last executing test programs: 19m38.406261542s ago: executing program 32 (id=375): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 19m7.374986092s ago: executing program 33 (id=653): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) close(0x3) 18m38.801442185s ago: executing program 34 (id=1068): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x7}, 0x94) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_ima(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000000480)=ANY=[], 0xc, 0x1) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000140)='./file0\x00', 0x0) 17m47.277836677s ago: executing program 35 (id=1316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000200)={{r0}, 0x2, 0x5800, 0x9}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x64000600) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) r3 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001380", @ANYRES32=r3], 0x28}}, 0x0) 16m23.687261341s ago: executing program 36 (id=1878): connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0xfff6, 0x101001, @loopback, 0x401}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2cf4071eedf8b7b757ad2e20539519ec6afbc267e1742fa0baeb3a05c4375108461", 0x22}, {&(0x7f0000002440)="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", 0x47f}], 0x2}}], 0x1, 0x4000001) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000003680)={0x2020}, 0x2020) 16m11.418403676s ago: executing program 37 (id=2060): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 16m9.701789856s ago: executing program 3 (id=2067): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r0 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 16m9.551924954s ago: executing program 3 (id=2081): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ab}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x20, 0x0, @fd_index=0x1, 0x80, {}, 0x4, 0x5}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 16m9.499385764s ago: executing program 3 (id=2083): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000480)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0xffffffffffffffca, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002f40)=""/4112, 0x1010, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 16m9.42103175s ago: executing program 3 (id=2076): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) 16m9.416472324s ago: executing program 3 (id=2077): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000001001000001"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) 16m9.314040602s ago: executing program 3 (id=2078): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x18, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) 16m9.241509701s ago: executing program 38 (id=2078): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x18, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) 15m44.183038554s ago: executing program 0 (id=2282): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000180)='./bus\x00', 0x1c3bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r3, 0x1, r2, 0x7, 0x80000}) 15m43.326189931s ago: executing program 0 (id=2290): r0 = socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x7, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@local, 0x2, 0x6c}, 0x2, @in=@empty, 0x2, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 15m42.683680605s ago: executing program 0 (id=2298): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x2000000, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) chdir(&(0x7f0000000140)='./bus\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x7}, [], {0x4, 0x2}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x24, 0x3) r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) 15m42.626201784s ago: executing program 0 (id=2299): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) truncate(&(0x7f0000000640)='./file0\x00', 0x2) 15m42.540003314s ago: executing program 0 (id=2300): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 15m42.533633057s ago: executing program 2 (id=2301): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioprio_set$uid(0x3, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 15m42.482501865s ago: executing program 2 (id=2302): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000100)='V', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 15m41.612470276s ago: executing program 0 (id=2312): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 15m40.906852021s ago: executing program 2 (id=2314): close(0xffffffffffffffff) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0xc) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, r4, 0x0, 0x0, 0xffffffffffffffff, 0x1400}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 15m26.134185683s ago: executing program 39 (id=2312): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 15m26.132841161s ago: executing program 2 (id=2318): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x4, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/236, 0xec, 0x1, 0x3e}, @fd={0x66642a85, 0x0, r3}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 15m26.085843153s ago: executing program 2 (id=2330): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 15m22.374938645s ago: executing program 2 (id=2334): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x1f2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r1}]) 15m6.610236555s ago: executing program 40 (id=2334): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x1f2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r1}]) 13m47.190194808s ago: executing program 4 (id=2955): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 13m47.120339562s ago: executing program 4 (id=2956): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f0000002fc0)={0x2020}, 0x2020) 13m46.132290245s ago: executing program 4 (id=2970): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, r0, 0x0) mlockall(0x3) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 13m45.287984046s ago: executing program 4 (id=2975): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x9) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 13m45.052431212s ago: executing program 4 (id=2976): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x0, 0xa4f}, 0x3}, 0x20, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)={'trans=tcp,', {'port', 0x3d, 0x20000004e23}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCATTCHAN(r2, 0x80207450, 0x0) 13m44.821471281s ago: executing program 4 (id=2980): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) ptrace$peekuser(0x3, 0x0, 0x8) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) read(r5, &(0x7f0000000000)=""/93, 0x5d) 13m44.794552566s ago: executing program 41 (id=2980): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) ptrace$peekuser(0x3, 0x0, 0x8) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) read(r5, &(0x7f0000000000)=""/93, 0x5d) 13m44.713338721s ago: executing program 8 (id=2982): socket(0xa, 0x3, 0x3a) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(0x0, 0x2000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) 13m44.678988666s ago: executing program 8 (id=2983): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync_file_range(r0, 0xc, 0x10, 0x2) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000180)={0x0, 0xfb, 0x15, 0x4, 0xd, "cba660e1f61d1a593099505d5e5ea7d4"}, 0x15, 0x6) r1 = fanotify_init(0x20, 0x40000) writev(r1, &(0x7f0000004300)=[{&(0x7f0000004140)="413f24f6cd", 0x5}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) copy_file_range(r2, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000003c0)="b9ff0307684426", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m44.379358333s ago: executing program 8 (id=2992): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 13m43.188190669s ago: executing program 8 (id=2989): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={0x0}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) mremap(&(0x7f0000759000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f000001b000/0x2000)=nil) 13m42.950210323s ago: executing program 8 (id=2993): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200000, 0x0) 13m42.949843661s ago: executing program 8 (id=2994): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xfea}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/49}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 13m40.162911283s ago: executing program 9 (id=3006): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="25003300d0000000080211000001080211000000505050505050d00003"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0\x00'}) 13m40.106977514s ago: executing program 9 (id=3007): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r0 = eventfd2(0x5, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r0}) r1 = syz_io_uring_setup(0x4bf9, &(0x7f0000000280)={0x0, 0x10000000, 0x10100, 0x0, 0x200004}, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 13m40.014247478s ago: executing program 9 (id=3010): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 13m39.929853199s ago: executing program 9 (id=3011): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x9) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 13m39.782559357s ago: executing program 9 (id=3013): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 13m39.582457125s ago: executing program 9 (id=3014): openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r2 = syz_open_pts(r1, 0x20800) dup3(r2, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 13m39.528622009s ago: executing program 42 (id=3014): openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r2 = syz_open_pts(r1, 0x20800) dup3(r2, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 13m27.910914081s ago: executing program 43 (id=2994): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xfea}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/49}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.299711168s ago: executing program 7 (id=7746): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x84) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x6}}]}]}]}, 0x48}}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_DELTABLE={0x160, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x5b, 0x6, "e45210619979608d2bcebfefe998015e6811f74afb243a5c139705071b27c0a91ae12f3d7fdd9e355ef1b564a01575f30b05f7dcbb23a374aad0bf20ce85c84fa23b16788c8d0a968985c5b76004593b6bef62484b74c1"}, @NFTA_TABLE_USERDATA={0x18, 0x6, "47549738d9768a7b37fe4945686cd38f9c9ef0b0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xb6, 0x6, "47447792f75f6a79819376b3fbabbdf8cc674502bbe138974c00a0a6223fef0e50ac8c5e26e10c2b9bd7bba3ec5f8d31d3faf4540dd91e0cc70d309fedabdcecaa33f43bffaea70d4b6cc6147c473a5266049c794675365f4a3663aefab9e0102b5d81bed0cbf08d7f26cbe54616287fe9e16c1161e6c538baf0073d34b7fc64b08c02c7477909bc8be03fdc5b330fc0a286eda6e3091f96484820b7310ef473e0cf8faf80f5ed9f43235bac84f996d4b4f9"}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x180, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xbc}, @NFTA_SET_DESC={0x138, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa7dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x59}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4e7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbaa3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x278, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0xab, 0x7, 0x1, 0x0, "39f5b2d8feba0ee4f8278d6f0bfcbfb074a4cfe1b3b461f0cfdab58f00b3e43d20ed75d787e4ded3e9382d1f7981f4d277f1a437a47c0287b86fe0c2c438a499a2ad0fdef560354ea615f4d3c1ded6442b7906026b6c2a8bf0a917d979c081a68bb98c18509f7eaaa03310c8f9e94584d42a6b207d4c0912e246f92e7da4dd36ff499f3db9d59fb0ea5c69c67ca93fdc76200d3fd245dc0d73e67e33f9c68ccb4339e1e2c568dc"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x8d, 0x7, 0x1, 0x0, "01721d2d4ca9da4dbb922cdbaffa33ac385e11976c32ec06a0e4e111c44bcf06e204fb982fd3454b9223f41d285fbed0998d20c8d9eb2a8f80c2f790828d774320f1efccc2f25fa3cffb424992bf24212dc3cd098d22f8487427fde9126bec97fda8bc1173a45cd560305d2cf379a03abd1d54844751eae97205a75d96b176f59dad4d4da1b0c74a4c"}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x81}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_NG_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x120, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xa0, 0xc, "8796fa4cada158bf97b7176b4c3e4171d3e7e203fc7ddef312218aecd73f2a5023a239714fff92bece7931595f75018b5e5dc3962fbfbcc06415d6e3207419c9fdd5bb99f1a298054d3f79d7b0159f62bb91677a7780c10a257dbe667814e23ab70f3835b967aea08296e23e741e38601188575c1f1be550f10c4b2f83b36cb7e04cb7efe055ed18a72b7d075ed937c683ebe42ca7e9437b6915a7c0"}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x245ce3b7}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x50a38782}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31d6d180}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_USERDATA={0x1e, 0x7, 0x1, 0x0, "eb6cb6518086beaa0dc9e380a27ea71c60541e78c8b2801cce2f"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x750}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 5.361029172s ago: executing program 7 (id=7750): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x84) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x6}}]}]}]}, 0x48}}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_DELTABLE={0x160, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x5b, 0x6, "e45210619979608d2bcebfefe998015e6811f74afb243a5c139705071b27c0a91ae12f3d7fdd9e355ef1b564a01575f30b05f7dcbb23a374aad0bf20ce85c84fa23b16788c8d0a968985c5b76004593b6bef62484b74c1"}, @NFTA_TABLE_USERDATA={0x18, 0x6, "47549738d9768a7b37fe4945686cd38f9c9ef0b0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xb6, 0x6, "47447792f75f6a79819376b3fbabbdf8cc674502bbe138974c00a0a6223fef0e50ac8c5e26e10c2b9bd7bba3ec5f8d31d3faf4540dd91e0cc70d309fedabdcecaa33f43bffaea70d4b6cc6147c473a5266049c794675365f4a3663aefab9e0102b5d81bed0cbf08d7f26cbe54616287fe9e16c1161e6c538baf0073d34b7fc64b08c02c7477909bc8be03fdc5b330fc0a286eda6e3091f96484820b7310ef473e0cf8faf80f5ed9f43235bac84f996d4b4f9"}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x180, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xbc}, @NFTA_SET_DESC={0x138, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa7dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x59}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4e7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbaa3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x278, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0xab, 0x7, 0x1, 0x0, "39f5b2d8feba0ee4f8278d6f0bfcbfb074a4cfe1b3b461f0cfdab58f00b3e43d20ed75d787e4ded3e9382d1f7981f4d277f1a437a47c0287b86fe0c2c438a499a2ad0fdef560354ea615f4d3c1ded6442b7906026b6c2a8bf0a917d979c081a68bb98c18509f7eaaa03310c8f9e94584d42a6b207d4c0912e246f92e7da4dd36ff499f3db9d59fb0ea5c69c67ca93fdc76200d3fd245dc0d73e67e33f9c68ccb4339e1e2c568dc"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x8d, 0x7, 0x1, 0x0, "01721d2d4ca9da4dbb922cdbaffa33ac385e11976c32ec06a0e4e111c44bcf06e204fb982fd3454b9223f41d285fbed0998d20c8d9eb2a8f80c2f790828d774320f1efccc2f25fa3cffb424992bf24212dc3cd098d22f8487427fde9126bec97fda8bc1173a45cd560305d2cf379a03abd1d54844751eae97205a75d96b176f59dad4d4da1b0c74a4c"}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x81}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_NG_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x245ce3b7}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x50a38782}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31d6d180}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_USERDATA={0x1e, 0x7, 0x1, 0x0, "eb6cb6518086beaa0dc9e380a27ea71c60541e78c8b2801cce2f"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6b0}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 5.257233443s ago: executing program 1 (id=7751): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x84) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x6}}]}]}]}, 0x48}}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_DELTABLE={0x160, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x5b, 0x6, "e45210619979608d2bcebfefe998015e6811f74afb243a5c139705071b27c0a91ae12f3d7fdd9e355ef1b564a01575f30b05f7dcbb23a374aad0bf20ce85c84fa23b16788c8d0a968985c5b76004593b6bef62484b74c1"}, @NFTA_TABLE_USERDATA={0x18, 0x6, "47549738d9768a7b37fe4945686cd38f9c9ef0b0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xb6, 0x6, "47447792f75f6a79819376b3fbabbdf8cc674502bbe138974c00a0a6223fef0e50ac8c5e26e10c2b9bd7bba3ec5f8d31d3faf4540dd91e0cc70d309fedabdcecaa33f43bffaea70d4b6cc6147c473a5266049c794675365f4a3663aefab9e0102b5d81bed0cbf08d7f26cbe54616287fe9e16c1161e6c538baf0073d34b7fc64b08c02c7477909bc8be03fdc5b330fc0a286eda6e3091f96484820b7310ef473e0cf8faf80f5ed9f43235bac84f996d4b4f9"}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x180, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xbc}, @NFTA_SET_DESC={0x138, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa7dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x59}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4e7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbaa3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x278, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0xab, 0x7, 0x1, 0x0, "39f5b2d8feba0ee4f8278d6f0bfcbfb074a4cfe1b3b461f0cfdab58f00b3e43d20ed75d787e4ded3e9382d1f7981f4d277f1a437a47c0287b86fe0c2c438a499a2ad0fdef560354ea615f4d3c1ded6442b7906026b6c2a8bf0a917d979c081a68bb98c18509f7eaaa03310c8f9e94584d42a6b207d4c0912e246f92e7da4dd36ff499f3db9d59fb0ea5c69c67ca93fdc76200d3fd245dc0d73e67e33f9c68ccb4339e1e2c568dc"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x8d, 0x7, 0x1, 0x0, "01721d2d4ca9da4dbb922cdbaffa33ac385e11976c32ec06a0e4e111c44bcf06e204fb982fd3454b9223f41d285fbed0998d20c8d9eb2a8f80c2f790828d774320f1efccc2f25fa3cffb424992bf24212dc3cd098d22f8487427fde9126bec97fda8bc1173a45cd560305d2cf379a03abd1d54844751eae97205a75d96b176f59dad4d4da1b0c74a4c"}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x81}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_NG_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x13c, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xba, 0xc, "8796fa4cada158bf97b7176b4c3e4171d3e7e203fc7ddef312218aecd73f2a5023a239714fff92bece7931595f75018b5e5dc3962fbfbcc06415d6e3207419c9fdd5bb99f1a298054d3f79d7b0159f62bb91677a7780c10a257dbe667814e23ab70f3835b967aea08296e23e741e38601188575c1f1be550f10c4b2f83b36cb7e04cb7efe055ed18a72b7d075ed937c683ebe42ca7e9437b6915a7c0ef8989d85e8a18d966e4086c6e24cf99f284628fa92f24e6d003"}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x245ce3b7}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x50a38782}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31d6d180}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_USERDATA={0x1e, 0x7, 0x1, 0x0, "eb6cb6518086beaa0dc9e380a27ea71c60541e78c8b2801cce2f"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x76c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 4.691894914s ago: executing program 7 (id=7755): mmap(&(0x7f0000b12000/0x2000)=nil, 0x2000, 0x2000003, 0x30, 0xffffffffffffffff, 0x3e1c5000) userfaultfd(0x80001) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0xcab, 0x12, {{0x5, 0x4, 0x1, 0x7, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010101}}}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r1}, 0x38) 4.594630175s ago: executing program 7 (id=7756): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c13715", 0x22}], 0x1}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg(r3, &(0x7f0000003140)={&(0x7f0000002f40)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, 0x0}, 0x48811) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) keyctl$dh_compute(0x17, &(0x7f0000000d80), 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) 3.93150997s ago: executing program 1 (id=7758): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="f5ff06fdff000000140012000c000100627269646765"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r10 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xe) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x1300, 0x40000, {0x0, 0x0, 0x0, r11, {0xa}}}, 0x24}}, 0x0) 3.897300237s ago: executing program 6 (id=7759): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x84) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x6}}]}]}]}, 0x48}}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_DELTABLE={0x160, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x5b, 0x6, "e45210619979608d2bcebfefe998015e6811f74afb243a5c139705071b27c0a91ae12f3d7fdd9e355ef1b564a01575f30b05f7dcbb23a374aad0bf20ce85c84fa23b16788c8d0a968985c5b76004593b6bef62484b74c1"}, @NFTA_TABLE_USERDATA={0x18, 0x6, "47549738d9768a7b37fe4945686cd38f9c9ef0b0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xb6, 0x6, "47447792f75f6a79819376b3fbabbdf8cc674502bbe138974c00a0a6223fef0e50ac8c5e26e10c2b9bd7bba3ec5f8d31d3faf4540dd91e0cc70d309fedabdcecaa33f43bffaea70d4b6cc6147c473a5266049c794675365f4a3663aefab9e0102b5d81bed0cbf08d7f26cbe54616287fe9e16c1161e6c538baf0073d34b7fc64b08c02c7477909bc8be03fdc5b330fc0a286eda6e3091f96484820b7310ef473e0cf8faf80f5ed9f43235bac84f996d4b4f9"}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x180, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xbc}, @NFTA_SET_DESC={0x138, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa7dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x59}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4e7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbaa3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x278, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0xab, 0x7, 0x1, 0x0, "39f5b2d8feba0ee4f8278d6f0bfcbfb074a4cfe1b3b461f0cfdab58f00b3e43d20ed75d787e4ded3e9382d1f7981f4d277f1a437a47c0287b86fe0c2c438a499a2ad0fdef560354ea615f4d3c1ded6442b7906026b6c2a8bf0a917d979c081a68bb98c18509f7eaaa03310c8f9e94584d42a6b207d4c0912e246f92e7da4dd36ff499f3db9d59fb0ea5c69c67ca93fdc76200d3fd245dc0d73e67e33f9c68ccb4339e1e2c568dc"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x8d, 0x7, 0x1, 0x0, "01721d2d4ca9da4dbb922cdbaffa33ac385e11976c32ec06a0e4e111c44bcf06e204fb982fd3454b9223f41d285fbed0998d20c8d9eb2a8f80c2f790828d774320f1efccc2f25fa3cffb424992bf24212dc3cd098d22f8487427fde9126bec97fda8bc1173a45cd560305d2cf379a03abd1d54844751eae97205a75d96b176f59dad4d4da1b0c74a4c"}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x81}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_NG_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x120, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xa0, 0xc, "8796fa4cada158bf97b7176b4c3e4171d3e7e203fc7ddef312218aecd73f2a5023a239714fff92bece7931595f75018b5e5dc3962fbfbcc06415d6e3207419c9fdd5bb99f1a298054d3f79d7b0159f62bb91677a7780c10a257dbe667814e23ab70f3835b967aea08296e23e741e38601188575c1f1be550f10c4b2f83b36cb7e04cb7efe055ed18a72b7d075ed937c683ebe42ca7e9437b6915a7c0"}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x245ce3b7}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x50a38782}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31d6d180}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_USERDATA={0x1e, 0x7, 0x1, 0x0, "eb6cb6518086beaa0dc9e380a27ea71c60541e78c8b2801cce2f"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x750}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 3.770022001s ago: executing program 7 (id=7760): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c13715", 0x22}], 0x1}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg(r3, &(0x7f0000003140)={&(0x7f0000002f40)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, 0x0}, 0x48811) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) keyctl$dh_compute(0x17, &(0x7f0000000d80), 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) 3.68845448s ago: executing program 1 (id=7761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40090) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b1a, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm], 0x1) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101081, 0x11e) fcntl$lock(r6, 0x24, &(0x7f0000000200)={0x1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@private1, @mcast1, @remote, 0x1, 0x2, 0x2, 0x100, 0x7, 0x5}) 3.155246339s ago: executing program 6 (id=7762): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$evdev(0x0, 0x1800202, 0x0) ioctl$EVIOCGREP(r2, 0x80084522, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') 3.153999545s ago: executing program 5 (id=7770): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c13715", 0x22}], 0x1}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg(r3, &(0x7f0000003140)={&(0x7f0000002f40)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, 0x0}, 0x48811) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) keyctl$dh_compute(0x17, &(0x7f0000000d80), 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) 2.848050034s ago: executing program 1 (id=7763): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c13715", 0x22}], 0x1}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg(r3, &(0x7f0000003140)={&(0x7f0000002f40)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, 0x0}, 0x48811) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) keyctl$dh_compute(0x17, &(0x7f0000000d80), 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) 2.829209847s ago: executing program 7 (id=7764): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r1}, 0x0, &(0x7f00000001c0)=0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(0x0, r3, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) recvfrom(r4, 0x0, 0x0, 0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x0, 0xfffffffd, 0x8000, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r6, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r6, 0x0, 0x4) 2.656338155s ago: executing program 1 (id=7765): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x84) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x6}}]}]}]}, 0x48}}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_DELTABLE={0x160, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x5b, 0x6, "e45210619979608d2bcebfefe998015e6811f74afb243a5c139705071b27c0a91ae12f3d7fdd9e355ef1b564a01575f30b05f7dcbb23a374aad0bf20ce85c84fa23b16788c8d0a968985c5b76004593b6bef62484b74c1"}, @NFTA_TABLE_USERDATA={0x18, 0x6, "47549738d9768a7b37fe4945686cd38f9c9ef0b0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xb6, 0x6, "47447792f75f6a79819376b3fbabbdf8cc674502bbe138974c00a0a6223fef0e50ac8c5e26e10c2b9bd7bba3ec5f8d31d3faf4540dd91e0cc70d309fedabdcecaa33f43bffaea70d4b6cc6147c473a5266049c794675365f4a3663aefab9e0102b5d81bed0cbf08d7f26cbe54616287fe9e16c1161e6c538baf0073d34b7fc64b08c02c7477909bc8be03fdc5b330fc0a286eda6e3091f96484820b7310ef473e0cf8faf80f5ed9f43235bac84f996d4b4f9"}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x180, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xbc}, @NFTA_SET_DESC={0x138, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa7dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x59}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4e7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbaa3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x278, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0xab, 0x7, 0x1, 0x0, "39f5b2d8feba0ee4f8278d6f0bfcbfb074a4cfe1b3b461f0cfdab58f00b3e43d20ed75d787e4ded3e9382d1f7981f4d277f1a437a47c0287b86fe0c2c438a499a2ad0fdef560354ea615f4d3c1ded6442b7906026b6c2a8bf0a917d979c081a68bb98c18509f7eaaa03310c8f9e94584d42a6b207d4c0912e246f92e7da4dd36ff499f3db9d59fb0ea5c69c67ca93fdc76200d3fd245dc0d73e67e33f9c68ccb4339e1e2c568dc"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x8d, 0x7, 0x1, 0x0, "01721d2d4ca9da4dbb922cdbaffa33ac385e11976c32ec06a0e4e111c44bcf06e204fb982fd3454b9223f41d285fbed0998d20c8d9eb2a8f80c2f790828d774320f1efccc2f25fa3cffb424992bf24212dc3cd098d22f8487427fde9126bec97fda8bc1173a45cd560305d2cf379a03abd1d54844751eae97205a75d96b176f59dad4d4da1b0c74a4c"}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x81}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_NG_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0xec, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x6c, 0xc, "8796fa4cada158bf97b7176b4c3e4171d3e7e203fc7ddef312218aecd73f2a5023a239714fff92bece7931595f75018b5e5dc3962fbfbcc06415d6e3207419c9fdd5bb99f1a298054d3f79d7b0159f62bb91677a7780c10a257dbe667814e23ab70f3835b967aea0"}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x245ce3b7}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x50a38782}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31d6d180}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_USERDATA={0x1e, 0x7, 0x1, 0x0, "eb6cb6518086beaa0dc9e380a27ea71c60541e78c8b2801cce2f"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x71c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 2.281270642s ago: executing program 5 (id=7766): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) 2.225793772s ago: executing program 6 (id=7767): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x84) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x6}}]}]}]}, 0x48}}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_DELTABLE={0x160, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x5b, 0x6, "e45210619979608d2bcebfefe998015e6811f74afb243a5c139705071b27c0a91ae12f3d7fdd9e355ef1b564a01575f30b05f7dcbb23a374aad0bf20ce85c84fa23b16788c8d0a968985c5b76004593b6bef62484b74c1"}, @NFTA_TABLE_USERDATA={0x18, 0x6, "47549738d9768a7b37fe4945686cd38f9c9ef0b0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xb6, 0x6, "47447792f75f6a79819376b3fbabbdf8cc674502bbe138974c00a0a6223fef0e50ac8c5e26e10c2b9bd7bba3ec5f8d31d3faf4540dd91e0cc70d309fedabdcecaa33f43bffaea70d4b6cc6147c473a5266049c794675365f4a3663aefab9e0102b5d81bed0cbf08d7f26cbe54616287fe9e16c1161e6c538baf0073d34b7fc64b08c02c7477909bc8be03fdc5b330fc0a286eda6e3091f96484820b7310ef473e0cf8faf80f5ed9f43235bac84f996d4b4f9"}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x180, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xbc}, @NFTA_SET_DESC={0x138, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa7dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x59}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4e7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbaa3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x278, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0xab, 0x7, 0x1, 0x0, "39f5b2d8feba0ee4f8278d6f0bfcbfb074a4cfe1b3b461f0cfdab58f00b3e43d20ed75d787e4ded3e9382d1f7981f4d277f1a437a47c0287b86fe0c2c438a499a2ad0fdef560354ea615f4d3c1ded6442b7906026b6c2a8bf0a917d979c081a68bb98c18509f7eaaa03310c8f9e94584d42a6b207d4c0912e246f92e7da4dd36ff499f3db9d59fb0ea5c69c67ca93fdc76200d3fd245dc0d73e67e33f9c68ccb4339e1e2c568dc"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x8d, 0x7, 0x1, 0x0, "01721d2d4ca9da4dbb922cdbaffa33ac385e11976c32ec06a0e4e111c44bcf06e204fb982fd3454b9223f41d285fbed0998d20c8d9eb2a8f80c2f790828d774320f1efccc2f25fa3cffb424992bf24212dc3cd098d22f8487427fde9126bec97fda8bc1173a45cd560305d2cf379a03abd1d54844751eae97205a75d96b176f59dad4d4da1b0c74a4c"}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x81}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_NG_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x13c, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xba, 0xc, "8796fa4cada158bf97b7176b4c3e4171d3e7e203fc7ddef312218aecd73f2a5023a239714fff92bece7931595f75018b5e5dc3962fbfbcc06415d6e3207419c9fdd5bb99f1a298054d3f79d7b0159f62bb91677a7780c10a257dbe667814e23ab70f3835b967aea08296e23e741e38601188575c1f1be550f10c4b2f83b36cb7e04cb7efe055ed18a72b7d075ed937c683ebe42ca7e9437b6915a7c0ef8989d85e8a18d966e4086c6e24cf99f284628fa92f24e6d003"}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x245ce3b7}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x50a38782}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31d6d180}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_USERDATA={0x1e, 0x7, 0x1, 0x0, "eb6cb6518086beaa0dc9e380a27ea71c60541e78c8b2801cce2f"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x76c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 1.556258383s ago: executing program 6 (id=7768): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x84) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x6}}]}]}]}, 0x48}}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_DELTABLE={0x160, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x5b, 0x6, "e45210619979608d2bcebfefe998015e6811f74afb243a5c139705071b27c0a91ae12f3d7fdd9e355ef1b564a01575f30b05f7dcbb23a374aad0bf20ce85c84fa23b16788c8d0a968985c5b76004593b6bef62484b74c1"}, @NFTA_TABLE_USERDATA={0x18, 0x6, "47549738d9768a7b37fe4945686cd38f9c9ef0b0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xb6, 0x6, "47447792f75f6a79819376b3fbabbdf8cc674502bbe138974c00a0a6223fef0e50ac8c5e26e10c2b9bd7bba3ec5f8d31d3faf4540dd91e0cc70d309fedabdcecaa33f43bffaea70d4b6cc6147c473a5266049c794675365f4a3663aefab9e0102b5d81bed0cbf08d7f26cbe54616287fe9e16c1161e6c538baf0073d34b7fc64b08c02c7477909bc8be03fdc5b330fc0a286eda6e3091f96484820b7310ef473e0cf8faf80f5ed9f43235bac84f996d4b4f9"}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x180, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xbc}, @NFTA_SET_DESC={0x138, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa7dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x59}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4e7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbaa3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x278, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0xab, 0x7, 0x1, 0x0, "39f5b2d8feba0ee4f8278d6f0bfcbfb074a4cfe1b3b461f0cfdab58f00b3e43d20ed75d787e4ded3e9382d1f7981f4d277f1a437a47c0287b86fe0c2c438a499a2ad0fdef560354ea615f4d3c1ded6442b7906026b6c2a8bf0a917d979c081a68bb98c18509f7eaaa03310c8f9e94584d42a6b207d4c0912e246f92e7da4dd36ff499f3db9d59fb0ea5c69c67ca93fdc76200d3fd245dc0d73e67e33f9c68ccb4339e1e2c568dc"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x8d, 0x7, 0x1, 0x0, "01721d2d4ca9da4dbb922cdbaffa33ac385e11976c32ec06a0e4e111c44bcf06e204fb982fd3454b9223f41d285fbed0998d20c8d9eb2a8f80c2f790828d774320f1efccc2f25fa3cffb424992bf24212dc3cd098d22f8487427fde9126bec97fda8bc1173a45cd560305d2cf379a03abd1d54844751eae97205a75d96b176f59dad4d4da1b0c74a4c"}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x81}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_NG_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x13c, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xba, 0xc, "8796fa4cada158bf97b7176b4c3e4171d3e7e203fc7ddef312218aecd73f2a5023a239714fff92bece7931595f75018b5e5dc3962fbfbcc06415d6e3207419c9fdd5bb99f1a298054d3f79d7b0159f62bb91677a7780c10a257dbe667814e23ab70f3835b967aea08296e23e741e38601188575c1f1be550f10c4b2f83b36cb7e04cb7efe055ed18a72b7d075ed937c683ebe42ca7e9437b6915a7c0ef8989d85e8a18d966e4086c6e24cf99f284628fa92f24e6d003"}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x245ce3b7}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x50a38782}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31d6d180}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_USERDATA={0x1e, 0x7, 0x1, 0x0, "eb6cb6518086beaa0dc9e380a27ea71c60541e78c8b2801cce2f"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x76c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 1.385422715s ago: executing program 5 (id=7769): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c13715", 0x22}], 0x1}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg(r3, &(0x7f0000003140)={&(0x7f0000002f40)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, 0x0}, 0x48811) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) keyctl$dh_compute(0x17, &(0x7f0000000d80), 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) 1.285116549s ago: executing program 1 (id=7771): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x84) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x6}}]}]}]}, 0x48}}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_DELTABLE={0x160, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x5b, 0x6, "e45210619979608d2bcebfefe998015e6811f74afb243a5c139705071b27c0a91ae12f3d7fdd9e355ef1b564a01575f30b05f7dcbb23a374aad0bf20ce85c84fa23b16788c8d0a968985c5b76004593b6bef62484b74c1"}, @NFTA_TABLE_USERDATA={0x18, 0x6, "47549738d9768a7b37fe4945686cd38f9c9ef0b0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xb6, 0x6, "47447792f75f6a79819376b3fbabbdf8cc674502bbe138974c00a0a6223fef0e50ac8c5e26e10c2b9bd7bba3ec5f8d31d3faf4540dd91e0cc70d309fedabdcecaa33f43bffaea70d4b6cc6147c473a5266049c794675365f4a3663aefab9e0102b5d81bed0cbf08d7f26cbe54616287fe9e16c1161e6c538baf0073d34b7fc64b08c02c7477909bc8be03fdc5b330fc0a286eda6e3091f96484820b7310ef473e0cf8faf80f5ed9f43235bac84f996d4b4f9"}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x180, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xbc}, @NFTA_SET_DESC={0x138, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa7dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x59}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4e7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbaa3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x278, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0xab, 0x7, 0x1, 0x0, "39f5b2d8feba0ee4f8278d6f0bfcbfb074a4cfe1b3b461f0cfdab58f00b3e43d20ed75d787e4ded3e9382d1f7981f4d277f1a437a47c0287b86fe0c2c438a499a2ad0fdef560354ea615f4d3c1ded6442b7906026b6c2a8bf0a917d979c081a68bb98c18509f7eaaa03310c8f9e94584d42a6b207d4c0912e246f92e7da4dd36ff499f3db9d59fb0ea5c69c67ca93fdc76200d3fd245dc0d73e67e33f9c68ccb4339e1e2c568dc"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x8d, 0x7, 0x1, 0x0, "01721d2d4ca9da4dbb922cdbaffa33ac385e11976c32ec06a0e4e111c44bcf06e204fb982fd3454b9223f41d285fbed0998d20c8d9eb2a8f80c2f790828d774320f1efccc2f25fa3cffb424992bf24212dc3cd098d22f8487427fde9126bec97fda8bc1173a45cd560305d2cf379a03abd1d54844751eae97205a75d96b176f59dad4d4da1b0c74a4c"}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x81}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_NG_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x120, 0x5, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xa0, 0xc, "8796fa4cada158bf97b7176b4c3e4171d3e7e203fc7ddef312218aecd73f2a5023a239714fff92bece7931595f75018b5e5dc3962fbfbcc06415d6e3207419c9fdd5bb99f1a298054d3f79d7b0159f62bb91677a7780c10a257dbe667814e23ab70f3835b967aea08296e23e741e38601188575c1f1be550f10c4b2f83b36cb7e04cb7efe055ed18a72b7d075ed937c683ebe42ca7e9437b6915a7c0"}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x245ce3b7}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x50a38782}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31d6d180}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_USERDATA={0x1e, 0x7, 0x1, 0x0, "eb6cb6518086beaa0dc9e380a27ea71c60541e78c8b2801cce2f"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x750}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 891.667512ms ago: executing program 6 (id=7772): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7fff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) 501.028089ms ago: executing program 5 (id=7773): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/11], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000500", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000f0ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r5 = openat$audio(0xffffff9c, &(0x7f0000000340), 0x88001, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) sendmsg$inet(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) ioctl$DVD_READ_STRUCT(r7, 0x5390, &(0x7f0000000300)=@manufact={0x4, 0x2, 0x800, "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"}) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000a15000100fcffffff000000000d000000"], 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c900"], 0x22) 437.231901ms ago: executing program 5 (id=7774): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c13715", 0x22}], 0x1}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg(r3, &(0x7f0000003140)={&(0x7f0000002f40)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, 0x0}, 0x48811) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) keyctl$dh_compute(0x17, &(0x7f0000000d80), 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) 179.131478ms ago: executing program 5 (id=7775): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x2c1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$binderfs(0xffffff9c, &(0x7f0000000a00)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc00c6211, &(0x7f0000000a40)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000023000000000000000000000000000000000000000000008dbe84165decc4e50e3163de85cc913193cf406090f6a9989c6b7d92e3e2911505670e74e8e1d18dc8abab760aa3633e68bdd2526c34eeedf61f1bb418133ef8a2a45fe5842d3d21c9e3c4f20a54600f2a047d1471fd84eb32913d10fed7d1679a868479991c082bc6a62cc55daf19be9addbfd84fdb1002c98b8a9e69a1a229c267e7e723c539980246c16cf586bd6aab0263cdb3c6cecbfc2a4b6f3a4f4d292c3d6feadac56f9774bd9ea5f36d35a1"], 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 6 (id=7776): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c13715", 0x22}], 0x1}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg(r3, &(0x7f0000003140)={&(0x7f0000002f40)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, 0x0}, 0x48811) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) keyctl$dh_compute(0x17, &(0x7f0000000d80), 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) kernel console output (not intermixed with test programs): dpoint 0x5 has invalid wMaxPacketSize 0 [ 968.221050][ T2298] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 968.224838][ T2298] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 968.228150][ T2298] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 968.232140][ T2298] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 968.235148][ T2298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.449456][ T2298] usb 6-1: usb_control_msg returned -32 [ 968.451628][ T2298] usbtmc 6-1:16.0: can't read capabilities [ 968.462612][T29653] autofs: Unknown parameter 'fd0x0000000000000000' [ 968.554072][ T72] usb 6-1: USB disconnect, device number 42 [ 970.896901][T29688] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6252'. [ 970.899690][T29688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6252'. [ 970.902473][T29688] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6252'. [ 970.905615][T29688] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6252'. [ 972.325343][T29713] syz.1.6258: attempt to access beyond end of device [ 972.325343][T29713] nbd1: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 972.330400][T29713] XFS (nbd1): SB validate failed with error -5. [ 974.303294][T29742] lo speed is unknown, defaulting to 1000 [ 975.507882][T29764] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6268'. [ 975.511361][T29764] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6268'. [ 975.514418][T29764] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6268'. [ 975.769595][T29770] autofs: Bad value for 'fd' [ 977.275471][T29802] lo speed is unknown, defaulting to 1000 [ 977.918995][T29818] netlink: 'syz.1.6286': attribute type 1 has an invalid length. [ 977.941171][T29818] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 977.945211][T29818] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 978.083633][T29830] autofs: Bad value for 'fd' [ 979.025901][T29854] No control pipe specified [ 979.841994][T29876] autofs: Bad value for 'fd' [ 981.421756][T29912] lo speed is unknown, defaulting to 1000 [ 981.976612][T29926] autofs: Unknown parameter '0x0000000000000000' [ 982.199508][T29931] bridge0: entered allmulticast mode [ 982.204372][T29931] pim6reg: entered allmulticast mode [ 982.212622][ T6027] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 982.382433][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 982.393834][ T6027] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 982.396856][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 982.399839][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 982.432486][ T6027] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 982.437281][ T6027] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 982.440072][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.665922][ T6027] usb 6-1: usb_control_msg returned -32 [ 982.667733][ T6027] usbtmc 6-1:16.0: can't read capabilities [ 982.795799][T12776] usb 6-1: USB disconnect, device number 43 [ 983.022592][T29945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6325'. [ 984.350509][T29974] autofs: Unknown parameter '0x0000000000000000' [ 985.155508][T29990] smc: removing ib device syz1 [ 985.232786][T29996] lo speed is unknown, defaulting to 1000 [ 985.936081][T30010] No control pipe specified [ 985.950704][T30008] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 985.953197][T30008] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 985.957604][T30008] vhci_hcd vhci_hcd.0: Device attached [ 985.966257][T30011] vhci_hcd: connection closed [ 985.966571][T18693] vhci_hcd: stop threads [ 985.972300][T18693] vhci_hcd: release socket [ 985.974248][T18693] vhci_hcd: disconnect device [ 985.986406][T30016] No control pipe specified [ 987.762135][ T6059] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 987.932101][ T6059] usb 6-1: Using ep0 maxpacket: 8 [ 987.935191][ T6059] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 987.938226][ T6059] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 987.941262][ T6059] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 987.944573][ T6059] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 987.948556][ T6059] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 987.951336][ T6059] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.165399][ T6059] usb 6-1: usb_control_msg returned -32 [ 988.167283][ T6059] usbtmc 6-1:16.0: can't read capabilities [ 988.259446][T12776] usb 6-1: USB disconnect, device number 44 [ 988.958578][T30074] autofs: Unknown parameter '0x0000000000000000' [ 990.932210][ T40] audit: type=1804 audit(2000000074.444:1117): pid=30115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6381" name="/newroot/724/file0/file0" dev="9p" ino=35913941 res=1 errno=0 [ 992.509706][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.511945][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.232073][ T40] audit: type=1804 audit(2000000077.754:1118): pid=30185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6384" name="/newroot/727/file0/file0" dev="9p" ino=35913941 res=1 errno=0 [ 999.411487][ T6027] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 999.571483][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 999.574272][ T6027] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 999.576998][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 999.579686][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 999.583687][ T6027] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 999.587321][ T6027] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 999.589851][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.796144][ T6027] usb 6-1: usb_control_msg returned -32 [ 999.799000][ T6027] usbtmc 6-1:16.0: can't read capabilities [ 1000.022299][ T6027] usb 6-1: USB disconnect, device number 45 [ 1000.588436][T30315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6413'. [ 1001.333043][T30333] autofs: Unknown parameter '0x0000000000000000' [ 1004.956406][T30385] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6434'. [ 1004.961224][T12776] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1005.131113][T12776] usb 6-1: Using ep0 maxpacket: 8 [ 1005.135186][T12776] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1005.138296][T12776] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1005.141439][T12776] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1005.144642][T12776] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1005.148725][T12776] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1005.152801][T12776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.362824][T12776] usb 6-1: usb_control_msg returned -32 [ 1005.364735][T12776] usbtmc 6-1:16.0: can't read capabilities [ 1005.456148][T12776] usb 6-1: USB disconnect, device number 46 [ 1006.201791][T30396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6444'. [ 1008.786512][T30441] autofs: Unknown parameter 'fd0x0000000000000000' [ 1009.866339][T30465] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6453'. [ 1011.398770][T12776] libceph: connect (1)[c::]:6789 error -101 [ 1011.528182][T12776] libceph: mon0 (1)[c::]:6789 connect error [ 1011.790876][T12776] libceph: connect (1)[c::]:6789 error -101 [ 1011.796057][T12776] libceph: mon0 (1)[c::]:6789 connect error [ 1012.021106][T30490] ceph: No mds server is up or the cluster is laggy [ 1012.156226][T30502] autofs: Unknown parameter 'fd0x0000000000000000' [ 1012.352701][T30507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6461'. [ 1015.240839][ T72] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1015.430583][ T72] usb 6-1: Using ep0 maxpacket: 8 [ 1015.433893][ T72] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1015.436916][ T72] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1015.439881][ T72] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1015.443093][ T72] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1015.447079][ T72] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1015.449877][ T72] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.660604][ T72] usb 6-1: usb_control_msg returned -32 [ 1015.662398][ T72] usbtmc 6-1:16.0: can't read capabilities [ 1015.944762][ T6027] usb 6-1: USB disconnect, device number 47 [ 1016.438326][T30577] netlink: 'syz.5.6481': attribute type 1 has an invalid length. [ 1016.500003][T30577] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1016.513415][T30577] bond5: (slave bond6): making interface the new active one [ 1016.516029][T30577] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1016.542205][T30577] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1017.421040][T30602] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6486'. [ 1017.757394][T30613] No control pipe specified [ 1020.321221][T30660] No control pipe specified [ 1022.420208][ T6027] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1022.570984][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 1022.574026][ T6027] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1022.577117][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1022.580189][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1022.583551][ T6027] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1022.587640][ T6027] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1022.590518][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.802142][ T6027] usb 6-1: usb_control_msg returned -32 [ 1022.803977][ T6027] usbtmc 6-1:16.0: can't read capabilities [ 1022.892694][ T842] usb 6-1: USB disconnect, device number 48 [ 1023.521673][T30709] No control pipe specified [ 1023.700903][T30713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6511'. [ 1024.740133][ T6027] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1024.890181][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 1024.894356][ T6027] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1024.897521][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1024.900908][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1024.904120][ T6027] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1024.908878][ T6027] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1024.915122][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.121189][ T6027] usb 6-1: usb_control_msg returned -32 [ 1025.130112][ T6027] usbtmc 6-1:16.0: can't read capabilities [ 1025.217386][ T72] usb 6-1: USB disconnect, device number 49 [ 1025.869535][T12776] libceph: connect (1)[c::]:6789 error -101 [ 1025.884468][T12776] libceph: mon0 (1)[c::]:6789 connect error [ 1026.225036][T12776] libceph: connect (1)[c::]:6789 error -101 [ 1026.230028][T12776] libceph: mon0 (1)[c::]:6789 connect error [ 1026.282236][T30745] ceph: No mds server is up or the cluster is laggy [ 1029.091179][T12776] libceph: connect (1)[c::]:6789 error -22 [ 1029.093625][T12776] libceph: mon0 (1)[c::]:6789 connect error [ 1029.394495][T12776] libceph: connect (1)[c::]:6789 error -22 [ 1029.397711][T12776] libceph: mon0 (1)[c::]:6789 connect error [ 1029.658725][T30822] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6544'. [ 1029.676996][T30822] : entered promiscuous mode [ 1029.831586][T30810] ceph: No mds server is up or the cluster is laggy [ 1032.315583][T12776] libceph: connect (1)[c::]:6789 error -22 [ 1032.319055][T12776] libceph: mon0 (1)[c::]:6789 connect error [ 1032.581417][T12776] libceph: connect (1)[c::]:6789 error -22 [ 1032.583763][T12776] libceph: mon0 (1)[c::]:6789 connect error [ 1032.627619][T30873] No control pipe specified [ 1032.943074][T30865] ceph: No mds server is up or the cluster is laggy [ 1033.227473][T30885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6559'. [ 1033.244529][T30885] : entered promiscuous mode [ 1034.209654][T30522] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1034.339565][T30522] usb 6-1: device descriptor read/64, error -71 [ 1034.601696][T30522] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1034.749888][T30522] usb 6-1: device descriptor read/64, error -71 [ 1034.859699][T30522] usb usb6-port1: attempt power cycle [ 1035.219624][T30522] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1035.241105][T30522] usb 6-1: device descriptor read/8, error -71 [ 1035.329056][T30920] No control pipe specified [ 1035.489510][T30522] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1035.509932][T30522] usb 6-1: device descriptor read/8, error -71 [ 1035.619904][T30522] usb usb6-port1: unable to enumerate USB device [ 1036.290058][T30935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6573'. [ 1036.305690][T30935] : entered promiscuous mode [ 1037.907724][T30964] No control pipe specified [ 1041.407332][T31021] lo speed is unknown, defaulting to 1000 [ 1041.963752][T31035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6609'. [ 1044.896938][ T2298] libceph: connect (1)[c::]:6789 error -101 [ 1044.913938][ T2298] libceph: mon0 (1)[c::]:6789 connect error [ 1045.150976][T31087] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6617'. [ 1045.199147][ T2298] libceph: connect (1)[c::]:6789 error -101 [ 1045.201178][ T2298] libceph: mon0 (1)[c::]:6789 connect error [ 1045.472522][T31081] ceph: No mds server is up or the cluster is laggy [ 1045.549412][T31101] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 1047.589574][ T2298] libceph: connect (1)[c::]:6789 error -101 [ 1047.628925][ T2298] libceph: mon0 (1)[c::]:6789 connect error [ 1047.888870][ T2298] libceph: connect (1)[c::]:6789 error -101 [ 1047.890950][ T2298] libceph: mon0 (1)[c::]:6789 connect error [ 1048.006465][ T40] audit: type=1804 audit(2000000131.527:1119): pid=31148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6634" name="/newroot/782/bus" dev="tmpfs" ino=4148 res=1 errno=0 [ 1048.090225][T31134] ceph: No mds server is up or the cluster is laggy [ 1048.722244][T31158] futex_wake_op: syz.6.6637 tries to shift op by 144; fix this program [ 1049.232236][T31172] 9pnet_fd: Insufficient options for proto=fd [ 1049.288694][ T6027] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1049.438660][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 1049.441624][ T6027] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.444857][ T6027] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1049.447660][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.798714][ T6027] usb 6-1: string descriptor 0 read error: -71 [ 1049.803295][ T6027] usb 6-1: USB disconnect, device number 54 [ 1052.271608][T31230] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1052.273720][T31230] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1052.276126][T31230] vhci_hcd vhci_hcd.0: Device attached [ 1052.280725][T31230] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 1052.282786][T31230] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1052.285188][T31230] vhci_hcd vhci_hcd.0: Device attached [ 1052.287556][T31230] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1052.291599][T31230] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13) [ 1052.293686][T31230] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1052.296026][T31230] vhci_hcd vhci_hcd.0: Device attached [ 1052.301222][T31230] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(15) [ 1052.303273][T31230] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1052.305639][T31230] vhci_hcd vhci_hcd.0: Device attached [ 1052.310712][T31230] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(17) [ 1052.312809][T31230] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1052.315417][T31230] vhci_hcd vhci_hcd.0: Device attached [ 1052.317898][T31230] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1052.321426][T31230] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1052.331732][T31241] vhci_hcd: connection closed [ 1052.331847][T18693] vhci_hcd: stop threads [ 1052.331972][T31239] vhci_hcd: connection closed [ 1052.332813][T31237] vhci_hcd: connection closed [ 1052.333147][T31232] vhci_hcd: connection closed [ 1052.333256][T31234] vhci_hcd: connection closed [ 1052.333400][T18693] vhci_hcd: release socket [ 1052.342439][T18693] vhci_hcd: disconnect device [ 1052.344036][T18693] vhci_hcd: stop threads [ 1052.345391][T18693] vhci_hcd: release socket [ 1052.346797][T18693] vhci_hcd: disconnect device [ 1052.348526][T18693] vhci_hcd: stop threads [ 1052.349878][T18693] vhci_hcd: release socket [ 1052.351291][T18693] vhci_hcd: disconnect device [ 1052.353008][T18693] vhci_hcd: stop threads [ 1052.354348][T18693] vhci_hcd: release socket [ 1052.355756][T18693] vhci_hcd: disconnect device [ 1052.357386][T18693] vhci_hcd: stop threads [ 1052.358723][T18693] vhci_hcd: release socket [ 1052.359959][T18693] vhci_hcd: disconnect device [ 1053.944352][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.946701][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.012987][T31269] afs: Unknown parameter 'dyth1_to_bridge' [ 1054.092144][T31273] netlink: 'syz.5.6667': attribute type 1 has an invalid length. [ 1054.103440][T31273] bond7: entered promiscuous mode [ 1054.105385][T31273] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1054.139475][T31273] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1054.141601][T31273] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1054.144455][T31273] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1054.148506][T31273] bond7: (slave ip6gre1): making interface the new active one [ 1054.150691][T31273] ip6gre1: entered promiscuous mode [ 1054.153222][T31273] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 1054.261357][T31279] 9pnet_fd: Insufficient options for proto=fd [ 1054.388466][ T842] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1054.518563][ T842] usb 6-1: device descriptor read/64, error -71 [ 1054.909197][ T842] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1055.038480][ T842] usb 6-1: device descriptor read/64, error -71 [ 1055.244373][ T842] usb usb6-port1: attempt power cycle [ 1055.517844][T31305] afs: Unknown parameter 'dyth1_to_bridge' [ 1055.588572][ T842] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1055.608806][ T842] usb 6-1: device descriptor read/8, error -71 [ 1055.810726][ T40] audit: type=1326 audit(2000000139.337:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31311 comm="syz.5.6678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1055.818344][ T40] audit: type=1326 audit(2000000139.337:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31311 comm="syz.5.6678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1055.826549][ T40] audit: type=1326 audit(2000000139.337:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31311 comm="syz.5.6678" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1055.834466][ T40] audit: type=1326 audit(2000000139.337:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31311 comm="syz.5.6678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1055.841481][ T40] audit: type=1326 audit(2000000139.337:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31311 comm="syz.5.6678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1055.848883][ T842] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1055.850098][ T40] audit: type=1326 audit(2000000139.347:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31311 comm="syz.5.6678" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1055.859773][ T40] audit: type=1326 audit(2000000139.347:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31311 comm="syz.5.6678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1055.866604][ T40] audit: type=1326 audit(2000000139.347:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31311 comm="syz.5.6678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1055.873564][ T40] audit: type=1326 audit(2000000139.347:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31311 comm="syz.5.6678" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1055.880515][ T40] audit: type=1326 audit(2000000139.347:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31311 comm="syz.5.6678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1055.887295][ T842] usb 6-1: device descriptor read/8, error -71 [ 1056.008666][ T842] usb usb6-port1: unable to enumerate USB device [ 1057.350973][T31333] netlink: 'syz.1.6682': attribute type 10 has an invalid length. [ 1057.356062][T31333] batman_adv: batadv0: Adding interface: team0 [ 1057.360562][T31333] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.392850][T31333] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1058.842089][T31359] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 1058.844639][T31359] UDF-fs: Scanning with blocksize 2048 failed [ 1058.848748][T31359] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 1058.851083][T31359] UDF-fs: Scanning with blocksize 4096 failed [ 1061.152947][T31399] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6701'. [ 1061.155889][T31399] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6701'. [ 1061.170117][T31399] netlink: 'syz.6.6701': attribute type 10 has an invalid length. [ 1061.556896][T31407] futex_wake_op: syz.5.6697 tries to shift op by 144; fix this program [ 1063.354284][T31439] netlink: 'syz.6.6712': attribute type 10 has an invalid length. [ 1063.450342][T31443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6715'. [ 1063.454314][T31443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6715'. [ 1064.723187][T31475] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6725'. [ 1064.726786][T31475] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6725'. [ 1065.029184][T31486] netlink: 'syz.7.6728': attribute type 10 has an invalid length. [ 1065.813018][T31509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6737'. [ 1065.817951][T31509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6737'. [ 1066.243280][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 1066.253376][ T40] audit: type=1804 audit(2000000149.758:1149): pid=31519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.6739" name="bus" dev="tmpfs" ino=5310 res=1 errno=0 [ 1067.007780][ T6027] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1067.168314][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 1067.172901][ T6027] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.176356][ T6027] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1067.179922][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1067.183083][ T6027] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1067.202248][ T6027] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1067.207952][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.218371][ T6027] usbtmc 6-1:16.0: bulk endpoints not found [ 1068.211431][T31552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6747'. [ 1068.215173][T31552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6747'. [ 1069.796254][ T6027] usb 6-1: USB disconnect, device number 59 [ 1070.206924][ T40] audit: type=1804 audit(2000000153.728:1150): pid=31588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6754" name="bus" dev="tmpfs" ino=5226 res=1 errno=0 [ 1070.467484][T30522] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1070.617460][T30522] usb 6-1: Using ep0 maxpacket: 8 [ 1070.621733][T30522] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.625396][T30522] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1070.630260][T30522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1070.633834][T30522] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1070.638588][T30522] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1070.644931][T30522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.650438][T30522] usbtmc 6-1:16.0: bulk endpoints not found [ 1071.016178][ T40] audit: type=1326 audit(2000000154.538:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31599 comm="syz.6.6761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1071.023182][ T40] audit: type=1326 audit(2000000154.548:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31599 comm="syz.6.6761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1071.031677][ T40] audit: type=1326 audit(2000000154.558:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31599 comm="syz.6.6761" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1071.039195][ T40] audit: type=1326 audit(2000000154.558:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31599 comm="syz.6.6761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1071.045910][ T40] audit: type=1326 audit(2000000154.558:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31599 comm="syz.6.6761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1071.054071][ T40] audit: type=1326 audit(2000000154.558:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31599 comm="syz.6.6761" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1071.060770][ T40] audit: type=1326 audit(2000000154.558:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31599 comm="syz.6.6761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1071.067470][ T40] audit: type=1326 audit(2000000154.558:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31599 comm="syz.6.6761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1071.272041][T31604] futex_wake_op: syz.7.6760 tries to shift op by 144; fix this program [ 1071.873465][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 1071.873483][ T40] audit: type=1326 audit(2000000155.398:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31599 comm="syz.6.6761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1071.883290][ T40] audit: type=1326 audit(2000000155.398:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31599 comm="syz.6.6761" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1072.952167][ T6027] usb 6-1: USB disconnect, device number 60 [ 1073.278084][T31625] lo speed is unknown, defaulting to 1000 [ 1073.327647][ T6027] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1073.477512][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 1073.480512][ T6027] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.483669][ T6027] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1073.486691][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1073.489840][ T6027] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1073.493810][ T6027] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1073.496623][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.504238][ T6027] usbtmc 6-1:16.0: bulk endpoints not found [ 1075.016240][T31651] netlink: 'syz.6.6774': attribute type 10 has an invalid length. [ 1075.024243][T31651] netlink: 'syz.6.6774': attribute type 10 has an invalid length. [ 1075.027098][T31651] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6774'. [ 1075.675061][T31663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6785'. [ 1075.678899][T31663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6785'. [ 1076.026366][T30522] usb 6-1: USB disconnect, device number 61 [ 1077.197175][ T6027] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1077.347225][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 1077.350290][ T6027] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1077.353352][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1077.356352][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 768 [ 1077.360642][ T6027] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1077.364654][ T6027] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1077.367956][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.599451][ T6027] usb 6-1: usb_control_msg returned -32 [ 1077.619683][ T6027] usbtmc 6-1:16.0: can't read capabilities [ 1077.706564][ T842] usb 6-1: USB disconnect, device number 62 [ 1079.865728][T31727] lo speed is unknown, defaulting to 1000 [ 1080.991108][T31740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6799'. [ 1080.994782][T31740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6799'. [ 1081.259922][T31748] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6802'. [ 1081.264060][T31748] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6802'. [ 1081.418235][T31758] loop2: detected capacity change from 0 to 7 [ 1081.433223][T31758] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 1081.434934][T31758] loop2: partition table partially beyond EOD, truncated [ 1081.437313][T31758] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 1081.467638][ T40] audit: type=1804 audit(2000000164.979:1180): pid=31756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6804" name="bus" dev="tmpfs" ino=5147 res=1 errno=0 [ 1082.128012][T31763] lo speed is unknown, defaulting to 1000 [ 1085.056706][ T6027] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1085.207465][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 1085.210462][ T6027] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1085.213581][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1085.218596][ T6027] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1085.221963][ T6027] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1085.226363][ T6027] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1085.230843][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.244668][ T6027] usbtmc 6-1:16.0: bulk endpoints not found [ 1085.537858][T31814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6820'. [ 1085.542728][T31814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6820'. [ 1086.433134][T31834] ÿÿÿÿÿÿÇ(¯J: renamed from lo [ 1086.791976][T31841] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6826'. [ 1087.670145][T30522] usb 6-1: USB disconnect, device number 63 [ 1087.918253][T31861] netlink: 'syz.5.6829': attribute type 10 has an invalid length. [ 1087.923106][T31861] netlink: 'syz.5.6829': attribute type 10 has an invalid length. [ 1087.925626][T31861] netlink: 2 bytes leftover after parsing attributes in process `syz.5.6829'. [ 1089.026669][T30522] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1089.186434][T30522] usb 6-1: Using ep0 maxpacket: 8 [ 1089.192831][T30522] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.196062][T30522] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1089.199228][T30522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1089.204677][T30522] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1089.209707][T30522] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1089.214963][T30522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.222095][T30522] usbtmc 6-1:16.0: bulk endpoints not found [ 1089.332703][T31888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6843'. [ 1089.336153][T31888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6843'. [ 1090.357562][T31911] netlink: 'syz.7.6845': attribute type 10 has an invalid length. [ 1090.438439][T31911] netlink: 'syz.7.6845': attribute type 10 has an invalid length. [ 1090.441085][T31911] netlink: 2 bytes leftover after parsing attributes in process `syz.7.6845'. [ 1090.444443][T31911] team0: entered promiscuous mode [ 1090.451233][T31911] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.249321][ T40] audit: type=1804 audit(2000000174.779:1181): pid=31924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.6850" name="bus" dev="tmpfs" ino=5471 res=1 errno=0 [ 1091.252796][T31919] ÿÿÿÿÿÿÇ(¯J speed is unknown, defaulting to 1000 [ 1091.731973][ T842] usb 6-1: USB disconnect, device number 64 [ 1091.863640][T31929] bridge0: port 1(syz_tun) entered blocking state [ 1091.865814][T31929] bridge0: port 1(syz_tun) entered disabled state [ 1091.868124][T31929] syz_tun: entered allmulticast mode [ 1091.870635][T31929] syz_tun: entered promiscuous mode [ 1091.887775][T31929] netlink: 'syz.6.6852': attribute type 10 has an invalid length. [ 1092.009056][T31929] infiniband syz1: set down [ 1092.011828][T31929] infiniband syz1: added syz_tun [ 1092.032319][T31929] RDS/IB: syz1: added [ 1092.033731][T31929] smc: adding ib device syz1 with port count 1 [ 1092.035671][T31929] smc: ib device syz1 port 1 has pnetid [ 1092.136252][ T842] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1092.292723][ T842] usb 6-1: Using ep0 maxpacket: 8 [ 1092.296093][ T842] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1092.300272][ T842] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1092.306477][ T842] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 768 [ 1092.309630][ T842] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1092.314689][ T842] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1092.317876][ T842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.528991][ T842] usb 6-1: usb_control_msg returned -32 [ 1092.530828][ T842] usbtmc 6-1:16.0: can't read capabilities [ 1092.644875][ T6027] usb 6-1: USB disconnect, device number 65 [ 1092.715961][T31945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6856'. [ 1092.719858][T31945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6856'. [ 1093.338558][T31959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6859'. [ 1093.482657][T31964] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6862'. [ 1094.158569][T31984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6866'. [ 1094.163864][T31984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6866'. [ 1094.268340][T31988] fuse: Unknown parameter 'group_id00000000000000000000' [ 1094.375910][T31999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6870'. [ 1095.279973][T32010] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6876'. [ 1095.283513][T32010] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6876'. [ 1096.921567][T32036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6881'. [ 1097.945287][T32054] netlink: 'syz.1.6884': attribute type 10 has an invalid length. [ 1097.971324][T32054] netlink: 'syz.1.6884': attribute type 10 has an invalid length. [ 1097.973903][T32054] __nla_validate_parse: 1 callbacks suppressed [ 1097.973996][T32054] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6884'. [ 1097.988791][T32054] team0: entered promiscuous mode [ 1097.990706][T32054] vlan0: entered promiscuous mode [ 1097.998604][T32054] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.001879][T32054] batman_adv: batadv0: Interface activated: team0 [ 1098.006929][T32054] batman_adv: batadv0: Interface deactivated: team0 [ 1098.009122][T32054] batman_adv: batadv0: Removing interface: team0 [ 1098.019054][T32054] bridge0: port 1(team0) entered blocking state [ 1098.021581][T32054] bridge0: port 1(team0) entered disabled state [ 1098.024126][T32054] team0: entered allmulticast mode [ 1098.026074][T32054] vlan0: entered allmulticast mode [ 1098.027777][T32054] veth0_vlan: entered allmulticast mode [ 1098.126572][T32062] overlayfs: failed to resolve './file0': -2 [ 1099.059056][T32085] overlayfs: failed to clone upperpath [ 1099.350213][T32090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6893'. [ 1099.393515][T32093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6894'. [ 1099.398056][T32093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6894'. [ 1099.428807][T32091] vlan1: entered promiscuous mode [ 1099.430951][T32091] vlan1: entered allmulticast mode [ 1099.432643][T32091] veth0_vlan: entered allmulticast mode [ 1099.434435][T32091] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1099.436832][T32095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6895'. [ 1100.122997][T32113] fuse: Unknown parameter 'group_id00000000000000000000' [ 1101.004132][T32129] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6905'. [ 1101.007969][T32129] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6905'. [ 1101.667844][T32141] ÿÿÿÿÿÿÇ(¯J speed is unknown, defaulting to 1000 [ 1102.376987][T32151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6913'. [ 1102.382038][T32151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6913'. [ 1102.581165][ T40] audit: type=1804 audit(2000000186.110:1182): pid=32160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6915" name="bus" dev="tmpfs" ino=5455 res=1 errno=0 [ 1103.082021][T32163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6916'. [ 1104.423952][T32184] overlayfs: failed to clone upperpath [ 1104.432640][T32185] netlink: 240 bytes leftover after parsing attributes in process `syz.7.6927'. [ 1104.759224][T32192] ÿÿÿÿÿÿÇ(¯J speed is unknown, defaulting to 1000 [ 1105.398893][T32201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6925'. [ 1105.509629][T32206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6935'. [ 1106.475412][T32229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6934'. [ 1106.492039][T32229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6934'. [ 1106.642771][T32237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6938'. [ 1107.502539][T32256] 9pnet_fd: Insufficient options for proto=fd [ 1107.509245][T32256] netlink: 'syz.1.6943': attribute type 2 has an invalid length. [ 1107.653155][T32258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6944'. [ 1109.829865][T32303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6956'. [ 1109.854804][T32306] tipc: Enabling of bearer rejected, failed to enable media [ 1109.859099][T32306] tipc: Enabling of bearer rejected, failed to enable media [ 1109.920878][T32310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6960'. [ 1109.924396][T32310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6960'. [ 1110.193428][T32314] vlan1: entered promiscuous mode [ 1110.195560][T32314] vlan1: entered allmulticast mode [ 1110.197238][T32314] veth0_vlan: entered allmulticast mode [ 1110.199016][T32314] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1111.300117][T32336] 9pnet_fd: Insufficient options for proto=fd [ 1111.303530][T32336] netlink: 'syz.7.6966': attribute type 2 has an invalid length. [ 1111.374691][T32340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6974'. [ 1111.378755][T32340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6974'. [ 1111.444163][T32347] netlink: 'syz.1.6970': attribute type 1 has an invalid length. [ 1111.449477][T32347] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6970'. [ 1111.463479][T32347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6970'. [ 1112.536618][T32366] tipc: Enabled bearer , priority 10 [ 1112.540232][T32366] tipc: Enabling of bearer rejected, failed to enable media [ 1112.717652][T32371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6977'. [ 1112.722413][T32371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6977'. [ 1112.758062][T32376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6978'. [ 1112.784653][T32372] vlan1: entered promiscuous mode [ 1112.786836][T32372] vlan1: entered allmulticast mode [ 1112.788533][T32372] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1115.333688][ T812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6988'. [ 1115.337688][ T812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6988'. [ 1115.378205][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.380263][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.222804][ T834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6993'. [ 1116.328427][ T834] hsr_slave_1 (unregistering): left promiscuous mode [ 1116.564932][T30522] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1116.713662][ T849] could not allocate digest TFM handle cryptd(blake2b-160) [ 1116.734896][T30522] usb 6-1: Using ep0 maxpacket: 8 [ 1116.738132][T30522] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1116.741329][T30522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1116.746422][T30522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1116.750416][T30522] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1116.754702][T30522] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1116.757850][T30522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.967409][T30522] usb 6-1: usb_control_msg returned -32 [ 1116.969257][T30522] usbtmc 6-1:16.0: can't read capabilities [ 1117.092289][ T6027] usb 6-1: USB disconnect, device number 66 [ 1117.472667][ T862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6998'. [ 1117.476309][ T862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6998'. [ 1118.146273][ T866] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1118.502827][ T878] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7004'. [ 1118.627498][ T888] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7005'. [ 1118.735849][ T888] hsr_slave_1 (unregistering): left promiscuous mode [ 1118.843789][ T889] syzkaller1: entered promiscuous mode [ 1118.846273][ T889] syzkaller1: entered allmulticast mode [ 1118.982619][ T895] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7009'. [ 1119.156494][ T899] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7018'. [ 1120.199748][ T916] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7015'. [ 1120.603239][ T40] audit: type=1326 audit(2000000204.131:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=912 comm="syz.6.7014" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1120.610550][ T40] audit: type=1326 audit(2000000204.131:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=912 comm="syz.6.7014" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f825a7 code=0x7ffc0000 [ 1120.617525][ T40] audit: type=1326 audit(2000000204.131:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=912 comm="syz.6.7014" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1120.624206][ T40] audit: type=1326 audit(2000000204.131:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=912 comm="syz.6.7014" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f825a7 code=0x7ffc0000 [ 1120.630842][ T40] audit: type=1326 audit(2000000204.131:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=912 comm="syz.6.7014" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1120.638562][ T40] audit: type=1326 audit(2000000204.131:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=912 comm="syz.6.7014" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f825a7 code=0x7ffc0000 [ 1120.645255][ T40] audit: type=1326 audit(2000000204.131:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=912 comm="syz.6.7014" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1120.651777][ T40] audit: type=1326 audit(2000000204.131:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=912 comm="syz.6.7014" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f825a7 code=0x7ffc0000 [ 1120.658575][ T40] audit: type=1326 audit(2000000204.131:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=912 comm="syz.6.7014" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1120.665967][ T40] audit: type=1326 audit(2000000204.131:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=912 comm="syz.6.7014" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f825a7 code=0x7ffc0000 [ 1120.803433][ T913] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1120.975332][ T929] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7019'. [ 1120.991083][ T931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7021'. [ 1121.465327][ T936] could not allocate digest TFM handle cryptd(blake2b-160) [ 1121.654995][ T947] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 1121.657316][ T947] UDF-fs: Scanning with blocksize 2048 failed [ 1121.661493][ T947] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 1121.663875][ T947] UDF-fs: Scanning with blocksize 4096 failed [ 1121.763711][ T950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7025'. [ 1122.086463][ T965] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1122.285477][ T984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7031'. [ 1123.012895][ T996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7034'. [ 1123.134853][ T996] hsr_slave_1 (unregistering): left promiscuous mode [ 1124.154667][ T842] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1124.314625][ T842] usb 6-1: Using ep0 maxpacket: 8 [ 1124.319328][ T842] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1124.323686][ T842] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1124.329495][ T842] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1124.333731][ T842] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1124.340295][ T842] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1124.344156][ T842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.570088][ T842] usb 6-1: usb_control_msg returned -32 [ 1124.571875][ T842] usbtmc 6-1:16.0: can't read capabilities [ 1124.899760][ T842] usb 6-1: USB disconnect, device number 67 [ 1125.748964][ T1053] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7052'. [ 1126.614552][ T1072] cgroup: fork rejected by pids controller in /syz6 [ 1126.740738][ T1249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7056'. [ 1128.229675][ T1867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7062'. [ 1128.233567][ T1867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7062'. [ 1131.473250][T18709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.477188][T18709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.175827][ T2598] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7084'. [ 1132.254977][T30522] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1132.474028][T30522] usb 6-1: Using ep0 maxpacket: 8 [ 1132.477680][T30522] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1132.483538][T30522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1132.491031][T30522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1132.497074][T30522] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1132.510785][T30522] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1132.513578][T30522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.748000][T30522] usb 6-1: usb_control_msg returned -32 [ 1132.749796][T30522] usbtmc 6-1:16.0: can't read capabilities [ 1132.867510][ T842] usb 6-1: USB disconnect, device number 68 [ 1133.550071][ T2618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7091'. [ 1133.774098][ T6027] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1133.923958][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 1133.927289][ T6027] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1133.942131][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1133.946404][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1133.949612][ T6027] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1133.953749][ T6027] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1133.956954][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.164164][ T6027] usb 6-1: usb_control_msg returned -32 [ 1134.166008][ T6027] usbtmc 6-1:16.0: can't read capabilities [ 1134.259426][ T2629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7093'. [ 1134.268261][T31770] usb 6-1: USB disconnect, device number 69 [ 1135.981215][ T2672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7103'. [ 1136.040393][ T2680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7107'. [ 1136.044142][ T2680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7107'. [ 1137.653747][ T6027] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1137.803942][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 1137.807585][ T6027] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1137.810729][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1137.814215][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1137.817428][ T6027] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1137.821564][ T6027] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1137.824671][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.034402][ T6027] usb 6-1: usb_control_msg returned -32 [ 1138.039590][ T6027] usbtmc 6-1:16.0: can't read capabilities [ 1138.135838][ T2720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7116'. [ 1138.140803][T30522] usb 6-1: USB disconnect, device number 70 [ 1138.643634][ T40] kauditd_printk_skb: 1266 callbacks suppressed [ 1138.643646][ T40] audit: type=1326 audit(2000000222.172:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2725 comm="syz.6.7118" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f82598 code=0x7ffc0000 [ 1138.652231][ T40] audit: type=1326 audit(2000000222.172:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2725 comm="syz.6.7118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1138.673622][ T40] audit: type=1326 audit(2000000222.172:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2725 comm="syz.6.7118" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f82598 code=0x7ffc0000 [ 1138.680161][ T40] audit: type=1326 audit(2000000222.172:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2725 comm="syz.6.7118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1138.694134][ T40] audit: type=1326 audit(2000000222.172:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2725 comm="syz.6.7118" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f82598 code=0x7ffc0000 [ 1138.702023][ T40] audit: type=1326 audit(2000000222.172:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2725 comm="syz.6.7118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1138.709780][ T40] audit: type=1326 audit(2000000222.172:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2725 comm="syz.6.7118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1138.716595][ T40] audit: type=1326 audit(2000000222.172:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2725 comm="syz.6.7118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1138.723206][ T40] audit: type=1326 audit(2000000222.172:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2725 comm="syz.6.7118" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f82598 code=0x7ffc0000 [ 1138.730511][ T40] audit: type=1326 audit(2000000222.172:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2725 comm="syz.6.7118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1138.869033][ T2747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7126'. [ 1138.883228][ T2747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7126'. [ 1139.007945][ T2744] could not allocate digest TFM handle cryptd(blake2b-160) [ 1140.156335][ T2779] cgroup: fork rejected by pids controller in /syz1 [ 1140.433206][ T2963] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7135'. [ 1140.437122][ T2963] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7135'. [ 1142.583942][ T3685] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1142.586735][ T3685] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1142.590436][ T3685] vhci_hcd vhci_hcd.0: Device attached [ 1142.883563][T12776] usb 40-1: SetAddress Request (6) to port 0 [ 1142.886576][T12776] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1143.053551][ T3694] tipc: Resetting bearer [ 1143.057176][ T3694] bond6: (slave ip6gretap1): Removing an active aggregator [ 1143.061941][ T3694] bond6: (slave ip6gretap1): Releasing backup interface [ 1143.065080][ T3694] bond6: (slave ip6gretap1): the permanent HWaddr of slave - 46:d9:94:cb:72:dc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1143.078610][ T3694] bond6: (slave veth13): Releasing backup interface [ 1143.079045][ T3697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7148'. [ 1143.458792][ T3686] vhci_hcd: connection reset by peer [ 1143.460730][T18709] vhci_hcd: stop threads [ 1143.462077][T18709] vhci_hcd: release socket [ 1143.464315][T18709] vhci_hcd: disconnect device [ 1143.901307][ T40] kauditd_printk_skb: 1079 callbacks suppressed [ 1143.901321][ T40] audit: type=1326 audit(2000000227.432:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.7.7150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1143.916275][ T40] audit: type=1326 audit(2000000227.442:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.7.7150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1143.922985][ T40] audit: type=1326 audit(2000000227.452:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.7.7150" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 1143.930372][ T40] audit: type=1326 audit(2000000227.452:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.7.7150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1143.937536][ T40] audit: type=1326 audit(2000000227.452:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.7.7150" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 1143.944274][ T40] audit: type=1326 audit(2000000227.452:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.7.7150" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 1143.950863][ T40] audit: type=1326 audit(2000000227.452:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.7.7150" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 1143.958258][ T40] audit: type=1326 audit(2000000227.452:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.7.7150" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 1143.958603][ T3710] bond0 (unregistering): Released all slaves [ 1143.972660][ T40] audit: type=1326 audit(2000000227.452:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.7.7150" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 1143.979592][ T40] audit: type=1326 audit(2000000227.452:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.7.7150" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e598 code=0x7ffc0000 [ 1144.014825][ T3717] overlayfs: failed to clone upperpath [ 1144.250885][ T3728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7157'. [ 1144.311746][ T3730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7158'. [ 1144.413340][T31770] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1144.583532][T31770] usb 6-1: Using ep0 maxpacket: 8 [ 1144.587338][T31770] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1144.590462][T31770] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1144.593936][T31770] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1144.597327][T31770] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1144.601783][T31770] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1144.605279][T31770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.816570][T31770] usb 6-1: usb_control_msg returned -32 [ 1144.818432][T31770] usbtmc 6-1:16.0: can't read capabilities [ 1144.950080][T30522] usb 6-1: USB disconnect, device number 71 [ 1146.767490][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.769944][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.064391][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7167'. [ 1147.068077][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7167'. [ 1147.860360][ T3770] team0: left allmulticast mode [ 1147.862092][ T3770] vlan0: left allmulticast mode [ 1147.864326][ T3770] bridge0: port 1(team0) entered disabled state [ 1147.871575][ T3770] bond5: (slave veth0_to_bond): Releasing active interface [ 1147.876731][ T3770] vlan0: left promiscuous mode [ 1147.880013][ T3770] team0: Port device vlan0 removed [ 1147.883993][ T3770] bond3: (slave gretap1): Releasing active interface [ 1147.890111][ T3770] bond4: (slave veth9): Releasing active interface [ 1147.893690][ T3770] vlan4: left allmulticast mode [ 1147.895731][ T3770] bridge0: left allmulticast mode [ 1147.898261][ T3770] vlan4: left promiscuous mode [ 1147.900316][ T3770] bridge0: left promiscuous mode [ 1147.902720][ T3770] bridge3: port 1(vlan4) entered disabled state [ 1147.913402][ T3770] bond5: (slave veth11): Releasing active interface [ 1147.917902][ T3770] bond6: (slave veth13): Releasing active interface [ 1147.922594][ T3770] bond7: (slave gretap2): Releasing active interface [ 1147.933163][T12776] usb 40-1: device descriptor read/8, error -110 [ 1148.365907][T12776] usb usb40-port1: attempt power cycle [ 1148.793666][ T3789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7181'. [ 1148.802776][ T3789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7181'. [ 1148.934937][T12776] usb usb40-port1: unable to enumerate USB device [ 1148.982620][ T3796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7174'. [ 1148.985694][ T3796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7174'. [ 1148.999970][ T40] kauditd_printk_skb: 132 callbacks suppressed [ 1148.999982][ T40] audit: type=1326 audit(2000000232.533:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3795 comm="syz.1.7174" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 1149.052133][ T3798] netlink: 'syz.1.7174': attribute type 10 has an invalid length. [ 1149.058727][ T3798] bridge0: port 1(team0) entered blocking state [ 1149.066090][ T3798] bridge0: port 1(team0) entered disabled state [ 1149.069790][ T3798] team0: entered allmulticast mode [ 1150.786445][ T40] audit: type=1326 audit(2000000234.323:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3810 comm="syz.1.7179" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 1150.803021][ T40] audit: type=1326 audit(2000000234.323:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3810 comm="syz.1.7179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 1150.815165][ T40] audit: type=1326 audit(2000000234.323:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3810 comm="syz.1.7179" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 1150.826138][ T40] audit: type=1326 audit(2000000234.323:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3810 comm="syz.1.7179" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 1150.833535][ T40] audit: type=1326 audit(2000000234.323:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3810 comm="syz.1.7179" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 1150.840281][ T40] audit: type=1326 audit(2000000234.323:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3810 comm="syz.1.7179" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 1150.847755][ T40] audit: type=1326 audit(2000000234.323:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3810 comm="syz.1.7179" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 1150.848009][ T3819] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7180'. [ 1150.860466][ T40] audit: type=1326 audit(2000000234.323:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3810 comm="syz.1.7179" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 1150.872938][ T40] audit: type=1326 audit(2000000234.323:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3810 comm="syz.1.7179" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 1151.076346][ T3833] could not allocate digest TFM handle cryptd(blake2b-160) [ 1151.153088][ T6027] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1151.302957][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 1151.305926][ T6027] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1151.308915][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1151.311913][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1151.315364][ T6027] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1151.319341][ T6027] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1151.322127][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.535723][ T6027] usb 6-1: usb_control_msg returned -32 [ 1151.537529][ T6027] usbtmc 6-1:16.0: can't read capabilities [ 1151.671723][ T6027] usb 6-1: USB disconnect, device number 72 [ 1152.370269][ T3856] bond0 (unregistering): Released all slaves [ 1153.073738][ T3867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7193'. [ 1153.185415][ T3870] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7195'. [ 1153.477487][ T6027] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1153.642885][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 1153.646031][ T6027] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1153.649016][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1153.663142][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1153.666588][ T6027] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1153.670592][ T6027] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1153.684906][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.685551][ T3877] could not allocate digest TFM handle cryptd(blake2b-160) [ 1153.905027][ T6027] usb 6-1: usb_control_msg returned -32 [ 1153.906859][ T6027] usbtmc 6-1:16.0: can't read capabilities [ 1154.025086][ T6027] usb 6-1: USB disconnect, device number 73 [ 1154.742347][ T3904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7204'. [ 1155.044115][ T3913] could not allocate digest TFM handle cryptd(blake2b-160) [ 1155.297601][ T3920] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7208'. [ 1155.529511][ T3923] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7209'. [ 1155.703903][ T3929] bridge4: entered promiscuous mode [ 1155.862737][T30522] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1156.022705][T30522] usb 6-1: Using ep0 maxpacket: 8 [ 1156.025964][T30522] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1156.028994][T30522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1156.032194][T30522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1156.035742][T30522] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1156.039769][T30522] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1156.042586][T30522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.111361][ T3933] could not allocate digest TFM handle cryptd(blake2b-160) [ 1156.251155][T30522] usb 6-1: usb_control_msg returned -32 [ 1156.262754][T30522] usbtmc 6-1:16.0: can't read capabilities [ 1156.422877][T30522] usb 6-1: USB disconnect, device number 74 [ 1156.462237][ T3941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7214'. [ 1156.468756][ T3943] could not allocate digest TFM handle cryptd(blake2b-160) [ 1156.864083][ T3952] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7216'. [ 1156.932294][ T3956] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7219'. [ 1156.936820][ T3956] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7219'. [ 1157.389755][ T3963] could not allocate digest TFM handle cryptd(blake2b-160) [ 1157.956293][ T3980] could not allocate digest TFM handle cryptd(blake2b-160) [ 1157.985827][ T3991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7228'. [ 1157.989337][ T3991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7228'. [ 1158.746981][ T40] kauditd_printk_skb: 103 callbacks suppressed [ 1158.746992][ T40] audit: type=1326 audit(2000000242.283:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3982 comm="syz.6.7226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 1159.538338][ T4023] could not allocate digest TFM handle cryptd(blake2b-160) [ 1160.622951][ T842] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1160.735638][ T4046] could not allocate digest TFM handle cryptd(blake2b-160) [ 1160.772573][ T842] usb 6-1: Using ep0 maxpacket: 8 [ 1160.785240][ T842] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1160.788252][ T842] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1160.791248][ T842] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1160.794810][ T842] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1160.798795][ T842] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1160.801613][ T842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.009414][ T842] usb 6-1: usb_control_msg returned -32 [ 1161.011210][ T842] usbtmc 6-1:16.0: can't read capabilities [ 1161.121493][ T842] usb 6-1: USB disconnect, device number 75 [ 1161.305513][ T4061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7244'. [ 1161.857006][ T4070] could not allocate digest TFM handle cryptd(blake2b-160) [ 1162.005842][ T6027] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1162.362396][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 1162.366429][ T6027] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1162.369368][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1162.372606][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1162.375701][ T6027] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1162.380964][ T6027] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1162.385183][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.605246][ T6027] usb 6-1: usb_control_msg returned -32 [ 1162.607061][ T6027] usbtmc 6-1:16.0: can't read capabilities [ 1162.646735][ T4091] could not allocate digest TFM handle cryptd(blake2b-160) [ 1162.724070][ T6027] usb 6-1: USB disconnect, device number 76 [ 1162.865107][ T4102] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7254'. [ 1162.916388][ T4103] could not allocate digest TFM handle cryptd(blake2b-160) [ 1164.214906][ T4131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7260'. [ 1164.233149][ T4131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7260'. [ 1164.357372][ T4120] could not allocate digest TFM handle cryptd(blake2b-160) [ 1166.588224][ T4166] bridge0: entered promiscuous mode [ 1166.602250][ T4156] could not allocate digest TFM handle cryptd(blake2b-160) [ 1166.785170][ T4172] could not allocate digest TFM handle cryptd(blake2b-160) [ 1168.435135][ T4219] could not allocate digest TFM handle cryptd(blake2b-160) [ 1169.092818][ T4233] could not allocate digest TFM handle cryptd(blake2b-160) [ 1169.179648][ T4239] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7284'. [ 1169.183425][ T4239] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7284'. [ 1169.204017][ T40] audit: type=1326 audit(2000000252.734:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4231 comm="syz.6.7283" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x0 [ 1169.282050][ T842] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1169.339559][ T4245] could not allocate digest TFM handle cryptd(blake2b-160) [ 1169.442004][ T842] usb 6-1: Using ep0 maxpacket: 8 [ 1169.445243][ T842] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1169.448270][ T842] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1169.451300][ T842] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1169.455516][ T842] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1169.459593][ T842] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1169.462829][ T842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.671909][ T842] usb 6-1: usb_control_msg returned -32 [ 1169.673821][ T842] usbtmc 6-1:16.0: can't read capabilities [ 1169.758656][ T842] usb 6-1: USB disconnect, device number 77 [ 1170.055870][ T4257] could not allocate digest TFM handle cryptd(blake2b-160) [ 1170.413072][ T4266] could not allocate digest TFM handle cryptd(blake2b-160) [ 1170.711850][T31770] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1170.872873][T31770] usb 6-1: Using ep0 maxpacket: 8 [ 1170.877497][T31770] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1170.880799][T31770] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1170.884370][T31770] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1170.887688][T31770] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1170.892449][T31770] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1170.896449][T31770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.960978][ T4283] could not allocate digest TFM handle cryptd(blake2b-160) [ 1171.009835][ T4289] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7290'. [ 1171.115361][T31770] usb 6-1: usb_control_msg returned -32 [ 1171.117176][T31770] usbtmc 6-1:16.0: can't read capabilities [ 1171.233356][T31770] usb 6-1: USB disconnect, device number 78 [ 1171.703046][ T4293] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7293'. [ 1171.711409][ T4293] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7293'. [ 1172.517039][ T4309] could not allocate digest TFM handle cryptd(blake2b-160) [ 1172.901451][ T4329] could not allocate digest TFM handle cryptd(blake2b-160) [ 1172.971761][ T842] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1173.121764][ T842] usb 6-1: Using ep0 maxpacket: 8 [ 1173.124642][ T842] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1173.127650][ T842] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1173.130634][ T842] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1173.134947][ T842] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1173.139204][ T842] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1173.142061][ T842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.348087][ T842] usb 6-1: usb_control_msg returned -32 [ 1173.350062][ T842] usbtmc 6-1:16.0: can't read capabilities [ 1173.443898][T30522] usb 6-1: USB disconnect, device number 79 [ 1173.544135][ T4340] could not allocate digest TFM handle cryptd(blake2b-160) [ 1174.307296][ T4358] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7310'. [ 1174.470705][ T4360] could not allocate digest TFM handle cryptd(blake2b-160) [ 1174.967979][ T4369] overlayfs: failed to clone upperpath [ 1175.230876][ T4377] could not allocate digest TFM handle cryptd(blake2b-160) [ 1176.214692][ T40] audit: type=1326 audit(2000000259.744:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.5.7319" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0 [ 1176.281710][ T4400] could not allocate digest TFM handle cryptd(blake2b-160) [ 1176.298580][ T4391] could not allocate digest TFM handle cryptd(blake2b-160) [ 1176.327652][ T4409] syzkaller1: left promiscuous mode [ 1176.329359][ T4409] syzkaller1: left allmulticast mode [ 1176.752539][ T40] audit: type=1326 audit(2000000260.284:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.6.7321" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f82579 code=0x0 [ 1176.814703][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.816555][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.912307][ T4418] overlayfs: failed to clone upperpath [ 1177.180752][ T4423] could not allocate digest TFM handle cryptd(blake2b-160) [ 1177.298797][ T4429] could not allocate digest TFM handle cryptd(blake2b-160) [ 1178.104981][ T4500] could not allocate digest TFM handle cryptd(blake2b-160) [ 1180.356247][ T4529] could not allocate digest TFM handle cryptd(blake2b-160) [ 1180.366201][ T4537] bridge4: entered promiscuous mode [ 1180.706023][ T4545] could not allocate digest TFM handle cryptd(blake2b-160) [ 1181.555657][ T40] audit: type=1326 audit(2000000265.084:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.7.7343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1181.563754][ T40] audit: type=1326 audit(2000000265.084:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.7.7343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1181.573021][ T40] audit: type=1326 audit(2000000265.084:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.7.7343" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1181.580814][ T40] audit: type=1326 audit(2000000265.084:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.7.7343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1181.588952][ T40] audit: type=1326 audit(2000000265.084:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.7.7343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1181.599477][ T40] audit: type=1326 audit(2000000265.094:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.7.7343" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1181.607840][ T40] audit: type=1326 audit(2000000265.094:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.7.7343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1181.618406][ T40] audit: type=1326 audit(2000000265.094:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.7.7343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1181.630035][ T40] audit: type=1326 audit(2000000265.094:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.7.7343" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1181.637739][ T40] audit: type=1326 audit(2000000265.094:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.7.7343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1182.314036][ T4577] could not allocate digest TFM handle cryptd(blake2b-160) [ 1183.025123][ T4591] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7351'. [ 1183.028747][ T4591] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7351'. [ 1183.712749][ T4606] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7354'. [ 1184.355804][ T4614] could not allocate digest TFM handle cryptd(blake2b-160) [ 1184.544657][ T4627] could not allocate digest TFM handle cryptd(blake2b-160) [ 1184.593607][ T4631] could not allocate digest TFM handle cryptd(blake2b-160) [ 1185.061113][ T34] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1185.211221][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 1185.214554][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1185.217726][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1185.220765][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1185.224746][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1185.228784][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1185.232015][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.451061][ T34] usb 6-1: usb_control_msg returned -32 [ 1185.452898][ T34] usbtmc 6-1:16.0: can't read capabilities [ 1185.509090][ T4650] could not allocate digest TFM handle cryptd(blake2b-160) [ 1185.538032][ T842] usb 6-1: USB disconnect, device number 80 [ 1186.163371][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7364'. [ 1186.501028][ T34] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1186.661002][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 1186.666504][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1186.669563][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1186.676053][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1186.686489][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1186.690612][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1186.693641][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.829275][ T4677] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7367'. [ 1186.835871][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 1186.835882][ T40] audit: type=1800 audit(2000000270.365:3823): pid=4677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7367" name="nullb0" dev="tmpfs" ino=3352 res=0 errno=0 [ 1186.907228][ T34] usb 6-1: usb_control_msg returned -32 [ 1186.909048][ T34] usbtmc 6-1:16.0: can't read capabilities [ 1187.025339][ T34] usb 6-1: USB disconnect, device number 81 [ 1187.560251][ T4683] could not allocate digest TFM handle cryptd(blake2b-160) [ 1187.649718][ T4694] could not allocate digest TFM handle cryptd(blake2b-160) [ 1187.725524][ T4699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7376'. [ 1187.879451][ T4705] could not allocate digest TFM handle cryptd(blake2b-160) [ 1188.835647][ T40] audit: type=1326 audit(2000000272.365:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.6.7379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1188.843255][ T40] audit: type=1326 audit(2000000272.365:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.6.7379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1188.849964][ T40] audit: type=1326 audit(2000000272.365:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.6.7379" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1188.860813][ T40] audit: type=1326 audit(2000000272.365:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.6.7379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1188.871187][ T40] audit: type=1326 audit(2000000272.365:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.6.7379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1188.878532][ T40] audit: type=1326 audit(2000000272.375:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.6.7379" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1188.889667][ T40] audit: type=1326 audit(2000000272.375:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.6.7379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1188.897004][ T40] audit: type=1326 audit(2000000272.375:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.6.7379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1188.905294][ T40] audit: type=1326 audit(2000000272.375:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.6.7379" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 1189.251284][ T4724] bridge5: entered promiscuous mode [ 1189.497487][ T4728] could not allocate digest TFM handle cryptd(blake2b-160) [ 1189.840801][ T34] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1189.923318][ T4743] could not allocate digest TFM handle cryptd(blake2b-160) [ 1190.000802][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 1190.004405][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1190.007513][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1190.010468][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1190.014248][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1190.018917][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1190.022245][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.230809][ T34] usb 6-1: usb_control_msg returned -32 [ 1190.232879][ T34] usbtmc 6-1:16.0: can't read capabilities [ 1190.361300][T30522] usb 6-1: USB disconnect, device number 82 [ 1190.484466][ T4752] could not allocate digest TFM handle cryptd(blake2b-160) [ 1190.726201][ T4760] could not allocate digest TFM handle cryptd(blake2b-160) [ 1191.892496][ T4776] could not allocate digest TFM handle cryptd(blake2b-160) [ 1192.122010][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 1192.122023][ T40] audit: type=1326 audit(2000000275.655:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.5.7392" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1192.142057][ T40] audit: type=1326 audit(2000000275.655:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.5.7392" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1192.148730][ T40] audit: type=1326 audit(2000000275.655:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.5.7392" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1192.160734][ T40] audit: type=1326 audit(2000000275.655:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.5.7392" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1192.170891][ T40] audit: type=1326 audit(2000000275.655:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.5.7392" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1192.187940][ T40] audit: type=1326 audit(2000000275.655:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.5.7392" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1192.198017][ T40] audit: type=1326 audit(2000000275.655:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.5.7392" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1192.208054][ T40] audit: type=1326 audit(2000000275.655:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.5.7392" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1192.228188][ T40] audit: type=1326 audit(2000000275.665:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.5.7392" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1192.248310][ T40] audit: type=1326 audit(2000000275.665:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4780 comm="syz.5.7392" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 1192.574235][ T4783] could not allocate digest TFM handle cryptd(blake2b-160) [ 1192.666221][ T4798] could not allocate digest TFM handle cryptd(blake2b-160) [ 1193.080312][ T4797] could not allocate digest TFM handle cryptd(blake2b-160) [ 1193.478625][ T4820] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1193.480762][ T4820] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1193.484814][ T4820] vhci_hcd vhci_hcd.0: Device attached [ 1193.780588][T31770] usb 40-1: SetAddress Request (10) to port 0 [ 1193.782619][T31770] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1193.813168][ T4829] could not allocate digest TFM handle cryptd(blake2b-160) [ 1193.932331][ T4837] could not allocate digest TFM handle cryptd(blake2b-160) [ 1193.978940][ T4821] vhci_hcd: connection reset by peer [ 1193.981795][T18709] vhci_hcd: stop threads [ 1193.983568][T18709] vhci_hcd: release socket [ 1193.985444][T18709] vhci_hcd: disconnect device [ 1194.779428][ T4856] could not allocate digest TFM handle cryptd(blake2b-160) [ 1195.964238][ T4882] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7413'. [ 1195.968330][ T4878] ÿÿÿÿÿÿÇ(¯J speed is unknown, defaulting to 1000 [ 1196.424346][ T4887] could not allocate digest TFM handle cryptd(blake2b-160) [ 1196.776959][ T4902] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7417'. [ 1197.965216][ T4914] wireguard1: entered promiscuous mode [ 1197.966966][ T4914] wireguard1: entered allmulticast mode [ 1198.349928][ T4920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7422'. [ 1198.398388][ T4920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7422'. [ 1198.810380][T31770] usb 40-1: device descriptor read/8, error -110 [ 1199.175644][ T4937] could not allocate digest TFM handle cryptd(blake2b-160) [ 1199.391653][T31770] usb usb40-port1: attempt power cycle [ 1199.508651][ T4947] ÿÿÿÿÿÿÇ(¯J speed is unknown, defaulting to 1000 [ 1199.542263][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7427'. [ 1199.960304][ T4954] could not allocate digest TFM handle cryptd(blake2b-160) [ 1200.019898][T31770] usb usb40-port1: unable to enumerate USB device [ 1200.743599][ T4971] could not allocate digest TFM handle cryptd(blake2b-160) [ 1200.801971][ T4966] could not allocate digest TFM handle cryptd(blake2b-160) [ 1201.434954][ T4989] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7434'. [ 1201.472540][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 1201.472552][ T40] audit: type=1800 audit(2000000284.965:3852): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7434" name="nullb0" dev="tmpfs" ino=2945 res=0 errno=0 [ 1202.149490][ T4985] could not allocate digest TFM handle cryptd(blake2b-160) [ 1202.166648][ T4982] could not allocate digest TFM handle cryptd(blake2b-160) [ 1202.224172][ T5004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7438'. [ 1202.230376][ T5004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7438'. [ 1202.234866][ T5004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7438'. [ 1202.239231][ T5004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7438'. [ 1202.244166][ T5004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7438'. [ 1202.667082][ T5013] could not allocate digest TFM handle cryptd(blake2b-160) [ 1202.934614][ T5006] wireguard1: entered promiscuous mode [ 1202.936478][ T5006] wireguard1: entered allmulticast mode [ 1203.376600][ T5031] could not allocate digest TFM handle cryptd(blake2b-160) [ 1203.379596][ T5033] ÿÿÿÿÿÿÇ(¯J speed is unknown, defaulting to 1000 [ 1203.400865][ T5038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7444'. [ 1203.619995][T31770] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1203.769999][T31770] usb 6-1: Using ep0 maxpacket: 8 [ 1203.776113][T31770] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1203.779154][T31770] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1203.785894][T31770] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1203.789026][T31770] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1203.803383][T31770] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1203.806272][T31770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.025897][T31770] usb 6-1: usb_control_msg returned -32 [ 1204.027703][T31770] usbtmc 6-1:16.0: can't read capabilities [ 1204.260156][ T5043] could not allocate digest TFM handle cryptd(blake2b-160) [ 1204.270791][T30522] usb 6-1: USB disconnect, device number 83 [ 1204.674299][ T5058] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7449'. [ 1204.686494][ T40] audit: type=1800 audit(2000000288.216:3853): pid=5058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7449" name="nullb0" dev="tmpfs" ino=3352 res=0 errno=0 [ 1204.861093][ T5059] could not allocate digest TFM handle cryptd(blake2b-160) [ 1205.171415][ T5071] could not allocate digest TFM handle cryptd(blake2b-160) [ 1205.773129][ T5075] could not allocate digest TFM handle cryptd(blake2b-160) [ 1206.047331][ T5094] could not allocate digest TFM handle cryptd(blake2b-160) [ 1206.111478][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7459'. [ 1206.116605][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7459'. [ 1206.129906][ T34] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1206.289874][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 1206.297733][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1206.301648][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1206.305596][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1206.309582][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1206.315067][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1206.318543][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.525603][ T34] usb 6-1: usb_control_msg returned -32 [ 1206.527886][ T34] usbtmc 6-1:16.0: can't read capabilities [ 1206.648520][ T34] usb 6-1: USB disconnect, device number 84 [ 1206.973264][ T5114] __nla_validate_parse: 3 callbacks suppressed [ 1206.973276][ T5114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7463'. [ 1207.027174][ T5115] could not allocate digest TFM handle cryptd(blake2b-160) [ 1207.122959][ T5121] could not allocate digest TFM handle cryptd(blake2b-160) [ 1208.264042][ T5137] could not allocate digest TFM handle cryptd(blake2b-160) [ 1208.541622][ T5146] could not allocate digest TFM handle cryptd(blake2b-160) [ 1208.595668][ T5154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7478'. [ 1208.601959][ T5154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7478'. [ 1208.606415][ T5154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7478'. [ 1208.610201][ T5154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7478'. [ 1208.613675][ T5154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7478'. [ 1208.749147][ T5160] ÿÿÿÿÿÿÇ(¯J speed is unknown, defaulting to 1000 [ 1208.820949][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7470'. [ 1209.615010][ T5170] could not allocate digest TFM handle cryptd(blake2b-160) [ 1211.879015][ T5185] could not allocate digest TFM handle cryptd(blake2b-160) [ 1212.139554][ T40] audit: type=1326 audit(2000000295.666:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.1.7484" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 1212.147739][ T5214] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7484'. [ 1212.147842][ T40] audit: type=1326 audit(2000000295.666:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.1.7484" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 1212.421419][ T5224] could not allocate digest TFM handle cryptd(blake2b-160) [ 1212.599541][T30522] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1212.779480][T30522] usb 6-1: Using ep0 maxpacket: 8 [ 1212.790376][T30522] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1212.793414][T30522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1212.796400][T30522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1212.799793][T30522] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1212.804030][T30522] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1212.806862][T30522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.996446][ T5235] could not allocate digest TFM handle cryptd(blake2b-160) [ 1213.032804][T30522] usb 6-1: usb_control_msg returned -32 [ 1213.039454][T30522] usbtmc 6-1:16.0: can't read capabilities [ 1213.140200][ T34] usb 6-1: USB disconnect, device number 85 [ 1213.304279][ T5244] could not allocate digest TFM handle cryptd(blake2b-160) [ 1213.352034][ T5249] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7491'. [ 1213.632249][ T5253] could not allocate digest TFM handle cryptd(blake2b-160) [ 1213.764051][ T5263] netlink: 'syz.7.7492': attribute type 10 has an invalid length. [ 1213.766588][ T5263] tipc: Resetting bearer [ 1213.779649][ T5263] team0: left promiscuous mode [ 1213.888649][ T5262] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7494'. [ 1213.896674][ T40] audit: type=1800 audit(2000000297.426:3856): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7494" name="nullb0" dev="tmpfs" ino=5942 res=0 errno=0 [ 1215.807608][ T5304] could not allocate digest TFM handle cryptd(blake2b-160) [ 1216.687520][ T5320] could not allocate digest TFM handle cryptd(blake2b-160) [ 1216.879883][ T5328] netlink: 'syz.6.7507': attribute type 10 has an invalid length. [ 1216.905363][ T5329] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7508'. [ 1219.064135][ T5364] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7517'. [ 1219.067764][ T5364] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7517'. [ 1219.180652][T12776] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1219.329175][T12776] usb 6-1: Using ep0 maxpacket: 8 [ 1219.336951][T12776] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1219.340440][T12776] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1219.343587][T12776] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1219.346887][T12776] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1219.351219][T12776] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1219.354183][T12776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.575699][T12776] usb 6-1: usb_control_msg returned -32 [ 1219.577587][T12776] usbtmc 6-1:16.0: can't read capabilities [ 1219.663645][ T34] usb 6-1: USB disconnect, device number 86 [ 1219.678273][ T5381] could not allocate digest TFM handle cryptd(blake2b-160) [ 1219.836184][ T5388] could not allocate digest TFM handle cryptd(blake2b-160) [ 1220.555226][ T5407] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7524'. [ 1220.644923][ T40] audit: type=1800 audit(2000000304.177:3857): pid=5408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7525" name="nullb0" dev="tmpfs" ino=5942 res=0 errno=0 [ 1221.488401][ T5421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7529'. [ 1224.169496][ T5460] could not allocate digest TFM handle cryptd(blake2b-160) [ 1224.182009][ T5457] could not allocate digest TFM handle cryptd(blake2b-160) [ 1224.211321][ T5465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7539'. [ 1225.749645][ T5496] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7546'. [ 1225.758104][ T40] audit: type=1800 audit(2000000309.287:3858): pid=5496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7546" name="nullb0" dev="tmpfs" ino=3352 res=0 errno=0 [ 1225.969232][ T5503] could not allocate digest TFM handle cryptd(blake2b-160) [ 1226.868909][ T5521] could not allocate digest TFM handle cryptd(blake2b-160) [ 1228.310406][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7560'. [ 1228.314999][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7560'. [ 1228.563905][ T5558] could not allocate digest TFM handle cryptd(blake2b-160) [ 1228.636562][ T5563] ÿÿÿÿÿÿÇ(¯J speed is unknown, defaulting to 1000 [ 1228.986174][ T5570] could not allocate digest TFM handle cryptd(blake2b-160) [ 1229.353915][ T5577] could not allocate digest TFM handle cryptd(blake2b-160) [ 1229.618921][ T5589] could not allocate digest TFM handle cryptd(blake2b-160) [ 1230.089901][ T5600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7571'. [ 1230.093404][ T5600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7571'. [ 1230.372843][ T5612] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1230.389640][ T5609] could not allocate digest TFM handle cryptd(blake2b-160) [ 1230.765731][ T5620] could not allocate digest TFM handle cryptd(blake2b-160) [ 1231.373217][ T5629] could not allocate digest TFM handle cryptd(blake2b-160) [ 1231.688283][ T5644] could not allocate digest TFM handle cryptd(blake2b-160) [ 1231.882978][ T5648] could not allocate digest TFM handle cryptd(blake2b-160) [ 1232.667349][ T5671] could not allocate digest TFM handle cryptd(blake2b-160) [ 1232.884579][ T5677] could not allocate digest TFM handle cryptd(blake2b-160) [ 1232.976946][ T5685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7589'. [ 1232.980594][ T5685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7589'. [ 1233.099296][ T5692] could not allocate digest TFM handle cryptd(blake2b-160) [ 1233.229984][ T5698] could not allocate digest TFM handle cryptd(blake2b-160) [ 1233.790331][ T5710] could not allocate digest TFM handle cryptd(blake2b-160) [ 1233.840708][ T5721] could not allocate digest TFM handle cryptd(blake2b-160) [ 1233.901522][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7599'. [ 1233.912220][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7599'. [ 1234.225830][ T40] audit: type=1800 audit(2000000317.757:3859): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7601" name="nullb0" dev="tmpfs" ino=2945 res=0 errno=0 [ 1234.514604][ T5740] could not allocate digest TFM handle cryptd(blake2b-160) [ 1234.712342][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7605'. [ 1235.097561][ T5758] could not allocate digest TFM handle cryptd(blake2b-160) [ 1235.225884][ T5766] could not allocate digest TFM handle cryptd(blake2b-160) [ 1235.546122][ T5782] overlayfs: failed to clone upperpath [ 1235.611605][ T5783] could not allocate digest TFM handle cryptd(blake2b-160) [ 1235.772262][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7614'. [ 1235.923502][ T5803] could not allocate digest TFM handle cryptd(blake2b-160) [ 1236.062993][ T5809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7619'. [ 1236.066748][ T5809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7619'. [ 1236.084409][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7618'. [ 1236.256821][ T5816] could not allocate digest TFM handle cryptd(blake2b-160) [ 1236.531484][ T5830] could not allocate digest TFM handle cryptd(blake2b-160) [ 1237.108181][T14661] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1237.217891][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7626'. [ 1237.278224][T14661] usb 6-1: Using ep0 maxpacket: 8 [ 1237.281268][T14661] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1237.284300][T14661] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1237.287312][T14661] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1237.290683][T14661] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1237.294698][T14661] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1237.297482][T14661] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.505980][T14661] usb 6-1: usb_control_msg returned -32 [ 1237.508139][T14661] usbtmc 6-1:16.0: can't read capabilities [ 1237.598951][T30522] usb 6-1: USB disconnect, device number 87 [ 1238.251149][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.253232][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.290512][ T5868] could not allocate digest TFM handle cryptd(blake2b-160) [ 1238.322806][ T5871] could not allocate digest TFM handle cryptd(blake2b-160) [ 1238.418206][T12776] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1238.436504][ T5879] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7635'. [ 1238.504099][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7636'. [ 1238.578742][T12776] usb 6-1: Using ep0 maxpacket: 8 [ 1238.589286][T12776] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1238.592117][T12776] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1238.595152][T12776] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1238.598617][T12776] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1238.602637][T12776] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1238.605458][T12776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.607319][ T5885] could not allocate digest TFM handle cryptd(blake2b-160) [ 1238.692854][ T5896] could not allocate digest TFM handle cryptd(blake2b-160) [ 1238.717090][ T5902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7640'. [ 1238.720408][ T5902] netlink: 31 bytes leftover after parsing attributes in process `syz.5.7640'. [ 1238.723208][ T5902] netlink: 'syz.5.7640': attribute type 3 has an invalid length. [ 1238.725777][ T5902] netlink: 'syz.5.7640': attribute type 2 has an invalid length. [ 1238.728675][ T5902] netlink: 31 bytes leftover after parsing attributes in process `syz.5.7640'. [ 1238.786872][ T5903] could not allocate digest TFM handle cryptd(blake2b-160) [ 1238.827762][T12776] usb 6-1: usb_control_msg returned -32 [ 1238.830803][T12776] usbtmc 6-1:16.0: can't read capabilities [ 1238.937912][T30522] usb 6-1: USB disconnect, device number 88 [ 1239.073654][ T5917] could not allocate digest TFM handle cryptd(blake2b-160) [ 1239.684490][ T5931] could not allocate digest TFM handle cryptd(blake2b-160) [ 1240.287505][ T5935] could not allocate digest TFM handle cryptd(blake2b-160) [ 1240.474078][ T5965] could not allocate digest TFM handle cryptd(blake2b-160) [ 1240.677980][T14661] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1240.827956][T14661] usb 6-1: Using ep0 maxpacket: 8 [ 1240.834810][T14661] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1240.839439][T14661] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1240.842671][T14661] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1240.846056][T14661] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1240.850389][T14661] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1240.853151][T14661] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.050909][ T5975] could not allocate digest TFM handle cryptd(blake2b-160) [ 1241.069930][T14661] usb 6-1: usb_control_msg returned -32 [ 1241.071754][T14661] usbtmc 6-1:16.0: can't read capabilities [ 1241.189127][T12776] usb 6-1: USB disconnect, device number 89 [ 1241.334173][ T5985] __nla_validate_parse: 1 callbacks suppressed [ 1241.334192][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7657'. [ 1241.991260][ T5997] could not allocate digest TFM handle cryptd(blake2b-160) [ 1242.614459][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7662'. [ 1242.681252][ T6011] ÿÿÿÿÿÿÇ(¯J speed is unknown, defaulting to 1000 [ 1243.997793][T30522] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1244.063215][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7672'. [ 1244.069087][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7672'. [ 1244.135869][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7673'. [ 1244.147853][T30522] usb 6-1: Using ep0 maxpacket: 8 [ 1244.151299][T30522] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1244.154521][T30522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1244.160261][T30522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1244.164080][T30522] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1244.176713][T30522] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1244.179680][T30522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.392365][T30522] usb 6-1: usb_control_msg returned -32 [ 1244.396660][T30522] usbtmc 6-1:16.0: can't read capabilities [ 1244.545627][ T6027] usb 6-1: USB disconnect, device number 90 [ 1244.730203][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7675'. [ 1245.192356][ T6057] could not allocate digest TFM handle cryptd(blake2b-160) [ 1245.909343][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7682'. [ 1245.912980][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7682'. [ 1246.175668][ T6084] could not allocate digest TFM handle cryptd(blake2b-160) [ 1246.491381][ T6102] could not allocate digest TFM handle cryptd(blake2b-160) [ 1247.067073][ T6110] could not allocate digest TFM handle cryptd(blake2b-160) [ 1247.848987][ T6131] could not allocate digest TFM handle cryptd(blake2b-160) [ 1248.032990][ T6138] overlayfs: failed to clone upperpath [ 1248.321467][ T6137] could not allocate digest TFM handle cryptd(blake2b-160) [ 1248.553542][ T6150] could not allocate digest TFM handle cryptd(blake2b-160) [ 1248.898572][ T6158] ÿÿÿÿÿÿÇ(¯J speed is unknown, defaulting to 1000 [ 1249.513641][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7701'. [ 1249.819354][ T6183] could not allocate digest TFM handle cryptd(blake2b-160) [ 1249.849317][ T6186] could not allocate digest TFM handle cryptd(blake2b-160) [ 1250.520510][ T6197] could not allocate digest TFM handle cryptd(blake2b-160) [ 1251.201121][ T6210] batadv0: entered allmulticast mode [ 1251.204118][ T6210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1251.461884][ T40] audit: type=1800 audit(2000000334.998:3860): pid=6216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7708" name="nullb0" dev="tmpfs" ino=3352 res=0 errno=0 [ 1252.102877][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7712'. [ 1252.365297][ T6232] ÿÿÿÿÿÿÇ(¯J speed is unknown, defaulting to 1000 [ 1252.767300][ T6027] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1252.927232][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 1252.930278][ T6027] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1252.933287][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1252.936283][ T6027] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1252.939338][ T6027] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1252.943434][ T6027] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1252.946233][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.153098][ T6027] usb 6-1: usb_control_msg returned -32 [ 1253.154904][ T6027] usbtmc 6-1:16.0: can't read capabilities [ 1253.331454][ T6027] usb 6-1: USB disconnect, device number 91 [ 1253.609560][ T6259] could not allocate digest TFM handle cryptd(blake2b-160) [ 1253.930541][ T6267] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1253.932654][ T6267] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1253.935356][ T6267] vhci_hcd vhci_hcd.0: Device attached [ 1253.939071][ T6267] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1253.948200][ T6267] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 1253.950294][ T6267] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1253.952434][ T6267] vhci_hcd vhci_hcd.0: Device attached [ 1253.964944][ T6267] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 1253.967085][ T6267] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1253.969845][ T6267] vhci_hcd vhci_hcd.0: Device attached [ 1253.973245][ T6267] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 1253.975853][ T6267] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1253.979273][ T6267] vhci_hcd vhci_hcd.0: Device attached [ 1253.982149][ T6267] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1253.985858][ T6267] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1253.990075][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7724'. [ 1254.003738][ T6274] vhci_hcd: connection closed [ 1254.003985][ T6268] vhci_hcd: connection closed [ 1254.004413][ T6270] vhci_hcd: connection closed [ 1254.005095][ T6276] vhci_hcd: connection closed [ 1254.005507][T18735] vhci_hcd: stop threads [ 1254.011584][T18735] vhci_hcd: release socket [ 1254.012993][T18735] vhci_hcd: disconnect device [ 1254.014961][T18735] vhci_hcd: stop threads [ 1254.016671][T18735] vhci_hcd: release socket [ 1254.019230][T18735] vhci_hcd: disconnect device [ 1254.022228][T18735] vhci_hcd: stop threads [ 1254.023725][T18735] vhci_hcd: release socket [ 1254.025203][T18735] vhci_hcd: disconnect device [ 1254.026823][T18735] vhci_hcd: stop threads [ 1254.029192][T18735] vhci_hcd: release socket [ 1254.030644][T18735] vhci_hcd: disconnect device [ 1255.481709][ T6299] ÿÿÿÿÿÿÇ(¯J speed is unknown, defaulting to 1000 [ 1255.598884][ T6306] could not allocate digest TFM handle cryptd(blake2b-160) [ 1257.055860][ T6326] could not allocate digest TFM handle cryptd(blake2b-160) [ 1258.392863][ T6353] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1259.001967][ T6359] could not allocate digest TFM handle cryptd(blake2b-160) [ 1260.799023][ T6389] could not allocate digest TFM handle cryptd(blake2b-160) [ 1261.266892][T30522] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1261.426819][T30522] usb 6-1: Using ep0 maxpacket: 8 [ 1261.431882][T30522] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1261.434906][T30522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1261.438648][T30522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1261.441871][T30522] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1261.445861][T30522] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1261.449221][T30522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.665223][T30522] usb 6-1: usb_control_msg returned -32 [ 1261.667216][T30522] usbtmc 6-1:16.0: can't read capabilities [ 1261.669165][ T6410] could not allocate digest TFM handle cryptd(blake2b-160) [ 1261.765636][T14661] usb 6-1: USB disconnect, device number 92 [ 1261.851869][ T6419] could not allocate digest TFM handle cryptd(blake2b-160) [ 1262.368199][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7758'. [ 1262.385245][ T6427] batman_adv: batadv0: Adding interface: dummy0 [ 1262.387515][ T6427] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1262.395153][ T6427] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1262.403482][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7758'. [ 1262.461295][ T6430] could not allocate digest TFM handle cryptd(blake2b-160) [ 1262.720681][ T6441] could not allocate digest TFM handle cryptd(blake2b-160) [ 1263.303640][ T6452] could not allocate digest TFM handle cryptd(blake2b-160) [ 1263.576320][ T6458] could not allocate digest TFM handle cryptd(blake2b-160) [ 1263.916687][T30522] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1264.106645][T30522] usb 6-1: Using ep0 maxpacket: 8 [ 1264.109786][T30522] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1264.112864][T30522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1264.115926][T30522] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1264.119145][T30522] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1264.123285][T30522] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1264.126150][T30522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.333963][T30522] usb 6-1: usb_control_msg returned -32 [ 1264.335825][T30522] usbtmc 6-1:16.0: can't read capabilities [ 1264.431972][T12776] usb 6-1: USB disconnect, device number 93 [ 1265.040437][ T6486] could not allocate digest TFM handle cryptd(blake2b-160) [ 1265.256593][T12776] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1265.477844][T12776] usb 6-1: Using ep0 maxpacket: 8 [ 1265.481016][T12776] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1265.484120][T12776] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1265.487272][T12776] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 1265.490404][T12776] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1265.494389][T12776] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1265.497317][T12776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.780391][T12776] usb 6-1: usb_control_msg returned -32 [ 1265.782836][T12776] usbtmc 6-1:16.0: can't read capabilities [ 1265.860697][T14661] usb 6-1: USB disconnect, device number 94 [ 1266.025722][ T6504] could not allocate digest TFM handle cryptd(blake2b-160) [ 1266.343966][ T6514] ================================================================== [ 1266.346533][ T6514] BUG: KASAN: use-after-free in __xfrm_state_insert+0x24fc/0x2510 [ 1266.348871][ T6514] Read of size 1 at addr ffff888052253630 by task syz.5.7775/6514 [ 1266.352606][ T6514] [ 1266.354103][ T6514] CPU: 1 UID: 0 PID: 6514 Comm: syz.5.7775 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) SYZFAIL: failed to recv rpc [ 1266.354120][ T6514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1266.354127][ T6514] Call Trace: fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1266.354132][ T6514] [ 1266.354137][ T6514] dump_stack_lvl+0x116/0x1f0 [ 1266.354153][ T6514] print_report+0xcd/0x630 [ 1266.354169][ T6514] ? __virt_addr_valid+0x81/0x610 [ 1266.354183][ T6514] ? __phys_addr+0xe8/0x180 [ 1266.354224][ T6514] ? __xfrm_state_insert+0x24fc/0x2510 [ 1266.354237][ T6514] kasan_report+0xe0/0x110 [ 1266.354252][ T6514] ? __xfrm_state_insert+0x24fc/0x2510 [ 1266.354264][ T6514] __xfrm_state_insert+0x24fc/0x2510 [ 1266.354277][ T6514] xfrm_state_insert+0x4c/0x60 [ 1266.354288][ T6514] ipcomp6_init_state+0x608/0x8d0 [ 1266.354303][ T6514] __xfrm_init_state+0x6fe/0x1c10 [ 1266.354317][ T6514] xfrm_init_state+0x18/0xa0 [ 1266.354329][ T6514] pfkey_add+0x24f4/0x2ec0 [ 1266.354344][ T6514] ? __pfx_pfkey_add+0x10/0x10 [ 1266.354355][ T6514] ? kfree_skbmem+0x1a4/0x1f0 [ 1266.354371][ T6514] ? sk_skb_reason_drop+0x136/0x1a0 [ 1266.354384][ T6514] ? pfkey_broadcast+0x2af/0x460 [ 1266.354397][ T6514] ? __pfx_pfkey_add+0x10/0x10 [ 1266.354408][ T6514] pfkey_process+0x6d9/0x840 [ 1266.354422][ T6514] ? __pfx_pfkey_process+0x10/0x10 [ 1266.354434][ T6514] ? __mutex_lock+0x1c4/0x10b0 [ 1266.354451][ T6514] ? aa_af_perm+0x1a0/0x240 [ 1266.354465][ T6514] pfkey_sendmsg+0x435/0x850 [ 1266.354478][ T6514] ____sys_sendmsg+0xa98/0xc70 [ 1266.354497][ T6514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1266.354512][ T6514] ? get_compat_msghdr+0x11a/0x170 [ 1266.354525][ T6514] ? futex_unqueue+0x133/0x2c0 [ 1266.354539][ T6514] ___sys_sendmsg+0x134/0x1d0 [ 1266.354551][ T6514] ? __pfx____sys_sendmsg+0x10/0x10 [ 1266.354572][ T6514] __sys_sendmmsg+0x2f9/0x420 [ 1266.354586][ T6514] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1266.354600][ T6514] ? __pfx_do_futex+0x10/0x10 [ 1266.354617][ T6514] ? xfd_validate_state+0x61/0x180 [ 1266.354634][ T6514] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1266.354646][ T6514] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1266.354660][ T6514] __do_fast_syscall_32+0x7c/0x3a0 [ 1266.354673][ T6514] do_fast_syscall_32+0x32/0x80 [ 1266.354686][ T6514] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1266.354700][ T6514] RIP: 0023:0xf70fe579 [ 1266.354713][ T6514] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1266.354726][ T6514] RSP: 002b:00000000f54ac55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1266.354737][ T6514] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000180 [ 1266.354745][ T6514] RDX: 000000000400008a RSI: 0000000000000000 RDI: 0000000000000000 [ 1266.354753][ T6514] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1266.354761][ T6514] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1266.354769][ T6514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1266.354780][ T6514] [ 1266.354784][ T6514] [ 1266.447682][ T6514] The buggy address belongs to the physical page: [ 1266.449685][ T6514] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x52253 [ 1266.452804][ T6514] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 1266.455062][ T6514] raw: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1266.457722][ T6514] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 1266.460398][ T6514] page dumped because: kasan: bad access detected [ 1266.462427][ T6514] page_owner tracks the page as freed [ 1266.464109][ T6514] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6464, tgid 6464 (modprobe), ts 1263560135078, free_ts 1266264311160 [ 1266.470834][ T6514] post_alloc_hook+0x1c0/0x230 [ 1266.472354][ T6514] get_page_from_freelist+0x132b/0x38e0 [ 1266.474084][ T6514] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1266.475950][ T6514] alloc_pages_mpol+0x1fb/0x550 [ 1266.477491][ T6514] new_slab+0x247/0x330 [ 1266.478829][ T6514] ___slab_alloc+0xcf2/0x1740 [ 1266.480169][ T6514] __slab_alloc.constprop.0+0x56/0xb0 [ 1266.481866][ T6514] __kmalloc_noprof+0x2f2/0x510 [ 1266.483411][ T6514] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1266.485156][ T6514] tomoyo_path_perm+0x274/0x460 [ 1266.486702][ T6514] security_inode_getattr+0x116/0x290 [ 1266.488391][ T6514] vfs_fstat+0x4b/0xe0 [ 1266.489713][ T6514] __do_sys_newfstat+0x87/0x100 [ 1266.491263][ T6514] do_syscall_64+0xcd/0x490 [ 1266.492701][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.494564][ T6514] page last free pid 16327 tgid 16327 stack trace: [ 1266.496583][ T6514] __free_frozen_pages+0x7d5/0x10f0 [ 1266.498224][ T6514] __put_partials+0x165/0x1c0 [ 1266.499726][ T6514] qlist_free_all+0x4d/0x120 [ 1266.501187][ T6514] kasan_quarantine_reduce+0x195/0x1e0 [ 1266.502909][ T6514] __kasan_slab_alloc+0x69/0x90 [ 1266.504441][ T6514] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1266.506153][ T6514] getname_flags.part.0+0x4c/0x550 [ 1266.507778][ T6514] __ia32_sys_unlink+0xaf/0x110 [ 1266.509319][ T6514] __do_fast_syscall_32+0x7c/0x3a0 [ 1266.510953][ T6514] do_fast_syscall_32+0x32/0x80 [ 1266.512508][ T6514] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1266.514498][ T6514] [ 1266.515272][ T6514] Memory state around the buggy address: [ 1266.517029][ T6514] ffff888052253500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1266.519542][ T6514] ffff888052253580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1266.522030][ T6514] >ffff888052253600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1266.524527][ T6514] ^ [ 1266.526291][ T6514] ffff888052253680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1266.528784][ T6514] ffff888052253700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1266.531310][ T6514] ================================================================== [ 1266.533947][ T6514] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1266.536220][ T6514] CPU: 1 UID: 0 PID: 6514 Comm: syz.5.7775 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 1266.539814][ T6514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1266.543133][ T6514] Call Trace: [ 1266.544193][ T6514] [ 1266.545134][ T6514] dump_stack_lvl+0x3d/0x1f0 [ 1266.546601][ T6514] vpanic+0x6e8/0x7a0 [ 1266.547876][ T6514] ? __pfx_vpanic+0x10/0x10 [ 1266.549318][ T6514] ? __xfrm_state_insert+0x24fc/0x2510 [ 1266.551046][ T6514] panic+0xca/0xd0 [ 1266.552256][ T6514] ? __pfx_panic+0x10/0x10 [ 1266.553677][ T6514] check_panic_on_warn+0xab/0xb0 [ 1266.555255][ T6514] end_report+0x107/0x170 [ 1266.556626][ T6514] kasan_report+0xee/0x110 [ 1266.558052][ T6514] ? __xfrm_state_insert+0x24fc/0x2510 [ 1266.559795][ T6514] __xfrm_state_insert+0x24fc/0x2510 [ 1266.561452][ T6514] xfrm_state_insert+0x4c/0x60 [ 1266.562975][ T6514] ipcomp6_init_state+0x608/0x8d0 [ 1266.564563][ T6514] __xfrm_init_state+0x6fe/0x1c10 [ 1266.566160][ T6514] xfrm_init_state+0x18/0xa0 [ 1266.567631][ T6514] pfkey_add+0x24f4/0x2ec0 [ 1266.569050][ T6514] ? __pfx_pfkey_add+0x10/0x10 [ 1266.570581][ T6514] ? kfree_skbmem+0x1a4/0x1f0 [ 1266.572081][ T6514] ? sk_skb_reason_drop+0x136/0x1a0 [ 1266.573715][ T6514] ? pfkey_broadcast+0x2af/0x460 [ 1266.575290][ T6514] ? __pfx_pfkey_add+0x10/0x10 [ 1266.576800][ T6514] pfkey_process+0x6d9/0x840 [ 1266.578271][ T6514] ? __pfx_pfkey_process+0x10/0x10 [ 1266.579909][ T6514] ? __mutex_lock+0x1c4/0x10b0 [ 1266.581430][ T6514] ? aa_af_perm+0x1a0/0x240 [ 1266.582883][ T6514] pfkey_sendmsg+0x435/0x850 [ 1266.584345][ T6514] ____sys_sendmsg+0xa98/0xc70 [ 1266.585865][ T6514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1266.587537][ T6514] ? get_compat_msghdr+0x11a/0x170 [ 1266.589156][ T6514] ? futex_unqueue+0x133/0x2c0 [ 1266.590709][ T6514] ___sys_sendmsg+0x134/0x1d0 [ 1266.592203][ T6514] ? __pfx____sys_sendmsg+0x10/0x10 [ 1266.593848][ T6514] __sys_sendmmsg+0x2f9/0x420 [ 1266.595346][ T6514] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1266.596982][ T6514] ? __pfx_do_futex+0x10/0x10 [ 1266.598487][ T6514] ? xfd_validate_state+0x61/0x180 [ 1266.600131][ T6514] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1266.601891][ T6514] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1266.603955][ T6514] __do_fast_syscall_32+0x7c/0x3a0 [ 1266.605569][ T6514] do_fast_syscall_32+0x32/0x80 [ 1266.607118][ T6514] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1266.609095][ T6514] RIP: 0023:0xf70fe579 [ 1266.610415][ T6514] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1266.616393][ T6514] RSP: 002b:00000000f54ac55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1266.618987][ T6514] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000180 [ 1266.621466][ T6514] RDX: 000000000400008a RSI: 0000000000000000 RDI: 0000000000000000 [ 1266.623959][ T6514] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1266.626426][ T6514] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1266.628884][ T6514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1266.631385][ T6514] [ 1266.633016][ T6514] Kernel Offset: disabled [ 1266.634395][ T6514] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:33:27 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff93dded08 RBX=ffff8880276a0af0 RCX=00000000f79dfabc RDX=2cfb7b1ab8be5804 RSI=000000005b06c4ed RDI=ffff8880276a0af0 RBP=0000000000000000 RSP=ffffc900032178d8 R8 =2cfb7b1ab8be5804 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=ffff8880276a0af0 R13=ffff8880276a0000 R14=0000000099ddf421 R15=ffffffff974d30c8 RIP=ffffffff81974881 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974cb000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73ed934 CR3=000000005364c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85609a95 RDI=ffffffff9b0f17c0 RBP=ffffffff9b0f1780 RSP=ffffc90003386fb8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b0f1780 R15=ffffffff85609a30 RIP=ffffffff85609abf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975cb000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033b07ff8 CR3=000000005364c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000002ffc2346b90 RBX=ffff88802b423a00 RCX=00000000000006e0 RDX=00000000000002ff RSI=ffff88802b423a00 RDI=0000000000000145 RBP=0000000000000145 RSP=ffffc900033b79f8 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000019 R15=ffffed1005684745 RIP=ffffffff81680db5 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976cb000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055e22bb61000 CR3=0000000071870000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=000000000000000b RCX=ffffffff817f496e RDX=ffff888024fc2440 RSI=000000000000000a RDI=0000000000000005 RBP=ffffffff8babd4c0 RSP=ffffc90003487ba8 R8 =0000000000000005 R9 =000000000000000a R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000005 R14=000000000000000c R15=ffffc90003487ff8 RIP=ffffffff81bb0951 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977cb000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7350b0c CR3=0000000071870000 CR4=00352ef0 DR0=0000040000000000 DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000