last executing test programs: 35m25.527784979s ago: executing program 4 (id=2264): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r9, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r9, 0x40044620, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r11 = dup(r10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r10, &(0x7f0000000800)={&(0x7f00000000c0)={0xa, 0x4e64, 0x8, @loopback, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='e', 0x1}], 0x1}, 0x4048043) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0x800008c9, 0x1, 0xfffffffd}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004200)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000001c80)="485085731c62b14537c596645bc59e6740374166dcd5a54a95a0a797af11460301eb4ce03e867a4762fffd91b2484a8c7523a533543878a6ed6e58033701f6bbd5c4d156a6fd0e0eb57df7250401d39103e1c4ee596fcc0c6849befc6328cc55db67eccf58b7eb258649c569e3c186f00b", 0x71}, {&(0x7f0000000400)}, {&(0x7f0000001d00)="1c9a3e8086b11bf2d0f8572cbbdb3ec0c98d443b486fcf2e17b542567e1fc9fb8bcd47c74aa86398574ab086cd0926fbb9994e9fd6ee039ab863aa093d1ce16cb8887afbe4f0d8d442df3209a5d4b2fbd0b378a05aa92e52007dec0225ce9d53f770d192e2e0745abae33ce7117eb71e1fa84c405cbe8a0fab586bf6cca1586a623ed9ce71212fa0b788d2389fbca69a44a43b3003f20f7b2c36792af55b8a1eb4f826b3e84659329332dd1bf1659b2f0e068334ceac2235156c6ccdf1e4496b1668c04a71922fe1e0925d76d4c7a5bae04d4ce3404940469c06f0319113666e99c0f9", 0xe3}, {&(0x7f0000001e00)="05ee7a4f4446838a2cebdf48a96cefb90ffebc73fb5a73a5776f595cd51f239c7e8b237ae22db53b0f428ba5122931aa86eca94959aa7671dd03d6e14f37c93d47f1429403310eede3fdd391224d94a13cb1553954b147eea8cd93d98e11417a0482af28cafe0c5161cadf666a257cf8d760", 0x72}, {&(0x7f0000001e80)}], 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r1, @ANYRES32=r10, @ANYRESOCT, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r4, @ANYRES32=r9, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES16, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRESHEX=r5, @ANYRESOCT, @ANYBLOB="000000001c000000000000000100000002000000", @ANYBLOB="e903dcd9a0a26df2fa359f2a313010b192115427d3bdcf30bc2bcaa497ef315e1874454fd930bac1c8a4e0b64549015f1d4932ebb437d9195fc86d7cec147b2642819e43f2148d82c587090612ce85930628f425493cac09d7621f2859a9b11236059adc47b038f3405ec998dc40fc2805908294b4ee42f19dd1ba71c58377ae56d6a1409dffaa5674165bc02b31831eab41c50e4530251313e3d6f64092a327b85c803b74e8e5d8b43492139f7892c908cd7845b9811f7b1ce059a567", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0x100, 0x40}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYRES8=r5, @ANYRES64=r9], 0x0) socket$netlink(0x10, 0x3, 0x0) 35m24.532607876s ago: executing program 4 (id=2265): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r1 = gettid() r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r2, 0x8992, &(0x7f0000000000)={'bond0\x00', @ifru_names='veth1_to_bond\x00'}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xf2ffffff) 35m23.811813685s ago: executing program 4 (id=2271): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r3, 0x0, 0x0, 0x4000000000000f3) preadv(r3, 0x0, 0x0, 0xc9, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/154, 0x9a, 0x51) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000060a0b0400000000000000000280fffe140000001100010000000000000000000000000a"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x4f}, @exit], &(0x7f00000000c0)='GPL\x00', 0x8}, 0x94) 35m20.681546933s ago: executing program 4 (id=2277): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 35m19.475987191s ago: executing program 4 (id=2283): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000380)="ae8b7016621ea3de77485f2ce4b7298dbc1789fea6412fd5f428bb3735807bcad893116f61fb64ae17fd24751f64fd3a116af9ee3e84985a771670f6f56a26f9d03277bb0e8b84db35", 0xffde}, {&(0x7f0000001540)="02cb54", 0x3}], 0x2, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r4, 0x0, 0x25a5, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000380)={0x20, 0x1, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)={0x34, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x96c}]]}, 0x34}}, 0x40) syz_usb_control_io(r0, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="201602000000e34e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000980)={0x40, 0x6, 0x2, 'F{'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x32, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x23, 0xab, 0x38, 0x40, 0x3923, 0x718a, 0x695d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf7, 0x77, 0x1, 0x26, 0x15, 0xbe, 0x0, [], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0xff, 0x0, 0x6, [@generic={0x5, 0x5, "d57a3b"}]}}]}}]}}]}}, 0x0) 35m19.07148003s ago: executing program 4 (id=2284): add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x2}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x3) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1", 0xbe, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x178, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0x0, 0x80}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in=@multicast1, 0x800000, 0x3, 0x1}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@multicast1, 0x3}]}]}, 0x178}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r8, 0x2, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='m', 0x1}]) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x5c3c) 35m18.643060993s ago: executing program 32 (id=2284): add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x2}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x3) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1", 0xbe, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x178, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0x0, 0x80}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in=@multicast1, 0x800000, 0x3, 0x1}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@multicast1, 0x3}]}]}, 0x178}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r8, 0x2, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='m', 0x1}]) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x5c3c) 12.899559498s ago: executing program 5 (id=9395): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000001540)={0x0, 0x0, 0x5, &(0x7f0000001500)={0x0, "ca764c69d4a8e5a7595e19d70d56ee7b54260cda39d3f60c63815a66e1bd04bfcc"}}) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000040)={0x7fff, 0x20, 0xb, 0x20, 0x7}, 0x48) preadv(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000100)=""/202, 0xca}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000000380)=""/3, 0x3}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x5, 0x3ff, 0xff) recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000440)}, 0x5}], 0x1, 0x10022, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x61a41000) 10.810216607s ago: executing program 3 (id=9398): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001bc0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @string={0x4, 0x3, ']+'}}, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) dup2(r0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010006000020fedbdf", @ANYRES32=r4, @ANYBLOB="080026006c0900000a000600ffffffffffff000008003500000000000a003400020202020202000008005080040004002400508009000100370e623fa000000007000400f5a4810b050002"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x84) 10.403790201s ago: executing program 0 (id=9399): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xce, 0xf8, 0xbd, 0x8, 0xe41, 0x4142, 0xbc76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x6a, 0x2f, 0xf6, 0x0, [], [{{0x9, 0x5, 0x1, 0x8, 0x200, 0xb, 0x8, 0x64}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000cc001a801800028014000700fe8000050000000000000000000000aa3000028004003f800300000000000000080000000000000004000000000000000800000000000000080000000000000018000280140001801100000000000000080000000000000018000a80140007"], 0xec}}, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x118000}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 9.747039015s ago: executing program 3 (id=9405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)={{0x14}, [@NFT_MSG_DELSETELEM={0x228c, 0xe, 0xa, 0x440e67773baae027, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x184c, 0x3, 0x0, 0x1, [{0x1440, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1268, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x2b, 0x1, "85009f66a6124019a9f9f23e0a3391e3da32ca8a87cf6357fc0b56b080615052fc0849e8be3b2b"}, @NFTA_DATA_VALUE={0xdc, 0x1, "49e5c4794c80429c78f07721fa28e24d91dd9fe16362c802efd7e25296c15297540a62144688194f0b445c7161205022dab60cb8ff5f6eb0da1dc6515f12617f751f3d00e6fa36a75696a309ed3890f20a561b23895711ea7fbf2e299ee31ed9e6dafde9c72ff6aef8e4c982f0b9e5eb1d76fd3b1d27eb2f834350a2da1997474c3bf8d9d1d3426238f36ba003de3d25146eabcebe7d4b3f5401e6c71b83d5ab4c4094f2ea703216cc232813c93857ab3510f550c64fe18337aee6ee8d39f2959bfac9813b4971648f9715c1b7740344da92e77c206ba829"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "8010c1f11f2b971892bbe9078c259aee0bd47ec87cdfa0b9eeed8a2b5e63b23cb29ba5d818901ddbec72570f0daaf48aee99eee83d60606ae768d73ff5f02d50576326d6d1cd79cd84b02c03a27e29b7ae49c2e539fa5b7060e13edc509c86124f84b7153676d2e8fd610dc77a20f9fd3ff1e2280365185b7ef13bec74ded40f8c6c5a2a36c04cd80fbabcd3de660724f211eeb9dbbc7693f4e5c4c7478596a098c437b8a44dfe03cc3c3afb08aef514b2489ad93c3ee7b4105272f2c34fb3a0ca6352085be0f56f66ebbacb179c71d8b111fe45590e7ca3ce5467d58333c5f8be62ddd1f82100cdbaa3ed3c46e8f329b5931a8a8e4e7ed67abd9a8a1def863c8bc6ffed31b4cbd233b8208f6c9bca0556505c107a41e4831f31c5dab7ea4c1feeaa3a25dbbdf849b3e12b955ef0468d6e7d252ca77ce719e74323d7705dfcf1923882ad2468eb19f7678bb088dab4a69cd7a6c24ec1459ac7ac937995801e0b1a1012c4d510ddae072233d6315afe9a59d89d06217ad2444a1db22fa2312db1fc9e5f9302202b6abb9152ba61931bd5f687a20180cd6355c6484aaedd35812bad4922d9399aea9f31d7039dae21827f68c7bae6b0891680f3852126187fac3032da33c95c7f8f898e29e9ba3eff488c719ea6b5414e4c96724428dfe085483f962f5c3d9a5bf544be51291222c4c8b7e32f95f39d1c4a1496f3fb997256de43ef05759ec13c346c63b3b0302618b90877d437637cc8c98c8aa7bb656afe824626c2f88624fc13780ce6b1c58fd470eebde81a2196a674d9cb5c4b960a3a40302f76e6551e5f662b07fab3d403371594e2bc7a51462f99fd8551b4b21407c434b75ec9c5ede6dad855b0b3209f2f6e29df98d98fa475cacb9b914d9239e496b135feb0b6973f56beb6a12cbfd996bb1b4aeb879df4638b13d393d048aa8fe372391c5d74cff99be706f24bed2d07ec3075702f5cd3940a4b8170b453393434d1041fddf15c837114e2004d9c47117ceb211502372e75db0d7bca165e98130fd5f9cbc8dd758d275b502e180745e8aa3a5084e838f910efea2982197198b864607b1be739409b1f1650d1ee0348676a918b89deb1dca9f045bfd6a6747fd9b8836bcadd934472382f774573d302dcd7345824085195a09fe1cc73bb34f954cd2f509ab9134397732e7db899917ffd63f6c4490175a39c35e0e9a285d0c38a73a05be1a9ab051102ccb5a5e1204ddf0c1b84146e4307d269f9091b8b6b0aec4f5dd41abeb54c9dbf7dacc726ab827f71052f5a2b57327e593d02da789c1dd6874d54cc98ab05df7d837b5e4358225f367f4adfdfac36149462949a6ce06d4b1206408735046db043116db446e5ae38ce8eaaa226fe6c2ec7bb319430efcd74c3788981a905585adf979fcd8578f1b4e9055d9ccd49aad9e3eea39bddf53cc7145884735e21d2e4b021c12c20c8931b38cc28360198c3571c139c72f70782f4979c6bbf533b316b327f6ea990e573c8662922127f1fe29008aa749f2454594a1b6e64b462a2ad8ae45e33f686ddf8c20bb15ee58d562f8dab0a2178520be75d4052fc3ae7c3b1d80999949ad3abe87d92eb7593452673cf9d8d74710b4b1fd02532dd7c9a933f1b4a75dfbae11a407ada0d45ee3b545bc0768adaf75e31e6c3b0a07c15b049b699aa6138b5ae7cd3326b6a09ce1ededb9edd02d42f115860e793edde13a5cd9210ecea1348ba0c0fdc74f19f1a16d97a377bdea3ba467fc945e9048c5a58bd3ec2ed7e5d5d540a8689900d63111e9d68e36db32a6f153007d5272222ba109c4245c1eae1ee880afc28f789c8b4d031b6dd2f3191767f59fcc8ed3dec06275d1b356bfe14e90f3e19ffdfb9b26df681b00d79ae4a840729f8839d5ff5ebeff4ac09eb59d98ca66a3c03856cf34dec5cb39d740de04d671f965d2386cc461fcef24fa4fcdb107c9a7251eecbdcdaecc36ca21dc86f3a0e5285a001feb553268998abff15d2e8440d28f7057d57e6ce2f33dffc17e99befda6e0ea92ba7fe027eeccfeff4427389dd2e49b975ea7d8a54e5ec799403bd85720647d3c64cb27924f0de6b93a8b5505f376c0218024c57ada0fb09f6059fb3c4f85f39480c5dcf637739b528a6ca66c9fe3b4a185eb8b28b3c9700ef58d6f971e00dd6e4dafcbc247de666e8126ec8388f3e557101016746b1d7a855844dcef5560f2f3811feb93de1f9ef9de6d85c2d92cb5697df1204938ce3f19c9344d8ddb3dc77693a5b724edc90a4187bcffcf8dde188fafbc23499cd90f88ef4b682e332505c0ae0516fbf4164be36390115fb3acf2a4bbccedfe2260f63406ed317ff8e09ee598b2f161e2f9f218c71001f821bebca231034720919a15673b5f73c9d5843656a32ba897cba183d2f0d7079e89c7ac008113554320c98d9106c947f703b6f9cb5afd1413c2cef850e2ed6686eef9932495a91d9edf38e6cdf04b30170305d9fe0959ce097c8ea70e8b0e7b9f43ed26c7e3748b22a24eec38f2004fb4c8cafdcc62e0f016824e6f838a40652cda34b78e0b2f9db98c25ae83b1824c7281f232b3385a7cef9569dc1bc9d3e59ded1cb01cf5227d733745dd893582d5726727bd0e3f138d0435679614efae74e5e6643eadb7a59f8db324943ce8891ff04cd0404aab50c5f77df8f7ad97d7cc17f0b2ada25beb082259d709550adb95b12c3270c1651e42bfa17910d77297d1231fe6dc3a0c781b1c62ba84d6b1079291805b94bc00eff281f1305fa2f005c6279a1ddb059b71f163c192f251e7c758f0f46bf018c4e30044781b194b521e82ff1c2293b78909c95adde4ab8f5483c29ed0ff097e79c811b7198f2a33fc848c1296736dbf7c664cc1476c4025a84a0c12802e8fe147c39c69ff913e20603a9e22a964624c643b963e7559e7bfcf52a7859157712c4932b1dcb762ded91f16883fe95223c2e80dc546ff56094c75b5103523d0b130d2d218b4f6d29857e5dbff65661bc942e9ba3c40cda5668ba24f3582f6c3d28c5d7367d75c19932563d50ca8e42227606ac1c52104e87e4ff264c72178e3b62eb2377ed641f8c0e7c2809e6eddd19bfec295677b7de082ea1bc025ac50d76d7fefc39d08e56d0c1c93b0d7106fa8db446824399f6af0b94efe6823f94cafee790aa26df57a1d8665f1f9270cade700bbe5b2d132a56e5f1028838e7bdfbb083c6a8a6bac54c00d629f568bf45d9d913a71b0e8a3513ef66593604e6196dcda00eb14fe0872cb3f410cafd895ea2c2f00f49d16bd337d3234e9b83191d9932fbd39884f68fd6dbaca9d25e9868f247c06c566c181159e20df144f3d9b45c3503d1cb60741c5a664945ae14454224aa894b55e04caf3d30b9a583590c83053d83c23e9c0ce8f2d38e0cc176c1fc7be41ddabeb2cf40d0a9d44a7a0479eab26e56fbad7b16a9ae1043823e802a44e28f0ab513fbab61c1f81f66a9802f5969adfdb125f99acd31405628880a60c009f8515157f41503d89a9e495b3a113f0bfe386953e2bb78852ae4116ba8014bbea523a6402d4c7cc8372813187aa433f2eb865da287282bbc645c1b7f9b69e52bbe514a485a6de66d9a6ce7a31e80c4fe249922a6442d9d3a0e1f66b5997e88f71d26572ec88cfab652d171855a0ccf1ea34f3f404d18ed84cc884437ca74db47d4ab8c702d32d4da8ed0f5e6fc4ca758892e5ded72deb103fd21d53a061d40ea382cc9369774eae15cc0cde5703c482a23be06841c7f46c22037bd4f6583a2c92a04c77ca18462876dcf84363acfd6738da9b106dc7e456dbe3bc6b3fd030e0cee9cd6d802ea0b0942d79fd441d2684ff69c38d69e4b188b47777d259fd69016fddc9854e905742499fa7b1ce03accfd31bd2988d56ad69c0af0dc9a25c854628105e486a5f30a006a290b5dddbf8f862190471e2e916c09d7b3511dff67824db1d7afb31a3e0733eb05181dda60775c02bc4d8418e8c4b62f63a7f514257b52b26b1c66403bdda8cefd05e8f42e4987dfaed17e0d202dd21db2f003f524eb3f2961aa6d53786ed276ce117d1e87708ccb9a53332af27fd5b1b8c55da54126816b304a6b78a7f1a06a5658da211f8a0e8a46de19171fa19dd56c8aca6fcedf0a1b3208d7f0efb719e66ed24068831cd4c5fe9c4c72315a3d3317a2e3cfa2c21e34fa001e1fedd8287aaf7fb98cb25f430fbf67364c1e4471538885b31983f713d942f118234e884945edfad73223dcce99c01b3561d1f747b3a6bbf1deddb5b11b0c7bdc57153a8071556ae0130f7bc2b87cb25f9d4fa21a44ed678c8821a21f91d6a443c9905264293d5cd14c58d0304b62fca84ee870478a138d237e9b6a6fae541442991bc05e5579bee1065430798b1cbefe21b8c0078cdf68adea3feceeab85effeca8ae864fb31ca6ba82916d7c6870431957e34d22f924eace704b32fde16e2aea010601941985be4de6a3f4a1a8ed78e9915e1ffbfd00cf259aa16a835e175a6a611d6f36f47f1e5d73eed83595a7256f0dd7483a22ba59db544cbf17f526eca7e470be90d29fe9e3076fa4b4c91e872fcd1f1d64a50ea85d6cd9c9870d9f5ffab3600a032206df6f062ad1bd1dfc70e986910a880023c605ad4ed06d3603cbcbac359651737ddf5c1b450435bcd12575b9c82f8bb370968e3221c695e8f55b449a959e5f1e3c1a95ff17199bbcaad438ee11b9adca663fca7dd6ece0de3b7e5adc20c094205306e5d4a999c2cd7dce9ad70b8cb4f3113e4aa5ab7b17f6fa264f22cb82b31983d466d79c60e7ef2a31d8f3793bf174c4ecad32a77c8ae763b1e709cb21fd847af290d5f60b5ec2c9afb9764c78f7de98d700959bdf2b637f517ca76beb0fcc5b90120a231f657066083c6d3e4f3a65f4be709c37e16e504c7c6ce5fb0eb52b3a8c42525d1968cd38598bcfd1cbca2d287a4df56f7667c97fd601aee725b2da32a0ca561db26df4ff30d1e4cd4d50cbdeaddc4d06cc84dd9b7b7fe5082f6175343a5e477a9b20470acaeed15018d7db91bac9883d2853d5beb324533c5fda83bf0961a43662c28c6c5a2d38e1aac6d7797db2c56044adbade3d091162b6087d77d951f84ac088e281918b7a50abfaffdf70e4b13fcb5a8a8b433ffe8f02921ba1127f3251d702e32cf40b49446fc189924c668109958e422356dade29cbdfd741e9a22a45ac22aab1f8906e0e43d33666b2ec477ce0e0a006e341758c31c093ccb94c53ad3480e753616d08b7e4b906573a3410c90dc7b46042a0daf38e02570cbf311209a459de9365d440332df7da16090c9d855afac6f8226a91d175e55fdb7650e1fa112f453269775fced322c399583b7bc09100854f6991ef540431dfea2c11cb153c623c02fa79573d42522bdf0f8eaaf692905723a2af5f9fe0eb67b574b2392ce1f1726cde70336090f4e93c1c763b7dbd6061ec571d9d32e4dccdb6d873dd971d629a2bb7c39a1bfab63c337d86a0c8b7f68cae4d3dc110b21f78cf3b9c39c565782bb000fd082e1ac602a23f5490f8e7cff84e719e90d7938dfda4283b7d9a954229165c44fc87c78636170c677917268a6e291cd4b12ea264263d4c8785d14fbe6e6ea1ba5d023124e1c2076ef7cec52b8b1d9284388b6b0e3cdace11d071b0fcf1f639462a16f502c733a9e1d89e849bcd808a6faf7220a272dca6def2a8e41db476a198b71ad9548e36ec0bfcc115749e96bf00e34aceaf7e53ab526e8b2611768d7bd6d03e9e6a368e6ab849bc838caea86fe07455e27d9ca82151ebb45f5fc8a0b"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xdb, 0x1, "fea6691b5013bf8fef1478d2e8dd9e88da12398b3c962294b26dee4543967f8ae751c03e39af3cb742c526baa704bae7b076b56edabc2385020561f7db7a29034fe1f6904a24990090c0fb497256d299243a7220dc7512bca49b1ae90395f945cd6043139c0cec1b8487f18ebd8a85cf49079414f2b660ff31058d1177fe5e6cc44a0d5d42784b13f5db610e87de345670925b8fe5be3998424a7b82714e8db6d1137733fb93141fcc7f003b7b8c7f3c506b887bc2b6c52ea71b93e56ca5e30e576e5bf7cc1fe066220048cb013925dcc8395b4bed736a"}]}, @NFTA_SET_ELEM_KEY={0xbc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9c, 0x1, "a32e57432ded9eddacfce4c3a7bd6f48fd57233250e50f1b934adafff0c63aac78d4e4ac70c67fe088ef2da1e1ba94ee9f53cbb93cc4022a3f6ecbe7ec5403325d5d1e0bb639bb8055f17b4ca5ce1da91924f5148542d60836ff8ed65186c21efef2484c924d28be819b999a268cc787b9619dd5a401ca7494d75a7e78c92618f336bd33cc9578a4abeb6ce4425a70f0568c232b89eb9f6c"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xe, 0x1, "93a74b757bb54639ce97"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY={0x9c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x3d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1e8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x65, 0x1, "f131790212b700c235a8f18c27663551c143a604f54afa3e4cee0ecaf2a044153474b5b8dfc7ce4dc6f39dfe4c07b64f35030db18b22b772a5ef39ec0613d2836ec3b12267bd56b21264a14d0a8539bdc23b831883ff5758653a27ba8cd3c55523"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x67, 0x1, "236a16952f046684834ef9a74a1e92a32950fd88a2d6f49ccf9c90aeaa12f6eaffdb67666e8f64b9f61b6aa716f06b14de04d1bfbee4204e5a9f266d34fa3a3b0f87c5ce9225f6d6a49eec904b9856cdf13cdbdb590c9f1b097a8412d8fb57d1aa9d9f"}, @NFTA_DATA_VALUE={0x57, 0x1, "219c4153cf0f0499da85ed5331e33b93030da773249c2dd76de6bf3ce14f3ce8f77eaa7a34bf974c2add1ddbfe17b56fdd9dae6d9d9e68560a071d07c6a0cf9b8ad9322e6d60b4bfe2e84862920147a831b7f5"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0xf4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x58, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x400}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xf001}, @NFTA_LOG_PREFIX={0x8, 0x2, 0x1, 0x0, '\\\x8c-\x00'}, @NFTA_LOG_PREFIX={0xb, 0x2, 0x1, 0x0, 'numgen\x00'}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz2\x00'}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x90}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7f, 0x1, "6faf5235ac0987d00fec7e92d1ab1835fbdf4900453fe9472047b7b697735f2b4be3fd9ff6763f272072aa55d14fa911b31bb695eeee548f2d294af618d170c5a12bed9c212db25daa029b96655a4f0e8d714640f7f046488f8bd37ea9011bf70cf13928b878e0d5ce0adc92c3c583dc9ba46d28f0b0c0ae8698c3"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xa04, 0x3, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x9e, 0x6, 0x1, 0x0, "43c5b184f7b3bcc01456b0fd55130446c7d7f7b42cbbbeccac665069360d51b4cf4cdb80318397106b6dfbe1f76389d6bfe507120daee644bd205f56fd49216697f7e41eab0d6d86815676a8cbbe65f1ae200ce5ce994894acccdc59fab986531773920e7cab4dbfafb722828db618d57ba411aa421aebf2866afa1e4441db018de81bfe15b9d4cd2706df9c3554727eb5a9d2148f52d8450a85"}, @NFTA_SET_ELEM_USERDATA={0x58, 0x6, 0x1, 0x0, "aec74dad2b95da1f8b67390f08a95cfe9fa08e341df77998497dcb6a0013844fd6a0f93250c36f119bdc8eee91fc557bf705769ea26e7999f58610313c041645b6306ba9eb3f8781e451000751491b6132365b7f"}, @NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x44c675fbbec8a017}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}]}, {0x854, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "6120d7c6ab931ccdf227656658f68762602b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_USERDATA={0xc0, 0x6, 0x1, 0x0, "cd455d156b46536d96f7e7b1e8e737cf3ce7bf8b8d887294a2177721f374be22aaa9a2c6c62bf36bd5e45ab5a00410f847857ceda47376cebfdc39f615f18a79dde191b549da3a8aeb8ae05fe4d65c1bc7c1f555324f8a5c98641e3867dada9f0f350b5c4ad1f00353db60340a592225152d0c71cd89e0a35934a07da8215cb2182def5e9ec77d46aabefff1b4b28743077bac6400e98152297979169cf3fb0a60b6320b8c61776f422bea37c9122624f9a35e9defc43d168f94c3c0"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc0, 0x1, "9192d7ad763a302e3437c7bc97c3b58590a94c91dd1f85c975cc9f029c8b6ffa1325d3e15c1ab133fcf345f0fab14b8e22ac151d89cca41a3057f579f1a6f8ba750c8cec899ef06cd33b89950ca185b60e3daed91d14fe0c3d1c67b6a7c9f9387f43a54e4e2543c49ca1322292854a7b239c5f809485960171156e4d1157ee8f89d3f6a94c91c8cd29112be5bc302253e7f8f855af875288ca81610f03c0a6e073cf251f6647616116a733bf854b7392da077715345dbae8eb13dab5"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "55275b14198853c3c6817df6b6e61f72bbe7ed497b8e4b382a3c37e7af336f28ac4d604519dae6d978bda729b82a9ccaaa693549864319f9ce1d14ec891b0de2052da24d4d637f6c887be71085839a30f65dac13c047e3b86a4fd521c7633a687a6a32cd867dfa513b2f4f70273fdd0cb0d78cf7500ff9f4dba99f5ae959de0c30522f06a5067a2e0ac3777e1f372061f8406dbe97750cd93949e540c4fa5ad9479020571853beb7d71c3bc0081396a417592324dfb7e13d10c51c6d99d830f63564031e79c7e62d7254ccec8b8d75254f838a228df303d9d030b6aaf013acc91d364bce"}]}, @NFTA_SET_ELEM_KEY={0x288, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x66, 0x1, "70107556f0c26df1e239e6e6d7cc9a756212c5091358a8fe503f6b24436ec6f0adbb485dc4bcfec364f058533303076ef4af90cc946e2c2f855216e361d630e827991f41c989acfcc789071da227fe9dd23dff596968ea7ca991c566666ea9a84a17"}, @NFTA_DATA_VALUE={0xce, 0x1, "9c2eadcabfd9ac00c98b683ef41e1bbdc58a222a3ef32edf731b7f04322165f3e71de7e2f7f1a889e8a7cbdd034cd27d5dba4eaee7f6f7ec698e15362f7f0c000f32b760aefbb2e3bf820b1f52dbb22a79fe23953595cb218a96feacd163c5117f0d80807fecd6935dcb1c12857579c999fc4f45395d36614fe76e93905234dd223a0db7894f53e5bfe1ab1238a9a047e55359cdc92eea793bc1229badd0db19a7a4711907019db63bb58cf814a52c734917036292fab0d547bdb95ef01a96204bc181911e64ba6d1584"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x5c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_USERDATA={0xac, 0x6, 0x1, 0x0, "a6151177aff9ff260451c2525316f560a150cf1358ffa426fd2f1f9c6f27ee920ed8a25eef1c839b3cc1bfa66f70c72642c588e4b976784feb1461edbdeba9510b7c4d5e362474e1f05cb4afa32d72416a1732624e45584ef68ba650f3a8fd0ddd2f30232a952be4d9ae7ed201475127cb38c1ce7dc06ed5fce048652cc4ba704220dfd542fb3a740a0b3d793b0a4ac66b3326a07daab84dd8e5424ab2afa00f47f814d26df22814"}, @NFTA_SET_ELEM_KEY_END={0x1c0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x55, 0x1, "3a69c6de2dc54c29831f804383aa257700b5497caf5f8b25712e461ce906c87ad0b367f612529b3865cc11c8b4c17b2f7bde483d0f158237fe806eb9adcefca8bac608bf79bba316e1660779ff660b559c"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x2f, 0x1, "e206e91737032c8a30fc7b4675bd01cd8def07566d82ce430d77abd23af0c20cb668a0c756878f81b743d5"}, @NFTA_DATA_VALUE={0x60, 0x1, "02cd9126e068387728d5eaaec7d14767b72cd4d426486fc1190b293795c244eb4f272ff1ab9ceff47c374943b4825c848ee6bfc66563d241643c418eb9d65c3cdc05a20f4f238463768c6dd7cb882a999bdad11023e10c93990790df"}, @NFTA_DATA_VALUE={0x54, 0x1, "617ab01ffe654ac7b58eadd5af903b499374b84f130f0633d8b93b4b90bf5440ab8d722daf16c49d412a2a2ddd5ee7f665d268ebed3a870d6d6b1504be48c540195999960723031e04ff0932eb2d5509"}, @NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x22e0}}, 0x0) 9.479685428s ago: executing program 5 (id=9406): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x61a503, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0xff0e, &(0x7f0000000e00), 0x5}}], 0x800000000000009, 0x20, 0x0) sendmmsg$unix(r4, &(0x7f0000000680), 0x4924924924925c6, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_fd={0x593, 0x0, 0x4, 0x4, 0x1, {}, {0x5, 0x0, 0x6, 0xb7, 0xe, 0xf8, "48b3dafa"}, 0xe0ed, 0x4, {&(0x7f0000000240)=[{0x81, 0x5e4a, {}, 0x6}, {0x81, 0x9, {}, 0x1ff}]}, 0x30c}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x2) 9.469223402s ago: executing program 3 (id=9407): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100000000000000820000000033000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="fe880000000000000000001e308bba0100000000019f2b"], 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@ldst={0x0, 0x1, 0x1, 0x2, 0x7, 0x80, 0x1d}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32=r1], 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) readv(r4, &(0x7f0000000180)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 9.091787261s ago: executing program 3 (id=9408): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10c6, &(0x7f0000000b40)={0x0, 0xbdee, 0x800, 0x400001, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r2, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) 7.014884734s ago: executing program 0 (id=9412): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, 0x0, 0x0) getpid() r2 = getpid() sched_setscheduler(r2, 0x6, &(0x7f0000000000)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = socket(0x40000000015, 0x4, 0x6) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f00007a6000/0x3000)=nil, &(0x7f0000471000/0x1000)=nil, &(0x7f0000c51000/0x2000)=nil, &(0x7f0000a4d000/0x4000)=nil, &(0x7f00002a6000/0x1000)=nil, &(0x7f0000c09000/0x1000)=nil, &(0x7f0000543000/0x3000)=nil, &(0x7f0000d85000/0x1000)=nil, &(0x7f000066b000/0x1000)=nil, &(0x7f0000337000/0x3000)=nil, &(0x7f0000f11000/0x3000)=nil, &(0x7f0000000240)="4aba10ad4ebd5212ded2021ab963e683460be350bb973c4cab07757d916d31fc90612bc8215785c0ee03a69cbb2c5b2f5fcb90048ae0edf39f5d18c0ac233c10fad323b30ce9c980ecaaebdcbbff71a1274f0c7a16692869b18ea6c02d10c3407bac97eabecea142de46aa513c972adaefa8b754", 0x74, r0}, 0x64) ioprio_set$pid(0x0, r2, 0x6000) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='net/udp6\x00') io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) sendmsg$rds(r5, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) 6.691826206s ago: executing program 3 (id=9413): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) ioprio_get$pid(0x3, r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setpriority(0x1, 0x0, 0x80000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000040)="cb", 0xfffffdef) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r8 = msgget(0x0, 0x206) msgrcv(r8, 0x0, 0x0, 0x0, 0x2000) syz_usb_control_io$sierra_net(r7, &(0x7f0000000680)={0xc, &(0x7f0000000580)={0x40, 0x22, 0x7e, {0x7e, 0x11, "f84c8cba39b3977c2ab61f55444f9784a1a4ffdb0f1217e9e2bc178b3ab709bbe5efe8a710f6ee03016a1b08babe6812b6fadbc12a1fc6f5ced0fe8758960ad41ea35edbca51343d1878c4bfe9f4520f6a4682eb3bd1fa3248efff1d6c5e1d0a4a4aa31ab89aa7964b8fe1020049904e53abe0924e43d04009532a26"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, &(0x7f0000000740)={0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000880)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000700)={0x21, 0x0, 0x3, "01c862"}}) msgrcv(r8, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(r8, 0x1, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x430c}, 0x0, 0x0, 0x81, 0xa4dc, 0x8001, 0x5, 0x3, 0x2, 0x15e4, 0x8, 0x0, r0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="00000100000012e1d3e08a818a3a8c26a3384bc1210bc66626bb1de2fca4cc07f668f578c8702aeea70a6f2dd300f6a8a80104c1ee6ba2e45f8853e17b0ed99cae4fc963c93178815ee96bec64cf302826e1f7f0346fa06865508c3f1818ae20c15055f57fdb77133fb521222b5043ce3f980bc431c033d60a9543749a0aa7a4f27cf5cfd100aae6470593d62da8aaa0bb0fd90f68056e7011bbc372e3f23eab76028faae74171c043f1512cb24902a6967686c877476e5365706dff79e8af1b6c67f96d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.537008591s ago: executing program 5 (id=9414): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002840)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x8) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000180)=""/8, &(0x7f0000000200)=0x8) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20313500000035214b8c1ccfcb6c7234cdbb4c224cc7e17888368e3a033ead14893360ba70e3415e45fa134924544ae6a9a46747e7c888a617586e"], &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}, &(0x7f0000000100)=ANY=[@ANYBLOB="002205000d0067a60a2c14"], &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x200, 0x22, 0x1, {0x22, 0xd74}}}}, &(0x7f00000002c0)={0x18, &(0x7f0000000380)={0x40, 0xf, 0xe5, "81338815720db8026b24525acce238bd248b11b94d3644f271ed6ad4a84e2591afdcaa841e33bd21e925f41cc45edeef85ad588d31e51d9041c5a462b00baa11172d7b08bea0b1e071ce29aeb1b28dc46966cff12014afd34e5a5563394e78eaf68fb699aa4bebe3ecdab1a8be962cf21dbd2edcf279bfe49416f137472fed5bde4da0846d8567c8f1816180bcb509ee361b97936d381d904cc3d8e7b6cd333b46a51bcc47a7016405a57ed5a2b7ba61ed34558ef3e9543a8b7919c06d5533a83669c908f93d4cae75febe6509e97297d6a44b840ba702094f007e17a662ba16b40ac62ea4"}, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x3, 0x1, 0xfc}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x10, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYRESDEC=r1, @ANYRES16=r1, @ANYRESHEX, @ANYRESDEC=r1, @ANYRES32=r1], 0x0, 0x0}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000005c0)={0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x24, &(0x7f0000000700)={0x0, 0xc, 0xe5, "a0fc22dcc54eedc4993a01df5c46714d5494ece03079fa64403df3c965fd43b96bf0ba46055c80b3a89751b342c4bbccd8c7936ed8d8a3d0484430b68b0843018b87a1dda1c01aedf6d86f6236c9c8b838a73557d50f6ce71d9dbb2f5c8e567cffb4cb7fb1fa58c2a5eebf02eadf689707bc93dd422aa3494fb902f57d8d407c68673672a1d8f756e4419e3b0aea4e09cd468b73268d67db56169213330cce45eb221598a772d03ae50e7e894239ba95d2417209cb42891fe4517742d67ed964724954000fcbfe57f2ef6593eb37c9ccb2c10119b6a1d9cb2a8307f573828e5dbba8c81a40"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000840)={0x20, 0x80, 0x1c, {0x7, 0x8000, 0x2, 0x9, 0xecf1, 0x7, 0x3, 0x81, 0x9, 0xab61, 0x1000, 0x391d}}, &(0x7f0000000880)={0x20, 0x85, 0x4, 0x40}, &(0x7f00000008c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000900)={0x20, 0x87, 0x2, 0xbb80}, &(0x7f0000000940)={0x20, 0x89, 0x2}}) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{}, 0x4}}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0x8, 0xffff}, {0x0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x1, 0x2}, {0xfff1, 0x8}, {0x6, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x2c, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r9, &(0x7f0000000640)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x1c, 0x2, @in6={0xa, 0x4e24, 0x10001, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8}}}, 0xa0) write$binfmt_misc(r5, &(0x7f0000000080), 0x2000011a) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x80040}, 0x0) 4.52800921s ago: executing program 1 (id=9418): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') lseek(r0, 0x8001, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$qrtrtun(0xffffff9c, &(0x7f0000000300), 0x1) sendmmsg$unix(r0, &(0x7f0000000380), 0x0, 0x200000c4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 4.526812612s ago: executing program 0 (id=9419): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 4.13720072s ago: executing program 0 (id=9421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0x28}, {0x0}], 0x2}, 0x20000884) 4.134460514s ago: executing program 1 (id=9422): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000280)={0x0, 0x804}) r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r8, 0x0, '\x00', "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"}}, 0x110) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$RTC_PLL_SET(r0, 0x401c7012, &(0x7f0000000140)={0x2, 0x604, 0x7fffffff, 0x4, 0x71a8, 0x2, 0xe07b}) readv(r4, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3.396083393s ago: executing program 2 (id=9423): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10c6, &(0x7f0000000b40)={0x0, 0xbdee, 0x800, 0x400001, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r2, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) 3.395655389s ago: executing program 0 (id=9424): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x61a503, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0xff0e, &(0x7f0000000e00), 0x5}}], 0x800000000000009, 0x20, 0x0) sendmmsg$unix(r4, &(0x7f0000000680), 0x4924924924925c6, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_fd={0x593, 0x0, 0x4, 0x4, 0x1, {}, {0x5, 0x0, 0x6, 0xb7, 0xe, 0xf8, "48b3dafa"}, 0xe0ed, 0x4, {&(0x7f0000000240)=[{0x81, 0x5e4a, {}, 0x6}, {0x81, 0x9, {}, 0x1ff}]}, 0x30c}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x2) 3.028985626s ago: executing program 1 (id=9425): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0xf5, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (fail_nth: 1) 3.003381932s ago: executing program 5 (id=9426): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001bc0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @string={0x4, 0x3, ']+'}}, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) dup2(r0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010006000020fedbdf2525000000", @ANYRES32=r4, @ANYBLOB="080026006c0900000a000600ffffffffffff000008003500000000000a003400020202020202000008005080040004002400508009000100370e623fa000000007000400f5a4810b050002"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x84) 2.255836938s ago: executing program 1 (id=9427): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000230024000280080001000000000008000200030000e408000100010000000800010001000800030066589e90540cefd52e"], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000004) (async) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) (async) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6aeeafac6b1195e3a2a07b7e7608b3a26ff", 0x30) (async) r3 = accept4(r2, 0x0, 0x0, 0x80000) recvmsg$can_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x4}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x200000000, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x200}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x7800, 0x1, 0x9, 0x6, {{0x27, 0x4, 0x2, 0x1, 0x9c, 0x67, 0x0, 0x14, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x38}, {[@timestamp={0x44, 0x28, 0x6b, 0x0, 0xb, [0x7969, 0x2, 0xe6, 0x80, 0x7, 0x2, 0xfffffff8, 0x3, 0x7fffffff]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2b, 0x3, [{0x7, 0x2}, {0x6, 0x7, "5d427cfe78"}, {0x2, 0xd, "b1d9c5e0fbb04502fa3aee"}, {0x0, 0xf, "d8544686ef7b3a79d59039e4b0"}]}, @ra={0x94, 0x4}, @generic={0x94, 0x2}, @rr={0x7, 0x1b, 0xf, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010101, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0xc, 0x1c, 0x1, 0x5, [{@remote, 0xb4}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wg0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bridge\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x94, r7, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f00000001c0)={0xe000, 0x104000, 0x1}) 2.091045834s ago: executing program 2 (id=9428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)={{0x14}, [@NFT_MSG_DELSETELEM={0x2260, 0xe, 0xa, 0x440e67773baae027, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1820, 0x3, 0x0, 0x1, [{0x1440, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1268, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x2b, 0x1, "85009f66a6124019a9f9f23e0a3391e3da32ca8a87cf6357fc0b56b080615052fc0849e8be3b2b"}, @NFTA_DATA_VALUE={0xdc, 0x1, "49e5c4794c80429c78f07721fa28e24d91dd9fe16362c802efd7e25296c15297540a62144688194f0b445c7161205022dab60cb8ff5f6eb0da1dc6515f12617f751f3d00e6fa36a75696a309ed3890f20a561b23895711ea7fbf2e299ee31ed9e6dafde9c72ff6aef8e4c982f0b9e5eb1d76fd3b1d27eb2f834350a2da1997474c3bf8d9d1d3426238f36ba003de3d25146eabcebe7d4b3f5401e6c71b83d5ab4c4094f2ea703216cc232813c93857ab3510f550c64fe18337aee6ee8d39f2959bfac9813b4971648f9715c1b7740344da92e77c206ba829"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xdb, 0x1, "fea6691b5013bf8fef1478d2e8dd9e88da12398b3c962294b26dee4543967f8ae751c03e39af3cb742c526baa704bae7b076b56edabc2385020561f7db7a29034fe1f6904a24990090c0fb497256d299243a7220dc7512bca49b1ae90395f945cd6043139c0cec1b8487f18ebd8a85cf49079414f2b660ff31058d1177fe5e6cc44a0d5d42784b13f5db610e87de345670925b8fe5be3998424a7b82714e8db6d1137733fb93141fcc7f003b7b8c7f3c506b887bc2b6c52ea71b93e56ca5e30e576e5bf7cc1fe066220048cb013925dcc8395b4bed736a"}]}, @NFTA_SET_ELEM_KEY={0xbc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9c, 0x1, "a32e57432ded9eddacfce4c3a7bd6f48fd57233250e50f1b934adafff0c63aac78d4e4ac70c67fe088ef2da1e1ba94ee9f53cbb93cc4022a3f6ecbe7ec5403325d5d1e0bb639bb8055f17b4ca5ce1da91924f5148542d60836ff8ed65186c21efef2484c924d28be819b999a268cc787b9619dd5a401ca7494d75a7e78c92618f336bd33cc9578a4abeb6ce4425a70f0568c232b89eb9f6c"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xe, 0x1, "93a74b757bb54639ce97"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY={0x9c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80}]}, {0x3dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1f0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x65, 0x1, "f131790212b700c235a8f18c27663551c143a604f54afa3e4cee0ecaf2a044153474b5b8dfc7ce4dc6f39dfe4c07b64f35030db18b22b772a5ef39ec0613d2836ec3b12267bd56b21264a14d0a8539bdc23b831883ff5758653a27ba8cd3c55523"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x67, 0x1, "236a16952f046684834ef9a74a1e92a32950fd88a2d6f49ccf9c90aeaa12f6eaffdb67666e8f64b9f61b6aa716f06b14de04d1bfbee4204e5a9f266d34fa3a3b0f87c5ce9225f6d6a49eec904b9856cdf13cdbdb590c9f1b097a8412d8fb57d1aa9d9f"}, @NFTA_DATA_VALUE={0x57, 0x1, "219c4153cf0f0499da85ed5331e33b93030da773249c2dd76de6bf3ce14f3ce8f77eaa7a34bf974c2add1ddbfe17b56fdd9dae6d9d9e68560a071d07c6a0cf9b8ad9322e6d60b4bfe2e84862920147a831b7f5"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0xf4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x58, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x400}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xf001}, @NFTA_LOG_PREFIX={0x8, 0x2, 0x1, 0x0, '\\\x8c-\x00'}, @NFTA_LOG_PREFIX={0xb, 0x2, 0x1, 0x0, 'numgen\x00'}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz2\x00'}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x90}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7f, 0x1, "6faf5235ac0987d00fec7e92d1ab1835fbdf4900453fe9472047b7b697735f2b4be3fd9ff6763f272072aa55d14fa911b31bb695eeee548f2d294af618d170c5a12bed9c212db25daa029b96655a4f0e8d714640f7f046488f8bd37ea9011bf70cf13928b878e0d5ce0adc92c3c583dc9ba46d28f0b0c0ae8698c3"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xa04, 0x3, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x9e, 0x6, 0x1, 0x0, "43c5b184f7b3bcc01456b0fd55130446c7d7f7b42cbbbeccac665069360d51b4cf4cdb80318397106b6dfbe1f76389d6bfe507120daee644bd205f56fd49216697f7e41eab0d6d86815676a8cbbe65f1ae200ce5ce994894acccdc59fab986531773920e7cab4dbfafb722828db618d57ba411aa421aebf2866afa1e4441db018de81bfe15b9d4cd2706df9c3554727eb5a9d2148f52d8450a85"}, @NFTA_SET_ELEM_USERDATA={0x58, 0x6, 0x1, 0x0, "aec74dad2b95da1f8b67390f08a95cfe9fa08e341df77998497dcb6a0013844fd6a0f93250c36f119bdc8eee91fc557bf705769ea26e7999f58610313c041645b6306ba9eb3f8781e451000751491b6132365b7f"}, @NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x44c675fbbec8a017}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}]}, {0x854, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "6120d7c6ab931ccdf227656658f68762602b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_USERDATA={0xc0, 0x6, 0x1, 0x0, "cd455d156b46536d96f7e7b1e8e737cf3ce7bf8b8d887294a2177721f374be22aaa9a2c6c62bf36bd5e45ab5a00410f847857ceda47376cebfdc39f615f18a79dde191b549da3a8aeb8ae05fe4d65c1bc7c1f555324f8a5c98641e3867dada9f0f350b5c4ad1f00353db60340a592225152d0c71cd89e0a35934a07da8215cb2182def5e9ec77d46aabefff1b4b28743077bac6400e98152297979169cf3fb0a60b6320b8c61776f422bea37c9122624f9a35e9defc43d168f94c3c0"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc0, 0x1, "9192d7ad763a302e3437c7bc97c3b58590a94c91dd1f85c975cc9f029c8b6ffa1325d3e15c1ab133fcf345f0fab14b8e22ac151d89cca41a3057f579f1a6f8ba750c8cec899ef06cd33b89950ca185b60e3daed91d14fe0c3d1c67b6a7c9f9387f43a54e4e2543c49ca1322292854a7b239c5f809485960171156e4d1157ee8f89d3f6a94c91c8cd29112be5bc302253e7f8f855af875288ca81610f03c0a6e073cf251f6647616116a733bf854b7392da077715345dbae8eb13dab5"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "55275b14198853c3c6817df6b6e61f72bbe7ed497b8e4b382a3c37e7af336f28ac4d604519dae6d978bda729b82a9ccaaa693549864319f9ce1d14ec891b0de2052da24d4d637f6c887be71085839a30f65dac13c047e3b86a4fd521c7633a687a6a32cd867dfa513b2f4f70273fdd0cb0d78cf7500ff9f4dba99f5ae959de0c30522f06a5067a2e0ac3777e1f372061f8406dbe97750cd93949e540c4fa5ad9479020571853beb7d71c3bc0081396a417592324dfb7e13d10c51c6d99d830f63564031e79c7e62d7254ccec8b8d75254f838a228df303d9d030b6aaf013acc91d364bce"}]}, @NFTA_SET_ELEM_KEY={0x288, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x66, 0x1, "70107556f0c26df1e239e6e6d7cc9a756212c5091358a8fe503f6b24436ec6f0adbb485dc4bcfec364f058533303076ef4af90cc946e2c2f855216e361d630e827991f41c989acfcc789071da227fe9dd23dff596968ea7ca991c566666ea9a84a17"}, @NFTA_DATA_VALUE={0xce, 0x1, "9c2eadcabfd9ac00c98b683ef41e1bbdc58a222a3ef32edf731b7f04322165f3e71de7e2f7f1a889e8a7cbdd034cd27d5dba4eaee7f6f7ec698e15362f7f0c000f32b760aefbb2e3bf820b1f52dbb22a79fe23953595cb218a96feacd163c5117f0d80807fecd6935dcb1c12857579c999fc4f45395d36614fe76e93905234dd223a0db7894f53e5bfe1ab1238a9a047e55359cdc92eea793bc1229badd0db19a7a4711907019db63bb58cf814a52c734917036292fab0d547bdb95ef01a96204bc181911e64ba6d1584"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x5c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_USERDATA={0xac, 0x6, 0x1, 0x0, "a6151177aff9ff260451c2525316f560a150cf1358ffa426fd2f1f9c6f27ee920ed8a25eef1c839b3cc1bfa66f70c72642c588e4b976784feb1461edbdeba9510b7c4d5e362474e1f05cb4afa32d72416a1732624e45584ef68ba650f3a8fd0ddd2f30232a952be4d9ae7ed201475127cb38c1ce7dc06ed5fce048652cc4ba704220dfd542fb3a740a0b3d793b0a4ac66b3326a07daab84dd8e5424ab2afa00f47f814d26df22814"}, @NFTA_SET_ELEM_KEY_END={0x1c0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x55, 0x1, "3a69c6de2dc54c29831f804383aa257700b5497caf5f8b25712e461ce906c87ad0b367f612529b3865cc11c8b4c17b2f7bde483d0f158237fe806eb9adcefca8bac608bf79bba316e1660779ff660b559c"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x2f, 0x1, "e206e91737032c8a30fc7b4675bd01cd8def07566d82ce430d77abd23af0c20cb668a0c756878f81b743d5"}, @NFTA_DATA_VALUE={0x60, 0x1, "02cd9126e068387728d5eaaec7d14767b72cd4d426486fc1190b293795c244eb4f272ff1ab9ceff47c374943b4825c848ee6bfc66563d241643c418eb9d65c3cdc05a20f4f238463768c6dd7cb882a999bdad11023e10c93990790df"}, @NFTA_DATA_VALUE={0x54, 0x1, "617ab01ffe654ac7b58eadd5af903b499374b84f130f0633d8b93b4b90bf5440ab8d722daf16c49d412a2a2ddd5ee7f665d268ebed3a870d6d6b1504be48c540195999960723031e04ff0932eb2d5509"}, @NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x22b4}}, 0x0) 2.03271369s ago: executing program 1 (id=9429): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000100100001c0012800b0001006772657461700053b700028008000700ac1414bb0a000100aaaaaaaaaa000000"], 0x48}}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) ioctl$VIDIOC_QBUF(r5, 0xc04c560f, &(0x7f0000000080)=@userptr={0x0, 0xc, 0x4, 0x100, 0x2000, {0x77359400}, {0x3, 0x1, 0x5, 0x6, 0xb, 0x3, "56cd32ba"}, 0xe9, 0x2, {0x0}}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x48}}, 0x4040000) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000100100001c0012800b0001006772657461700053b700028008000700ac1414bb0a000100aaaaaaaaaa000000"], 0x48}}, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) (async) ioctl$VIDIOC_QBUF(r5, 0xc04c560f, &(0x7f0000000080)=@userptr={0x0, 0xc, 0x4, 0x100, 0x2000, {0x77359400}, {0x3, 0x1, 0x5, 0x6, 0xb, 0x3, "56cd32ba"}, 0xe9, 0x2, {0x0}}) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x48}}, 0x4040000) (async) 1.8870537s ago: executing program 0 (id=9430): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x14, 0x0, 0x48) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x70000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x48}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000051}, 0x0) close(0x3) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getqdisc={0x40, 0x26, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x10, 0x6}, {0x3, 0xc}, {0x1, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}}, 0x20000000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000240)=""/210) r4 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000100)=""/67, 0x43) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r9 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x10, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r9, 0x80044dfb, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x7}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000440)={0x3, 0x80, 0x208, 0x1, 0x9, 0x40, 0x3, 0x9db, r10}, 0x20) gettid() r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405602, &(0x7f0000000040)={0x18, 0x1, 0x0, "093d4a3b5b7bc69a21cfb7f5eaac46dbe89b13471a0488a6679f9a2102249341", 0x34524742}) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r6, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 1.787350383s ago: executing program 2 (id=9431): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) r1 = inotify_init1(0x800) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r3, 0x0, 0x44000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, 0x0, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$unix(r7, &(0x7f000000c880)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="f0", 0x1}], 0x1, 0x0, 0x0, 0x20008848}}], 0x1, 0xc000) accept4(r7, 0x0, 0x0, 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000280)={0x1, 0x4, 0x0, 0x1000}) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) writev(r8, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.739442138s ago: executing program 5 (id=9432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = dup3(r3, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000009000000000000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509feffffff00009500000000000000bf91000000000000b7020000010000008500000085040000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xe8, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}, @NFT_MSG_DELSETELEM={0x1ee8, 0xe, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1eb0, 0x3, 0x0, 0x1, [{0x2ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x234, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5b, 0x1, "f1aae72abdabd3140433d1d6c3897aa60a2fbfa5dc2818d80e0dadf1aa33f59fd49fa3499c3ba22426acf7caff6bcd5f5cc61af652e28914356189878cec0d3a047214b40a713dc3a19aea67e21d67dc8c6c0c50d359a3"}, @NFTA_DATA_VALUE={0x14, 0x1, "a1cb9b83aae5e04d93d19380ad3e5b1e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "323ecca3b11788ec3a586a0bc353993e5934e19f518f00e047c8c941befc680f5f901639eff99759a0a2b1a4571edcd982799d74967965e76ccabeaf94df5687000b13a9ca850e06a1d468bde30a5f372ab309583310b947e435a7d3e04c911ca810d1debe284300f334bc7b7377d3d5b235cfaeaf763aafe50ed2233f2a83659450ac99e5cd8f90108e8eec0ec134bde46d3da2222f884bd79f43a24775ae24a91e09810953ce02fe81f0c79ccf490203eae460259980b057f0c3b54fa85994cc63e46c96d14b58ec251b88fb4be0630f"}, @NFTA_DATA_VALUE={0xdc, 0x1, "16072ddd2738614da22e263080301c832c7a1761c4f6760aad36a46be90ce5541d3d3097c500fff90127e947367ba2f3ce12f37e2557ee154f5b7785ffb374767023837b06172a916d370cb19814e9d0ac8fe439945b53514036453be0187cf36761b26e566ad841f5b640a6ea20e42da1554876a55d8639a1b598a8c58b31c00b9cf46a58c25c4c4b2bbb56dd756e31f8c51a127fbf2d06e0bc18d94938703d058f013848f09fdd6b35088c902a33690b6e56a1a7df464db6216cfd3800c6bc2ff49285d397ca958a44653723cb5fd61ac195d68addae95"}]}, @NFTA_SET_ELEM_USERDATA={0x65, 0x6, 0x1, 0x0, "e1a6f0110139aaaee937468037f0e4952a7a27357ca3f696ddbaaa2e881f4e1948a5c99ff2a3d10ef7f6ff4d6f0add49d804a1b1b20858d1eecb0da849f5923928080bf7ec16de4ddaee0824af097bca35fa9730cd5e56c842e09a1904b6282f9c"}]}, {0x3d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY_END={0x3c4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xee, 0x1, "5d247e071ed9445d84f2b7b394156725493627eed4ea1c258973e91073159f0e8d1446fc2df21a4070430146092e63f07c6763586cdf823c59dc141dfa6407002eab5c9ba57f0c5ba86c764f79c18e5cd17b273d6570d251c842d0cadda841a69066cd785fe4d27c220a901ad6d52c06368735ce4ec23416c8bd0ecd5d045d5068def702c03d4ebe6b3384a7ba4f6868b7d76ecb3d2fb922fd26689b5585465d1a68e5d6ecdf7d97e6bdbbe6d6f2684db951b8e137464276a078bd1930dda835b38ad4b0883f4c9a182ed5bbe17d8c7b4b165fd7b176db70d560774bf3142af0a4db40ee1ac8323a13a2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "657d6cd462e728e4dd4e885609025a6e636d2a57be8e4eb945500cf46b0dc21a27c6552d940f2c009f6f02a4447a776734ec0ec3637bcc7e205ef5ee766f657705ef7c77531758faac7ebff5b5d99570c2c9d5d5bb1b01a514ea9d03ff79bb4b9389f48ce6b420c5e380f7097456dc008bb376ecf314c468fac4d630db045e388f264f174989e7d6c7caf32411176dd795081e56b3822208d61f22ff685e2ae17843d1839e4595dbeb641065f7d46ac0c960fff677b79bae949675230ff4f3df066b8e50683d3296605ba31710b4982845d2394683445ade12"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xff, 0x1, "3034634f2243bf5aa7d1452a3841166bfe4ef51c31a434de708d175334fd9c8133ca9662ceee3137ba0d38863492f06b13cb5ac380e19c44ace1a2ea1fbf3fe5df0aeec7c5e9ae7917b200fd0b184f1b33d583e67c00c91a9be63676326a7c5ddaa006d9a71bc7398014ce9a19bc901e21a79f9819820322caf33333f371a3dc9395a047ad7840ce94e677e523891d4846585d63f7f0e7553a7b01cf40daaf5e6ee784203c171ebc146f40ce1d6cae4b1bec0d8d77cc7b7b35d87a3ce546b077868cfca3b796a0addc9f550e0c737daf719f049bb4371ba89603a4ee5ba34cfb30ac30ba9f88ecef9a9c0f376ea63e0c5c5834b67ac9101a891293"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x20}]}, {0x1d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x38, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x34, 0x1, "b796ef6b0d12167a6264d12c030fb69de06044bf9b0d944f84a41ce8549788573852d59c315c07b5a09ee55f21269185"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x180, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd0, 0x1, "164e3fb77b7121636b366f0daa828ec83688f535285d005e3c8798106c07a1a649aabf0cb4f87b03862780f39aed25c0f70e717a922f6b382370e8f6f4eb8f4cc66d6df6a829563aaef85fd86348fd724d94f4e7cef5c79459356696138fad67a133219312f06fcc819458a260e05408514efd568093100a63355dfa006e62c46dabbbb1c54a77eb172ac9313294a7dbbad7378407c1e51d312c26ea40c5871c1fafeee4c3045dd8986e9cb5c3f707c84df0ed1f0f7cf19a95c9a95f9cb00156f9dd4b94a6796f14a8074dbf"}, @NFTA_DATA_VALUE={0xd, 0x1, "27c0a133666c23b030"}, @NFTA_DATA_VALUE={0x77, 0x1, "95a924bb9cace191e4782db28d5e9e84ee59f86108121e2e1f0e38fc8296f155c7e8346d098ce4e7a687c4d730581110d5a8e789c09c59a581a16e5c9f9ec06d6a6765c240b1355bd909cbdb03696f947ae17a1aec7eb095779293bff4b1a5a193521e5b35198af86355c801e3b2553674e684"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x614, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @rt={{0x7}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x274, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "f79ecba22c71ff089026f7e18a95d2c4e5c3333e6b025304d37b4547b9b8a2d1857e95c86b22f889b9d7e046402feb9954b8ed9a8a2733fc877c8726b7bf5e81157ba4efb2bdc44521c10f70ab601b016b06a3608544c1cad31a88cff0d485e644d9679408e30af5324c77247f8da2f220d025d9b9c87c3ce05bec23dfa6ac30600fa8ff41b6f9a03bffbe76aea57d"}, @NFTA_DATA_VALUE={0x2e, 0x1, "0373578f35d978c25d63635ba1c2691713d621a21f4e7ad6b3ba5179b753ffc3c3ff173d81168c0622d0"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc4, 0x1, "b2ff4275229924e411af08064d676fc1707cfcce03f7b4ecea7464fd06dc1eed7c7daaa42379ee77de92d40dd65886024532c089fa66c79cea5c5e779e247f2c86f754d17ef3c2d0550f9ee91a98f7dad6cc921eebb608931c0d3e40419d4d5dc264a84b5072aae79fa65057ea54065cd052db73b97ea96353ed355beb26a21d8ab5914549491ea26c882585b4cc8dae91c955b41860fb8fc71520841b3ea34819ad706d6041ec5088623ae35c20739c3319cfbfe2ea600c5fafeee57f56e42e"}, @NFTA_DATA_VALUE={0xa3, 0x1, "1f38211a51a574ebc201df8f1c61791be83fd13e5db2d2365042cf7f3b3430cc8cfb25289d50dd522902bf9e4c5db5229223b1133930685db4fc1dcf69cd0f179e03be818a62c203b148542de0bd8f0f17d47988429cc64219156303cf1a2a38103fe54eca2dffe98f7423f1642e4dcba050cadca667babd8601755ce14f57ffd2c09bc0ee9faeb98dd4b0ef64f67a5f7e4b5967c218331b1165652b3d5968"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_SET_ELEM_KEY_END={0x1b0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "0c6651c82194984d1c99e8b342dd2786510b44593578aca219d36f0d554f6fb4935c35b33898a15dc969d7af1af942de36ee4022cb8d83280c211bd05b4f0180c1ead1119a0f97af7339c1f00b262b5a309b697398006b6e4e35b6f5beeb55c5562068a93904b06dace7e8490844fc0db338abbfdf0257555e91e228c2dfae7b9a331dcff96c4166a7d4dd3743e8c6265e530bbe44f493b0b23623f45ff65717bbd06862c7921a427692557154ecfef0"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x93, 0x1, "fb626e107fa3dc82e162fa40501c8c68827421260beecfd0db44160171d20480d730e1efb8677c91d7e8fb78b43a5efa2bb9ac17efaedd935da69aa0875b1d72a8869c5d761e6028d8d678202eb53636e0ae4e97edbd1155c1deff880a4c44690f2806044e493b06411c96850c2d8b5f0e502c4776a39e4ba06356e358b552dfc2e675c0f2b809c165bf27b16067fe"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0xf4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x53, 0x1, "a496f85fa63e9bbbf3c1323e27f259f563f7d2e9b73b894722bd51c132f38abb6dabb8d0db2820fccb9569f199cfce6db4b0f496a772be183efe345298b83f86b17d2579615b71b64ca1200f9b62f3"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "9ed0788883c5531530e0c0abc2465900dd1e79411babc79fd5e315ac91a03d2988e77e99ee6378bf6909461cfce694861b5af8820af014c2f8ef30754f3a9204c49c4644c44d1b9a37d353793a6d23a126e98ebc5643240672b8f7100694e4641c6f439a5eeb0a1e0802ea"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x401}, @NFTA_SET_ELEM_USERDATA={0x3e, 0x6, 0x1, 0x0, "fa550812032491b07b278b2d5eb2a779336bfcf783c8c23489a947650c8d26e5c337be3ff15f9d18d5664e2847491eb209016ccc5c651059b4da"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x7c, 0x6, 0x1, 0x0, "a943a548de96b27735554c0e6921a24d449767f0f4b1e20b389f10a9f27a8cde06987ba5450a5b46e11693192a6cce97727578da013b2d610842e249bd5780e8492cb34495a2d9487b1e73540b65274e5681fd4d1444ba7b26e90c4911f6f0dda147b51a2c69d11f19414ffa2bc64c74381d43a51628a041"}]}, {0x644, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x630, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x5}]}}}, {0x4c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x2c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, '&.*\x84\x00'}]}}}, {0x508, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4f4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x84, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_IMMEDIATE_DATA={0x3bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "fa3f8ba579cc324b3c7fb845e2e581736077a71b959e0adf7d732fcfa4930e08d671c9258f898542e29dfb67b83cb7573fbcbe56ffaed6598721e22f6d2e8d988eed8f4755fd2f0cf41db32f24e8064357ec45ad39db1fc44887a7f8228d74dfee3509b148b50ad6b9823b64636b3b2b8a085579027412a5cf39ead82ddc837336caf8a5c6d64f0da8826d719ad0b5573f2e02c346672a55d2fe2650929a1577b22bc98b6fbb3796164ba6d85d051a655f64cff1a314839b78916741d8bab25696d8643d24c6a1e16684daa65c8ffc2e9ab32ffda1da8736420412d6988f524c6e3419f508d20ecf782b7076da146f25fe79"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4f, 0x1, "df86a3818ffd451832d06fee165f53359da9c8767687ad349fc460ba3881d9b9ca87f020e42178670c373aef9ff8c69893a8e0e618922007d9ce49ecb35549322b2e1898f8cc7a7da818c8"}, @NFTA_DATA_VALUE={0xe2, 0x1, "0b6f9d3a1e9e0cc613b8d4e2e85b0080d9bc64ae9a880f44873e196242cfb49e323142bae48cd3e0cdf18d4e2c5d67f7569434c063eac240bec87ba7574e04701cb4a874f6565e839031b622c1f7b45962230e6014316997eff0fa131d7f5f4f8618df790406af1e3c24a8db4cd8e3b76bd14cd771ee9500cbaaed7f3750009c4ff83c64c441cd0d5b13e4ba8bea85a7563a915464705ef1d9441d84efd1ae454abefa8aa891a8e652fc1e0a1f3c63e34a25c33ee4cc6b776c812cb29b72f24d85d9e13caf588fe1bf764ba38ae27ce9595eee8da4518955eefb3f15745c"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe5, 0x1, "00b3fe89fadfad94d4d8a5fb4be4344b32c28afd4ac27d414df874a9797cb791cddb6aa6c7ddb85a2426106241a691378376fdc3f571a1fe8e0a9ee0079c41066f034dfb7f26dc1aecaf4d53c340b5809ef165a7cebeff4394b2aaf7d36cbc7dfd57a51da59511f70166a2172de41a976dcefa5a2b269d26d5d951fb2b84493ef1874c19a71c1116d1897d42205a7ff45b079b9c6045bf6653c4e3b6239136c2681d9ff5295c6cb7b311161272276bb016374ede5e82e453a09fe85f4295023af8e9bf0caf74a1f8a1a00810c7a4a569a712d3fc7d5b4d4fa1efee5f60187eb36a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_IMMEDIATE_DATA={0x88, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x81, 0x1, "03317913a916b2def7c1ea200129ec31913b24df49b67124ac163047631ff844bab0ed62ed373a9236eb84f99abc49e03d4c3aafd4700f451bc8e54b8fbb3229b6bab4c39864dc229f214731f10bc84310107aff8ef11177da2206c6c76c29dbf50c14bd6ef652c5070a94b60f111d1fbe78d967d479790e271db20284"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x270, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xd}]}}}, @NFTA_SET_ELEM_KEY_END={0x1e8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaf, 0x1, "8380d02d64c09b444d875a35c13426a6140f186bd186d2385cc86e8cbac8744328c431e786d9230671ae596f0646fa335d623aa2ba2e3d7a7c1c9e8b939c3855af77c453b342208c7a3a54a55003f9d6dd1a273278d73abb9c19fda2117308249d32927bbcfddec747195d6944e8eb1614ca80dbedf4b4b4057640dab2d496499bc4e983d8a3adb7d757b8e81637883d63ad58ffef9fd9b802855f6c845d63e81230f81681206dbaf80044"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x6b, 0x1, "4bf8e796e4ecec16f4eb2ae25487b32e62098d1dc6a24260536f90a3d71df523e34c21858d39a44fb584fa121e0e2d4f92af672dee42050f1c063b1bff12cea70bbcfbe8c26960bca2ba760c36a87d651eabeb80449b0f7aa2cf6badd5611c85e8a9115264bb46"}, @NFTA_DATA_VALUE={0x31, 0x1, "5bd0850bcd699a8e98ac2083ccfca810f6355a9475e1ed0d1fa88c43152e5d87058e64c16d7d9315b37223f7df"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_KEY_END={0x44, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x200}]}, {0x3d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3ad3}, @NFTA_SET_ELEM_EXPRESSIONS={0x360, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SREG={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x300, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2f0, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x2e4, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe1, 0x1, "e24ff3c4c511ecf4b510328d82c0dc5388acd4bdce6cf373e26c0e674d296656d274b2dd7d2eea3fcbc73bbad10adf5f1205aa7efc78659c7cc10cd2081cd9defbcaaff196d0c27573d6d653babb887d1ad2aca2fe70631fd07a3eac66c1cb620bab17c9fcc2a9cd471ffd3080b4d3fd50e97e33c2f53cfd44895fd5d5714ee70a107275d754775c62a9eb1c1aa291970e8f3cc20da4ce6e4240cfbdd113df7e642c998f15ffea70932dc6db9eb188d09464d2422adfa4877bc67ecfbd3c2d6b7b76ca808687c32bd132683656c90dcfa523aeb779c4c2251e56c0b377"}, @NFTA_DATA_VALUE={0xf2, 0x1, "385a2d47954a85dfe41773abf93e7771d851fa5fffe697509d67695aeb81b00cf8f01c1554a03039630115a58d031017a252b8ca968b3779cf7b587647325a42f5caf879b6c29cf1d5349f6d10a69990a29a172da588b3a9e7a613019dccba6f78ee50ace68ebd887d7ff24a74cc4a4fe62cb6ee890d3c6f13576b957d7a80e82f7f3aca92c98a6f68221dba871262c9d92edf2a88f5d0f9f18ebf5a1fafcea108313616822923da76ca7fd356f826634610d746e6e7bd7d10c0aad04d4fc464cad0a5c11b4be51973c291dc2941be98b861c550e78a778bf521625d229a422cb56019f6df54a133c22f62412ec1"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4f, 0x1, "49a23f4d6aa4ee737b123e082cc130e4af37e94f7da5a072e8eaf23c3a38b032343aeaab25b9ee2862a51463b0113cf8a55a7ddc7248bc94d130a7bf1d704b3e8b682dbc28268150ef6f9e"}, @NFTA_DATA_VALUE={0x96, 0x1, "7aa836692535856fcd1e0f5052d724817c35afa38dcb7e93c9d0c91bcf2dc3c00e14f818aba49940c9f2d433be1e294e3eb79b73aeadffd7f2bd9288748dfcc43f4608191ef650308bcafc6d1e6c255a4c9d8097d3924436f5e392a35dcf21a818fa17d24db9bcbe1037cc4828ea1ffb66633a34c59296899180358ef4e7d45987957a0b92970788a80baaf560ad0c1976ef"}]}]}}}]}]}, {0x388, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x128, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6f, 0x1, "c4981a8571a46ec7eb1eadcbdda6ef0c672dd77be2e5d8b83e37da381b3956b1f091fd5695b7f262c9f4052066f1b7a72f69a6b326fdb5c0726e518b219199fbdd717fb65fa75dd3419f9866125584a869c572fa442cc4c25b03be71062fd387117a720564e86bcba29669"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x90, 0x1, "67d95e35bfa7a9fa1832defd0beb2794d23bee2d7e6150cdb375d5dc172a19708f45b1055c5af62bd167a362c6a26b082be69e05c78f1d05f2b49ef01606499e32b675a5948768007a37ca04150f7bad21a825c11e415e4329418807d44272a3796fc29d57153bec070e1694e56a4ad66e3f6dad3af8b0f71ab29d435719397b9e3a7d8f1f65b0a72f78144d"}]}, @NFTA_SET_ELEM_KEY={0x1c4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc6, 0x1, "9ab4e60a7098679d3901ae918d345cbd72b39f7f5552e8621aeead12ca3c70984da9d202807bbe44e76c112dfff231ec196edcb3d3ab57b59cd2ba494836dcf3b7c84970c01a6e07c21b24920cb32191a1cc5b7bf6aba17897583fd4147e43070bbbcf62bb96b97de19a0031d6967a60b98f7ba024ed10ada2349d43836b44167718288230d5306ca4ca81de7bf8fcf51a9d7c91a50adbea2884875e5da9f69abf1ea69b6180f0f1a9bfc7594cb3c6670fc3853c127e12ca88e43acf949be4b8f4cb"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xea, 0x1, "d6f5ea8b9d91420f5714d34c24d3573e7f0566b039a974333fd08142774f40922a2c72c1111945102726ee58b3da6d74fac0b00fb118ee94f93c0d39a3e86353bbd79bfc245820bf0ba4530cde78379adac38dd1e2d9ccbf951916875a1000d9fc5ea31d9fab4907380d6b43ca5e6db129400ea7fe9baf4f689dcdab5ff7b31773416cbd838d93e497d5b22a9daaccfbac0b48d66b99de6c7b90998cb42594d5b6dae541a4f504ef479caa3340a0f6132a51f8186dd733ac8f381923aca092bd035d60e6111d46d7aaf5b4ede483eb3a7847b64d89514a0c94850aaa0468f01653f95c36b26f"}]}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2088}, 0x1, 0x0, 0x0, 0x40000}, 0x4040005) r5 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000029c0)=""/4116, 0x1014}], 0x1}, 0xb}], 0x1, 0x2000, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1.321697634s ago: executing program 3 (id=9433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0xe0000000000000, 0xfefffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x24000000}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3b}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '.\xfa\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="03000000000000000000210000000c00018008000100", @ANYRES32=r6], 0x20}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = accept4$unix(r2, &(0x7f00000002c0), &(0x7f00000001c0)=0x6e, 0x800) setsockopt$sock_timeval(r10, 0x1, 0x42, &(0x7f0000000380), 0x8) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.297338791s ago: executing program 1 (id=9434): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x1e, 0x1, 0x1, &(0x7f0000000a80)='M'}, {0x1000, 0x18d5, 0x0, 0x0}], 0x2}) 1.238414888s ago: executing program 2 (id=9435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, 0x0}, 0x20000884) 646.075342ms ago: executing program 5 (id=9436): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000280)={0x0, 0x804}) r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r8, 0x0, '\x00', "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"}}, 0x110) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$RTC_PLL_SET(r0, 0x401c7012, &(0x7f0000000140)={0x2, 0x604, 0x7fffffff, 0x4, 0x71a8, 0x2, 0xe07b}) readv(r4, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 644.40865ms ago: executing program 2 (id=9437): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000000)='v', 0x1}, {&(0x7f0000000240)='s', 0x1}], 0x3, 0xf, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x480) r3 = dup(r2) read$FUSE(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x13, 0x9, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000065}, 0x40) 0s ago: executing program 2 (id=9438): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10c6, &(0x7f0000000b40)={0x0, 0xbdee, 0x800, 0x400001, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r2, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) kernel console output (not intermixed with test programs): altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2803.907778][ T6721] syzkaller0: entered promiscuous mode [ 2803.917388][ T6721] syzkaller0: entered allmulticast mode [ 2804.035175][T20659] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2804.065292][T20659] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 2804.094506][T20659] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2804.142176][T20659] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2804.151513][T20659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2804.161907][T20659] usb 6-1: Product: syz [ 2804.167912][T20659] usb 6-1: Manufacturer: syz [ 2804.175401][T20659] usb 6-1: SerialNumber: syz [ 2804.192423][ T6718] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2804.239060][T20659] cdc_mbim 6-1:1.0: skipping garbage [ 2804.438734][ T6718] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2804.454667][ T6718] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2804.895567][ T6718] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2804.903715][ T6718] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2804.931947][T20659] cdc_mbim 6-1:1.0: setting rx_max = 16384 [ 2805.025121][T30552] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2805.068877][T30552] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2805.108515][T30552] usb 3-1: can't read configurations, error -71 [ 2805.153435][T20659] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 2805.183701][T20659] wwan wwan0: port wwan0mbim0 attached [ 2805.192871][ T6732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2805.240725][T20659] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 9e:8d:75:38:da:3c [ 2805.298998][T20659] usb 6-1: USB disconnect, device number 124 [ 2805.377245][T20659] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 2805.595958][ T6738] No memory to map [ 2806.068874][T20659] wwan wwan0: port wwan0mbim0 disconnected [ 2807.114390][T30552] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2807.194396][T22854] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 2807.344349][T30552] usb 6-1: Using ep0 maxpacket: 32 [ 2807.357531][T30552] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2807.368872][T30552] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2807.398337][T22854] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2807.410484][T22854] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2807.453508][T30552] usb 6-1: config 0 descriptor?? [ 2807.461924][T22854] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2807.468714][T30552] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2807.488953][T20680] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 2807.509625][T22854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2807.646776][T20680] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2807.659446][T20680] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2807.693431][T20680] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2807.703697][T20680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2807.712722][T20680] usb 3-1: Product: syz [ 2807.723553][T20680] usb 3-1: Manufacturer: syz [ 2807.729303][T20680] usb 3-1: SerialNumber: syz [ 2807.810154][T22854] usb 1-1: usb_control_msg returned -32 [ 2807.817442][T22854] usbtmc 1-1:16.0: can't read capabilities [ 2807.952815][ C0] vkms_vblank_simulate: vblank timer overrun [ 2807.980547][ C0] vkms_vblank_simulate: vblank timer overrun [ 2808.020364][T20680] usb 3-1: 0:2 : does not exist [ 2808.055069][T20680] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2808.130454][T20680] usb 3-1: USB disconnect, device number 56 [ 2808.268230][ T4955] udevd[4955]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2808.739020][ T6749] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2808.829617][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9151'. [ 2808.873310][ T6779] erspan0: entered promiscuous mode [ 2808.885422][ T6779] erspan0: left promiscuous mode [ 2808.920878][T30552] gspca_sunplus: reg_w_riv err -71 [ 2808.926507][T30552] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 2808.940535][T30552] usb 6-1: USB disconnect, device number 125 [ 2808.974762][T20680] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2809.128369][T20680] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2809.151140][T20680] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2809.168352][T20680] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2809.178699][T20680] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2809.196765][T20680] usb 3-1: Product: syz [ 2809.205708][T20680] usb 3-1: Manufacturer: syz [ 2809.218334][T20680] usb 3-1: SerialNumber: syz [ 2809.234686][T20680] usb 3-1: config 0 descriptor?? [ 2809.260538][T20680] usb 3-1: selecting invalid altsetting 0 [ 2809.567241][T20680] usb 3-1: USB disconnect, device number 57 [ 2810.252565][ T30] audit: type=1326 audit(1764550335.348:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.9156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 2810.294432][ T30] audit: type=1326 audit(1764550335.348:7305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.9156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 2810.299032][T30552] usb 1-1: USB disconnect, device number 110 [ 2810.477246][ T30] audit: type=1326 audit(1764550335.348:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.9156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 2810.680467][ T30] audit: type=1326 audit(1764550335.348:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.9156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 2810.847395][ T30] audit: type=1326 audit(1764550335.348:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.9156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 2810.964080][ T30] audit: type=1326 audit(1764550335.348:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.9156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 2811.130067][ T30] audit: type=1326 audit(1764550335.358:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.9156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 2811.351169][ T30] audit: type=1326 audit(1764550335.488:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.9156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 2811.667078][ T30] audit: type=1326 audit(1764550335.488:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.9156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 2811.865145][ T30] audit: type=1326 audit(1764550335.508:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6792 comm="syz.3.9156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 2812.372852][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9161'. [ 2813.930002][T20659] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 2813.989382][ T6847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9168'. [ 2814.087866][T20659] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2814.101155][T20659] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 2814.110452][T20659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2814.120620][T20659] usb 3-1: Product: syz [ 2814.124982][T20659] usb 3-1: Manufacturer: syz [ 2814.129574][T20659] usb 3-1: SerialNumber: syz [ 2814.345994][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9171'. [ 2814.374582][T20659] usb 3-1: selecting invalid altsetting 1 [ 2814.451308][ T6855] netlink: 260 bytes leftover after parsing attributes in process `syz.5.9172'. [ 2814.485280][ T6855] netlink: 256 bytes leftover after parsing attributes in process `syz.5.9172'. [ 2814.534188][ T6855] syz_tun: entered allmulticast mode [ 2814.577585][ T6855] dvmrp8: entered allmulticast mode [ 2814.591182][T20659] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 2814.591310][T20659] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 2814.660277][ T6854] syz_tun: left allmulticast mode [ 2814.748680][ T6860] netlink: 'syz.1.9173': attribute type 21 has an invalid length. [ 2814.748690][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2814.749171][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2814.785155][ T6860] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9173'. [ 2815.041061][T22854] usb 3-1: USB disconnect, device number 58 [ 2815.242379][ T6875] syzkaller0: entered promiscuous mode [ 2815.249582][ T6875] syzkaller0: entered allmulticast mode [ 2815.858580][ T6883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2817.996408][ T6902] FAULT_INJECTION: forcing a failure. [ 2817.996408][ T6902] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2818.013028][ T6902] CPU: 1 UID: 0 PID: 6902 Comm: syz.3.9185 Not tainted syzkaller #0 PREEMPT(full) [ 2818.013060][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2818.013072][ T6902] Call Trace: [ 2818.013078][ T6902] [ 2818.013085][ T6902] dump_stack_lvl+0x189/0x250 [ 2818.013111][ T6902] ? __pfx____ratelimit+0x10/0x10 [ 2818.013134][ T6902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2818.013156][ T6902] ? __pfx__printk+0x10/0x10 [ 2818.013173][ T6902] ? fs_reclaim_acquire+0x7d/0x100 [ 2818.013195][ T6902] should_fail_ex+0x414/0x560 [ 2818.013223][ T6902] prepare_alloc_pages+0x213/0x610 [ 2818.013244][ T6902] __alloc_frozen_pages_noprof+0x123/0x370 [ 2818.013263][ T6902] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2818.013287][ T6902] ? policy_nodemask+0x27c/0x720 [ 2818.013300][ T6902] ? __lock_acquire+0xab9/0xd20 [ 2818.013319][ T6902] alloc_pages_mpol+0x232/0x4a0 [ 2818.013338][ T6902] vma_alloc_folio_noprof+0xe4/0x200 [ 2818.013352][ T6902] ? arch_stack_walk+0xfc/0x150 [ 2818.013371][ T6902] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2818.013396][ T6902] folio_prealloc+0x30/0x180 [ 2818.013419][ T6902] __handle_mm_fault+0x2a8b/0x5400 [ 2818.013453][ T6902] ? __pfx___handle_mm_fault+0x10/0x10 [ 2818.013483][ T6902] ? follow_page_pte+0x7ef/0x13e0 [ 2818.013512][ T6902] handle_mm_fault+0x40a/0x8e0 [ 2818.013541][ T6902] __get_user_pages+0x165c/0x2a00 [ 2818.013586][ T6902] __gup_longterm_locked+0x3dc/0x1660 [ 2818.013625][ T6902] gup_fast_fallback+0x1d65/0x22d0 [ 2818.013672][ T6902] ? __pfx_gup_fast_fallback+0x10/0x10 [ 2818.013692][ T6902] ? rcu_is_watching+0x15/0xb0 [ 2818.013714][ T6902] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 2818.013737][ T6902] ? is_valid_gup_args+0x11f/0x200 [ 2818.013764][ T6902] ? pin_user_pages_fast+0x4d/0xb0 [ 2818.013786][ T6902] io_pin_pages+0xba/0x1b0 [ 2818.013806][ T6902] io_sqe_buffer_register+0x16f/0x20a0 [ 2818.013843][ T6902] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 2818.013866][ T6902] ? copy_compat_iovec_from_user+0xf8/0x140 [ 2818.013890][ T6902] ? iovec_from_user+0x1ba/0x250 [ 2818.013913][ T6902] io_sqe_buffers_register+0x3b9/0x8e0 [ 2818.013942][ T6902] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 2818.013963][ T6902] ? __fget_files+0x3a0/0x420 [ 2818.013982][ T6902] ? __fget_files+0x2a/0x420 [ 2818.013999][ T6902] ? io_is_uring_fops+0xd/0x50 [ 2818.014021][ T6902] __se_sys_io_uring_register+0x9d3/0x11f0 [ 2818.014043][ T6902] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 2818.014058][ T6902] ? ksys_write+0x22a/0x250 [ 2818.014078][ T6902] ? exc_page_fault+0x82/0x100 [ 2818.014101][ T6902] ? __pfx_ksys_write+0x10/0x10 [ 2818.014124][ T6902] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2818.014149][ T6902] ? lockdep_hardirqs_on+0x9c/0x150 [ 2818.014173][ T6902] __do_fast_syscall_32+0xb6/0x2b0 [ 2818.014188][ T6902] ? lockdep_hardirqs_on+0x9c/0x150 [ 2818.014213][ T6902] do_fast_syscall_32+0x34/0x80 [ 2818.014227][ T6902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2818.014251][ T6902] RIP: 0023:0xf7f66539 [ 2818.014270][ T6902] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2818.014289][ T6902] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab [ 2818.014312][ T6902] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 2818.014327][ T6902] RDX: 00000000800002c0 RSI: 0000000000000021 RDI: 0000000000000000 [ 2818.014340][ T6902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2818.014352][ T6902] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2818.014371][ T6902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2818.014404][ T6902] [ 2818.370579][ C1] vkms_vblank_simulate: vblank timer overrun [ 2818.585052][ T6914] fuse: Unknown parameter 'ÿÿÿÿ0x000000000000000a' [ 2818.789277][ T6914] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 2818.825468][ T6914] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2818.932867][ T6916] bridge1: entered allmulticast mode [ 2819.224993][ T6916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9188'. [ 2819.464549][ T6313] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 2819.698952][ T6313] usb 1-1: Using ep0 maxpacket: 16 [ 2819.712019][ T6313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2819.755436][ T6313] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2819.778251][ T6313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2819.821180][ T6313] usb 1-1: config 0 descriptor?? [ 2820.540017][ T6313] mcp2221 0003:04D8:00DD.005D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 2820.864356][T20659] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 2821.891454][ T6965] FAULT_INJECTION: forcing a failure. [ 2821.891454][ T6965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2821.916754][T22854] usb 1-1: USB disconnect, device number 111 [ 2821.991446][ T6965] CPU: 1 UID: 0 PID: 6965 Comm: syz.2.9201 Not tainted syzkaller #0 PREEMPT(full) [ 2821.991476][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2821.991487][ T6965] Call Trace: [ 2821.991494][ T6965] [ 2821.991501][ T6965] dump_stack_lvl+0x189/0x250 [ 2821.991527][ T6965] ? __pfx____ratelimit+0x10/0x10 [ 2821.991550][ T6965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2821.991571][ T6965] ? __pfx__printk+0x10/0x10 [ 2821.991588][ T6965] ? __might_fault+0xb0/0x130 [ 2821.991618][ T6965] should_fail_ex+0x414/0x560 [ 2821.991647][ T6965] _copy_from_user+0x2d/0xb0 [ 2821.991668][ T6965] snd_rawmidi_kernel_write1+0x3ab/0x650 [ 2821.991706][ T6965] snd_rawmidi_write+0x5a8/0xbc0 [ 2821.991732][ T6965] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 2821.991747][ T6965] ? __pfx_default_wake_function+0x10/0x10 [ 2821.991773][ T6965] ? common_file_perm+0x1b5/0x230 [ 2821.991799][ T6965] ? bpf_lsm_file_permission+0x9/0x20 [ 2821.991816][ T6965] ? security_file_permission+0x75/0x290 [ 2821.991835][ T6965] ? rw_verify_area+0x255/0x4d0 [ 2821.991855][ T6965] ? __lock_acquire+0xab9/0xd20 [ 2821.991869][ T6965] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 2821.991886][ T6965] vfs_write+0x27e/0xb30 [ 2821.991913][ T6965] ? __pfx_vfs_write+0x10/0x10 [ 2821.991935][ T6965] ? __fget_files+0x2a/0x420 [ 2821.991952][ T6965] ? __fget_files+0x2a/0x420 [ 2821.991965][ T6965] ? __fget_files+0x3a0/0x420 [ 2821.991978][ T6965] ? __fget_files+0x2a/0x420 [ 2821.991999][ T6965] ksys_write+0x145/0x250 [ 2821.992019][ T6965] ? exc_page_fault+0x82/0x100 [ 2821.992041][ T6965] ? __pfx_ksys_write+0x10/0x10 [ 2821.992064][ T6965] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2821.992089][ T6965] ? lockdep_hardirqs_on+0x9c/0x150 [ 2821.992113][ T6965] __do_fast_syscall_32+0xb6/0x2b0 [ 2821.992128][ T6965] ? lockdep_hardirqs_on+0x9c/0x150 [ 2821.992152][ T6965] do_fast_syscall_32+0x34/0x80 [ 2821.992167][ T6965] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2821.992185][ T6965] RIP: 0023:0xf6ffd539 [ 2821.992198][ T6965] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2821.992212][ T6965] RSP: 002b:00000000f53cc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2821.992228][ T6965] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 2821.992239][ T6965] RDX: 00000000fffffd2c RSI: 0000000000000000 RDI: 0000000000000000 [ 2821.992248][ T6965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2821.992257][ T6965] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2821.992266][ T6965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2821.992288][ T6965] [ 2822.255775][ C1] vkms_vblank_simulate: vblank timer overrun [ 2822.866766][ T6978] fuse: Unknown parameter '000000000000000000050x0000000000000005' [ 2822.906008][ T6978] openvswitch: netlink: Flow key attr not present in new flow. [ 2823.043119][ T6983] tipc: Enabled bearer , priority 0 [ 2823.131296][ T6983] tipc: Disabling bearer [ 2823.237029][ T6989] fuse: Bad value for 'fd' [ 2825.374387][ T6313] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2825.524606][ T6313] usb 4-1: Using ep0 maxpacket: 8 [ 2825.547291][ T6313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2825.564874][ T6313] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 2825.583893][ T6313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2825.604169][ T6313] usb 4-1: config 0 descriptor?? [ 2825.675641][T30864] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2825.839965][T30864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2825.866688][T30864] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2825.876806][T30864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2825.897608][T30864] usb 6-1: config 0 descriptor?? [ 2826.079355][ T6313] holtek 0003:1241:5015.005E: hidraw0: USB HID vff.ff Device [HID 1241:5015] on usb-dummy_hcd.3-1/input0 [ 2826.091760][ T6313] holtek 0003:1241:5015.005E: no inputs found [ 2826.119094][T30864] usbhid 6-1:0.0: can't add hid device: -71 [ 2826.138224][T30864] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2826.167079][T30864] usb 6-1: USB disconnect, device number 126 [ 2826.241950][ T7016] FAULT_INJECTION: forcing a failure. [ 2826.241950][ T7016] name failslab, interval 1, probability 0, space 0, times 0 [ 2826.258068][ T7016] CPU: 0 UID: 0 PID: 7016 Comm: syz.0.9217 Not tainted syzkaller #0 PREEMPT(full) [ 2826.258099][ T7016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2826.258113][ T7016] Call Trace: [ 2826.258122][ T7016] [ 2826.258132][ T7016] dump_stack_lvl+0x189/0x250 [ 2826.258170][ T7016] ? __pfx____ratelimit+0x10/0x10 [ 2826.258193][ T7016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2826.258214][ T7016] ? __pfx__printk+0x10/0x10 [ 2826.258234][ T7016] ? __pfx___might_resched+0x10/0x10 [ 2826.258255][ T7016] should_fail_ex+0x414/0x560 [ 2826.258282][ T7016] should_failslab+0xa8/0x100 [ 2826.258299][ T7016] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2826.258322][ T7016] ? __alloc_skb+0x112/0x2d0 [ 2826.258341][ T7016] __alloc_skb+0x112/0x2d0 [ 2826.258358][ T7016] netlink_ack+0x146/0xa50 [ 2826.258372][ T7016] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2826.258394][ T7016] ? ref_tracker_free+0x63a/0x7d0 [ 2826.258410][ T7016] ? __asan_memcpy+0x40/0x70 [ 2826.258429][ T7016] ? __pfx_ref_tracker_free+0x10/0x10 [ 2826.258451][ T7016] netlink_rcv_skb+0x28c/0x470 [ 2826.258467][ T7016] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2826.258492][ T7016] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2826.258515][ T7016] ? netlink_deliver_tap+0x2e/0x1b0 [ 2826.258536][ T7016] netlink_unicast+0x82f/0x9e0 [ 2826.258565][ T7016] ? __pfx_netlink_unicast+0x10/0x10 [ 2826.258589][ T7016] ? netlink_sendmsg+0x642/0xb30 [ 2826.258603][ T7016] ? skb_put+0x11b/0x210 [ 2826.258620][ T7016] netlink_sendmsg+0x805/0xb30 [ 2826.258643][ T7016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2826.258660][ T7016] ? __import_iovec+0x5d4/0x7f0 [ 2826.258678][ T7016] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2826.258703][ T7016] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2826.258718][ T7016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2826.258734][ T7016] __sock_sendmsg+0x21c/0x270 [ 2826.258757][ T7016] ____sys_sendmsg+0x505/0x830 [ 2826.258780][ T7016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2826.258810][ T7016] ___sys_sendmsg+0x21f/0x2a0 [ 2826.258829][ T7016] ? __pfx____sys_sendmsg+0x10/0x10 [ 2826.258873][ T7016] ? __fget_files+0x2a/0x420 [ 2826.258887][ T7016] ? __fget_files+0x3a0/0x420 [ 2826.258909][ T7016] __sys_sendmsg+0x164/0x220 [ 2826.258928][ T7016] ? __pfx___sys_sendmsg+0x10/0x10 [ 2826.258952][ T7016] ? __pfx_ksys_write+0x10/0x10 [ 2826.258977][ T7016] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2826.259003][ T7016] ? lockdep_hardirqs_on+0x9c/0x150 [ 2826.259034][ T7016] __do_fast_syscall_32+0xb6/0x2b0 [ 2826.259050][ T7016] ? lockdep_hardirqs_on+0x9c/0x150 [ 2826.259086][ T7016] do_fast_syscall_32+0x34/0x80 [ 2826.259108][ T7016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2826.259135][ T7016] RIP: 0023:0xf7fb1539 [ 2826.259155][ T7016] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2826.259174][ T7016] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2826.259198][ T7016] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 2826.259214][ T7016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2826.259228][ T7016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2826.259237][ T7016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2826.259246][ T7016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2826.259269][ T7016] [ 2826.644041][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2826.653727][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2826.957346][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2826.977231][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2827.126070][ T7017] sg_write: data in/out 926365459/4 bytes for SCSI command 0x30-- guessing data in; [ 2827.126070][ T7017] program syz.3.9212 not setting count and/or reply_len properly [ 2827.143748][T20671] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2827.186911][ T7017] sg_write: data in/out 117441011/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 2827.186911][ T7017] program syz.3.9212 not setting count and/or reply_len properly [ 2827.255450][ T7017] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2827.307909][T20671] usb 6-1: Using ep0 maxpacket: 16 [ 2827.327858][T20671] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2827.359393][T20671] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 2827.382653][T20671] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2827.406865][ T7031] input: syz1 as /devices/virtual/input/input152 [ 2827.411941][T20671] usb 6-1: config 0 descriptor?? [ 2827.962441][T20671] kye 0003:0458:5016.005F: control desc unexpectedly large [ 2828.046046][T20671] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.005F/input/input153 [ 2828.175979][T20671] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.005F/input/input154 [ 2828.454515][T20671] kye 0003:0458:5016.005F: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 2828.470329][T20680] usb 4-1: USB disconnect, device number 90 [ 2828.709301][ T6313] usb 6-1: USB disconnect, device number 127 [ 2828.800541][ T7045] fido_id[7045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 2829.968960][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9227'. [ 2832.074752][T20659] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 2832.166418][T20671] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2832.234408][T20659] usb 1-1: device descriptor read/64, error -71 [ 2832.335681][T30864] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2832.343839][T20671] usb 6-1: Using ep0 maxpacket: 32 [ 2832.371101][T20671] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 2832.414797][T20671] usb 6-1: config 0 has no interface number 0 [ 2832.449440][T20671] usb 6-1: config 0 interface 125 has no altsetting 0 [ 2832.459178][T20671] usb 6-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 2832.478472][T20671] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2832.504378][T20659] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 2832.514332][T30864] usb 2-1: Using ep0 maxpacket: 32 [ 2832.522234][T20671] usb 6-1: Product: syz [ 2832.530794][T20671] usb 6-1: Manufacturer: syz [ 2832.538621][T30864] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2832.547759][T20671] usb 6-1: SerialNumber: syz [ 2832.554174][T30864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2832.565026][T20671] usb 6-1: config 0 descriptor?? [ 2832.611383][T30864] usb 2-1: config 0 descriptor?? [ 2832.654452][T20659] usb 1-1: device descriptor read/64, error -71 [ 2832.662139][T30864] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2832.786367][T20659] usb usb1-port1: attempt power cycle [ 2832.807982][T20671] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 2833.155437][T20659] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 2833.195404][T20659] usb 1-1: device descriptor read/8, error -71 [ 2833.434691][T20659] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 2833.464539][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9241'. [ 2833.487140][T20659] usb 1-1: device descriptor read/8, error -71 [ 2833.535288][T20671] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 2833.597635][T20659] usb usb1-port1: unable to enumerate USB device [ 2833.677150][ T7085] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2833.805821][T30864] gspca_sunplus: reg_w_riv err -71 [ 2833.811158][T30864] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 2833.822916][T30864] usb 2-1: USB disconnect, device number 81 [ 2834.116219][T20671] ueagle-atm 6-1:0.125: usbatm_usb_probe: bind failed: -19! [ 2834.832943][T20680] usb 6-1: USB disconnect, device number 2 [ 2835.190451][ T7122] input: syz0 as /devices/virtual/input/input155 [ 2835.346054][T20680] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2835.592985][T20680] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 2835.632186][T20680] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2835.674172][T20680] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 2835.729075][T20680] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 2835.841044][T20680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2836.133757][ T7120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2836.236205][ T7120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2838.049036][T27647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2838.077965][T20680] usb 4-1: string descriptor 0 read error: -71 [ 2838.096477][T27647] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2838.110628][T20680] usb 4-1: USB disconnect, device number 91 [ 2838.120961][T27647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2838.141033][T27647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2838.161927][T27647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2838.345755][ T7145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2838.348018][ T7145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2840.244478][T23581] Bluetooth: hci5: command tx timeout [ 2840.344398][ T6313] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2840.495996][ T6313] usb 6-1: Using ep0 maxpacket: 32 [ 2840.515863][ T6313] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2840.574846][ T6313] usb 6-1: config 0 has no interface number 0 [ 2840.688300][ T6313] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2840.707770][ T6313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2840.716141][ T6313] usb 6-1: Product: syz [ 2840.730791][ T6313] usb 6-1: Manufacturer: syz [ 2840.751961][ T7146] chnl_net:caif_netlink_parms(): no params data found [ 2840.752971][ T6313] usb 6-1: SerialNumber: syz [ 2840.798724][ T6313] usb 6-1: config 0 descriptor?? [ 2840.825438][ T6313] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2840.976744][T20671] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2841.029729][ T6313] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2841.062484][ T6313] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2841.137820][T20671] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 2841.177714][T20671] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2841.190125][T20671] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 2841.286605][T20671] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 2841.340452][T20671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2841.368331][T23641] bridge_slave_1: left allmulticast mode [ 2841.379091][T23641] bridge_slave_1: left promiscuous mode [ 2841.413268][T23641] bridge0: port 2(bridge_slave_1) entered disabled state [ 2841.444064][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2841.445524][ T5901] usb 6-1: USB disconnect, device number 3 [ 2841.487348][T23641] bridge_slave_0: left allmulticast mode [ 2841.495829][ T5901] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2841.517439][T23641] bridge_slave_0: left promiscuous mode [ 2841.523612][T23641] bridge0: port 1(bridge_slave_0) entered disabled state [ 2841.541846][ T5901] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2841.626485][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2841.633000][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2841.739771][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2841.768228][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2841.818954][ T5901] quatech2 6-1:0.51: device disconnected [ 2842.262756][ T7208] netlink: 84 bytes leftover after parsing attributes in process `syz.5.9268'. [ 2842.324518][T23581] Bluetooth: hci5: command tx timeout [ 2842.949829][T23641] geneve0 (unregistering): left promiscuous mode [ 2843.238792][ T7226] netlink: 'syz.0.9271': attribute type 1 has an invalid length. [ 2843.353180][ T7228] netlink: 'syz.0.9271': attribute type 16 has an invalid length. [ 2843.363071][ T7228] netlink: 'syz.0.9271': attribute type 17 has an invalid length. [ 2843.606846][T20671] usb 3-1: string descriptor 0 read error: -71 [ 2843.649635][T20671] usb 3-1: USB disconnect, device number 59 [ 2843.819094][T23641] bond0 (unregistering): left promiscuous mode [ 2843.829606][T23641] bond_slave_0: left promiscuous mode [ 2843.835626][T23641] bond_slave_1: left promiscuous mode [ 2843.866104][T23641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2843.892142][T23641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2843.917590][T23641] bond0 (unregistering): Released all slaves [ 2843.940327][T23641] bond1 (unregistering): Released all slaves [ 2844.064362][T20671] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2844.134402][ T5901] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2844.188916][T23641] bond2 (unregistering): Released all slaves [ 2844.202455][ T7146] bridge0: port 1(bridge_slave_0) entered blocking state [ 2844.211297][ T7146] bridge0: port 1(bridge_slave_0) entered disabled state [ 2844.220066][ T7146] bridge_slave_0: entered allmulticast mode [ 2844.228014][ T7146] bridge_slave_0: entered promiscuous mode [ 2844.246119][T20671] usb 3-1: Using ep0 maxpacket: 8 [ 2844.253451][T20671] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2844.264545][T20671] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2844.286450][T20671] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2844.298718][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 2844.321609][T20671] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2844.334991][T20671] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2844.349646][ T5901] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2844.370617][ T5901] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2844.383341][T20671] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2844.395386][ T5901] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2844.410894][T23581] Bluetooth: hci5: command tx timeout [ 2844.421957][T20671] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2844.438207][ T5901] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2844.463465][ T7228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2844.463508][T20671] usb 3-1: config 168 interface 0 has no altsetting 0 [ 2844.487711][ T5901] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2844.500095][ T7146] bridge0: port 2(bridge_slave_1) entered blocking state [ 2844.511999][ T5901] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2844.539026][ T7146] bridge0: port 2(bridge_slave_1) entered disabled state [ 2844.548389][ T7146] bridge_slave_1: entered allmulticast mode [ 2844.554550][ T5901] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2844.571026][T20671] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2844.580857][ T7146] bridge_slave_1: entered promiscuous mode [ 2844.586876][T20671] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2844.634366][ T5901] usb 4-1: config 168 interface 0 has no altsetting 0 [ 2844.649290][T20671] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2844.673272][T20671] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2844.675200][T23641] tipc: Left network mode [ 2844.686732][T20671] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2844.703430][ T5901] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2844.706741][ T7239] FAULT_INJECTION: forcing a failure. [ 2844.706741][ T7239] name failslab, interval 1, probability 0, space 0, times 0 [ 2844.723970][ T5901] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2844.737430][T20671] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2844.749568][ T5901] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2844.761263][T20671] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2844.776695][ T7239] CPU: 1 UID: 0 PID: 7239 Comm: syz.0.9275 Not tainted syzkaller #0 PREEMPT(full) [ 2844.776723][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2844.776736][ T7239] Call Trace: [ 2844.776746][ T7239] [ 2844.776756][ T7239] dump_stack_lvl+0x189/0x250 [ 2844.776791][ T7239] ? __pfx____ratelimit+0x10/0x10 [ 2844.776821][ T7239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2844.776851][ T7239] ? __pfx__printk+0x10/0x10 [ 2844.776880][ T7239] ? __pfx___might_resched+0x10/0x10 [ 2844.776902][ T7239] ? fs_reclaim_acquire+0x7d/0x100 [ 2844.776923][ T7239] should_fail_ex+0x414/0x560 [ 2844.776955][ T7239] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 2844.776971][ T7239] should_failslab+0xa8/0x100 [ 2844.776991][ T7239] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 2844.777006][ T7239] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 2844.777041][ T7239] ? alloc_inode+0x6a/0x1b0 [ 2844.777068][ T7239] ? __pfx_simple_start_creating+0x10/0x10 [ 2844.777088][ T7239] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 2844.777104][ T7239] alloc_inode+0x6a/0x1b0 [ 2844.777132][ T7239] new_inode+0x22/0x170 [ 2844.777153][ T7239] __debugfs_create_file+0x14d/0x4f0 [ 2844.777185][ T7239] debugfs_create_file_full+0x3f/0x60 [ 2844.777215][ T7239] ref_tracker_dir_debugfs+0x14e/0x270 [ 2844.777234][ T7239] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 2844.777277][ T7239] ? trace_kmalloc+0x1f/0xd0 [ 2844.777300][ T7239] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 2844.777332][ T7239] ? __raw_spin_lock_init+0x45/0x100 [ 2844.777360][ T7239] alloc_netdev_mqs+0x272/0x11b0 [ 2844.777382][ T7239] ? __pfx_macvtap_setup+0x10/0x10 [ 2844.777415][ T7239] rtnl_create_link+0x31f/0xd10 [ 2844.777445][ T7239] rtnl_newlink_create+0x25c/0xb00 [ 2844.777470][ T7239] ? __mutex_lock+0x5bb/0x1350 [ 2844.777491][ T7239] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2844.777513][ T7239] ? __pfx___mutex_lock+0x10/0x10 [ 2844.777538][ T7239] ? ns_capable+0x8a/0xf0 [ 2844.777560][ T7239] rtnl_newlink+0x16e4/0x1c80 [ 2844.777579][ T7239] ? netlink_deliver_tap+0x19c/0x1b0 [ 2844.777608][ T7239] ? __pfx_rtnl_newlink+0x10/0x10 [ 2844.777646][ T7239] ? kasan_quarantine_put+0xdd/0x220 [ 2844.777671][ T7239] ? lockdep_hardirqs_on+0x9c/0x150 [ 2844.777706][ T7239] ? nlmon_xmit+0xb0/0x100 [ 2844.777726][ T7239] ? kmem_cache_free+0x19b/0x690 [ 2844.777761][ T7239] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2844.777780][ T7239] ? lockdep_hardirqs_on+0x9c/0x150 [ 2844.777807][ T7239] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2844.777826][ T7239] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2844.777849][ T7239] ? __dev_queue_xmit+0x27b/0x3b50 [ 2844.777871][ T7239] ? __dev_queue_xmit+0x27b/0x3b50 [ 2844.777891][ T7239] ? __dev_queue_xmit+0x27b/0x3b50 [ 2844.777914][ T7239] ? __dev_queue_xmit+0x1d79/0x3b50 [ 2844.777934][ T7239] ? kasan_save_track+0x3e/0x80 [ 2844.777958][ T7239] ? __kasan_slab_alloc+0x6c/0x80 [ 2844.777988][ T7239] ? __lock_acquire+0xab9/0xd20 [ 2844.778028][ T7239] ? __pfx_rtnl_newlink+0x10/0x10 [ 2844.778049][ T7239] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2844.778080][ T7239] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2844.778107][ T7239] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2844.778134][ T7239] ? ref_tracker_free+0x63a/0x7d0 [ 2844.778152][ T7239] ? __asan_memcpy+0x40/0x70 [ 2844.778174][ T7239] ? __pfx_ref_tracker_free+0x10/0x10 [ 2844.778201][ T7239] netlink_rcv_skb+0x208/0x470 [ 2844.778221][ T7239] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2844.778250][ T7239] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2844.778278][ T7239] ? netlink_deliver_tap+0x2e/0x1b0 [ 2844.778305][ T7239] netlink_unicast+0x82f/0x9e0 [ 2844.778340][ T7239] ? __pfx_netlink_unicast+0x10/0x10 [ 2844.778369][ T7239] ? netlink_sendmsg+0x642/0xb30 [ 2844.778386][ T7239] ? skb_put+0x11b/0x210 [ 2844.778408][ T7239] netlink_sendmsg+0x805/0xb30 [ 2844.778435][ T7239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2844.778456][ T7239] ? __import_iovec+0x5d4/0x7f0 [ 2844.778477][ T7239] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2844.778505][ T7239] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2844.778523][ T7239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2844.778543][ T7239] __sock_sendmsg+0x21c/0x270 [ 2844.778571][ T7239] ____sys_sendmsg+0x505/0x830 [ 2844.778596][ T7239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2844.778631][ T7239] ___sys_sendmsg+0x21f/0x2a0 [ 2844.778653][ T7239] ? __pfx____sys_sendmsg+0x10/0x10 [ 2844.778705][ T7239] ? __fget_files+0x2a/0x420 [ 2844.778721][ T7239] ? __fget_files+0x3a0/0x420 [ 2844.778747][ T7239] __sys_sendmsg+0x164/0x220 [ 2844.778769][ T7239] ? __pfx___sys_sendmsg+0x10/0x10 [ 2844.778797][ T7239] ? __pfx_ksys_write+0x10/0x10 [ 2844.778826][ T7239] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2844.778855][ T7239] ? lockdep_hardirqs_on+0x9c/0x150 [ 2844.778884][ T7239] __do_fast_syscall_32+0xb6/0x2b0 [ 2844.778901][ T7239] ? lockdep_hardirqs_on+0x9c/0x150 [ 2844.778931][ T7239] do_fast_syscall_32+0x34/0x80 [ 2844.778948][ T7239] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2844.778971][ T7239] RIP: 0023:0xf7fb1539 [ 2844.778987][ T7239] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2844.779003][ T7239] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2844.779023][ T7239] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2844.779047][ T7239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2844.779057][ T7239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2844.779068][ T7239] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2844.779079][ T7239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2844.779106][ T7239] [ 2844.779224][ T7239] debugfs: out of free dentries, can not create file 'netdev@ffff88805eff0618' [ 2845.364589][ T5901] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2845.378393][T23641] IPVS: stopping backup sync thread 6575 ... [ 2845.378515][T20671] usb 3-1: config 168 interface 0 has no altsetting 0 [ 2845.396720][ T5901] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2845.424058][T20671] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2845.434314][ T5901] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2845.450492][T20671] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2845.464448][ T7239] veth1_to_hsr: entered promiscuous mode [ 2845.472421][ T7239] macvtap1: entered promiscuous mode [ 2845.486610][ T7239] macvtap1: entered allmulticast mode [ 2845.493064][ T7239] veth1_to_hsr: entered allmulticast mode [ 2845.499421][ T5901] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2845.524571][T20671] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2845.567306][T20671] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2845.579383][ T7146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2845.579776][ T5901] usb 4-1: config 168 interface 0 has no altsetting 0 [ 2845.605302][T20671] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2845.624105][T20671] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2845.635678][ T7146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2845.657012][ T5901] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2845.665836][ T5901] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2845.694347][ T5901] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2845.706309][T20671] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2845.731616][ T5901] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2845.755619][T20671] usb 3-1: config 168 interface 0 has no altsetting 0 [ 2845.774454][ T5901] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2845.812217][ T5901] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2845.826820][ T5901] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2845.846911][T20671] usb 3-1: string descriptor 0 read error: -22 [ 2845.853498][T20671] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2845.881453][T20671] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2845.891733][ T5901] usb 4-1: config 168 interface 0 has no altsetting 0 [ 2845.900583][ T7146] team0: Port device team_slave_0 added [ 2845.906192][ T5901] usb 4-1: string descriptor 0 read error: -22 [ 2845.906337][ T5901] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2845.906364][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2845.954173][ T7146] team0: Port device team_slave_1 added [ 2845.960691][T20671] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2845.966749][ T6313] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 2846.146483][ T7231] FAULT_INJECTION: forcing a failure. [ 2846.146483][ T7231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2846.158952][ T6313] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 2846.169059][ T7231] CPU: 1 UID: 0 PID: 7231 Comm: syz.2.9272 Not tainted syzkaller #0 PREEMPT(full) [ 2846.169088][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2846.169103][ T7231] Call Trace: [ 2846.169112][ T7231] [ 2846.169123][ T7231] dump_stack_lvl+0x189/0x250 [ 2846.169158][ T7231] ? __pfx____ratelimit+0x10/0x10 [ 2846.169189][ T7231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2846.169226][ T7231] ? __pfx__printk+0x10/0x10 [ 2846.169263][ T7231] should_fail_ex+0x414/0x560 [ 2846.169303][ T7231] _copy_to_user+0x31/0xb0 [ 2846.169334][ T7231] simple_read_from_buffer+0xe1/0x170 [ 2846.169374][ T7231] proc_fail_nth_read+0x1b3/0x220 [ 2846.169406][ T7231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2846.169438][ T7231] ? rw_verify_area+0x2a6/0x4d0 [ 2846.169466][ T7231] ? __lock_acquire+0xab9/0xd20 [ 2846.169486][ T7231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2846.169515][ T7231] vfs_read+0x200/0xa30 [ 2846.169542][ T7231] ? fdget_pos+0x247/0x320 [ 2846.169568][ T7231] ? __pfx___mutex_lock+0x10/0x10 [ 2846.169589][ T7231] ? __pfx_vfs_read+0x10/0x10 [ 2846.169621][ T7231] ? __fget_files+0x2a/0x420 [ 2846.169646][ T7231] ? __fget_files+0x3a0/0x420 [ 2846.169666][ T7231] ? __fget_files+0x2a/0x420 [ 2846.169697][ T7231] ksys_read+0x145/0x250 [ 2846.169730][ T7231] ? __pfx_ksys_read+0x10/0x10 [ 2846.169761][ T7231] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2846.169801][ T7231] ? lockdep_hardirqs_on+0x9c/0x150 [ 2846.169845][ T7231] __do_fast_syscall_32+0xb6/0x2b0 [ 2846.169870][ T7231] ? lockdep_hardirqs_on+0x9c/0x150 [ 2846.169912][ T7231] do_fast_syscall_32+0x34/0x80 [ 2846.169936][ T7231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2846.169967][ T7231] RIP: 0023:0xf6ffd539 [ 2846.169989][ T7231] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2846.170017][ T7231] RSP: 002b:00000000f53ed590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2846.170045][ T7231] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53ed620 [ 2846.170063][ T7231] RDX: 000000000000000f RSI: 00000000f7396ff4 RDI: 0000000000000000 [ 2846.170079][ T7231] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2846.170093][ T7231] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2846.170109][ T7231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2846.170147][ T7231] [ 2846.425522][ T5901] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 2846.469512][ T5901] usb 4-1: USB disconnect, device number 92 [ 2846.503992][T23581] Bluetooth: hci5: command tx timeout [ 2846.527657][T20671] usb 3-1: USB disconnect, device number 60 [ 2846.758462][ T6313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2846.766733][ T6313] usb 1-1: Product: syz [ 2846.777062][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2846.788564][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2846.831688][ T6313] usb 1-1: Manufacturer: syz [ 2846.846622][ T6313] usb 1-1: SerialNumber: syz [ 2846.851470][ T7146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2846.879538][ T6313] usb 1-1: config 0 descriptor?? [ 2846.928907][T23641] hsr_slave_0: left promiscuous mode [ 2846.936070][T23641] hsr_slave_1: left promiscuous mode [ 2846.949171][T23641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2846.966313][T23641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2847.169739][ T7263] FAULT_INJECTION: forcing a failure. [ 2847.169739][ T7263] name failslab, interval 1, probability 0, space 0, times 0 [ 2847.289760][ T7263] CPU: 1 UID: 0 PID: 7263 Comm: syz.0.9277 Not tainted syzkaller #0 PREEMPT(full) [ 2847.289782][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2847.289793][ T7263] Call Trace: [ 2847.289801][ T7263] [ 2847.289809][ T7263] dump_stack_lvl+0x189/0x250 [ 2847.289838][ T7263] ? __pfx____ratelimit+0x10/0x10 [ 2847.289861][ T7263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2847.289883][ T7263] ? __pfx__printk+0x10/0x10 [ 2847.289903][ T7263] ? __pfx___might_resched+0x10/0x10 [ 2847.289920][ T7263] ? fs_reclaim_acquire+0x7d/0x100 [ 2847.289938][ T7263] should_fail_ex+0x414/0x560 [ 2847.289966][ T7263] should_failslab+0xa8/0x100 [ 2847.289984][ T7263] __kvmalloc_node_noprof+0x158/0x910 [ 2847.290007][ T7263] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 2847.290028][ T7263] ? hash_ipmark_create+0x433/0x1080 [ 2847.290054][ T7263] ? hash_ipmark_create+0x387/0x1080 [ 2847.290098][ T7263] hash_ipmark_create+0x433/0x1080 [ 2847.290129][ T7263] ? __nla_parse+0x40/0x60 [ 2847.290147][ T7263] ? __pfx_hash_ipmark_create+0x10/0x10 [ 2847.290178][ T7263] ip_set_create+0xa97/0x1940 [ 2847.290211][ T7263] ? ip_set_create+0x4a2/0x1940 [ 2847.290254][ T7263] ? __pfx_ip_set_create+0x10/0x10 [ 2847.290304][ T7263] nfnetlink_rcv_msg+0xb4d/0x1130 [ 2847.290330][ T7263] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 2847.290367][ T7263] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2847.290389][ T7263] ? kasan_save_track+0x4f/0x80 [ 2847.290448][ T7263] netlink_rcv_skb+0x208/0x470 [ 2847.290463][ T7263] ? lockdep_hardirqs_on+0x9c/0x150 [ 2847.290486][ T7263] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2847.290511][ T7263] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2847.290536][ T7263] ? bpf_lsm_capable+0x9/0x20 [ 2847.290555][ T7263] ? security_capable+0x7e/0x2e0 [ 2847.290583][ T7263] nfnetlink_rcv+0x282/0x2590 [ 2847.290608][ T7263] ? __dev_queue_xmit+0x27b/0x3b50 [ 2847.290629][ T7263] ? __dev_queue_xmit+0x1d79/0x3b50 [ 2847.290646][ T7263] ? kasan_save_track+0x3e/0x80 [ 2847.290667][ T7263] ? __kasan_slab_alloc+0x6c/0x80 [ 2847.290697][ T7263] ? __dev_queue_xmit+0x27b/0x3b50 [ 2847.290725][ T7263] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2847.290748][ T7263] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2847.290778][ T7263] ? ref_tracker_free+0x63a/0x7d0 [ 2847.290794][ T7263] ? __asan_memcpy+0x40/0x70 [ 2847.290814][ T7263] ? __pfx_ref_tracker_free+0x10/0x10 [ 2847.290842][ T7263] ? skb_clone+0x246/0x3a0 [ 2847.290862][ T7263] ? __netlink_deliver_tap+0x807/0x850 [ 2847.290878][ T7263] ? netlink_deliver_tap+0x2e/0x1b0 [ 2847.290898][ T7263] ? netlink_deliver_tap+0x2e/0x1b0 [ 2847.290920][ T7263] netlink_unicast+0x82f/0x9e0 [ 2847.290950][ T7263] ? __pfx_netlink_unicast+0x10/0x10 [ 2847.290975][ T7263] ? netlink_sendmsg+0x642/0xb30 [ 2847.290989][ T7263] ? skb_put+0x11b/0x210 [ 2847.291008][ T7263] netlink_sendmsg+0x805/0xb30 [ 2847.291031][ T7263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2847.291049][ T7263] ? __import_iovec+0x5d4/0x7f0 [ 2847.291067][ T7263] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2847.291099][ T7263] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2847.291113][ T7263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2847.291130][ T7263] __sock_sendmsg+0x21c/0x270 [ 2847.291155][ T7263] ____sys_sendmsg+0x505/0x830 [ 2847.291177][ T7263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2847.291207][ T7263] ___sys_sendmsg+0x21f/0x2a0 [ 2847.291227][ T7263] ? __pfx____sys_sendmsg+0x10/0x10 [ 2847.291272][ T7263] ? __fget_files+0x2a/0x420 [ 2847.291286][ T7263] ? __fget_files+0x3a0/0x420 [ 2847.291309][ T7263] __sys_sendmsg+0x164/0x220 [ 2847.291328][ T7263] ? __pfx___sys_sendmsg+0x10/0x10 [ 2847.291352][ T7263] ? __pfx_ksys_write+0x10/0x10 [ 2847.291377][ T7263] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2847.291402][ T7263] ? lockdep_hardirqs_on+0x9c/0x150 [ 2847.291437][ T7263] __do_fast_syscall_32+0xb6/0x2b0 [ 2847.291452][ T7263] ? lockdep_hardirqs_on+0x9c/0x150 [ 2847.291477][ T7263] do_fast_syscall_32+0x34/0x80 [ 2847.291492][ T7263] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2847.291511][ T7263] RIP: 0023:0xf7fb1539 [ 2847.291525][ T7263] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2847.291539][ T7263] RSP: 002b:00000000f548555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2847.291556][ T7263] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 2847.291567][ T7263] RDX: 0000000020004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2847.291577][ T7263] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2847.291586][ T7263] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2847.291596][ T7263] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2847.291619][ T7263] [ 2848.146672][ T7268] binder: 7267:7268 ioctl c058534b 80000240 returned -22 [ 2849.182497][T23641] team0 (unregistering): Port device team_slave_1 removed [ 2849.287636][T23641] team0 (unregistering): Port device team_slave_0 removed [ 2850.723116][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2850.732725][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2850.759299][ T7146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2850.828776][ T6313] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 2850.851697][ T6313] peak_usb 1-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 2851.572802][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 2851.572824][ T30] audit: type=1800 audit(1764550376.918:7355): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.9288" name="bus" dev="tmpfs" ino=1155 res=0 errno=0 [ 2851.727113][ T6313] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 2851.978716][ T6313] usb 1-1: USB disconnect, device number 116 [ 2852.074309][ T5901] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 2852.265895][ T7308] syzkaller0: entered promiscuous mode [ 2852.286342][ T7308] syzkaller0: entered allmulticast mode [ 2852.345486][ T7146] hsr_slave_0: entered promiscuous mode [ 2852.353977][ T7146] hsr_slave_1: entered promiscuous mode [ 2852.377261][ T5901] usb 4-1: config 0 has an invalid interface number: 139 but max is 0 [ 2852.392470][ T5901] usb 4-1: config 0 has no interface number 0 [ 2852.452632][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9289'. [ 2852.486527][ T5901] usb 4-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2852.509783][ T7146] debugfs: 'hsr0' already exists in 'hsr' [ 2852.515683][ T7146] Cannot create hsr debugfs directory [ 2852.629857][ T5901] usb 4-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 2852.732153][ T5901] usb 4-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 2852.861662][ T5901] usb 4-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2852.934789][ T5901] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 2852.944210][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2852.967597][ T5901] usb 4-1: Product: syz [ 2852.971820][ T5901] usb 4-1: Manufacturer: syz [ 2852.995552][ T5901] usb 4-1: SerialNumber: syz [ 2853.017324][ T5901] usb 4-1: config 0 descriptor?? [ 2853.030231][ T7309] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2853.037995][ T7309] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2853.277301][ T7302] vivid-000: ================= START STATUS ================= [ 2853.309249][ T7302] vivid-000: Test Pattern: 100% Colorbar [ 2853.345594][ T7302] vivid-000: Fill Percentage of Frame: 100 [ 2853.352538][ T7302] vivid-000: Horizontal Movement: Move Right Slow [ 2853.387540][ T7302] vivid-000: Vertical Movement: Move Down Slow [ 2853.405629][ T7302] vivid-000: OSD Text Mode: All [ 2853.416376][ T7302] vivid-000: Show Border: false [ 2853.425602][ T7302] vivid-000: Show Square: false [ 2853.445534][ T7302] vivid-000: Sensor Flipped Horizontally: false [ 2853.461669][ T7302] vivid-000: Sensor Flipped Vertically: false [ 2853.485039][ T7302] vivid-000: Insert SAV Code in Image: false [ 2853.512125][ T7302] vivid-000: Insert EAV Code in Image: false [ 2853.533458][ T7302] vivid-000: Insert Video Guard Band: false [ 2853.549100][ T7302] vivid-000: Reduced Framerate: false [ 2853.564676][ T7302] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 015-0 [ 2853.572221][ T7302] vivid-000: S-Video 000-0 Is Connected To: None [ 2853.581250][ T7302] vivid-000: Enable Capture Cropping: true [ 2853.595013][ T7302] vivid-000: Enable Capture Composing: true [ 2853.610128][ T7302] vivid-000: Enable Capture Scaler: true [ 2853.633987][ T7302] vivid-000: Timestamp Source: End of Frame [ 2853.674136][ T7302] vivid-000: Colorspace: Rec. 709 [ 2853.689065][ T7302] vivid-000: Transfer Function: Default [ 2853.714200][ T7302] vivid-000: Y'CbCr Encoding: Default [ 2853.807317][ T7302] vivid-000: HSV Encoding: Hue 0-179 [ 2853.817287][ T7302] vivid-000: Quantization: Default [ 2853.828534][ T7302] vivid-000: Apply Alpha To Red Only: false [ 2853.836817][ T7302] vivid-000: Standard Aspect Ratio: 4x3 [ 2853.847922][ T7302] vivid-000: DV Timings Signal Mode: Current DV Timings [ 2853.861201][ T7302] vivid-000: DV Timings: 640x480p59 inactive [ 2853.871843][ T7302] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2853.883256][ T7302] vivid-000: Maximum EDID Blocks: 2 [ 2853.892037][ T7302] vivid-000: Limited RGB Range (16-235): true [ 2853.900579][ T7302] vivid-000: Rx RGB Quantization Range: Automatic [ 2853.918528][ T7302] vivid-000: Power Present: 0x00000001 [ 2853.935350][ T7302] tpg source WxH: 1280x720 (Y'CbCr) [ 2853.943294][ T7302] tpg field: 1 [ 2853.948951][ T7302] tpg crop: (0,0)/64x64 [ 2853.955742][ T7302] tpg compose: (0,0)/16x16 [ 2853.962379][ T7302] tpg colorspace: 3 [ 2853.968349][ T7302] tpg transfer function: 0/2 [ 2853.975585][ T7302] tpg Y'CbCr encoding: 0/1 [ 2853.981242][ T7302] tpg quantization: 0/1 [ 2853.985768][ T7302] tpg RGB range: 0/1 [ 2853.992432][ T7302] vivid-000: ================== END STATUS ================== [ 2854.022922][ T5901] mct_u232 4-1:0.139: MCT U232 converter detected [ 2854.201329][ T5901] usb 4-1: MCT U232 converter now attached to ttyUSB0 [ 2854.359174][ T5901] usb 4-1: USB disconnect, device number 93 [ 2854.444042][ T5901] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 2854.611327][ T5901] mct_u232 4-1:0.139: device disconnected [ 2854.945741][ T7344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9296'. [ 2855.016935][ T7344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9296'. [ 2857.641857][T23641] IPVS: stop unused estimator thread 0... [ 2857.994457][T30864] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2858.155167][T30864] usb 4-1: Using ep0 maxpacket: 32 [ 2858.164148][T30864] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 2858.180110][T30864] usb 4-1: config 0 has no interface number 0 [ 2858.239596][ T7367] libceph: resolve '0' (ret=-3): failed [ 2858.249890][T30864] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2858.263562][T30864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2858.283977][T30864] usb 4-1: Product: syz [ 2858.316361][T30864] usb 4-1: Manufacturer: syz [ 2858.339447][T30864] usb 4-1: SerialNumber: syz [ 2858.368184][T30864] usb 4-1: config 0 descriptor?? [ 2858.396220][T30864] smsc95xx v2.0.0 [ 2858.763577][ T7146] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2858.794128][ T7146] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2858.826052][ T7146] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2858.841341][T30864] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2858.855137][T30864] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2858.883871][ T7146] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2859.319232][ T7146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2859.429047][ T7146] 8021q: adding VLAN 0 to HW filter on device team0 [ 2859.491421][ T7923] bridge0: port 1(bridge_slave_0) entered blocking state [ 2859.498663][ T7923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2859.571928][T17973] bridge0: port 2(bridge_slave_1) entered blocking state [ 2859.579161][T17973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2859.973621][ T7146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2860.260551][ T7146] veth0_vlan: entered promiscuous mode [ 2860.299601][ T7146] veth1_vlan: entered promiscuous mode [ 2860.306820][ T7354] Cannot find add_set index 0 as target [ 2860.549216][ T7146] veth0_macvtap: entered promiscuous mode [ 2860.643442][ T7146] veth1_macvtap: entered promiscuous mode [ 2860.807602][ T7406] pim6reg: left allmulticast mode [ 2861.284346][T22862] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 2861.451480][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2861.484430][T22862] usb 1-1: Using ep0 maxpacket: 32 [ 2861.533893][T22862] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2861.552161][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2861.561164][T22862] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 2861.623259][T22862] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2861.645295][T22862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2861.781310][T30864] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2861.792634][T30864] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 2861.804408][T22862] usb 1-1: SerialNumber: syz [ 2861.837368][T22862] cdc_acm 1-1:1.0: skipping garbage [ 2861.842684][T22862] cdc_acm 1-1:1.0: skipping garbage [ 2861.864205][T30864] usb 4-1: USB disconnect, device number 94 [ 2861.879157][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2861.959702][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2861.969966][T22862] cdc_acm 1-1:1.0: invalid descriptor buffer length [ 2862.006111][T22862] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 2862.013988][T22862] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 2862.029513][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2862.040058][T22862] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 2862.058503][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2862.329060][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2862.353244][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2862.510144][T23641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2862.522782][T23641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2862.911474][T30864] usb 1-1: USB disconnect, device number 117 [ 2864.286715][ T7466] FAULT_INJECTION: forcing a failure. [ 2864.286715][ T7466] name failslab, interval 1, probability 0, space 0, times 0 [ 2864.301971][ T7466] CPU: 0 UID: 0 PID: 7466 Comm: syz.1.9318 Not tainted syzkaller #0 PREEMPT(full) [ 2864.302003][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2864.302017][ T7466] Call Trace: [ 2864.302026][ T7466] [ 2864.302036][ T7466] dump_stack_lvl+0x189/0x250 [ 2864.302073][ T7466] ? __pfx____ratelimit+0x10/0x10 [ 2864.302104][ T7466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2864.302135][ T7466] ? __pfx__printk+0x10/0x10 [ 2864.302163][ T7466] ? __pfx___might_resched+0x10/0x10 [ 2864.302186][ T7466] ? fs_reclaim_acquire+0x7d/0x100 [ 2864.302210][ T7466] should_fail_ex+0x414/0x560 [ 2864.302250][ T7466] should_failslab+0xa8/0x100 [ 2864.302276][ T7466] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2864.302309][ T7466] ? io_setxattr_prep+0x1bd/0x330 [ 2864.302343][ T7466] io_setxattr_prep+0x1bd/0x330 [ 2864.302379][ T7466] io_submit_sqes+0x935/0x1e60 [ 2864.302443][ T7466] __se_sys_io_uring_enter+0x2df/0x2b20 [ 2864.302496][ T7466] ? ksys_write+0x1cb/0x250 [ 2864.302532][ T7466] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 2864.302570][ T7466] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2864.302605][ T7466] ? __pfx_vfs_write+0x10/0x10 [ 2864.302640][ T7466] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2864.302679][ T7466] ? __fget_files+0x3a0/0x420 [ 2864.302710][ T7466] ? fput+0xa0/0xd0 [ 2864.302736][ T7466] ? ksys_write+0x22a/0x250 [ 2864.302766][ T7466] ? exc_page_fault+0x82/0x100 [ 2864.302798][ T7466] ? __pfx_ksys_write+0x10/0x10 [ 2864.302832][ T7466] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2864.302869][ T7466] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 2864.302904][ T7466] __do_fast_syscall_32+0xb6/0x2b0 [ 2864.302926][ T7466] ? lockdep_hardirqs_on+0x9c/0x150 [ 2864.302962][ T7466] do_fast_syscall_32+0x34/0x80 [ 2864.302984][ T7466] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2864.303011][ T7466] RIP: 0023:0xf704d539 [ 2864.303029][ T7466] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2864.303048][ T7466] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 2864.303072][ T7466] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000046bc [ 2864.303087][ T7466] RDX: 0000000000000003 RSI: 0000000000000020 RDI: 0000000000000000 [ 2864.303101][ T7466] RBP: 0000000000000020 R08: 0000000000000000 R09: 0000000000000000 [ 2864.303114][ T7466] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2864.303127][ T7466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2864.303161][ T7466] [ 2865.524830][T27647] Bluetooth: hci0: command 0x0406 tx timeout [ 2866.457941][ T7506] libceph: resolve '0' (ret=-3): failed [ 2867.335913][ T7510] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 2867.349078][ T7510] batman_adv: batadv0: Adding interface: ip6gretap1 [ 2867.355940][ T7510] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2867.418710][ T7510] batman_adv: batadv0: Interface activated: ip6gretap1 [ 2868.235024][T30864] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 2868.491485][T30864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2868.533495][T30864] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2868.554148][T30864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2868.581446][T30864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2868.591857][T30864] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2868.631768][T30864] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2868.654496][T30864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2868.672365][T30864] usb 2-1: Product: syz [ 2868.706971][T30864] usb 2-1: Manufacturer: syz [ 2868.711634][T30864] usb 2-1: SerialNumber: syz [ 2868.755130][T30864] usb 2-1: config 0 descriptor?? [ 2868.985299][T30864] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2869.012695][T30864] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2869.198965][T30864] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 2869.227542][T30864] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2869.268061][T30864] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2869.405286][T30864] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 2870.989477][T30864] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 2871.051541][T30864] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 2871.735381][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.741981][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.748705][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.755258][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.761753][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.768307][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.774886][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.781437][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.787973][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.794533][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.801040][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.807655][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.814141][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.820666][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.827188][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.833684][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.840211][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.846745][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.853224][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.859789][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.866322][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.872809][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.879341][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.885870][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.892355][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.898881][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.905438][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.911953][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.918473][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.924986][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.931569][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.938136][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.944701][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.951210][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.957726][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.964203][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.970764][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.977306][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.983789][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.990314][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2871.996836][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.003330][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.009858][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.016417][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.022923][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.029450][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.035983][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.042469][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.048995][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.055508][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.061994][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.068516][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.075057][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.081567][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.088088][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.094694][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.101209][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.107776][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.114330][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.120873][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.127390][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.133877][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.140405][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.146973][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.155816][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.162358][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.168878][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.175447][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.181966][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.188489][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.195063][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.201575][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.208102][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.214624][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.221129][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.227669][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.234155][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.240712][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.247235][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.253720][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.260243][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.266803][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.273293][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.279807][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.286330][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.292827][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.299349][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.305859][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.312339][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.318886][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.325407][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.331884][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.338459][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.344998][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.351474][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.357992][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.364506][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.370989][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.377507][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.384020][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.390555][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.397103][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.403597][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.410128][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.416662][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.423142][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.429676][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.436194][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.442681][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.449242][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.455769][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.462278][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.468806][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.475355][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.481844][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.488363][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.494912][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.501422][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.507937][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.514499][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.520990][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.527511][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.534024][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.540613][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.547169][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.553698][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.560219][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.566735][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.575648][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.582189][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.588801][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.595353][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.601880][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.608393][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.614908][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.621445][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.628039][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.634656][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.641182][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.647710][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.654188][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.660725][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.667253][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.673742][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.680299][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.686835][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.693341][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.699959][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.706492][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.712985][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.719513][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.726028][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.732516][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.739045][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.745587][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.752079][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.758629][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.765146][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.771633][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.778148][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.784663][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.791153][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.797686][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.804183][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.810753][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.817353][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.824067][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.830638][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.837269][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.843794][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.850340][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.856934][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.863450][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.870102][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.876757][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.883279][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.889833][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.896377][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.902889][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.909446][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.916022][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.922532][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.929073][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.935671][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.942237][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.948867][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.955448][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.961959][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.968499][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.975045][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.981531][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.988068][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2872.996764][ C0] vcan0: j1939_tp_txtimer: 0xffff88805c277c00: tx aborted with unknown reason: -2 [ 2873.025690][T20680] usb 2-1: USB disconnect, device number 82 [ 2873.506143][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c277c00: abort rx timeout. Force session deactivation [ 2873.688886][ T7576] binder: 7575:7576 ioctl c058534b 80000240 returned -22 [ 2875.614407][T31668] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2875.784406][T31668] usb 6-1: Using ep0 maxpacket: 32 [ 2875.792725][T31668] usb 6-1: config 0 has an invalid interface number: 169 but max is 0 [ 2875.802702][T31668] usb 6-1: config 0 has no interface number 0 [ 2875.815787][T31668] usb 6-1: config 0 interface 169 has no altsetting 0 [ 2875.832673][T31668] usb 6-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 2875.853718][T31668] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2875.896971][T31668] usb 6-1: Product: syz [ 2875.907001][T31668] usb 6-1: Manufacturer: syz [ 2875.918429][T31668] usb 6-1: SerialNumber: syz [ 2875.937074][T31668] usb 6-1: config 0 descriptor?? [ 2875.951807][T31668] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2875.999567][ T7610] FAULT_INJECTION: forcing a failure. [ 2875.999567][ T7610] name failslab, interval 1, probability 0, space 0, times 0 [ 2876.027765][ T7610] CPU: 0 UID: 0 PID: 7610 Comm: syz.3.9346 Not tainted syzkaller #0 PREEMPT(full) [ 2876.027796][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2876.027810][ T7610] Call Trace: [ 2876.027820][ T7610] [ 2876.027830][ T7610] dump_stack_lvl+0x189/0x250 [ 2876.027864][ T7610] ? __pfx____ratelimit+0x10/0x10 [ 2876.027896][ T7610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2876.027927][ T7610] ? __pfx__printk+0x10/0x10 [ 2876.027950][ T7610] ? __pfx___might_resched+0x10/0x10 [ 2876.027968][ T7610] ? fs_reclaim_acquire+0x7d/0x100 [ 2876.027986][ T7610] should_fail_ex+0x414/0x560 [ 2876.028014][ T7610] should_failslab+0xa8/0x100 [ 2876.028032][ T7610] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2876.028053][ T7610] ? vm_area_alloc+0x24/0x140 [ 2876.028071][ T7610] vm_area_alloc+0x24/0x140 [ 2876.028087][ T7610] mmap_region+0xdcd/0x2110 [ 2876.028119][ T7610] ? __pfx_mmap_region+0x10/0x10 [ 2876.028192][ T7610] ? mm_get_unmapped_area+0xa7/0xd0 [ 2876.028224][ T7610] ? bpf_lsm_mmap_addr+0x9/0x20 [ 2876.028242][ T7610] ? security_mmap_addr+0x71/0x270 [ 2876.028270][ T7610] ? shmem_mapping+0xd/0x50 [ 2876.028287][ T7610] ? memfd_check_seals_mmap+0x165/0x200 [ 2876.028308][ T7610] do_mmap+0xc45/0x10d0 [ 2876.028335][ T7610] ? __pfx_mtree_load+0x10/0x10 [ 2876.028357][ T7610] ? __pfx_do_mmap+0x10/0x10 [ 2876.028380][ T7610] ? common_file_perm+0x1b5/0x230 [ 2876.028409][ T7610] __se_sys_remap_file_pages+0x75b/0x820 [ 2876.028443][ T7610] ? __pfx___se_sys_remap_file_pages+0x10/0x10 [ 2876.028467][ T7610] ? ksys_write+0x22a/0x250 [ 2876.028488][ T7610] ? exc_page_fault+0x82/0x100 [ 2876.028513][ T7610] ? __pfx_ksys_write+0x10/0x10 [ 2876.028537][ T7610] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2876.028561][ T7610] ? lockdep_hardirqs_on+0x9c/0x150 [ 2876.028581][ T7610] ? __ia32_sys_remap_file_pages+0x20/0xc0 [ 2876.028606][ T7610] __do_fast_syscall_32+0xb6/0x2b0 [ 2876.028621][ T7610] ? lockdep_hardirqs_on+0x9c/0x150 [ 2876.028647][ T7610] do_fast_syscall_32+0x34/0x80 [ 2876.028661][ T7610] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2876.028680][ T7610] RIP: 0023:0xf7f66539 [ 2876.028694][ T7610] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2876.028707][ T7610] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 2876.028723][ T7610] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000003000 [ 2876.028734][ T7610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2876.028743][ T7610] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2876.028752][ T7610] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2876.028761][ T7610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2876.028783][ T7610] [ 2876.428407][ T7614] futex_wake_op: syz.5.9344 tries to shift op by 32; fix this program [ 2876.837839][ T7620] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9349'. [ 2877.984133][ T7642] binder: 7640:7642 ioctl c0306201 800001c0 returned -14 [ 2878.431301][ T6313] usb 6-1: USB disconnect, device number 4 [ 2879.014389][ T6313] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2879.047747][ T7660] FAULT_INJECTION: forcing a failure. [ 2879.047747][ T7660] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2879.069347][ T7660] CPU: 1 UID: 0 PID: 7660 Comm: syz.0.9361 Not tainted syzkaller #0 PREEMPT(full) [ 2879.069379][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2879.069390][ T7660] Call Trace: [ 2879.069397][ T7660] [ 2879.069404][ T7660] dump_stack_lvl+0x189/0x250 [ 2879.069430][ T7660] ? __pfx____ratelimit+0x10/0x10 [ 2879.069453][ T7660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2879.069474][ T7660] ? __pfx__printk+0x10/0x10 [ 2879.069491][ T7660] ? fs_reclaim_acquire+0x7d/0x100 [ 2879.069513][ T7660] should_fail_ex+0x414/0x560 [ 2879.069541][ T7660] prepare_alloc_pages+0x213/0x610 [ 2879.069562][ T7660] __alloc_frozen_pages_noprof+0x123/0x370 [ 2879.069581][ T7660] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2879.069605][ T7660] ? policy_nodemask+0x27c/0x720 [ 2879.069618][ T7660] ? __lock_acquire+0xab9/0xd20 [ 2879.069638][ T7660] alloc_pages_mpol+0x232/0x4a0 [ 2879.069657][ T7660] vma_alloc_folio_noprof+0xe4/0x200 [ 2879.069672][ T7660] ? page_table_check_set+0x18d/0x730 [ 2879.069695][ T7660] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2879.069720][ T7660] folio_prealloc+0x30/0x180 [ 2879.069744][ T7660] __handle_mm_fault+0x2a8b/0x5400 [ 2879.069777][ T7660] ? __pfx___handle_mm_fault+0x10/0x10 [ 2879.069808][ T7660] ? follow_page_pte+0x7ef/0x13e0 [ 2879.069835][ T7660] handle_mm_fault+0x40a/0x8e0 [ 2879.069864][ T7660] __get_user_pages+0x165c/0x2a00 [ 2879.069908][ T7660] __gup_longterm_locked+0x3dc/0x1660 [ 2879.069942][ T7660] ? gup_fast_fallback+0x1b86/0x22d0 [ 2879.069971][ T7660] gup_fast_fallback+0x1d65/0x22d0 [ 2879.070019][ T7660] ? __pfx_gup_fast_fallback+0x10/0x10 [ 2879.070046][ T7660] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 2879.070069][ T7660] ? is_valid_gup_args+0x11f/0x200 [ 2879.070091][ T7660] ? pin_user_pages_fast+0x4d/0xb0 [ 2879.070113][ T7660] io_pin_pages+0xba/0x1b0 [ 2879.070132][ T7660] io_sqe_buffer_register+0x16f/0x20a0 [ 2879.070169][ T7660] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 2879.070191][ T7660] ? copy_compat_iovec_from_user+0xf8/0x140 [ 2879.070215][ T7660] ? iovec_from_user+0x1ba/0x250 [ 2879.070238][ T7660] io_sqe_buffers_register+0x3b9/0x8e0 [ 2879.070266][ T7660] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 2879.070286][ T7660] ? __fget_files+0x3a0/0x420 [ 2879.070300][ T7660] ? __fget_files+0x2a/0x420 [ 2879.070317][ T7660] ? io_is_uring_fops+0xd/0x50 [ 2879.070340][ T7660] __se_sys_io_uring_register+0x9d3/0x11f0 [ 2879.070366][ T7660] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 2879.070382][ T7660] ? ksys_write+0x22a/0x250 [ 2879.070403][ T7660] ? exc_page_fault+0x82/0x100 [ 2879.070426][ T7660] ? __pfx_ksys_write+0x10/0x10 [ 2879.070449][ T7660] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2879.070474][ T7660] ? lockdep_hardirqs_on+0x9c/0x150 [ 2879.070499][ T7660] __do_fast_syscall_32+0xb6/0x2b0 [ 2879.070513][ T7660] ? lockdep_hardirqs_on+0x9c/0x150 [ 2879.070538][ T7660] do_fast_syscall_32+0x34/0x80 [ 2879.070552][ T7660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2879.070571][ T7660] RIP: 0023:0xf7fb1539 [ 2879.070584][ T7660] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2879.070598][ T7660] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab [ 2879.070614][ T7660] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2879.070624][ T7660] RDX: 00000000800002c0 RSI: 000000000000011a RDI: 0000000000000000 [ 2879.070634][ T7660] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2879.070643][ T7660] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2879.070651][ T7660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2879.070674][ T7660] [ 2879.405952][ T7663] FAULT_INJECTION: forcing a failure. [ 2879.405952][ T7663] name failslab, interval 1, probability 0, space 0, times 0 [ 2879.445828][ T7663] CPU: 1 UID: 0 PID: 7663 Comm: syz.2.9362 Not tainted syzkaller #0 PREEMPT(full) [ 2879.445861][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2879.445871][ T7663] Call Trace: [ 2879.445878][ T7663] [ 2879.445886][ T7663] dump_stack_lvl+0x189/0x250 [ 2879.445912][ T7663] ? __pfx____ratelimit+0x10/0x10 [ 2879.445940][ T7663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2879.445964][ T7663] ? __pfx__printk+0x10/0x10 [ 2879.445978][ T7663] ? netlink_sendmsg+0x805/0xb30 [ 2879.445996][ T7663] ? __sys_sendmsg+0x164/0x220 [ 2879.446012][ T7663] ? do_fast_syscall_32+0x34/0x80 [ 2879.446033][ T7663] should_fail_ex+0x414/0x560 [ 2879.446064][ T7663] should_failslab+0xa8/0x100 [ 2879.446082][ T7663] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2879.446105][ T7663] ? skb_clone+0x212/0x3a0 [ 2879.446127][ T7663] skb_clone+0x212/0x3a0 [ 2879.446148][ T7663] __netlink_deliver_tap+0x404/0x850 [ 2879.446174][ T7663] ? netlink_deliver_tap+0x2e/0x1b0 [ 2879.446191][ T7663] netlink_deliver_tap+0x19c/0x1b0 [ 2879.446209][ T7663] netlink_sendskb+0x68/0x140 [ 2879.446236][ T7663] netlink_unicast+0x397/0x9e0 [ 2879.446258][ T7663] ? __asan_memcpy+0x40/0x70 [ 2879.446285][ T7663] ? __pfx_netlink_unicast+0x10/0x10 [ 2879.446316][ T7663] netlink_rcv_skb+0x28c/0x470 [ 2879.446330][ T7663] ? __lock_acquire+0xab9/0xd20 [ 2879.446346][ T7663] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2879.446370][ T7663] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2879.446400][ T7663] ? down_read+0x1ad/0x2e0 [ 2879.446418][ T7663] genl_rcv+0x28/0x40 [ 2879.446436][ T7663] netlink_unicast+0x82f/0x9e0 [ 2879.446467][ T7663] ? __pfx_netlink_unicast+0x10/0x10 [ 2879.446494][ T7663] ? netlink_sendmsg+0x642/0xb30 [ 2879.446509][ T7663] ? skb_put+0x11b/0x210 [ 2879.446527][ T7663] netlink_sendmsg+0x805/0xb30 [ 2879.446550][ T7663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2879.446568][ T7663] ? __import_iovec+0x5d4/0x7f0 [ 2879.446585][ T7663] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2879.446610][ T7663] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2879.446625][ T7663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2879.446650][ T7663] __sock_sendmsg+0x21c/0x270 [ 2879.446674][ T7663] ____sys_sendmsg+0x505/0x830 [ 2879.446696][ T7663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2879.446726][ T7663] ___sys_sendmsg+0x21f/0x2a0 [ 2879.446748][ T7663] ? __pfx____sys_sendmsg+0x10/0x10 [ 2879.446794][ T7663] ? __fget_files+0x2a/0x420 [ 2879.446808][ T7663] ? __fget_files+0x3a0/0x420 [ 2879.446831][ T7663] __sys_sendmsg+0x164/0x220 [ 2879.446853][ T7663] ? __pfx___sys_sendmsg+0x10/0x10 [ 2879.446877][ T7663] ? __pfx_ksys_write+0x10/0x10 [ 2879.446902][ T7663] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2879.446932][ T7663] ? lockdep_hardirqs_on+0x9c/0x150 [ 2879.446959][ T7663] __do_fast_syscall_32+0xb6/0x2b0 [ 2879.446975][ T7663] ? lockdep_hardirqs_on+0x9c/0x150 [ 2879.447001][ T7663] do_fast_syscall_32+0x34/0x80 [ 2879.447015][ T7663] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2879.447034][ T7663] RIP: 0023:0xf6ffd539 [ 2879.447047][ T7663] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2879.447060][ T7663] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2879.447077][ T7663] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 2879.447088][ T7663] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2879.447098][ T7663] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2879.447107][ T7663] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2879.447116][ T7663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2879.447142][ T7663] [ 2879.484360][ T6313] usb 6-1: Using ep0 maxpacket: 8 [ 2880.269353][ T6313] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2880.299746][ T6313] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2880.330843][ T6313] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2880.363971][ T6313] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2880.385757][ T6313] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2880.395334][ T6313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2880.902591][ T6313] usb 6-1: usb_control_msg returned -71 [ 2880.934430][ T6313] usbtmc 6-1:16.0: can't read capabilities [ 2881.001847][ T6313] usb 6-1: USB disconnect, device number 5 [ 2881.192008][ T7680] FAULT_INJECTION: forcing a failure. [ 2881.192008][ T7680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2881.205443][ T7680] CPU: 0 UID: 0 PID: 7680 Comm: syz.5.9366 Not tainted syzkaller #0 PREEMPT(full) [ 2881.205472][ T7680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2881.205486][ T7680] Call Trace: [ 2881.205496][ T7680] [ 2881.205506][ T7680] dump_stack_lvl+0x189/0x250 [ 2881.205543][ T7680] ? __pfx____ratelimit+0x10/0x10 [ 2881.205576][ T7680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2881.205607][ T7680] ? __pfx__printk+0x10/0x10 [ 2881.205635][ T7680] ? __might_fault+0xb0/0x130 [ 2881.205676][ T7680] should_fail_ex+0x414/0x560 [ 2881.205716][ T7680] _copy_from_user+0x2d/0xb0 [ 2881.205748][ T7680] move_addr_to_kernel+0x7e/0x160 [ 2881.205781][ T7680] get_compat_msghdr+0x3bd/0x4a0 [ 2881.205822][ T7680] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2881.205862][ T7680] ___sys_sendmsg+0x193/0x2a0 [ 2881.205891][ T7680] ? __pfx____sys_sendmsg+0x10/0x10 [ 2881.205919][ T7680] ? __lock_acquire+0xab9/0xd20 [ 2881.205975][ T7680] ? __fget_files+0x2a/0x420 [ 2881.205998][ T7680] ? __fget_files+0x3a0/0x420 [ 2881.206031][ T7680] __sys_sendmmsg+0x28e/0x430 [ 2881.206064][ T7680] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2881.206088][ T7680] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2881.206152][ T7680] ? ksys_write+0x22a/0x250 [ 2881.206187][ T7680] ? __pfx_ksys_write+0x10/0x10 [ 2881.206226][ T7680] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2881.206255][ T7680] __do_fast_syscall_32+0xb6/0x2b0 [ 2881.206278][ T7680] ? lockdep_hardirqs_on+0x9c/0x150 [ 2881.206316][ T7680] do_fast_syscall_32+0x34/0x80 [ 2881.206338][ T7680] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2881.206365][ T7680] RIP: 0023:0xf704d539 [ 2881.206384][ T7680] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2881.206405][ T7680] RSP: 002b:00000000f53fb55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2881.206429][ T7680] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800016c0 [ 2881.206445][ T7680] RDX: 0000000000000001 RSI: 0000000000008006 RDI: 0000000000000000 [ 2881.206459][ T7680] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2881.206473][ T7680] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2881.206487][ T7680] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2881.206520][ T7680] [ 2881.740720][ T7683] netlink: 15976 bytes leftover after parsing attributes in process `syz.3.9365'. [ 2882.826655][ T7705] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2884.648666][T27647] Bluetooth: hci3: command 0x0406 tx timeout [ 2885.860267][ T7739] FAULT_INJECTION: forcing a failure. [ 2885.860267][ T7739] name failslab, interval 1, probability 0, space 0, times 0 [ 2885.873438][ T7739] CPU: 0 UID: 0 PID: 7739 Comm: syz.0.9380 Not tainted syzkaller #0 PREEMPT(full) [ 2885.873469][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2885.873483][ T7739] Call Trace: [ 2885.873492][ T7739] [ 2885.873502][ T7739] dump_stack_lvl+0x189/0x250 [ 2885.873536][ T7739] ? __pfx____ratelimit+0x10/0x10 [ 2885.873566][ T7739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2885.873606][ T7739] ? __pfx__printk+0x10/0x10 [ 2885.873626][ T7739] ? __sock_sendmsg+0x21c/0x270 [ 2885.873656][ T7739] ? __do_fast_syscall_32+0xb6/0x2b0 [ 2885.873676][ T7739] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2885.873710][ T7739] should_fail_ex+0x414/0x560 [ 2885.873748][ T7739] should_failslab+0xa8/0x100 [ 2885.873773][ T7739] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2885.873804][ T7739] ? skb_clone+0x212/0x3a0 [ 2885.873834][ T7739] skb_clone+0x212/0x3a0 [ 2885.873862][ T7739] __netlink_deliver_tap+0x404/0x850 [ 2885.873898][ T7739] ? netlink_deliver_tap+0x2e/0x1b0 [ 2885.873921][ T7739] netlink_deliver_tap+0x19c/0x1b0 [ 2885.873945][ T7739] netlink_sendskb+0x68/0x140 [ 2885.873979][ T7739] netlink_unicast+0x397/0x9e0 [ 2885.874009][ T7739] ? __asan_memcpy+0x40/0x70 [ 2885.874047][ T7739] ? __pfx_netlink_unicast+0x10/0x10 [ 2885.874091][ T7739] netlink_rcv_skb+0x28c/0x470 [ 2885.874115][ T7739] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2885.874150][ T7739] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2885.874184][ T7739] ? netlink_deliver_tap+0x2e/0x1b0 [ 2885.874221][ T7739] netlink_unicast+0x82f/0x9e0 [ 2885.874263][ T7739] ? __pfx_netlink_unicast+0x10/0x10 [ 2885.874297][ T7739] ? netlink_sendmsg+0x642/0xb30 [ 2885.874318][ T7739] ? skb_put+0x11b/0x210 [ 2885.874345][ T7739] netlink_sendmsg+0x805/0xb30 [ 2885.874379][ T7739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2885.874405][ T7739] ? __import_iovec+0x5d4/0x7f0 [ 2885.874431][ T7739] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2885.874466][ T7739] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2885.874489][ T7739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2885.874513][ T7739] __sock_sendmsg+0x21c/0x270 [ 2885.874547][ T7739] ____sys_sendmsg+0x505/0x830 [ 2885.874586][ T7739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2885.874631][ T7739] ___sys_sendmsg+0x21f/0x2a0 [ 2885.874659][ T7739] ? __pfx____sys_sendmsg+0x10/0x10 [ 2885.874724][ T7739] ? __fget_files+0x2a/0x420 [ 2885.874744][ T7739] ? __fget_files+0x3a0/0x420 [ 2885.874778][ T7739] __sys_sendmsg+0x164/0x220 [ 2885.874804][ T7739] ? __pfx___sys_sendmsg+0x10/0x10 [ 2885.874839][ T7739] ? __pfx_ksys_write+0x10/0x10 [ 2885.874874][ T7739] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2885.874910][ T7739] ? lockdep_hardirqs_on+0x9c/0x150 [ 2885.874945][ T7739] __do_fast_syscall_32+0xb6/0x2b0 [ 2885.874967][ T7739] ? lockdep_hardirqs_on+0x9c/0x150 [ 2885.875004][ T7739] do_fast_syscall_32+0x34/0x80 [ 2885.875026][ T7739] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2885.875052][ T7739] RIP: 0023:0xf7fb1539 [ 2885.875071][ T7739] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2885.875090][ T7739] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2885.875114][ T7739] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 2885.875130][ T7739] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2885.875144][ T7739] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2885.875157][ T7739] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2885.875171][ T7739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2885.875204][ T7739] [ 2886.544373][ T6313] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 2886.696809][ T6313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2886.707896][T31668] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2886.720836][ T6313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2886.744730][T20659] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 2886.745226][ T6313] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2886.828844][ T6313] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2886.848785][ T6313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2886.862138][ T7752] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9383'. [ 2886.874015][ T6313] usb 1-1: config 0 descriptor?? [ 2886.879297][T31668] usb 2-1: Using ep0 maxpacket: 8 [ 2886.889410][T31668] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 2886.899924][T31668] usb 2-1: config 0 has no interface number 0 [ 2886.918346][T22862] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 2886.919987][T31668] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2886.943411][T31668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2886.952002][T31668] usb 2-1: Product: syz [ 2886.960849][T31668] usb 2-1: Manufacturer: syz [ 2886.965963][T31668] usb 2-1: SerialNumber: syz [ 2886.977263][T31668] usb 2-1: config 0 descriptor?? [ 2887.095826][T22862] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2887.107207][T22862] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2887.126384][T22862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2887.142803][T22862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2887.153189][T22862] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2887.176679][T22862] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2887.186181][T22862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2887.195784][T22862] usb 6-1: Product: syz [ 2887.200011][T22862] usb 6-1: Manufacturer: syz [ 2887.205023][T22862] usb 6-1: SerialNumber: syz [ 2887.219402][T22862] usb 6-1: config 0 descriptor?? [ 2887.229657][ T7740] batadv_slave_0: entered promiscuous mode [ 2887.241096][ T7740] batman_adv: batadv0: Adding interface: macvtap1 [ 2887.261167][ T7740] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2887.303191][ T6313] plantronics 0003:047F:FFFF.0060: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2887.327383][ T7740] batman_adv: batadv0: Interface activated: macvtap1 [ 2887.360888][ T7767] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9379'. [ 2887.461992][T22862] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2887.483215][T22862] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2887.662961][T22862] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 2887.781394][T31668] uvcvideo 2-1:0.31: Found Unit with invalid ID 0 [ 2887.788265][T22862] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2887.802659][T31668] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2887.802775][T31668] uvcvideo 2-1:0.31: No valid video chain found. [ 2887.813901][T31668] usb 2-1: USB disconnect, device number 83 [ 2887.827610][T22862] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2887.871191][T22862] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 2888.309988][ T7776] tipc: Started in network mode [ 2888.317160][ T7776] tipc: Node identity 8eec34694251, cluster identity 4711 [ 2888.355272][ T7776] tipc: Enabled bearer , priority 0 [ 2888.386024][ T7776] syzkaller0: entered promiscuous mode [ 2888.391617][ T7776] syzkaller0: entered allmulticast mode [ 2888.402156][T30864] usb 1-1: USB disconnect, device number 118 [ 2888.419381][ T7776] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2888.537124][ T7776] tipc: Resetting bearer [ 2888.650731][ T7775] tipc: Resetting bearer [ 2888.837323][ T7775] tipc: Disabling bearer [ 2889.297531][T22862] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 2889.329365][T22862] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 2889.376756][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9391'. [ 2889.754842][T22862] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2890.197183][T22862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2890.210682][T22862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2890.240258][T22862] usb 2-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 2890.254292][T22862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2890.277032][T22862] usb 2-1: config 0 descriptor?? [ 2890.313542][T22862] usbhid 2-1:0.0: can't add hid device: -22 [ 2890.322612][T22862] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 2891.433514][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9396'. [ 2891.468691][ T7811] FAULT_INJECTION: forcing a failure. [ 2891.468691][ T7811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2891.529081][ T30] audit: type=1326 audit(1764550416.888:7356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.2.9396" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x0 [ 2891.552270][ T7811] CPU: 0 UID: 0 PID: 7811 Comm: syz.0.9397 Not tainted syzkaller #0 PREEMPT(full) [ 2891.552292][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2891.552303][ T7811] Call Trace: [ 2891.552310][ T7811] [ 2891.552317][ T7811] dump_stack_lvl+0x189/0x250 [ 2891.552342][ T7811] ? __pfx____ratelimit+0x10/0x10 [ 2891.552364][ T7811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2891.552385][ T7811] ? __pfx__printk+0x10/0x10 [ 2891.552401][ T7811] ? __might_fault+0xb0/0x130 [ 2891.552431][ T7811] should_fail_ex+0x414/0x560 [ 2891.552458][ T7811] _copy_from_iter+0x1de/0x1790 [ 2891.552480][ T7811] ? rcu_is_watching+0x15/0xb0 [ 2891.552501][ T7811] ? kmalloc_reserve+0xbd/0x290 [ 2891.552517][ T7811] ? __pfx__copy_from_iter+0x10/0x10 [ 2891.552536][ T7811] ? __build_skb_around+0x262/0x3f0 [ 2891.552553][ T7811] ? netlink_sendmsg+0x642/0xb30 [ 2891.552568][ T7811] ? skb_put+0x11b/0x210 [ 2891.552585][ T7811] netlink_sendmsg+0x6b2/0xb30 [ 2891.552608][ T7811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2891.552626][ T7811] ? __import_iovec+0x5d4/0x7f0 [ 2891.552643][ T7811] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2891.552667][ T7811] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2891.552682][ T7811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2891.552698][ T7811] __sock_sendmsg+0x21c/0x270 [ 2891.552722][ T7811] ____sys_sendmsg+0x52d/0x830 [ 2891.552744][ T7811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2891.552773][ T7811] ___sys_sendmsg+0x21f/0x2a0 [ 2891.552792][ T7811] ? __pfx____sys_sendmsg+0x10/0x10 [ 2891.552810][ T7811] ? __lock_acquire+0xab9/0xd20 [ 2891.552848][ T7811] ? __fget_files+0x2a/0x420 [ 2891.552862][ T7811] ? __fget_files+0x3a0/0x420 [ 2891.552884][ T7811] __sys_sendmmsg+0x28e/0x430 [ 2891.552906][ T7811] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2891.552927][ T7811] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2891.552971][ T7811] ? ksys_write+0x22a/0x250 [ 2891.552992][ T7811] ? exc_page_fault+0x82/0x100 [ 2891.553015][ T7811] ? __pfx_ksys_write+0x10/0x10 [ 2891.553042][ T7811] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2891.553063][ T7811] __do_fast_syscall_32+0xb6/0x2b0 [ 2891.553079][ T7811] ? lockdep_hardirqs_on+0x9c/0x150 [ 2891.553105][ T7811] do_fast_syscall_32+0x34/0x80 [ 2891.553119][ T7811] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2891.553142][ T7811] RIP: 0023:0xf7fb1539 [ 2891.553157][ T7811] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2891.553172][ T7811] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2891.553189][ T7811] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000800002c0 [ 2891.553199][ T7811] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 2891.553209][ T7811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2891.553217][ T7811] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2891.553226][ T7811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2891.553249][ T7811] [ 2892.604837][T30552] usb 2-1: USB disconnect, device number 84 [ 2892.773050][T20659] usb 6-1: USB disconnect, device number 6 [ 2892.808229][T30864] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 2892.964713][T30864] usb 1-1: Using ep0 maxpacket: 8 [ 2892.976173][T30864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2892.987189][T30864] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2893.000168][T30864] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 2893.017724][T30864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2893.034317][T30864] usb 1-1: Product: syz [ 2893.042995][T30864] usb 1-1: Manufacturer: syz [ 2893.054033][T30864] usb 1-1: SerialNumber: syz [ 2893.068741][T30864] usb 1-1: config 0 descriptor?? [ 2893.109039][T30864] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 2893.318227][T30864] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 2893.327185][T30864] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 2893.432310][T30864] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2893.570933][ T7831] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9407'. [ 2895.109154][T20659] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2895.336977][T20659] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 2895.351442][T20659] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2895.384701][T20659] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 2895.395687][T20659] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 2895.414504][T20659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2895.685315][T30552] usb 1-1: USB disconnect, device number 119 [ 2895.721063][ T7850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2895.755090][ T7850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2896.654612][ T6313] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2896.814675][ T6313] usb 6-1: Using ep0 maxpacket: 16 [ 2896.887030][ T6313] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2896.896631][ T6313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2897.069786][ T6313] usb 6-1: Product: syz [ 2897.087605][ T6313] usb 6-1: Manufacturer: syz [ 2897.120246][ T6313] usb 6-1: SerialNumber: syz [ 2897.155412][ T6313] r8152-cfgselector 6-1: Unknown version 0x0000 [ 2897.173413][ T6313] r8152-cfgselector 6-1: config 0 descriptor?? [ 2897.503363][ T6313] r8152-cfgselector 6-1: Needed 1 retries to read version [ 2897.516642][ T6313] r8152-cfgselector 6-1: Unknown version 0x1480 [ 2897.536098][T20671] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2897.550948][ T6313] r8152-cfgselector 6-1: bad CDC descriptors [ 2897.561407][ T30] audit: type=1326 audit(1764550422.918:7357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.2.9416" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x0 [ 2897.713950][T20671] usb 4-1: Using ep0 maxpacket: 8 [ 2897.748182][T20659] usb 2-1: string descriptor 0 read error: -71 [ 2897.763355][T20671] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2897.806288][T20659] usb 2-1: USB disconnect, device number 85 [ 2897.814162][T20671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2897.896620][T20671] usb 4-1: Product: syz [ 2897.905471][T20671] usb 4-1: Manufacturer: syz [ 2897.910134][T20671] usb 4-1: SerialNumber: syz [ 2897.973231][ T7875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9417'. [ 2897.997257][T20671] usb 4-1: config 0 descriptor?? [ 2898.055426][ T7875] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9417'. [ 2898.077424][T20671] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2898.671645][ T7885] FAULT_INJECTION: forcing a failure. [ 2898.671645][ T7885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2898.687085][ T7885] CPU: 1 UID: 0 PID: 7885 Comm: syz.2.9420 Not tainted syzkaller #0 PREEMPT(full) [ 2898.687120][ T7885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2898.687139][ T7885] Call Trace: [ 2898.687149][ T7885] [ 2898.687159][ T7885] dump_stack_lvl+0x189/0x250 [ 2898.687195][ T7885] ? __pfx____ratelimit+0x10/0x10 [ 2898.687226][ T7885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2898.687266][ T7885] ? __pfx__printk+0x10/0x10 [ 2898.687303][ T7885] should_fail_ex+0x414/0x560 [ 2898.687343][ T7885] _copy_to_user+0x31/0xb0 [ 2898.687375][ T7885] simple_read_from_buffer+0xe1/0x170 [ 2898.687416][ T7885] proc_fail_nth_read+0x1b3/0x220 [ 2898.687448][ T7885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2898.687481][ T7885] ? rw_verify_area+0x2a6/0x4d0 [ 2898.687511][ T7885] ? __lock_acquire+0xab9/0xd20 [ 2898.687531][ T7885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2898.687562][ T7885] vfs_read+0x200/0xa30 [ 2898.687591][ T7885] ? fdget_pos+0x247/0x320 [ 2898.687618][ T7885] ? __pfx___mutex_lock+0x10/0x10 [ 2898.687639][ T7885] ? __pfx_vfs_read+0x10/0x10 [ 2898.687672][ T7885] ? __fget_files+0x2a/0x420 [ 2898.687699][ T7885] ? __fget_files+0x3a0/0x420 [ 2898.687719][ T7885] ? __fget_files+0x2a/0x420 [ 2898.687751][ T7885] ksys_read+0x145/0x250 [ 2898.687785][ T7885] ? __pfx_ksys_read+0x10/0x10 [ 2898.687819][ T7885] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2898.687855][ T7885] ? lockdep_hardirqs_on+0x9c/0x150 [ 2898.687891][ T7885] __do_fast_syscall_32+0xb6/0x2b0 [ 2898.687914][ T7885] ? lockdep_hardirqs_on+0x9c/0x150 [ 2898.687950][ T7885] do_fast_syscall_32+0x34/0x80 [ 2898.687972][ T7885] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2898.688000][ T7885] RIP: 0023:0xf6ffd539 [ 2898.688019][ T7885] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2898.688039][ T7885] RSP: 002b:00000000f53ed590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2898.688063][ T7885] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53ed620 [ 2898.688079][ T7885] RDX: 000000000000000f RSI: 00000000f7396ff4 RDI: 0000000000000000 [ 2898.688093][ T7885] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2898.688106][ T7885] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2898.688120][ T7885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2898.688154][ T7885] [ 2899.238135][T20671] gspca_sonixj: reg_w1 err -110 [ 2899.243359][T20671] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 2899.417729][T20671] r8152-cfgselector 6-1: USB disconnect, device number 7 [ 2899.869192][ T7900] FAULT_INJECTION: forcing a failure. [ 2899.869192][ T7900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2899.905506][ T7900] CPU: 0 UID: 0 PID: 7900 Comm: syz.1.9425 Not tainted syzkaller #0 PREEMPT(full) [ 2899.905539][ T7900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2899.905554][ T7900] Call Trace: [ 2899.905563][ T7900] [ 2899.905573][ T7900] dump_stack_lvl+0x189/0x250 [ 2899.905610][ T7900] ? __pfx____ratelimit+0x10/0x10 [ 2899.905639][ T7900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2899.905668][ T7900] ? __pfx__printk+0x10/0x10 [ 2899.905691][ T7900] ? __might_fault+0xb0/0x130 [ 2899.905733][ T7900] should_fail_ex+0x414/0x560 [ 2899.905772][ T7900] _copy_from_user+0x2d/0xb0 [ 2899.905802][ T7900] __sys_sendto+0x25c/0x520 [ 2899.905833][ T7900] ? __pfx___sys_sendto+0x10/0x10 [ 2899.905853][ T7900] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2899.905899][ T7900] ? __fget_files+0x3a0/0x420 [ 2899.905932][ T7900] ? ksys_write+0x22a/0x250 [ 2899.905960][ T7900] ? exc_page_fault+0x82/0x100 [ 2899.905992][ T7900] ? __pfx_ksys_write+0x10/0x10 [ 2899.906028][ T7900] __ia32_sys_sendto+0xdd/0x100 [ 2899.906054][ T7900] __do_fast_syscall_32+0xb6/0x2b0 [ 2899.906076][ T7900] ? lockdep_hardirqs_on+0x9c/0x150 [ 2899.906111][ T7900] do_fast_syscall_32+0x34/0x80 [ 2899.906131][ T7900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2899.906166][ T7900] RIP: 0023:0xf704d539 [ 2899.906185][ T7900] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2899.906206][ T7900] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2899.906231][ T7900] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2899.906246][ T7900] RDX: 00000000000000f5 RSI: 0000000000000000 RDI: 0000000080000300 [ 2899.906261][ T7900] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 2899.906275][ T7900] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2899.906289][ T7900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2899.906321][ T7900] [ 2900.342345][ T7902] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9426'. [ 2900.853603][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9429'. [ 2901.020920][T31668] usb 4-1: USB disconnect, device number 96 [ 2901.245980][ T7914] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 2901.554598][T31668] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 2901.808827][T31668] usb 1-1: Using ep0 maxpacket: 32 [ 2901.817800][T31668] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2901.831124][T31668] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2901.831904][T30864] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2901.855765][T31668] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2902.027047][T31668] usb 1-1: Product: syz [ 2902.044932][T31668] usb 1-1: Manufacturer: syz [ 2902.054406][T31668] usb 1-1: SerialNumber: syz [ 2902.102314][T31668] usb 1-1: config 0 descriptor?? [ 2902.130803][ T7925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2902.224401][T30864] usb 2-1: Using ep0 maxpacket: 32 [ 2902.232743][T30864] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2902.241743][T30864] usb 2-1: config 0 has no interface number 0 [ 2902.304148][T30864] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2902.314817][T30864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2902.322893][T30864] usb 2-1: Product: syz [ 2902.330420][T30864] usb 2-1: Manufacturer: syz [ 2902.450955][T30864] usb 2-1: SerialNumber: syz [ 2902.497669][T31668] usb 1-1: USB disconnect, device number 120 [ 2902.673042][T30864] usb 2-1: config 0 descriptor?? [ 2902.723139][T30864] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2902.744283][T30864] usb 2-1: selecting invalid altsetting 1 [ 2902.750087][T30864] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2902.831448][T30864] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2902.848096][T30864] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2902.857265][T30864] usb 2-1: media controller created [ 2902.908559][T30864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2902.965799][ T7927] ------------[ cut here ]------------ [ 2902.971362][ T7927] usb 2-1: BOGUS control dir, pipe 80005680 doesn't match bRequestType c0 [ 2902.981783][ T7927] WARNING: CPU: 1 PID: 7927 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 2902.991579][ T7927] Modules linked in: [ 2902.997261][ T7927] CPU: 1 UID: 0 PID: 7927 Comm: syz.1.9434 Not tainted syzkaller #0 PREEMPT(full) [ 2903.007283][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2903.017774][ T7927] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 2903.023463][ T7927] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 c0 18 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 c4 d0 8f fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 2903.044015][ T7927] RSP: 0018:ffffc9000cd575a0 EFLAGS: 00010246 [ 2903.052373][ T7927] RAX: 7bec10db12722900 RBX: ffff88802826fd00 RCX: 0000000000080000 [ 2903.061104][ T7927] RDX: ffffc9000fcd1000 RSI: 0000000000003d41 RDI: 0000000000003d42 [ 2903.070037][ T7927] RBP: 1ffff11007c64078 R08: 0000000000000003 R09: 0000000000000004 [ 2903.078146][ T7927] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffff88803d64a100 [ 2903.086335][ T7927] R13: ffff88803e3203c0 R14: 0000000080005680 R15: ffff88804c9092c0 [ 2903.095347][ T7927] FS: 0000000000000000(0000) GS:ffff888126238000(0063) knlGS:00000000f543db40 [ 2903.104941][ T7927] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2903.111571][ T7927] CR2: 00000000801c0018 CR3: 0000000040d46000 CR4: 00000000003526f0 [ 2903.120063][ T7927] Call Trace: [ 2903.123376][ T7927] [ 2903.128481][ T7927] usb_start_wait_urb+0x114/0x4c0 [ 2903.133546][ T7927] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2903.139454][ T7927] usb_control_msg+0x232/0x3e0 [ 2903.144433][ T7927] ce6230_ctrl_msg+0x2c2/0x650 [ 2903.149227][ T7927] ce6230_i2c_master_xfer+0x4ce/0x6d0 [ 2903.155397][ T7927] ? __pfx_ce6230_i2c_master_xfer+0x10/0x10 [ 2903.161308][ T7927] ? do_raw_spin_lock+0x121/0x290 [ 2903.166470][ T7927] __i2c_transfer+0x874/0x2170 [ 2903.171264][ T7927] ? lockdep_hardirqs_on+0x9c/0x150 [ 2903.176532][ T7927] ? __pfx___i2c_transfer+0x10/0x10 [ 2903.181750][ T7927] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 2903.187879][ T7927] ? i2c_transfer+0x120/0x3a0 [ 2903.192745][ T7927] i2c_transfer+0x25b/0x3a0 [ 2903.197383][ T7927] ? __pfx_i2c_transfer+0x10/0x10 [ 2903.202560][ T7927] ? _copy_from_user+0x94/0xb0 [ 2903.207866][ T7927] i2cdev_ioctl_rdwr+0x460/0x740 [ 2903.212873][ T7927] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 2903.219122][ T7927] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2903.224839][ T7927] ? __fget_files+0x3a0/0x420 [ 2903.229554][ T7927] ? __fget_files+0x2a/0x420 [ 2903.234279][ T7927] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2903.239872][ T7927] __ia32_compat_sys_ioctl+0x543/0x840 [ 2903.246221][ T7927] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2903.252240][ T7927] ? __se_sys_futex_time32+0x360/0x3e0 [ 2903.257755][ T7927] ? __pfx_do_sys_openat2+0x10/0x10 [ 2903.263010][ T7927] ? rcu_is_watching+0x15/0xb0 [ 2903.267861][ T7927] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2903.275308][ T7927] ? lockdep_hardirqs_on+0x9c/0x150 [ 2903.280533][ T7927] __do_fast_syscall_32+0xb6/0x2b0 [ 2903.285701][ T7927] ? lockdep_hardirqs_on+0x9c/0x150 [ 2903.290960][ T7927] do_fast_syscall_32+0x34/0x80 [ 2903.295853][ T7927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2903.302190][ T7927] RIP: 0023:0xf704d539 [ 2903.306988][ T7927] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2903.320707][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2903.327427][ T7927] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2903.333228][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2903.342957][ T7927] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 2903.355791][ T7927] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 2903.363812][ T7927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2903.372974][ T7927] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2903.381065][ T7927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2903.389140][ T7927] [ 2903.392179][ T7927] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2903.399490][ T7927] CPU: 1 UID: 0 PID: 7927 Comm: syz.1.9434 Not tainted syzkaller #0 PREEMPT(full) [ 2903.408809][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2903.418895][ T7927] Call Trace: [ 2903.422268][ T7927] [ 2903.425218][ T7927] dump_stack_lvl+0x99/0x250 [ 2903.429847][ T7927] ? __asan_memcpy+0x40/0x70 [ 2903.434460][ T7927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2903.439688][ T7927] ? __pfx__printk+0x10/0x10 [ 2903.444301][ T7927] vpanic+0x237/0x6d0 [ 2903.448314][ T7927] ? __pfx_vpanic+0x10/0x10 [ 2903.452836][ T7927] panic+0xb9/0xc0 [ 2903.456570][ T7927] ? __pfx_panic+0x10/0x10 [ 2903.461008][ T7927] __warn+0x31b/0x4b0 [ 2903.465005][ T7927] ? usb_submit_urb+0x114d/0x18b0 [ 2903.470047][ T7927] ? usb_submit_urb+0x114d/0x18b0 [ 2903.475082][ T7927] report_bug+0x2be/0x4f0 [ 2903.479450][ T7927] ? usb_submit_urb+0x114d/0x18b0 [ 2903.484494][ T7927] ? usb_submit_urb+0x114d/0x18b0 [ 2903.489538][ T7927] ? usb_submit_urb+0x114f/0x18b0 [ 2903.494581][ T7927] handle_bug+0x84/0x160 [ 2903.498844][ T7927] exc_invalid_op+0x1a/0x50 [ 2903.503357][ T7927] asm_exc_invalid_op+0x1a/0x20 [ 2903.508252][ T7927] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 2903.513912][ T7927] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 c0 18 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 c4 d0 8f fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 2903.533532][ T7927] RSP: 0018:ffffc9000cd575a0 EFLAGS: 00010246 [ 2903.539617][ T7927] RAX: 7bec10db12722900 RBX: ffff88802826fd00 RCX: 0000000000080000 [ 2903.547613][ T7927] RDX: ffffc9000fcd1000 RSI: 0000000000003d41 RDI: 0000000000003d42 [ 2903.555610][ T7927] RBP: 1ffff11007c64078 R08: 0000000000000003 R09: 0000000000000004 [ 2903.563599][ T7927] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffff88803d64a100 [ 2903.571596][ T7927] R13: ffff88803e3203c0 R14: 0000000080005680 R15: ffff88804c9092c0 [ 2903.579617][ T7927] usb_start_wait_urb+0x114/0x4c0 [ 2903.584678][ T7927] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2903.590280][ T7927] usb_control_msg+0x232/0x3e0 [ 2903.595093][ T7927] ce6230_ctrl_msg+0x2c2/0x650 [ 2903.599893][ T7927] ce6230_i2c_master_xfer+0x4ce/0x6d0 [ 2903.605299][ T7927] ? __pfx_ce6230_i2c_master_xfer+0x10/0x10 [ 2903.611215][ T7927] ? do_raw_spin_lock+0x121/0x290 [ 2903.616271][ T7927] __i2c_transfer+0x874/0x2170 [ 2903.621064][ T7927] ? lockdep_hardirqs_on+0x9c/0x150 [ 2903.626295][ T7927] ? __pfx___i2c_transfer+0x10/0x10 [ 2903.631518][ T7927] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 2903.636902][ T7927] ? i2c_transfer+0x120/0x3a0 [ 2903.641598][ T7927] i2c_transfer+0x25b/0x3a0 [ 2903.646132][ T7927] ? __pfx_i2c_transfer+0x10/0x10 [ 2903.651183][ T7927] ? _copy_from_user+0x94/0xb0 [ 2903.655967][ T7927] i2cdev_ioctl_rdwr+0x460/0x740 [ 2903.660934][ T7927] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 2903.666069][ T7927] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2903.671723][ T7927] ? __fget_files+0x3a0/0x420 [ 2903.676410][ T7927] ? __fget_files+0x2a/0x420 [ 2903.681017][ T7927] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2903.686582][ T7927] __ia32_compat_sys_ioctl+0x543/0x840 [ 2903.692086][ T7927] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2903.698089][ T7927] ? __se_sys_futex_time32+0x360/0x3e0 [ 2903.703558][ T7927] ? __pfx_do_sys_openat2+0x10/0x10 [ 2903.708775][ T7927] ? rcu_is_watching+0x15/0xb0 [ 2903.713561][ T7927] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2903.720263][ T7927] ? lockdep_hardirqs_on+0x9c/0x150 [ 2903.725490][ T7927] __do_fast_syscall_32+0xb6/0x2b0 [ 2903.730613][ T7927] ? lockdep_hardirqs_on+0x9c/0x150 [ 2903.735841][ T7927] do_fast_syscall_32+0x34/0x80 [ 2903.740719][ T7927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2903.747073][ T7927] RIP: 0023:0xf704d539 [ 2903.751162][ T7927] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2903.770798][ T7927] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2903.779239][ T7927] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 2903.787234][ T7927] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 2903.795226][ T7927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2903.803260][ T7927] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2903.811253][ T7927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2903.819268][ T7927] [ 2903.822573][ T7927] Kernel Offset: disabled [ 2903.826915][ T7927] Rebooting in 86400 seconds..