496998][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 157.497038][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 157.672449][ T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 158.110163][ T6212] loop0: detected capacity change from 0 to 4096 [ 158.144455][ T6212] EXT4-fs: inline encryption not supported [ 158.160113][ T6212] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.174308][ T6212] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 159.210372][ T5746] usb 1-1: USB disconnect, device number 2 [ 159.210494][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 162.569002][ T6266] program syz.2.116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.101408][ T5746] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 164.447115][ T5746] usb 2-1: device descriptor read/64, error -71 [ 164.491625][ T6292] program syz.2.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.510368][ T6300] binder: 6293:6300 ioctl c0285840 200000000000 returned -22 [ 165.510840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 165.618906][ T5746] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 165.880967][ T5746] usb 2-1: device descriptor read/64, error -71 [ 165.890361][ T6305] program syz.0.130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.055558][ T5746] usb usb2-port1: attempt power cycle [ 167.394881][ T6327] program syz.2.137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.627817][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 167.782536][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 167.788535][ T10] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 167.788592][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.788737][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.788768][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 167.846926][ T10] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 167.846955][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.846976][ T10] usb 5-1: Product: syz [ 167.846991][ T10] usb 5-1: Manufacturer: syz [ 167.847005][ T10] usb 5-1: SerialNumber: syz [ 168.024010][ T10] usb 5-1: config 0 descriptor?? [ 168.197458][ T6324] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 168.217075][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 168.217111][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 169.197573][ T10] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 169.583587][ T6324] loop4: detected capacity change from 0 to 4096 [ 169.613533][ T6324] EXT4-fs: inline encryption not supported [ 169.844461][ T6324] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.895629][ T6324] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 170.833522][ T6346] binder: 6341:6346 ioctl c0285840 200000000000 returned -22 [ 170.877898][ T6348] program syz.0.144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.153076][ T5746] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 173.304508][ T5746] usb 4-1: Using ep0 maxpacket: 8 [ 173.319532][ T5746] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 173.319570][ T5746] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 173.319623][ T5746] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 173.319650][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.637601][ T5746] usb 5-1: USB disconnect, device number 2 [ 175.637645][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 175.986667][ T6382] program syz.4.155 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.051568][ T32] usb 4-1: USB disconnect, device number 3 [ 176.534706][ T6394] binder: 6388:6394 ioctl c0285840 200000000000 returned -22 [ 178.182274][ T5622] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 178.293182][ T6418] program syz.2.168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.331101][ T5622] usb 5-1: Using ep0 maxpacket: 32 [ 178.335428][ T5622] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 178.335491][ T5622] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.335524][ T5622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 178.335556][ T5622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 178.358462][ T5622] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 178.358493][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.358516][ T5622] usb 5-1: Product: syz [ 178.358533][ T5622] usb 5-1: Manufacturer: syz [ 178.358550][ T5622] usb 5-1: SerialNumber: syz [ 178.492473][ T5622] usb 5-1: config 0 descriptor?? [ 178.497939][ T6411] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.541839][ T5622] hub 5-1:0.0: bad descriptor, ignoring hub [ 178.541879][ T5622] hub 5-1:0.0: probe with driver hub failed with error -5 [ 178.592873][ T5622] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 178.601427][ T1247] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 178.762587][ T1247] usb 1-1: Using ep0 maxpacket: 8 [ 178.766914][ T1247] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 178.766942][ T1247] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 178.767001][ T1247] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 178.767027][ T1247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.162306][ T6411] loop4: detected capacity change from 0 to 4096 [ 179.163298][ T6411] EXT4-fs: inline encryption not supported [ 179.194583][ T6411] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 179.198724][ T6411] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 181.113197][ T10] usb 5-1: USB disconnect, device number 3 [ 181.113210][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 181.324993][ T6442] binder: 6440:6442 ioctl c0285840 200000000000 returned -22 [ 181.825393][ T1246] usb 1-1: USB disconnect, device number 3 [ 182.480637][ T6456] program syz.4.181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.291813][ T6494] loop1: detected capacity change from 0 to 64 [ 184.763953][ T6502] trusted_key: syz.3.198 sent an empty control message without MSG_MORE. [ 187.303017][ T6527] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 188.189877][ T6532] tipc: Started in network mode [ 188.189915][ T6532] tipc: Node identity f6e68dcd9325, cluster identity 4711 [ 188.190450][ T6532] tipc: Enabled bearer , priority 0 [ 188.204428][ T6532] syzkaller0: entered promiscuous mode [ 188.204449][ T6532] syzkaller0: entered allmulticast mode [ 188.309885][ T6532] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 188.843356][ T6530] tipc: Resetting bearer [ 189.169036][ T6547] netlink: 52 bytes leftover after parsing attributes in process `syz.0.210'. [ 189.175152][ T6547] netlink: 52 bytes leftover after parsing attributes in process `syz.0.210'. [ 189.374234][ T6530] tipc: Disabling bearer [ 190.021751][ T1246] tipc: Node number set to 1707314637 [ 191.237648][ T6566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.714529][ T44] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 191.861088][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 191.872397][ T44] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 191.872425][ T44] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 191.872477][ T44] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.872502][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.202296][ T1246] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 192.360949][ T1246] usb 4-1: Using ep0 maxpacket: 32 [ 192.363715][ T1246] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 192.363771][ T1246] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.363801][ T1246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.363830][ T1246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 192.376279][ T1246] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 192.376381][ T1246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.376452][ T1246] usb 4-1: Product: syz [ 192.376500][ T1246] usb 4-1: Manufacturer: syz [ 192.376554][ T1246] usb 4-1: SerialNumber: syz [ 192.483743][ T1246] usb 4-1: config 0 descriptor?? [ 192.485371][ T6576] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 192.537188][ T1246] hub 4-1:0.0: bad descriptor, ignoring hub [ 192.537229][ T1246] hub 4-1:0.0: probe with driver hub failed with error -5 [ 192.602735][ T1246] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 192.858707][ T6576] loop3: detected capacity change from 0 to 4096 [ 192.871056][ T6576] EXT4-fs: inline encryption not supported [ 192.926701][ T6576] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 192.958879][ T6576] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 193.196224][ T44] usb 4-1: USB disconnect, device number 4 [ 193.196332][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 194.235808][ T6597] netlink: 52 bytes leftover after parsing attributes in process `syz.3.224'. [ 194.236555][ T6597] netlink: 52 bytes leftover after parsing attributes in process `syz.3.224'. [ 194.255142][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.255252][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.023183][ T44] usb 5-1: USB disconnect, device number 4 [ 197.415393][ T6645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.960935][ T32] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 198.162457][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 198.170478][ T32] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 198.170548][ T32] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.170575][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.170609][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 198.188980][ T32] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 198.189010][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.189033][ T32] usb 3-1: Product: syz [ 198.189048][ T32] usb 3-1: Manufacturer: syz [ 198.189064][ T32] usb 3-1: SerialNumber: syz [ 198.272514][ T32] usb 3-1: config 0 descriptor?? [ 198.274222][ T6647] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.291466][ T32] hub 3-1:0.0: bad descriptor, ignoring hub [ 198.291500][ T32] hub 3-1:0.0: probe with driver hub failed with error -5 [ 198.351287][ T32] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 198.813360][ T6647] loop2: detected capacity change from 0 to 4096 [ 198.857758][ T6647] EXT4-fs: inline encryption not supported [ 198.880929][ T6647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 198.884752][ T6647] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 199.011163][ T1247] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 199.310983][ T1247] usb 5-1: Using ep0 maxpacket: 8 [ 199.317477][ T1247] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 199.317504][ T1247] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 199.317552][ T1247] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.317594][ T1247] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 199.317619][ T1247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.669596][ T1247] usbtmc 5-1:16.0: bulk endpoints not found [ 199.683515][ T1246] usb 3-1: USB disconnect, device number 2 [ 199.683543][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 202.093989][ T1246] usb 5-1: USB disconnect, device number 5 [ 202.571480][ T32] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 202.725935][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 202.729432][ T32] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 202.729491][ T32] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.729521][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 202.729551][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 202.786251][ T32] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 202.786294][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.786316][ T32] usb 3-1: Product: syz [ 202.786342][ T32] usb 3-1: Manufacturer: syz [ 202.786357][ T32] usb 3-1: SerialNumber: syz [ 202.850638][ T32] usb 3-1: config 0 descriptor?? [ 202.866806][ T6705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.890702][ T32] hub 3-1:0.0: bad descriptor, ignoring hub [ 202.890741][ T32] hub 3-1:0.0: probe with driver hub failed with error -5 [ 202.920288][ T32] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 203.875245][ T6705] loop2: detected capacity change from 0 to 4096 [ 203.914837][ T6705] EXT4-fs: inline encryption not supported [ 204.228272][ T6705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 204.277982][ T6705] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 204.598037][ T1246] usb 3-1: USB disconnect, device number 3 [ 204.598120][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 207.204362][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 207.386785][ T6758] netlink: 52 bytes leftover after parsing attributes in process `syz.0.259'. [ 207.386847][ T6758] netlink: 52 bytes leftover after parsing attributes in process `syz.0.259'. [ 208.030851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.050840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.060845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.070842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.080843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.090850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.100838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.110836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.120836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.720920][ T5746] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 208.870910][ T5746] usb 2-1: Using ep0 maxpacket: 32 [ 208.873897][ T5746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 208.875118][ T5746] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 208.875147][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.906575][ T5746] usb 2-1: config 0 descriptor?? [ 209.521302][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 209.829759][ T10] usb 5-1: device descriptor read/all, error -71 [ 210.362562][ T1246] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 210.530942][ T1246] usb 4-1: Using ep0 maxpacket: 32 [ 210.544068][ T1246] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 210.544122][ T1246] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.544149][ T1246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 210.544175][ T1246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 210.573332][ T1246] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 210.573364][ T1246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.573387][ T1246] usb 4-1: Product: syz [ 210.573402][ T1246] usb 4-1: Manufacturer: syz [ 210.573417][ T1246] usb 4-1: SerialNumber: syz [ 210.643389][ T1246] usb 4-1: config 0 descriptor?? [ 210.647590][ T6790] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.697221][ T1246] hub 4-1:0.0: bad descriptor, ignoring hub [ 210.697273][ T1246] hub 4-1:0.0: probe with driver hub failed with error -5 [ 210.751027][ T6800] syz_tun: entered allmulticast mode [ 210.763055][ T1246] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 210.966391][ T6804] program syz.0.267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.187339][ T6790] loop3: detected capacity change from 0 to 4096 [ 211.224659][ T6790] EXT4-fs: inline encryption not supported [ 211.303836][ T6790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.305935][ T6790] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 211.431766][ T5622] usb 4-1: USB disconnect, device number 5 [ 211.431886][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 211.519605][ T6799] syz_tun: left allmulticast mode [ 211.559915][ T5618] usb 2-1: USB disconnect, device number 5 [ 212.051741][ T6809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.431433][ T6819] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 212.712589][ T5622] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 212.805974][ T6830] netlink: 52 bytes leftover after parsing attributes in process `syz.0.275'. [ 212.806038][ T6830] netlink: 52 bytes leftover after parsing attributes in process `syz.0.275'. [ 212.978168][ T5622] usb 4-1: Using ep0 maxpacket: 8 [ 212.982258][ T5622] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 212.982328][ T5622] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 212.982454][ T5622] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.982570][ T5622] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 212.982605][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.182901][ T5622] usbtmc 4-1:16.0: bulk endpoints not found [ 214.274370][ T6865] program syz.2.278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.422085][ T6873] netlink: 52 bytes leftover after parsing attributes in process `syz.0.280'. [ 215.431254][ T6873] netlink: 52 bytes leftover after parsing attributes in process `syz.0.280'. [ 215.586581][ T5622] usb 4-1: USB disconnect, device number 6 [ 216.060983][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 216.166313][ T6886] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 216.221118][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 216.224902][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 216.224928][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.224950][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.228284][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.228311][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.228330][ T10] usb 2-1: Product: syz [ 216.228348][ T10] usb 2-1: Manufacturer: syz [ 216.228358][ T10] usb 2-1: SerialNumber: syz [ 216.850906][ T6870] Bluetooth: hci0: command 0x0406 tx timeout [ 217.050914][ T6870] Bluetooth: hci4: command 0x0406 tx timeout [ 217.050961][ T6870] Bluetooth: hci2: command 0x0406 tx timeout [ 217.050987][ T6870] Bluetooth: hci1: command 0x0406 tx timeout [ 217.051012][ T6870] Bluetooth: hci3: command 0x0406 tx timeout [ 217.394003][ T10] usb 2-1: 0:2 : does not exist [ 217.668600][ T6897] netlink: 52 bytes leftover after parsing attributes in process `syz.2.290'. [ 217.668642][ T6897] netlink: 52 bytes leftover after parsing attributes in process `syz.2.290'. [ 217.776500][ T6906] program syz.3.292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.302282][ T12] ------------[ cut here ]------------ [ 218.302295][ T12] in_task() && kcov_mode_enabled(mode) [ 218.302308][ T12] WARNING: kernel/kcov.c:894 at kcov_remote_start+0x5d8/0x710, CPU#0: kworker/u8:0/12 [ 218.302351][ T12] Modules linked in: [ 218.302390][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.302414][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 218.302428][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 218.302457][ T12] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 218.302485][ T12] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 22 40 eb 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 ca 25 6e 09 89 c0 48 c7 c7 c0 e2 76 [ 218.302503][ T12] RSP: 0018:ffffc90000117a38 EFLAGS: 00010202 [ 218.302521][ T12] RAX: 0000000000000002 RBX: ffff88801d2b8000 RCX: 0000000000000000 [ 218.302535][ T12] RDX: 0000000000000000 RSI: ffffffff8baa4360 RDI: ffffffff8baa4320 [ 218.302549][ T12] RBP: ffff888029e6cdc0 R08: ffffffff8b35db20 R09: ffffffff8dfcb2a0 [ 218.302565][ T12] R10: dffffc0000000000 R11: fffffbfff1f1ac5f R12: ffff88802c241ed8 [ 218.302580][ T12] R13: ffff88804ce307d8 R14: 0000000000000000 R15: ffff88802c241040 [ 218.302595][ T12] FS: 0000000000000000(0000) GS:ffff888125ebb000(0000) knlGS:0000000000000000 [ 218.302611][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.302624][ T12] CR2: 000055556131fa48 CR3: 000000003be6c000 CR4: 00000000003526f0 [ 218.302641][ T12] Call Trace: [ 218.302653][ T12] [ 218.302666][ T12] ieee80211_iface_work+0x20e/0x1020 [ 218.302710][ T12] cfg80211_wiphy_work+0x2a2/0x440 [ 218.302737][ T12] ? process_one_work+0x8be/0x1630 [ 218.302757][ T12] process_one_work+0x98b/0x1630 [ 218.302798][ T12] ? __pfx_process_one_work+0x10/0x10 [ 218.302817][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 218.302860][ T12] worker_thread+0xb49/0x1140 [ 218.302914][ T12] kthread+0x388/0x470 [ 218.302942][ T12] ? __pfx_worker_thread+0x10/0x10 [ 218.302963][ T12] ? __pfx_kthread+0x10/0x10 [ 218.302991][ T12] ret_from_fork+0x514/0xb70 [ 218.303023][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 218.303052][ T12] ? __switch_to+0xc79/0x1410 [ 218.303078][ T12] ? __pfx_kthread+0x10/0x10 [ 218.303107][ T12] ret_from_fork_asm+0x1a/0x30 [ 218.303154][ T12] [ 218.303165][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 218.303179][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.303202][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 218.303215][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 218.303238][ T12] Call Trace: [ 218.303246][ T12] [ 218.303254][ T12] vpanic+0x56c/0xa60 [ 218.303285][ T12] ? __pfx__printk+0x10/0x10 [ 218.303305][ T12] ? __pfx_vpanic+0x10/0x10 [ 218.303332][ T12] ? is_bpf_text_address+0x292/0x2b0 [ 218.303365][ T12] ? is_bpf_text_address+0x26/0x2b0 [ 218.303406][ T12] panic+0xc5/0xd0 [ 218.303435][ T12] ? __pfx_panic+0x10/0x10 [ 218.303473][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 218.303509][ T12] __warn+0x315/0x4c0 [ 218.303541][ T12] ? kcov_remote_start+0x5d8/0x710 [ 218.303570][ T12] ? kcov_remote_start+0x5d8/0x710 [ 218.303598][ T12] __report_bug+0x339/0x540 [ 218.303631][ T12] ? kcov_remote_start+0x5d8/0x710 [ 218.303657][ T12] ? __pfx___report_bug+0x10/0x10 [ 218.303683][ T12] ? irqentry_exit+0x218/0x8c0 [ 218.303716][ T12] ? kcov_remote_start+0x5da/0x710 [ 218.303741][ T12] ? kcov_remote_start+0x5d8/0x710 [ 218.303772][ T12] ? kcov_remote_start+0x5d8/0x710 [ 218.303798][ T12] report_bug+0x16a/0x220 [ 218.303825][ T12] ? kcov_remote_start+0x5d8/0x710 [ 218.303849][ T12] ? kcov_remote_start+0x5da/0x710 [ 218.303875][ T12] handle_bug+0x9c/0x200 [ 218.303913][ T12] exc_invalid_op+0x1a/0x50 [ 218.303944][ T12] asm_exc_invalid_op+0x1a/0x20 [ 218.303965][ T12] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 218.303992][ T12] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 22 40 eb 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 ca 25 6e 09 89 c0 48 c7 c7 c0 e2 76 [ 218.304009][ T12] RSP: 0018:ffffc90000117a38 EFLAGS: 00010202 [ 218.304026][ T12] RAX: 0000000000000002 RBX: ffff88801d2b8000 RCX: 0000000000000000 [ 218.304040][ T12] RDX: 0000000000000000 RSI: ffffffff8baa4360 RDI: ffffffff8baa4320 [ 218.304055][ T12] RBP: ffff888029e6cdc0 R08: ffffffff8b35db20 R09: ffffffff8dfcb2a0 [ 218.304070][ T12] R10: dffffc0000000000 R11: fffffbfff1f1ac5f R12: ffff88802c241ed8 [ 218.304086][ T12] R13: ffff88804ce307d8 R14: 0000000000000000 R15: ffff88802c241040 [ 218.304108][ T12] ? rt_spin_lock+0x1e0/0x400 [ 218.304134][ T12] ? kcov_remote_start+0xe0/0x710 [ 218.304164][ T12] ieee80211_iface_work+0x20e/0x1020 [ 218.304204][ T12] cfg80211_wiphy_work+0x2a2/0x440 [ 218.304231][ T12] ? process_one_work+0x8be/0x1630 [ 218.304250][ T12] process_one_work+0x98b/0x1630 [ 218.304292][ T12] ? __pfx_process_one_work+0x10/0x10 [ 218.304311][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 218.304353][ T12] worker_thread+0xb49/0x1140 [ 218.304399][ T12] kthread+0x388/0x470 [ 218.304428][ T12] ? __pfx_worker_thread+0x10/0x10 [ 218.304447][ T12] ? __pfx_kthread+0x10/0x10 [ 218.304475][ T12] ret_from_fork+0x514/0xb70 [ 218.304506][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 218.304534][ T12] ? __switch_to+0xc79/0x1410 [ 218.304560][ T12] ? __pfx_kthread+0x10/0x10 [ 218.304589][ T12] ret_from_fork_asm+0x1a/0x30 [ 218.304635][ T12] [ 218.305240][ T12] Kernel Offset: disabled