last executing test programs: 26m4.094968821s ago: executing program 0 (id=1706): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r0) truncate(&(0x7f0000000000)='./file0\x00', 0x92) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x11e) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 26m4.094676397s ago: executing program 0 (id=1707): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) openat$ocfs2_control(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000180)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4048aec9, &(0x7f0000000040)={0x6, 0x0, 0x80000000, 0x0, 0x40004}) setgroups(0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 26m2.504706101s ago: executing program 0 (id=1713): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x8, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0x5b, 0x0}}], 0x800000000000214, 0x20000001) close(r6) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000000)={0x1, [0xffff]}, 0x6) mount(0x0, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000300)='nilfs2\x00', 0x1a0c000, 0x0) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808b", 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001000000000000faffff1f010000000000000000000000000000ac1414aa00000000005c090000dd0e0000000000000000000a00000000007889cc1641b80ad3298540fd01906c71409e35805bd8b307b323b8c3f46bda2e6c3b97e7642a12dca23718b69e060e64a94b6a49d76ac85e75c9a36118d59ca8dc7980c2048e090c5b2cff980a5d127891dcc5c45d8fc5ed1ce970b5ad75d37276d2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffff16000000000000000000000000000002000000000000000000006b396f6a000000000000000000804000000000000000000800000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffff7f000000000000000000000000000000000003000000000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x10) setfsgid(0xee00) 26m1.31362158s ago: executing program 0 (id=1720): socket(0x1a, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e22, 0x404400a, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c, 0x0}, 0x4048804) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002900000085134e62f26aa5b0ef2f594b9f240000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0xe, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e00000800", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) membarrier(0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000019000180200003001100050000000008000100e0000002000000000000000000"], 0x24}}, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fb07000095000000000000006f576d404520427c2598e5f9e6f02f0d7050b195b43e61435866d81ec503a79a68bd58bad1101d0a00d519ed90d81ae33d4846b8037b8981aa44e8f2b945288b13a84539d9459831e7a7e3ed908eda"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="270e24fa32500000010004"], 0x14}, 0x1, 0x40030000000000}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r8 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r8, 0x13) tkill(r8, 0x12) waitid(0x0, 0x0, 0x0, 0x8, 0x0) 26m0.654633253s ago: executing program 0 (id=1722): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000080)=0xeeee0000) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x24004890}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10021080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 25m59.727851585s ago: executing program 0 (id=1723): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006100)=ANY=[@ANYBLOB="340000003f000701feffffff00000000017c0000040042800c00018006000600800a00000d000280080017"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "87d52890d86dde1f66f6917dcad7d7ad92f7eb71ae6687481d34af7f8009c03e", "282e2debe5b6e2d9cad8f3518100f38f417d72544a2bb7fa11b662fef4dcc9a3", "cc23b1f369d519afed2d88adb87a656e4818391934fadf59616c097176643d4d", "fde867d2e299226caad10a947624655f91c4544c05b52b7ec7e68e27a55c6afb", "bee1fd21ead56db3e38ff37c0ad23d47f9aaeca9c5831008e79c13a71128d4c6", "0f0c3b4a2fe52f95297b7b93", 0x1, 0x4, 0x40, 0x5, 0xb0}}) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a40)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)='$', 0x1}], 0x1}}], 0x2, 0x40408d1) shutdown(r4, 0x1) setsockopt(r4, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/61, 0x3d}], 0x1}, 0x0) 25m44.656094471s ago: executing program 32 (id=1723): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006100)=ANY=[@ANYBLOB="340000003f000701feffffff00000000017c0000040042800c00018006000600800a00000d000280080017"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "87d52890d86dde1f66f6917dcad7d7ad92f7eb71ae6687481d34af7f8009c03e", "282e2debe5b6e2d9cad8f3518100f38f417d72544a2bb7fa11b662fef4dcc9a3", "cc23b1f369d519afed2d88adb87a656e4818391934fadf59616c097176643d4d", "fde867d2e299226caad10a947624655f91c4544c05b52b7ec7e68e27a55c6afb", "bee1fd21ead56db3e38ff37c0ad23d47f9aaeca9c5831008e79c13a71128d4c6", "0f0c3b4a2fe52f95297b7b93", 0x1, 0x4, 0x40, 0x5, 0xb0}}) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a40)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)='$', 0x1}], 0x1}}], 0x2, 0x40408d1) shutdown(r4, 0x1) setsockopt(r4, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/61, 0x3d}], 0x1}, 0x0) 16m38.288138433s ago: executing program 2 (id=4561): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b40000001900674c00000000fdfffffffe8000000000000000000000000000bb0a01010200000000000000000000000000000000000000000a00100500000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000070000000000000001000000000000000001000027862e25b4e691d34b6ab84da3d2d1db54a1020d6c6e9a9762795a21698885ce05836b84ec28"], 0xb4}}, 0x0) (async, rerun: 32) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @link_local, @void, {@llc_tr={0x11, {@snap={0xd01723054fab7016, 0xab, '\'', "5bd08c", 0xc, "d19a450e3bfce948ad52e8682d0e10b2544cd30c3e8539176ac7b187ae64b4f274ff96d0f6bb8495"}}}}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0x6805, 0x0) 16m38.215026032s ago: executing program 2 (id=4562): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$mptcp(0x0, r2) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) open(&(0x7f0000000200)='./file1\x00', 0xeaa00, 0x1) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x206100, 0x41) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffe) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x1f5}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0xfffffffe}, 0x5, 0x3, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0, 0xfffffffffffffe9d}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000100)='=', 0x1, 0x4fed3) socket$kcm(0xa, 0x2, 0x88) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xd8}], 0x2000000000000141}, 0x2000050) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3900000000000000000000a6002000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r8, 0xffffffffffffffff, 0x0) 16m37.258937487s ago: executing program 2 (id=4566): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x80082, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x4000064f) r2 = syz_clone(0xb8086200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f00000004c0)='net/nfsfs\x00') prlimit64(r2, 0xd, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) io_uring_enter(r3, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, &(0x7f0000000040)) 16m37.037456562s ago: executing program 2 (id=4567): openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x404000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5935959eddac4168, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x2cea, &(0x7f0000000180)={0x0, 0x7a71, 0x40, 0x0, 0x385}, &(0x7f0000000080), &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x0, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1b) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000280)={0x80, 0x44}, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r0) 16m36.011235136s ago: executing program 2 (id=4569): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) sendmmsg$inet(r0, &(0x7f0000005940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4800) 16m35.068304831s ago: executing program 2 (id=4571): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0}, 0x90) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000001500)=[{{&(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x801}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x1}}, {{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000001e00)="e088d6991e57ab2fe0b491a87e0064af61a8b01f815ad14eb34a5c55ad6c250248898c63bd6c541fe24fae804b1e943f8358c55b2c8be860d5c0d9db946efedf90c9eed699a3552947ca1ca291f85b1610e495054d618589211eeacf3c67968d109c7d4321ac3fe502492ad0c5546bded47d8f90e435b9c025d3e2fc4ffe86060f", 0x81}], 0x1, &(0x7f00000015c0)=ANY=[@ANYBLOB="280000000100000001", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='('], 0x98, 0x8001}}], 0x3, 0x0) 16m18.88542018s ago: executing program 33 (id=4571): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0}, 0x90) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000001500)=[{{&(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x801}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x1}}, {{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000001e00)="e088d6991e57ab2fe0b491a87e0064af61a8b01f815ad14eb34a5c55ad6c250248898c63bd6c541fe24fae804b1e943f8358c55b2c8be860d5c0d9db946efedf90c9eed699a3552947ca1ca291f85b1610e495054d618589211eeacf3c67968d109c7d4321ac3fe502492ad0c5546bded47d8f90e435b9c025d3e2fc4ffe86060f", 0x81}], 0x1, &(0x7f00000015c0)=ANY=[@ANYBLOB="280000000100000001", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='('], 0x98, 0x8001}}], 0x3, 0x0) 10m14.898149072s ago: executing program 3 (id=6251): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000000840)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000a40)={r2}) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x3) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) fsopen(&(0x7f0000000000)='erofs\x00', 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r8 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x4, 0x2, 0x0, "72f043b00ace4f852f5edc85933ba5c228ea162fdfcd675c765fc5a06532ca9f"}) r9 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000000)=0x639) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0x2}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) 10m14.311203102s ago: executing program 3 (id=6253): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = epoll_create1(0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x23011, r4, 0x6a855000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r6 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0xffff, 0x1000, 0x3a, 0x1000, 0x0, 0x7}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x8d7}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)='\a', 0x1}], 0x1}, 0x4048043) 10m13.242658908s ago: executing program 3 (id=6256): r0 = syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x2, 0x6, 0x1, 0x880}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000840)={'syz1\x00', {0x3bb, 0x10, 0x5, 0x5}, 0xe, [0xf, 0x0, 0x6, 0x0, 0x4, 0x7, 0x3, 0x10001, 0x7, 0xcf, 0x16, 0x8d, 0x2, 0x9, 0xff, 0x7f, 0x9, 0x0, 0x9, 0x2, 0x4, 0x7, 0x149d, 0x3, 0x497d, 0x3, 0xe5be, 0xd, 0x200, 0xffffffff, 0x1, 0xab, 0xe9, 0x7ff, 0x0, 0x21f3, 0xfffffffd, 0x1ff, 0x8, 0x1, 0x10, 0x8, 0x430, 0x7, 0x5ced2a4a, 0x4, 0x3, 0x9, 0x101, 0x1, 0x2, 0x4, 0xcfc7, 0x6, 0x6, 0x80000000, 0x4, 0x401, 0x2, 0x9, 0x4, 0x800, 0x6, 0x8], [0x3, 0x2, 0xffffffff, 0x3f7a, 0xffffffff, 0x1, 0x2, 0x5738, 0xb, 0xffd, 0xc, 0x3, 0x25, 0x9, 0xe, 0x8, 0x9, 0xa, 0x6, 0x818, 0x3, 0x4, 0x7fffffff, 0x2, 0xffffff00, 0x0, 0x7, 0x1, 0x7, 0x0, 0x10, 0x6, 0xfffffff7, 0x4, 0x80000000, 0x8, 0x6, 0x1000, 0x80000001, 0x2, 0x16, 0x1220, 0x1, 0x8, 0x5, 0x759b, 0x80, 0x7, 0x9, 0x5, 0xfff, 0xa1da, 0x7, 0x0, 0x7, 0x1, 0x4, 0xff, 0x6, 0x3, 0xfffffffe, 0x5, 0x7579, 0x2], [0x0, 0x2, 0x8, 0x8, 0x1, 0x1, 0x7f, 0x0, 0x5, 0x4, 0x5, 0x5, 0x6, 0x0, 0xff, 0x5, 0x2, 0x8000, 0x1, 0x6, 0x4, 0x6, 0x4, 0x8, 0x1000, 0x100, 0x8001, 0x7, 0xfffff646, 0xd5c3, 0x9, 0x9, 0xffffffff, 0x9, 0xd, 0xffffff96, 0xa1, 0x7, 0x7, 0xa, 0x9, 0x0, 0xfffffffa, 0x6, 0xf3, 0xff, 0x6, 0x16d, 0x3, 0x7, 0xa0aa, 0xffff71a5, 0x9, 0x5207, 0x7ff, 0xffff, 0xf9e, 0xb, 0x4, 0x1, 0x7, 0xc, 0x80000001, 0x4], [0x9, 0x10001, 0x7f, 0x0, 0x2, 0x8, 0xf, 0x1000, 0x8, 0x5d0, 0x3, 0x6, 0x1, 0xa89, 0x0, 0x0, 0x9, 0xdce, 0x80000000, 0x9, 0x8, 0x1, 0x536, 0x9, 0x0, 0x9, 0xfffffffe, 0x9, 0xea59, 0x101, 0x100005, 0x7, 0x0, 0x4, 0xb, 0xfa7, 0xd6, 0x2, 0x7, 0xffff, 0x8, 0x8000, 0xffff, 0x0, 0x2080, 0xfffff330, 0x8, 0x8, 0x754d, 0x4, 0x3, 0x2, 0x400, 0x3, 0x3, 0x3ff, 0xff, 0xfffffff9, 0x0, 0x0, 0x60000000, 0xfffffff8, 0x6, 0x80000]}, 0x45c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) setresuid(0xee00, 0xee01, 0xee01) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) shmat(r4, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x607, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x5c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2523f330}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x27608eb7}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a2771cb}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7d3bd42e}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0xa4}}, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}}], 0x1, 0x4404c880) socket(0x10, 0x3, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000080)="b9fe", 0x2}], 0x1) 10m12.193466426s ago: executing program 3 (id=6264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000080000000a000000850000004f000000180100002020702500000800000020207b1af8ff00000000bfa1000044000079ff000000f8ffb702000008000000b703000000120000850000c3710000009500"/96], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m12.118159146s ago: executing program 3 (id=6265): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000240)="df", 0x1, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 10m12.117865819s ago: executing program 3 (id=6266): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140)={{0x0, 0x3938700}}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0), 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) r4 = syz_io_uring_setup(0x18d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x3400, 0x1}) io_uring_enter(r4, 0x351e, 0x483, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000640)={0x200000100, 0x2, 0x391, 0x0, 0x0, 0x3, 0x3, 0xfffff80000000000, 0x4, 0x8, 0x4c, 0x3, 0x8000000000000001, 0x1020000000, 0x40000000000002f, 0x10, 0x40, 0xb, 0x2, 0x400, 0x8, 0x3, 0x2, 0xff, 0x6, 0x6}) 9m55.654362889s ago: executing program 34 (id=6266): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140)={{0x0, 0x3938700}}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0), 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) r4 = syz_io_uring_setup(0x18d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x3400, 0x1}) io_uring_enter(r4, 0x351e, 0x483, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000640)={0x200000100, 0x2, 0x391, 0x0, 0x0, 0x3, 0x3, 0xfffff80000000000, 0x4, 0x8, 0x4c, 0x3, 0x8000000000000001, 0x1020000000, 0x40000000000002f, 0x10, 0x40, 0xb, 0x2, 0x400, 0x8, 0x3, 0x2, 0xff, 0x6, 0x6}) 1m5.604238953s ago: executing program 4 (id=8696): socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x3fff, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r3, 0x0, 0x0) dup(0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r5 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x4) recvfrom$inet(r5, 0x0, 0x0, 0x40010120, 0x0, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1m5.460965972s ago: executing program 4 (id=8700): socket$nl_route(0x10, 0x3, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000000206051d0000000000007b5bf1ff930ae27a0780080008000000008905000002"], 0x30}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a320000000028000480080002400000000014000300"], 0xd4}}, 0x4000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) socket(0x10, 0xa, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = gettid() r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r4, 0x0, 0x7) kcmp(r2, r1, 0xde6c8001d5ed5ea6, 0xffffffffffffffff, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, &(0x7f0000000000)=ANY=[@ANYBLOB="6dc2084c6176653d7374617469632c00"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) setsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f0000000100)=0x26, 0x4) r7 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r7, &(0x7f0000000100)='westwood\x00', 0x9) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x42000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000c80)='./file0\x00') getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000040)=0x4) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 1m5.407777659s ago: executing program 4 (id=8704): mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$usbfs(&(0x7f0000000500), 0x5, 0x100) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x4, 0x29, 0x200000e, r5}}], 0x1c, 0x2400e044}, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40186f40, &(0x7f0000000440)=0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', r8, 0x0, 0x5}, 0xfffffe2e) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r9 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1m3.379790636s ago: executing program 4 (id=8710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x2, 0x3}}, 0x10) openat$audio(0xffffff9c, &(0x7f0000000200), 0x400000, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000), 0x8) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000080), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x9400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0xb4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x78, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0xdc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r6 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000280)='./file1\x00', r6, &(0x7f0000000300)='./file0\x00', 0x2) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4205, r7, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf2504"], 0x37a0}, 0x1, 0x0, 0x0, 0x8000}, 0x2000000c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 1m3.216121184s ago: executing program 4 (id=8711): r0 = fsopen(&(0x7f00000005c0)='cramfs\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x3c) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x80000000000000) close_range(r0, 0xffffffffffffffff, 0xf4) 1m2.881107248s ago: executing program 4 (id=8712): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$setsig(r1, 0xa, 0x1d) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={0x0, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000c], 0x80a0000, 0x2010d3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m2.761636189s ago: executing program 35 (id=8712): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$setsig(r1, 0xa, 0x1d) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={0x0, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000c], 0x80a0000, 0x2010d3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 29.603517984s ago: executing program 7 (id=8836): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10040, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd2656}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000610}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f0000000100)={{0x1, @local, 0x0, 0x2, 'wlc\x00', 0x20, 0x2, 0x2}, {@empty, 0x4e24, 0x2, 0x4, 0x1, 0x20000002}}, 0x44) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) 29.479728268s ago: executing program 7 (id=8837): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = io_uring_setup(0x178e, &(0x7f00000000c0)={0x0, 0x52c1, 0x0, 0x0, 0x1}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000000)={r6, 0x8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r6, @in6={{0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc5}}, 0x3, 0x7, 0x5, 0x9, 0xad, 0x5, 0x7f}, 0x9c) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r8}}, 0x30) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r11], 0x20}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x2000000) sendfile(r0, r1, 0x0, 0xffffffff000) 28.644418443s ago: executing program 7 (id=8839): syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) 27.537730127s ago: executing program 7 (id=8841): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = socket(0x2b, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400070000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r4 = mq_open(&(0x7f000084dff0)='z\xbf\x17', 0x6e93ebbbcc0884f2, 0x1, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xcd0c, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="66643da511502e2e1331d5098f9a53930802a3bfb988cade2d60637ba84d5b3012b3b375f6131a5b76da96eb9700c4d3c47feefc459d8c66a2f54afac6b43b46d0cd142798075b1ec4af56f9b8c4090329fdf811b57e9fd7c8fcc1b7bde265fa785a80154ff5af4f9f005d32a3f0304b7925bbb4", @ANYBLOB="2c726f6f746d6f60653d3030303030303030303030303030305b6efd251159751b2c759665725f69643d5fb08bd0de0ae6c512bf7d615e0634305fc7f462dd8c9a55378666d6079d6763dc186e823266f1db488f63192193b721e7460a06da8e361600"/110, @ANYRES16=r0, @ANYRES8=r7, @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f}}, 0x50) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000ffd000/0x3000)=nil, 0xd) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 24.387563653s ago: executing program 7 (id=8849): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000000406010a00000000000000000200000a05000100070000000900020073797a31"], 0x34}, 0x1, 0x0, 0x0, 0xc011}, 0x800) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8e0800, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 24.089664092s ago: executing program 7 (id=8851): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = socket(0x2b, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400070000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r4 = mq_open(&(0x7f000084dff0)='z\xbf\x17', 0x6e93ebbbcc0884f2, 0x1, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xcd0c, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="66643da511502e2e1331d5098f9a53930802a3bfb988cade2d60637ba84d5b3012b3b375f6131a5b76da96eb9700c4d3c47feefc459d8c66a2f54afac6b43b46d0cd142798075b1ec4af56f9b8c4090329fdf811b57e9fd7c8fcc1b7bde265fa785a80154ff5af4f9f005d32a3f0304b7925bbb42cbe", @ANYBLOB="2c726f6f746d6f60653d3030303030303030303030303030305b6efd251159751b2c759665725f69643d5fb08bd0de0ae6c512bf7d615e0634305fc7f462dd8c9a55378666d6079d6763dc186e823266f1db488f63192193b721e7460a06da8e361600"/110, @ANYRES16=r0, @ANYRES8=r7, @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f}}, 0x50) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000ffd000/0x3000)=nil, 0xd) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 7.510951977s ago: executing program 36 (id=8851): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = socket(0x2b, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400070000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r4 = mq_open(&(0x7f000084dff0)='z\xbf\x17', 0x6e93ebbbcc0884f2, 0x1, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xcd0c, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="66643da511502e2e1331d5098f9a53930802a3bfb988cade2d60637ba84d5b3012b3b375f6131a5b76da96eb9700c4d3c47feefc459d8c66a2f54afac6b43b46d0cd142798075b1ec4af56f9b8c4090329fdf811b57e9fd7c8fcc1b7bde265fa785a80154ff5af4f9f005d32a3f0304b7925bbb42cbe", @ANYBLOB="2c726f6f746d6f60653d3030303030303030303030303030305b6efd251159751b2c759665725f69643d5fb08bd0de0ae6c512bf7d615e0634305fc7f462dd8c9a55378666d6079d6763dc186e823266f1db488f63192193b721e7460a06da8e361600"/110, @ANYRES16=r0, @ANYRES8=r7, @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f}}, 0x50) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000ffd000/0x3000)=nil, 0xd) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 7.440631893s ago: executing program 5 (id=8891): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket(0x1e, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(0xffffffffffffffff) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x30) keyctl$clear(0x7, 0xfffffffffffffffb) lseek(r4, 0xfffffffc, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg/2:0:0:0\x00', 0x40, 0x0) ioctl$BSG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000100)=0xfffffff8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x4000001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x79, &(0x7f0000000180)=ANY=[], 0x8) 6.433639158s ago: executing program 1 (id=8895): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x80000000, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x2}]}}, 0x0, 0x42}, 0x28) unshare(0x400) epoll_create1(0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xf8, &(0x7f0000000100)=""/248, 0x0, 0x2c}, 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8094) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23f5a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x101, 0x2001}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3c943}]}, 0x50}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000380)=0x3) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x7, 0x2, @tick=0x5, {}, {}, @raw32={[0x9, 0x8, 0x8]}}, {0xfb, 0x0, 0x1, 0x81, @time={0x83f0, 0x8}, {0x8, 0x30}, {0x2}, @time=@tick=0xfffffffe}], 0x38) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x5}) pwrite64(r2, &(0x7f0000000000), 0x0, 0x5) close(r2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x3}, 0x1000d023}) close_range(0xffffffffffffffff, r6, 0x2) 6.226499702s ago: executing program 1 (id=8896): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r5, 0x5501) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000012000100e300000000e50000070000082ba20b9951e713fae19511aece5920b51ba68e411b633774391ccf03b83703d0f7fe1255d6fee281c4d0fdc727a2c05f98651c020abe27d4b66f9d7a4f74e88903d60c68ab7ca1a4e23bec608e4e120ce14f8a0a2d068d44fe1d9d0adeea745a2f60678ede5b07ebcdbe722f1e4d", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350077673000"/28], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfdf8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 5.952372644s ago: executing program 6 (id=8897): syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) 5.930648903s ago: executing program 5 (id=8898): openat2$dir(0xffffff9c, &(0x7f0000000640)='./cgroup\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x64, r0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfffe}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100000000}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x8e, 0x180000504) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000001ac0)=@ethtool_regs={0x4, 0x5}}) 4.789221765s ago: executing program 6 (id=8899): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x8}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5313}]}}]}, 0x6c}}, 0x48010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000050f083, 0x0) r4 = dup(r3) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, &(0x7f0000000340)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000080, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 4.574458483s ago: executing program 5 (id=8900): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300), 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r6, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='ubifs\x00', 0x2208004, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.974901335s ago: executing program 1 (id=8901): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xb}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x1c) bind$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f00000004c0)={[0x0, &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x40, 0x8001, 0x0, 0x9, 0xf1, 0xfffffe0000000001, 0x6, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8004) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x2000, {0x60, 0x0, 0x0, r11, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80d1}, 0x30008000) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 3.80263017s ago: executing program 6 (id=8902): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010006000000000002000600", @ANYRES32=0x0, @ANYBLOB="040005000000000008000300", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00'], 0x34, 0x1) 3.574420613s ago: executing program 5 (id=8903): syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) 2.877475641s ago: executing program 6 (id=8904): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@loopback, @loopback, 0x0}, &(0x7f0000000140)=0xc) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x1, 0x8000, 0x8, 0xc33, {{0x16, 0x4, 0x0, 0xe, 0x58, 0x67, 0x0, 0x80, 0x56, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4}, @ssrr={0x89, 0x2b, 0x27, [@broadcast, @multicast1, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @private=0xa010101, @multicast2, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp_addr={0x44, 0xc, 0x4d, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}]}, @rr={0x7, 0x3, 0x79}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@broadcast, @dev, 0x0}, &(0x7f0000000540)=0xc) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000580)={0x418, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x5, 0x81, 0x10, 0x48a1}, {0xffff, 0x3, 0xb7, 0x2}, {0x2, 0x8, 0x9}, {0x99ca, 0xe, 0x47, 0x7}, {0x3, 0x4, 0x1, 0x4}, {0x872, 0x29, 0xf0, 0xfffffff7}, {0xd1f, 0x6, 0x7, 0xbe}, {0x4, 0x9, 0x9, 0x7}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xd07, 0x9, 0x8}, {0x6, 0xc3, 0x0, 0x80000001}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf3}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}]}}]}, 0x418}, 0x1, 0x0, 0x0, 0x40c0000}, 0x801) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009bc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000009b80)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x100, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xc8, 0x6, "bca9c0afed0c004d115501cc9b5de5d247c9026c7e184e0fbfa2e7ce77945982aa54096bd08b1c7cb07bf394f9e4b683d66948768220e17b90d6c34ae09720dcc830db86aaa741ac7aba79431a0c5395671eec7e9c75d3e68a8300d3c8f3848d2e7f4f1924b87b22abfc8acb41e1f3507569c911b55b1c6825add0c5d25905cf4b3e732d3fb39a32d1b1f27bb0af7afe8c16fbbc4091aff8d5705e7b962aa5926f142eb2eb2a980db56a467e144a8f923c3b5358258b75de2ffdaed49edded1e8c6e00fb"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x94, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x43}, @NFTA_SET_EXPR={0x64, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xc6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x44}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x19f508f1}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2cc00347}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x2c08, 0xe, 0xa, 0xa05, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2bcc, 0x3, 0x0, 0x1, [{0x2450, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb2, 0x6, 0x1, 0x0, "ca2aaa02794e0c2cda49289907563c9722e54930121c8da56a4266d2f15a60b80816a58566deec2a8b7ccdd6bfe5c2edc757cf4a54f9eef41618fa705f08394e592cf6967da65d40b4f743bc21f92c22efc3ef797d189f3898d06fc7c63d7eb243110e0f9477187792333d98d9df9d3d9185425c3ec59426de282ac2aabce429115406bf7457ba500ff0349b6e63a489fcfa568e4d89f72abf1199b46b865de9a5062026cdbda1b8b86e5aa42d2f"}, @NFTA_SET_ELEM_KEY_END={0x2268, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "99d2d4bd64b7"}, @NFTA_DATA_VALUE={0x1004, 0x1, "8256f5a9c6fdffecfc7d220ba5d455c844b4ccb9fcbc607843f78806f5fda2a63de999a0002c84fbcefc3d6dbf1b38cc545d127216b1eb2a3e61638e0057c019a5b6d6877194c569e8d093eda587d45c99be302b3a37c4e7fe93e0866b8726b42184846a42181b49716380c5f83ea626a2148661cf1c32eaf3459148853478e268359d79d48978fbe5de8f97d525d45be0402fd3f68f48b95b8b54375ccce7e8b302b952d85e7e526ea88b00d58b203575b58cb65927ead2eb5a461127e00ec49c2c770583058f00320e3458300606d08e62c44c17715ff4a00666cec781f5e94e7808aad76b4fa48fbd4d1dc31cadd880db10cf9ce1408ba23a02efab47eaae94a9d603e474eb416654ffa3c4e84bdbb96c912d6aa673f87491aa16ad1e7f900c62dc6a5d90a599f1355b8df677465f2c84083276f4f65265b3820a48fae737d9d44d3d05269be88792ace320b272f821d0e15eb27705bf8b1fac73bee09d09d83996341090cfc0e63946fb34c24fa683b0cf55d3d5c16ab5195042f8f546c5c5e7eb84b2c789e25c0696398ea04c19bc32659f90449cd83057edecc79f507e5d5a8e3b00d0d8715362e291ce7eb23118c51f46f743a1e5255f02ecb8dda2c6bbdc9479e1e5a3b8a9aa4009ffee37de0ef12565fa9a1d897191176ea68a32fc660c08228ccb69a3b0c2ff92f1b744e462cb90a7e36f3cbe6c55fbcbcf072dbce8145228472e157e247c19a02d3ccd2c0bd36f6a2ac29d16031110e4cdd63c519a2ec44c7d7997a894e2f54e9fa919d61f5aebd3951da23e4e5cbbb9779b7e6686f942a9ea2f6251f793e2e76f43117a67c2dae610d9e3009f5e2a126f06faf44e167aa85cb264023dad2a524713a9e1bea5f293f0710912b76e403bf9d6698d8f1d51d08258d18f67f2860f5e30c19b23d85901359df1c743bf9496914fb9f1d092b9d63455ae84a8c34493739bfcea3d8e85c873c4b8d70433e84e18f532d3b69d30615e128c1248a625fb2a5e0344da413e649513cf97fe3af2c53d77d09f13ac6af9ef729502670028ec947be5133c96e0feb1d585c42e05f95b5fd99ff8e61b1e690662c1aa66f756d057f03ca37274caac4f320101d96a8d41803c01695882d9f370b9c2cf24386941ead4a7cab45f7adbbddd6d37aefab1bdd09593674e2705c23fe4c131fc9b797fd52574fe4196c8de8b2bba058cfa838e2f59f2a5243ec6be5bfc1b4a559f02effabae1b461e043e44ed0aad894e7c3d870c7a3b6439b104f24950bfa4713fc36b33f369512984fc8c479aa3743e9fdcf0a45689b6f70155e28d186795aefa3b4490347dbc2b1f16c4e391539a45537027410a5d523d4c2965842849e114b2f1d10689bb68485f204371f7d412b98e91ef07124c92bc5c5f02b1ff62b9d9473816589908dd1794cfa3e8b4ac55955edef8ce4fa426ecbd2e0cf8a46d8271197c8da110bb7be066215aca747e70a69e30fadf9b7f77f06eeab91f3eaaaac19748c30b81a0f5a7de8d38d8d4233613ca610cb1dd00ed7bc8106a726801efaae8ca374147af532dfcee8327ba22d87f766498603e15c1294bf100da0aadf81a59ab0cbfc85fd7994a9f081f9121e5c6583d0c6370c7ce3252cc15ee5783ebb89366381899dc2102f6fa56cc6d4595603cc73d232a5bd8e55413af727cba2ca26d16c121bc0cf5e4a5726380cd125d8850212ba44f796f13c594e1eb23c52e6cea77e161df2647a1567b30762543c0c518728f47af62bd4d555755c08afe434b2a8484eb20c47a285c6fa8e1de73aeb312a04d01f7b601f8a4f8050ec10f3899ee8608b88ce38d0f39345a587624b0b105fafbd0ce5c155ee67c02839b98f8d30650e6db13e9138bd6a84bf618ae8e49fdeb10401572ebbc577d7452290aa348a283a8cb0310da4b7bb33dc2cebaf24f309eb7d130d61105048d44af3260924ddc7be3ac2a653d1dd400f420fa2834a0fe71beccc65de80528719a944c93757c5a66ea46d02c0dc5d01e99ecb1d27386c4706f914f0ebe915f2ae892df7d0f5d082a2984630e7545734cc65b22c579c4eb400c505c1e50e2409b222535626c4db74fccd9cf858763520a81ec88ad03aaaa61845b9d336ff8a658b49135c9b5008873a682b0f08c4239e19ee063ff2ce3181b28eb74e7cb8b7e3efcb1497412a8ee6730718fa3d1211f69dba6526b448c0a15c71315ef10c9389ec872a2574963b2e701859c3694647f29ee0a57ae528774e5680917b6a57fead96a3b58d287c5820443a948e28a807bfb56390e8eaff217ab51f86f39fd976978abe220412c1bbbce4fd88cbcb677366f57c91db317208ec75b7f1ba255abf88d2022cba4e9dbe9c17d307dcc05c682515a7eb782a73fdd6728c757bd97c5d64a9101fea17d5c510bb1b730a23cab8fd242a2b5a7fc75b1909a579a3437b1368426d1091aefd37fe7ffc4b023a79b7148aac3472b28c48ab3b33d919dc7ea3f67e8e9707455a700e28a2e37ce3656e2fd1511d6cb39f1d7b5a6d0de89e5e055e9541b9a90a189f9d94cd4e86acc610de1cfb9d3970c72ca1a1b8ffaeec796b5f1450f6b80c83f03eb7796496d8077446914fdb6631c61d6422ea0e85973f9cbd4fa7908aae98d0bf9d088cd91def1ef93cb48af0785aa75df164b5f5aeb3f78710a273847189e882063eedbfc3936cbb3c12206d1023216b79f0e24920bacf338f2e35216962d7175a27f583f3e3c54348338d159fed7c6fa0182b369785d33f6b383796acb49c386322be822090389140d5fccf0e0bdfb18dce28d51b74138d481851357f5c8f1a54cb4bcd7520bb22aa510f94dcbde452eb4c622a828c01d1bdce756bc97833b64fa93599f539808d954aacbe40b2a277083d93ce65f8581db8ff49ed618322bf13a09ef53df692d1c4476d114558cc9f63998f3495d0cfc3006f52c4fe4b3c296e3eb15825219a137ddddac7f2b7290984714d9a95636cff8fa4ab77b73a4e58cc4dfa1749bbddb6ab56e68258e019834d54560892d5d30dc5504ccc1a07411b65095ef308bfaa954275c827cd312a44f4379cdfcb571d5942663795044c519183d3b34c9068ac6d1434a91b4ae0b12e97eca25fdbf1905be7fec0b691f70dc1aa35a753de9f4589a2fc202296ce2e5157ea155e5c9627c34f63da0f90c9c7c3ae169af33c8edb0809daf382a8884905d14686712735a98d25d60b5d319a59fc26f3282286eab21778a9469fdec74fa543c4250f16539d299db535c49305c25d937b47b6981ef67c48e459c8b5bd9d2b648d44e170515ed43fd4d91b0e7c574c9baf9bc9ae4ce45a6f34e1055046f7775d48578dd6c81819a214e4202263c652ab67ed300004923d51ad115e16d4b5a8c5da3698754f1973f765fff19bf77eae519cdb03cfa2b3ef09628abc9347a8e2d364b84b6c731ebee5382ed5abbe70e2be58cd75e63f9daea81dcd685b21b0747c92594b8b2c25fc15a5bf58b41b9f4e3623c6c04efaeacd1071ee38103954fe25602b5507d627552b168092ab7e51349045a9d9f1c85164d570d1eb32b23441b4915fbaad0bc26a373ffb5ce4809fa42cc6c97954ed79f1c0b3ecaa4aae0afa14512ac0a7592a1d4fb040f3547affb3c70147459f4fe4defe9a8443cf72b7502cbb50622bacab3e949919d92545d7f1f7b05bb9022c7308254e68b5d9f3cf4398fdd91e55af1da229e4a0ab7d83fd462093e14cc65656ad644ed224d3c4dace8f3f36532958224b3c9b9a73e23994c94963cf738e0821ddbb657745496896e147e0d070d39f65b35e5b268807d070172084bcde6d07879c9cc000208dd5c7f5530bf363d8523f2d53549485a3a9797dc176aaa20669e2d152fb271738ce9eeca38d2c58952107af1d5c3e08405154ba0884533314b16c69cbf33e4dc4d5c2456c2d2475310e2294cb0c05d5378443b81568ddf0235a79d69fe05a453c95ae3690cf26a56ae54860f081697da2586fb42fbca5095fede2cd1970d2d6c282cc579ddd5fa3dbc7133441d9a9150c97356666c7af8df006b4b418881cc2616f4ba9377d2183eeacb999df31ac9a5033eff637c0205f0907c6964c70837e72cd28400b45a2f7a0647ff4639912662a96226d4ad7f6ce711fd46a30966450317f64f8578d4540c5ecdc60b2948085c1a1b43290e3aa7ebdb8f9d4e8406077cfff47cd5f781193a7852129b180e122835327735d403cf3686b9091da65b3ab5958513f57f80e20f11fddda3751ecc20eb67cf0887f90fcfb49111012a818d24fe934271ec0cfc0a7337052a2f9c8e90b35b7819e3aa20bb4cebdcbb1987561f6e8f8c04b6eb3691d49568e7b5e390e60dce4e45a5690759f55b259d2deba7ab7f75794145a11ace087420ee499027d5413b75c9d47b7506c2d2ce8a412c5dcc741d9e9f7c6815d99b271ecf314e400420113777001f77570679e7a4ccbdcf6495a2d04476180c7b9332516468c63d7f97281f041538b424784437e8ee8dce2d8e2e64f299b39217b1d5e69034a70899609715ca9b247476c38f502ae1b4a5a7891e44c306902002edb5b23b888ecdefacc45686041c5d8e9fd33857883a5b4e75e22b7b29394664c8ab6cd2c75d995e4ee229aa2276c9d2812fd983fae96362aa598c4d158f0649b60fd6f6c393020a2c00055acdb9e3cc72ecf0c13a21a55bed22a0b8d919e7a5ef4fc111f461e180a7066ba36f511b9d3ff1aa88aa37571ddffc8887287af2697a705d0b510e7facc0bb15f18688e265e4cf10e0122e7c75317592489c2bce85f8fc1f7f5aae8fc600bfaee51d5b6a5b8128910cd4e592196f038a34796a7615bb9c88efbb6497e4fb80f5dc0ed6be0b59b013e861863255ac5ca1ecda1f766095ab8845837fde9790e484d16d8292a2830d276f11f0cd2f9e1b2a9daca3536f425d2d4335ab69a8d67871b0d50c90b07f471a7933c075eab230c51ae0339653d69f1961e8aead04a09cb6d8ea862068620f5e76490c60a1549e67a28e767318a0473af2dc03458d7dfd728a77bd7ad1d9535e5b0ccb0001fea8e60cdbd6e45c2e858808df4c59ea9e646884cca8506e6ef85d677d3f277715cafbdb2451602d9b0da52fa7766842859ef51080383aa6fa8b81778cee337e30032d01fe8283559ce9e9308ca0bf2fc0b98f75e2bce71b71d5a73906b0bdfe559cc455d053ed3ee0fa1056e065dbafd7bd593fad70c46b70d129a6cb6300076a64d24b8d1994b68f7aae5d88995b7391221676685f2649436435d971d14c52b53f840139836c2dd991cc68ad6204ed30c5923aad140a69e92a01fa01051fff5bb6cce7d8e18823f2d0bb734f71400d12c134ea5394580e980e87f7efb6dc3b23159f508c8cadd23e48af831d41a5c1487a6902d702fd36a7f0621ca781aade9bc2c0792a97b058978b8ee6e9caaabcc6552eea192965843f56ed00433a8acfccc9df81be030d1919dbcb24c5068d76594f751e51fe33e15d649190190ad9129c01dc0aaf8681f0b6c182451a9ef85f7e455deabbe24f06329dbb2362220cac527162689fca62c65b32f7abaae84164f4b13033b6ebe12d309b72ba9e4783ab9c604471baafda3edbcddc8ab54b0fc0b2705668c46f7f8975906ab07bf51e9cf9236ab2a226d51f3552d3807801a75d125414a15ca3deed467a9e914e4f8b73e0cb0a1ba51339b5f66219cd5e98fa1b704182cbbe86ecd1e406b91cf981d6ec59b4be1ef9ca04edaa20540b77ce5e6d1fa7e6fcd32f3f20df65b7c183da6133ec730805b63a623f9"}, @NFTA_DATA_VALUE={0x16, 0x1, "a81471d739585cb483fafa204c2a75fb56ce"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xdd, 0x1, "8d88827dd61854f2383fae10681a082777613d6f1cb3731de4a678038ae8ade6878eac9beee9563b8ea635162cdf3d812392fe85a86bf4e921b938197f81ac399ceb1b3bdc6fee18a55e0448de41e10c04f09c3b9cda5e7f962810c804567f7f74ea3bf3838d08900d4a7037f2ad41e91bbcab2c7e2b4e325d8a7099b42278215a31bb61ac70bbd3d1e74ad3fcc85fcd8d3344359f30a7914682cd35ac1b39c0806417cdce5e0251fe810504fd657d4ceb1fbec09d231567863347fcbbdffcbbdc38caca6511ee6db5a5bcde20ca81fc179604b1b5622274d9"}, @NFTA_DATA_VALUE={0xf1, 0x1, "b794c0bfd13be33b6a20c192f2aacda41b6070ac82f7c24bc3aa099abe10f9f2f921374034acb33996e646dce2cadf41cb82bdc0e6848102daca7f9c312236252e1ad966e0df66cf84d2cf2c4aeebc32f1e3c3ad58398c8b5bb3bdd9d18038a2ce2710bd1bf54f8019fcb4450eb66c3317768b04befa50e42ae2385adb5e2ea8d446449f1a8b17d95dc17b2acc2014b6d5c4f9c784868e931d86f871e69160c75f787a2821038a9098e2874e73a87994620fd6d2395dbc6bd7f92a908e5fe0acf5f98a9b040488a76e5664beaca7ca66c926c87b973c79ee15ccd31913975ceba0d7424e8cfdadb4f3ac8df99c"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x48, 0x1, "8a5b9d5d019a01d8ce8473cad8bc0c193370bbddf20412f3d43a99c28279022acfd2e410709d1ec3b975f1e3771f6947163e0c8d08578ab00cacc28cc8cf1666e983f156"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x83, 0x6, 0x1, 0x0, "24e404748f96f0a62abd0cd295f7d306465060d9a881204bddbb4bc99846c09ff908dad64f431d699149c2f66656203583b4bccdff35bd04397fb4b4cefb3e637095b56ddcca21c3bc0f9ec5cee2ebf277ffd08df774b2511aa1cef454b2314d2a12aea84bd51136fd726fcf40edb0e596c538de63073e97662dc302264ada"}, @NFTA_SET_ELEM_USERDATA={0x91, 0x6, 0x1, 0x0, "fb603d0b0bc1d845075d836ecdb84cdf117d1d27adbeddcd96c9184b3b00975f1671a57059c9facf6601c8a86a08649e5fb53ef08a0d3ed37338526691e17b532850d7e80ed61b6aaed934b1819a34d1ce49850849e753468d45778df2dabe841c8f3fd076a68855fbd8d4f59cc731b9f36f04edcfba923e80934e3ddaa821be4d8617fd2606807dd464f1a7dc"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x314, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1e4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x11c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x10c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x7, 0x1, 'CT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x5c, 0x3, "b6d13bdb97104a147bfcc258bd05c7de0e4d340d65c4eed175c6129f132668f3e4ee23dc98614ae84f61091308695fcfe5da0403e6163d5dd8e9dea89ca96024ce3aa3504c106d9da12e5c4e21e3f2f081e80b23c52cbf5c"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}, @NFTA_TARGET_NAME={0xa, 0x1, 'TRACE\x00'}, @NFTA_TARGET_NAME={0xd, 0x1, 'CHECKSUM\x00'}, @NFTA_TARGET_INFO={0x5c, 0x3, "da264d0370e96a4e742b3681563269ccfa36dc3a9a8524da848d077f4bf9f4cd7da655b37103102726d45fb6d5ab11faef6b5bf238edbe9f4ebb5cf7b310e715cbf15e0775ac58b0c919c65ff579fb0e60a59b83f0e04ac2"}, @NFTA_TARGET_INFO={0xd, 0x3, "01dd34ba842a460b65"}]}}}, {0x44, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}, {0x454, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2ec, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbe, 0x1, "ae2336423941c84aa6bfc382a3e234906f4b9f6bd14dc2e0d0f9722c5218338a9f27510c6c0975713675bcb8f980815410d6f56ec40066eb3c059053372d7837af5d53b622f182c352f7ab539b0e2173f16a3ce925f8512495396238c2c6548041bbecbbd10809517851784393ad2ba70d79c9b5b5ab6c85b417830e7fc48e61ab7ed742d050dd5c38cf7da9ad733a1a407f885f7109edd340666a68d2c265f5efc1dcfb165ea07c9f61538ad6851d4b8957cc2ff123fd5e99f0"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x93, 0x1, "59a9d998c4e2a3755ee29d1b2e8d67965799a371f4c3336b0e30a9bba5ccf59e3b19bc16ad330cb277f2b718a7a79d0661d6f2178c292dbb0aa8a729708dcb1ad5fa555698f7c840f5ccc7f20b5406c60a074eb4b0fe21fff3bfeb8cb8ca32622106b1ca31bc53180d890e36fd7ffdc4d3e63d0bfd7bbf4ef9f411ffaf91d76bcdf3aca01cb65b13af7aaf0177febe"}, @NFTA_DATA_VALUE={0xa4, 0x1, "ea22086422b32e68f652626d21caf356bc3b996760a90ca32a67e51ff73708a18a883627b92770925acebb12ad6594b07e3bed7023955b605b9c52d3cc506400b13acec6c386e8d85fa366844665195510c01c606bfcd095750710b7f121035d9a2abff6d8a1fc062a58944870de7632dc58d5e98868a4563001fdab2f35db8e4b898a433a94968d77c5dae3ae6f5c35cf567abc158819966f436cdeb5561ee4"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_KEY_END={0x20, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}, @NFTA_SET_ELEM_KEY_END={0x6c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_USERDATA={0xb, 0x6, 0x1, 0x0, "bb84cbaa7891e4"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0xb, 0x6, 0x1, 0x0, "25104cdd2c5ca8"}, @NFTA_SET_ELEM_DATA={0x8c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELOBJ={0x150, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xf9, 0x8, "ded14f1a58223e6cc893518ffc7127255bc5bdf6d643478fa08cf0fffc38a52a6f8d55fca867110d9d1939e5aa638b32a8afeb3bf9f70bb0b7d4902592eee3d29694d13f0383eea3848065d4f1b7706d27fd1f4b90f0831cd83e28119745ce15f223b332a6a9d0fc5d1473df43227a8104652f5bc39689e885979d8769ed21fc5d93a438287332a211f441d815989135db99e4da79bd180d4ed18422a16b06c1453284905b5de384651bcd71be182b147f6631a6ec3c64111ac6897453784a0ca8963caf517c3256219af7206fb9e5d0c5d8c7e4452b79c6cfda2857b8f8e1f541c2d54ac4e532444392da29a7d1ed7d31e584d2bc"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0xc, 0x8, "caed98916e209a92"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWSETELEM={0x4334, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x42fc, 0x3, 0x0, 0x1, [{0x438, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xe0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x58, 0x1, "5473f6d38310cbb91cda89701cbc3993fa697cdca5d284cfb4bbaca66531639e0452b16dd99983685d5ad86dc5a77f8c0b26f0fdb0c21671555fb42c6ce24b12924c425024745180b3db91973a76fe4d423ff234"}, @NFTA_DATA_VALUE={0x82, 0x1, "efff07a7c649f787d46a82c1431660c52a689d2b746ba7a081e633e008c5b993ee2605de784f2bd76c25d331d95cdda22cce0d3786ef85e73598782653d295fb2170507210b71e245085445a27874ba1ca703d2b3d79f52ee79ee141abeaa33d1e17b23eb55eeaaf42bada96aaec48e9bb3c044f6ee788123c58dabd5246"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x348, 0xb, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xd66d}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_QUEUE_SREG_QNUM={0x8}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xc}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x54, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x1f0, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1e0, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'iprange\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0xe8, 0x3, "2755719edb2af9fba646bd5ea0dddc72313a76c727be919313e01589e3f70377566b4dc86d2136564001795ce5cb856d29133ded2899515db26879679e9d3de02ef8587aeda4d87f979d5dd8f0dc8fc350f89fa805c45baba324c753fbd4388fb746398b4054a0ea03ea36b5a50605d4fb888385c287612867386b2d14f1ebe9ce8415207c0e17a1218081a8cc94cd1458f804a5165e513f00c2ccaafdc2c7d0373f361e77614e75c8b783f213827786d7ae8171d3b1c8395390ab158b73a5da6121c2b581a4cee3dc5b8c3d8a12b5a4341fe3c21ad7ed43d34e37155363b8adc1b429ac"}, @NFTA_MATCH_NAME={0x8, 0x1, 'mac\x00'}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}, @NFTA_MATCH_INFO={0xc2, 0x3, "581ca7915ca9d11c6ac6c3d34f060e36688db91f91e3a570a3bfe74035ac9acbc562759bc51784e99b1ad30b5ad01cb7721161ceb22b92543f42e1b3ba1045e473596a1f127d05c9cacc5497a982eefa3f6ed60f3740e6e7ccce5e27fd0f3ea2c41e67f199da813c495a44dca185b13d9f05f5c380ea684021bd871eedb35a702182a78891be3d1c4bafcae89dee046ea79bde983cd654eb74812d953e865bb2feb196a0edf3b8d4bd02c966384969602d3d4b2fffad214ac2eb75d11573"}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x38, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x58b9}]}, {0x1404, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x35, 0x6, 0x1, 0x0, "0b5b35aff77bf9a959a10126b52972e3cbdf3427fb3c74eae28e37469005ad618945e4f760dc07b6e5c22eb997a91e64df"}, @NFTA_SET_ELEM_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb7, 0x1, "857c6ead19cdbe190e385639211926cc7616174dd8fb309909a396744c372535dd893b7bc89257d9e7890b1a22e8d11cf4fbdadb2d07f9f89001b63ef288b2615b8e96004957d6312d3d4acba8b04dc6195ed7f26e2589e8ef54c6011d1ffa7a2d184eff0e2b0495afcd3444213ba94883b509d267d6184af7c9f3f27ffaf2f594d25fd196102f093c2980fc9016d4621239d3e6c838083fff041681c92f9acde238693b8c7af57aaeb59fab805db008685760"}]}, @NFTA_SET_ELEM_KEY_END={0x270, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "b614cba2ca8a34c83cef0036d784712d0aa677ae9828e831173a727b4259de26bc40d53bec32264732cfbfe95dff4b3436eab48e19d8efeece1fee21fc77eb648fd4e5ef3c68c676ead41b9cde082fd1e79d0bc1e7d95f6bcc39c567bfc8ca08be871503f429679f0f1491741b4d69dabd0722daa61968e072be2091d38c266d0a508fd00591e572ba777902b5b087cd1dde67012787331b2d11d047a6cff62fe154b993df3a9a5ba234130583373fac266043b5a46be35606409f3725d8783d31d44ef4e6dd8eb5fcaf3048c92d77f89bb416ce32712a47eab0f8738139b1a934b46b7e3a2433946e5eae9e3387d1"}, @NFTA_DATA_VALUE={0x8d, 0x1, "ab8a376b4479a7e2e5042cf079b5c6c7694cf7b317d89f01f4f3e025ae93d1d77a766053ffb1ceb0ec2998d478d437cd35ca1eb57392b6879e8f8e1d37397e948d344dfc5b42a3b53d337330735e9e71a710357ed4cc50ab415be3c56bdc9cd4ff97800e93f3807b276d65a5d54ef4746c56cd19e6068380cd002141e0a03ccf6a3f7fece710c20d24"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, @NFTA_SET_ELEM_DATA={0x60, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5b, 0x1, "288c29c0d1ef74aa1e0c5f079f3a67f62143913111f7900da62609c7d4700fcacb04ed55770b1d84e61c5d9e6d078c6149dd5ff3bc61161c8d6ff6b1714facd16dc1595927ea03985821fe7271c34a5c4df0551fa5076c"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x1008, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x5c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0xac, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x84, 0x1, "8b8216aac9eb16029b65fe4949dff531d0583cdc3764e849a08ad023bec22fed58141eecd895a93e384f1d6fcdbfb1e55073351690a82d41df328be63e87de586dce86d5aa20b743b3e3db5cd29fd63ab57f5180f69e5de8e67f2edddfde3a39f76375a00e41fd9313cb9fef9ad8605e4833548271a6452d4470ff0be878764f"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xecd045b5d203ca5c}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_DATA={0x1c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x73, 0x1, "e376c248ac68d9160c9deafdd79b3db1439720e3203b5119a6f4404d5e62366a5fdf6912448f239a7afae90640af40c00abf26f535b3c5e60bc204b8fb3fe6c327aaec8f52ab6226a6bf47b5aadb55845f1d813546917a320b90d9fb5ad4aec53bd36584c2ddb49bf243c8ca25745d"}, @NFTA_DATA_VALUE={0xd5, 0x1, "8e5019c3ee0f90066b854fdf109d38636636028b88d77a033d746d9e564bb34b91d36a17cbb5c356a64be29bdb894e1ef1a2bf7f05669d97dd59766df725d3c0a01c38c117afaea2fac96969ba89e7831fad9acb8a430b58a1b0be59e5bc18d81808bcb0c7282e9d650aaf74b5d7a64b271e52f3e8518ba6e3abecc897789e700ef91d8dad6fb3d603a23d61b92f64be7facad32d377871dbe6c98f058590344196a23ae6139618d81d00f9e46a4d8ebdba41f0ea887a21b7a2401738726e29af8432c28309acc2b0027f8b142933b59cf"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_DATA={0x108, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xec, 0x1, "62227c9759aae84f3de4d2c0f44958d4f49cc276c3b84979f4aff94ca7ada4254196bb95a9fd2edd80daa7a4a3b2ec5c242dee985e9d0eab473b891fb72df06c5a89ae01de0c992da84e8225c46ff8cefc4a62a37373b79120584d1d27ff6c0df184d6e83bd957f78ceabda30fd67033d2e172347040c61e2dfbc6b8ce839bafebbc24d67f1a3e2729d2d27c244f73380d2c9444b7782af9075b070626735bde9b3293d00580c6743cddba60a46ea225db2c71a8b69798f59464141a6cb7f34ec55fd5a1a88b24a4a5d66e1d500257eea6146c096ddd590f42c0e300d3cea278be07209a9cfc1ede"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xe1, 0x6, 0x1, 0x0, "b9ed5063952d0c705405bcfe031fa526780b35888f8f053f8ddebdd783aa11a13a7e33755a5aa9a439039962cfb9b741dc15529327b97770d8a14c1fb5dadf6b6b798140c5a179b7a1623f788ae95eaf128dea71bcca670a100a94ea96c64442fbbf0c292945ed97e97b51c0f654772cf75a8fe16cacfc777c9968ceec55ac75e75cb4b8a76decfeadb7a331d9478854cb9a9b5660207d96421e0da5f4239e7ec5e36ad8b8bf403fb857ca17793f748f092c21d1885f44203db557622d556c736ffb0db9e80e36da0a19a675b575b4c128ee3393c52214900ff9d43444"}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_USERDATA={0xf1, 0x6, 0x1, 0x0, "0325bc3574d8fde8902d73278888540ee71677c2bd081e605b401f6cdc040e1478dc284184e46d554d7b1507d8f94d0a2bfa2b5c67383e9b2ec3ab4e851ff23366925fd38437976f145753d55f862a54dca3bd5cfa249ff1a0234b4bdda707e7828634328d20538afe44e3e36ef1e72000a3e4beeeebc6c6fc2b689af72919537ebdcf050b9a8627e1a3580b0cd96653b73e66a94bf897db60f1b4ff0bf74c9a97e6b80393f04dd33f66f2114b9eebd3d5efaea1fa1996afe4b4d41d4f4a003dfe0343bdcf85e75be25329e624f00f1fe6cadebf8e501831437847319a043560fc60280ada8dba09012f3b4a5a"}, @NFTA_SET_ELEM_KEY_END={0x3c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x38, 0x1, "d2fbdd63fdc0628678330b571a191ed9ae2272eee41f0603762ea10c63fa5edefffca18e669b90778ae043b5fc8380309a622da2"}]}]}, {0x2f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x10, 0x6, 0x1, 0x0, "4b5e7d4412b2fa17ad9ec0cd"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0xe4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xdb}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x54}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x5c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x20, 0x3, "bfd085669fd1b75c80a6a01cacc8aff553dac920c3ed6cbd8d8ffbed"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}, @NFTA_SET_ELEM_DATA={0x138, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x97, 0x1, "3662e7508f46f6144242beb04ef846a72151605f4ea39877055614e3e32de1864121cfb3d3d80c29dd75a812ebc3c4ec33c8d033492dca275b922e348ed2ebaf849c0f111ff5806a2b1998549a1edf704c8d7688c7eed2b39c15c1b865c6a2c31d23d41a6b3ece06a5fe4679fb7e0d535029996cddbea1cc2e8b51d8da04ffdefcfa9f36b9b9b60607bd3f863d41622ef926a2"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_USERDATA={0x9c, 0x6, 0x1, 0x0, "2640d5b64a07ad36406f06f0ebc0667a996360abd40d0ddc5815ae6428341852a0c02f51cb9c073dab165c311a202acecad2883bc20680515ce2641c9288b9a7393773d44d181ef382763240ff21a8b05cea3ee2f6321c83a05c1ba5292e5ccea03e90a70f6cf37619d379f8583f738f7a16963e439956fcba9a70204b7660d55df9f851d3b5d080c9c434e79f158eba9671ba522d01a9f3"}]}, {0x4dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c4, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x5}]}}}, {0xb8, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xa8, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_EXPR={0x60, 0x7, 0x0, 0x1, {{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x13}]}}}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}]}}}, {0x48, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2eae05a8}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xff1e}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1000}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x1}]}}}, {0x31c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x30c, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x130, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb8, 0x1, "4e32c5b42ee8f4c04643bc609143d8e9b678b9a0c1cee6b5811e75ee3ec75daf60a4c9ce9108837d42b5f525b9e7272f208b022078b40ce35010f9f025132725fa864652eeab9e6edc5a0b2ec9fe91049389890387a61ee9dc8b916666f0f5c8d18afcec12d002b3b4bdd2a586532ef7b7c4140ad24cad791e50e99bce119696d8e9a4e25f5318e8256488938655999f535e721fddd08d2565440a824a090079b49e87bf174afb7dc580f4bb11da9767afd315b4"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x4c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x46, 0x1, "3c7b0fede178cc17450f1a429e5901710102fca72aa12dc492c6188e64e1856fe4821625ba89da07b0c6f48229369396a4964bca64b29805a7c6a1198746a0b10d33"}]}, @NFTA_RANGE_TO_DATA={0x134, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x49, 0x1, "4d6021848fdc8e6f39ea58a70772ec4389852aa4e07a9016e35ef51a0b478cf85e7965a929f27637b3461636b4f0a1660fff778caed71297fbf97a78ab8170fe49d2828e5e"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4a, 0x1, "7d73f9843d9a26207aaefcd85699a132469daf20661e0a8a7212c091f2d0861b915ed7abb80d3356ebc8b6feebcf3746b9b6e5d4795016f2dd0b67cc1add5c162fec7f9a87c2"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_RANGE_FROM_DATA={0x38, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "aa8b5920bf588cc790ddda690746a35fec782ebeecb0d5a6d8997a17f1fd2ad0b4235db316dd74c6a93771d5faed"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x2678a58af080dc3a}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}]}, {0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x3e, 0x1, "95ecc2896251b6e6055cf93bf4c86dafdb3e1b6b5232f08ab741b8a4554a831b81f4c73511852047fabae6920d8d69c363aadbd5a1f50fbd4daa"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_DATA={0x4}]}, {0x1678, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x11ac, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x9014}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x1128, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1118, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x64, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_BITWISE_DATA={0x10b0, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x91, 0x1, "b78413d0066ebbe1c78e90772cb199efb417f93434a293e8320ca0022afe7b4ed4893a106e4455155fe4e080783c8479a2503b64fc5158275e6db96991712658162792fd1953fbae1a62a2c4e4738b72257c5b152559e7114313e2891bd65a4ca9d1227e8b7fa94687a6c2a9773bb6be23f0b81355f2fc50cb11287ba585d107219c732edd15726dd0c721d678"}]}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY={0x2cc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x83, 0x1, "efce8b80fda84b233ee7e7c568a8cbcd6b100fe13f327ed7babf90c0875d166c109504907ac50344758ecbf703491bc79f0be1e93c05e68c52d6547ec859e0a172a7ba09c1df82b8162c6d4778434a6d4d05f47b10a8f0d3e8fc32c85eba922b156c10aefba15abb716c1d4707b3359cb174047b35899439455156dfb41d0a"}, @NFTA_DATA_VALUE={0x6c, 0x1, "9c03cb864bc7890f3f5b3702cca823103a1818927e4b3be68b295ada4973235d2347c2a81d3d3b5e90ba4b15dfa16f3bf89e8064fc09920b238a75bad8ca53f6c75ff9d4d18d55436c745c9f772f76847450a0686c267fb31d3a71fdd40bbb3e61ccc361439ba06f"}, @NFTA_DATA_VALUE={0x9c, 0x1, "e3024fd61059b1b3c65094d066e7472e054e7edac9bc757d302e9aa3519c70b461a555baf3903a5832bfd17b2103ff7a24e78fd6a88421ed01a4045267fcb9d2f75cc0b9059bf1e6413b09f45b96dd649ab072eee67f6cc75422bd2b9baac6ecef80aa7809fa0e03ed8f24634081e0c59eff445a106bbbd2019dea45e2a0bfa987fba36a79101b1bfa90693c5485383eff1c997ea5b89bfc"}, @NFTA_DATA_VALUE={0xb9, 0x1, "a4e796d14964925bfd787923fff3723036014ab6f96c25b994a849b63460b295ebb8b77872822ca329957ac0d7330a8779dbf2c763560c3ace8e7ab8643ab207b8f11d4ea4e1c29c99b500e1b591f1b8b49d885e95b86482f288fdd900c60c937c608b6584e873860bbad7572eca7e795ae08be0531ae839d457389758b56dd915244377bb4fa1ea92edc5ebe58b78dec1b28989a0a8c177596a2954cde7196f336d89b9c89ab3a7507862cbdb6764cf18103d9a34"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_USERDATA={0xc8, 0x6, 0x1, 0x0, "b459d22df499c0719c2df573e57f8bf4117b5b9d9c5d90ad4298c2070e9430ce59ba5270680d6423c5403ded93bd60d7adc376ae4ae2ce2d6e88025aa155079fbdaead479090c44618681179df5d1ac91c837fd37fe44366635c22cd7045a3691a0bd7b5247377e831325f422bef0e3837fdd941112e9dd81e468e3ee5ee7befacea868cfcf743f1e809599caeef68fb138c7145147af46324415e1a10ec6d6c0b923570cfdd001a52e3aa12d88b1e97ec3e53bf5ef04a13943d117cf5cecbb5aa95a725"}, @NFTA_SET_ELEM_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_DATA={0xf8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf1, 0x1, "213dc4b1564db73710f3eefaf2492c0135c82c9657c44b3e0fb4bb01056949f91dbd8b11aafa015537591a8c846c51bcb27cc6a0a31ee4cc6586dd46c533b01ec9beab8ea62f9b68df8b18e4a3e8b5f08c0ebe183030d9eaba253f07ef9b1c0059380c917fda8b0d4d73be1ec897d5d52837c1b7bfed9951bd2978c9e6c351fadf8d9696cdb63ec403b69ab21e0d9ad2624e065431d2f91207b11a4816d3d81508d0f3db66a75a7ee8d22dfb7cf7ccf42610b1e4c6e2d75a61cbc505386f22f0993da7218ce71436b85b736861242aeb283c546f722f5bcdf1af20c8fbc616eb6b1f8736e19fd04520a59bab02"}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x35}]}, {0x5e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x5e4, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0x5d0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_IMMEDIATE_DATA={0x158, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcf, 0x1, "7d61511dfe4b68b4872c61253df4a699a395aa769ab3317528437bd09e357384bd553c921c2e035ed49526c218ea5e2473ab2cc16cfc63819b8c4d4a88ed1d76e89efbb556e1cfa56905f7917b093055a7b5e0efb806d4560e5bb73a5a0c7b012092312422b579aef0d9010bb402796389d64ec9835a90b33530d2ed775b39273fc14f36891e4a6712978f2bbcbb7b064bd24afcf8657a9a12fed175a5fbcef843d4917abaf69f09196618e93ff5fe2b5210e298292298740653673214a826b34b3a84c9dd0a1d62c9b29a"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x17, 0x1, "9a4430acacfecb9daeee4232cf8199c3774037"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x11, 0x1, "a6f6c2aa8c90792d53a223664d"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_IMMEDIATE_DATA={0x21c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "b6f220cd0645e189a8e4e0acaa16c80a6a693afe98193ce5db631eae1555b91e76900c6e3d646d51e64774b27f6efe21f31f90495947ebaa55cdc3744b13e3bbb6757a9f9568425b3992fcf96e4399c791716b676d6c1b12ee1133032b2baffdfaae7cd6464398bb02a49c1d687f46d4d61189da647e464c6944300332adece0350131f38b7dce315ff137f20e595390899725fb1fa401089720054a64f9a77214b608ce7579136f51dfe41cdbe3734e15"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}]}, @NFTA_IMMEDIATE_DATA={0x21c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x47, 0x1, "f11f106f3f17ba2a16cb19f0d1aa3292d777bc791ca23d06ce43e69c647db180e287af074af79426fdd687ccfbcfbd9f1bb3310f851a57f3e659521391b1cc320260f0"}, @NFTA_DATA_VALUE={0x66, 0x1, "8ee3e5c9ddf5e7966baa8db12e269d340c0690e264060a6aaa0070871067ee5c12918b16ee63f150b3994524debfb982e82d8ec4a23bb90f4338feb9b8221a09590aa0739e26e0dc9526322f37525c4cccc69283efb36549770b8a71d0b2351d0874"}, @NFTA_DATA_VALUE={0x66, 0x1, "675ec80fcb0215a4d23b47b385238aa5da78d809dc3ebf7dc21a5cfce654521bc9d51f0a83fed88d7990c2949ca374edda235ce1dcdfc4140d3992329d7c1565fe6f360ec3ed9573da53357488351bfbdb2c7296add0757055cb43113d13d94efcac"}, @NFTA_DATA_VALUE={0xd3, 0x1, "44a5ff52b0e0ce307cf3118782db5a449588b205a37c1242938c49119a06de978027a46c0dec1858e105bbd754ffc85bbca920daefd6540dd7b10bca8c12bb8e66a99af88ead27c186e068ea0b5253bbc605190664ae747d8c1994e6fff8e8bc0a98d13c46ccb3b60e526c286545aa0d7486becaac4c54bf307efa516dcf9c1a346c711bbb9f29480d0ec35cd2fd1bc9141cb82d26edf049a8100abe5b019918ab24b405bf70e583ec8998ebabe56bfc5ebfccf99230e87d562aecca20b4eadc3c00b752e9366cab1b981b3a74c170"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_IMMEDIATE_DATA={0x24, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x72e8}, 0x1, 0x0, 0x0, 0x4008000}, 0x8014) 2.843944927s ago: executing program 1 (id=8905): syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) 2.769870481s ago: executing program 6 (id=8906): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300), 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r6, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='ubifs\x00', 0x2208004, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.62103762s ago: executing program 5 (id=8907): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x80000000, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x2}]}}, 0x0, 0x42}, 0x28) unshare(0x400) epoll_create1(0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xf8, &(0x7f0000000100)=""/248, 0x0, 0x2c}, 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x98}}, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8094) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23f5a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x101, 0x2001}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3c943}]}, 0x50}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000380)=0x3) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x7, 0x2, @tick=0x5, {}, {}, @raw32={[0x9, 0x8, 0x8]}}, {0xfb, 0x0, 0x1, 0x81, @time={0x83f0, 0x8}, {0x8, 0x30}, {0x2}, @time=@tick=0xfffffffe}], 0x38) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x5}) pwrite64(r2, &(0x7f0000000000), 0x0, 0x5) close(r2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x3}, 0x1000d023}) close_range(0xffffffffffffffff, r6, 0x2) 1.824538186s ago: executing program 1 (id=8908): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x18}}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80a80, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r3, 0x0, 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x6, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) poll(&(0x7f0000000000)=[{r7, 0x653b}], 0x1, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b40)=@newtfilter={0x8b8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x884, 0x2, [@TCA_MATCHALL_ACT={0x880, 0x2, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0xb2eb, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x5a9, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x6, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x6, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x3, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0xf, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x1, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x5, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x51e, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x9, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$xdp(0x2c, 0x3, 0x0) 22.625951ms ago: executing program 1 (id=8909): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300), 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r6, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='ubifs\x00', 0x2208004, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12.168181ms ago: executing program 5 (id=8910): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x80000000, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x2}]}}, 0x0, 0x42}, 0x28) unshare(0x400) epoll_create1(0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xf8, &(0x7f0000000100)=""/248, 0x0, 0x2c}, 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8094) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23f5a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x101, 0x2001}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3c943}]}, 0x50}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000380)=0x3) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x7, 0x2, @tick=0x5, {}, {}, @raw32={[0x9, 0x8, 0x8]}}, {0xfb, 0x0, 0x1, 0x81, @time={0x83f0, 0x8}, {0x8, 0x30}, {0x2}, @time=@tick=0xfffffffe}], 0x38) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x5}) pwrite64(r2, &(0x7f0000000000), 0x0, 0x5) close(r2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x3}, 0x1000d023}) close_range(0xffffffffffffffff, r6, 0x2) 0s ago: executing program 6 (id=8911): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x18}}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80a80, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r3, 0x0, 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x6, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) poll(&(0x7f0000000000)=[{r7, 0x653b}], 0x1, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b40)=@newtfilter={0x8b8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x884, 0x2, [@TCA_MATCHALL_ACT={0x880, 0x2, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0xb2eb, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x5a9, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x6, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x6, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x3, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0xf, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x1, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x5, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x51e, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x9, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$xdp(0x2c, 0x3, 0x0) kernel console output (not intermixed with test programs): umber=3 [ 938.104556][ T24] usb 8-1: Product: syz [ 938.106388][ T24] usb 8-1: Manufacturer: syz [ 938.108365][ T24] usb 8-1: SerialNumber: syz [ 938.112362][ T24] usb 8-1: config 0 descriptor?? [ 938.116033][T22034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 938.119327][T22034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 938.123794][ T24] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 938.129290][ T24] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 938.134831][ T24] scsi host6: microtekX6 [ 938.197178][T22066] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.351635][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.361260][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.383210][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.397120][ T1053] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.138900][T22086] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 939.142119][T22086] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 939.145875][T22086] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 939.148394][T22086] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 939.590115][T16298] usb 8-1: USB disconnect, device number 98 [ 939.893522][T22113] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 939.895968][T22113] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 939.899370][T22113] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 939.902305][T22113] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 939.927145][T22116] mkiss: ax0: crc mode is auto. [ 939.937058][T22120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4166'. [ 939.975932][T22122] rtc_cmos 00:05: Alarms can be up to one day in the future [ 940.055624][T22123] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 940.059132][T22123] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 940.063125][T22123] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 940.066388][T22123] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 940.314284][T22131] FAULT_INJECTION: forcing a failure. [ 940.314284][T22131] name failslab, interval 1, probability 0, space 0, times 0 [ 940.319612][T22131] CPU: 1 UID: 0 PID: 22131 Comm: syz.3.4170 Not tainted syzkaller #0 PREEMPT(full) [ 940.319636][T22131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 940.319648][T22131] Call Trace: [ 940.319656][T22131] [ 940.319681][T22131] dump_stack_lvl+0x16c/0x1f0 [ 940.319712][T22131] should_fail_ex+0x512/0x640 [ 940.319738][T22131] ? __kmalloc_noprof+0xca/0x880 [ 940.319762][T22131] should_failslab+0xc2/0x120 [ 940.319780][T22131] __kmalloc_noprof+0xdd/0x880 [ 940.319799][T22131] ? __pfx___mutex_trylock_common+0x10/0x10 [ 940.319819][T22131] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 940.319846][T22131] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 940.319866][T22131] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 940.319887][T22131] ? __mutex_lock+0x1c5/0x1060 [ 940.319923][T22131] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 940.319943][T22131] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 940.319962][T22131] ? genl_get_cmd+0x194/0x580 [ 940.319987][T22131] ? ____sys_sendmsg+0xa98/0xc70 [ 940.320005][T22131] ? ___sys_sendmsg+0x134/0x1d0 [ 940.320028][T22131] ? __radix_tree_lookup+0x21f/0x2c0 [ 940.320056][T22131] genl_rcv_msg+0x55c/0x800 [ 940.320078][T22131] ? __pfx_genl_rcv_msg+0x10/0x10 [ 940.320096][T22131] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 940.320118][T22131] ? __pfx_nl802154_get_wpan_phy+0x10/0x10 [ 940.320139][T22131] ? __pfx_nl802154_post_doit+0x10/0x10 [ 940.320162][T22131] ? __lock_acquire+0x622/0x1c90 [ 940.320183][T22131] netlink_rcv_skb+0x158/0x420 [ 940.320206][T22131] ? __pfx_genl_rcv_msg+0x10/0x10 [ 940.320225][T22131] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 940.320258][T22131] ? netlink_deliver_tap+0x1ae/0xd30 [ 940.320284][T22131] genl_rcv+0x28/0x40 [ 940.320298][T22131] netlink_unicast+0x5aa/0x870 [ 940.320326][T22131] ? __pfx_netlink_unicast+0x10/0x10 [ 940.320364][T22131] netlink_sendmsg+0x8c8/0xdd0 [ 940.320393][T22131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.320422][T22131] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 940.320445][T22131] ____sys_sendmsg+0xa98/0xc70 [ 940.320465][T22131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 940.320482][T22131] ? get_compat_msghdr+0x11a/0x170 [ 940.320518][T22131] ___sys_sendmsg+0x134/0x1d0 [ 940.320545][T22131] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.320577][T22131] ? find_held_lock+0x2b/0x80 [ 940.320613][T22131] __sys_sendmsg+0x16d/0x220 [ 940.320637][T22131] ? __pfx___sys_sendmsg+0x10/0x10 [ 940.320674][T22131] ? rcu_is_watching+0x12/0xc0 [ 940.320700][T22131] __do_fast_syscall_32+0x7c/0x300 [ 940.320729][T22131] do_fast_syscall_32+0x32/0x80 [ 940.320757][T22131] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 940.320780][T22131] RIP: 0023:0xf705d579 [ 940.320794][T22131] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 940.320811][T22131] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 940.320827][T22131] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800005c0 [ 940.320839][T22131] RDX: 0000000000000810 RSI: 0000000000000000 RDI: 0000000000000000 [ 940.320848][T22131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 940.320859][T22131] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 940.320869][T22131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 940.320894][T22131] [ 940.446780][ C1] vkms_vblank_simulate: vblank timer overrun [ 940.891971][ T5297] Bluetooth: hci2: Unable to find connection for big 0x00 [ 941.319894][T22162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4180'. [ 941.423524][T22169] FAULT_INJECTION: forcing a failure. [ 941.423524][T22169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 941.427785][T22169] CPU: 3 UID: 0 PID: 22169 Comm: syz.4.4182 Not tainted syzkaller #0 PREEMPT(full) [ 941.427801][T22169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 941.427808][T22169] Call Trace: [ 941.427812][T22169] [ 941.427817][T22169] dump_stack_lvl+0x16c/0x1f0 [ 941.427836][T22169] should_fail_ex+0x512/0x640 [ 941.427855][T22169] _copy_to_user+0x32/0xd0 [ 941.427867][T22169] bpf_test_finish.isra.0+0x53c/0x6e0 [ 941.427886][T22169] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 941.427904][T22169] ? __asan_memset+0x23/0x50 [ 941.427921][T22169] bpf_prog_test_run_skb+0x1384/0x2290 [ 941.427943][T22169] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 941.427961][T22169] ? fput+0x9b/0xd0 [ 941.427973][T22169] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 941.427993][T22169] __sys_bpf+0x1035/0x4980 [ 941.428032][T22169] ? __pfx___sys_bpf+0x10/0x10 [ 941.428047][T22169] ? find_held_lock+0x2b/0x80 [ 941.428065][T22169] ? find_held_lock+0x2b/0x80 [ 941.428083][T22169] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 941.428107][T22169] ? fput+0x9b/0xd0 [ 941.428118][T22169] ? ksys_write+0x1ac/0x250 [ 941.428137][T22169] ? __pfx_ksys_write+0x10/0x10 [ 941.428154][T22169] __ia32_sys_bpf+0x76/0xe0 [ 941.428170][T22169] __do_fast_syscall_32+0x7c/0x300 [ 941.428188][T22169] do_fast_syscall_32+0x32/0x80 [ 941.428204][T22169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 941.428219][T22169] RIP: 0023:0xf704d579 [ 941.428228][T22169] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 941.428238][T22169] RSP: 002b:00000000f543d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 941.428249][T22169] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 941.428256][T22169] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 941.428262][T22169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 941.428268][T22169] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 941.428274][T22169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 941.428288][T22169] [ 941.522737][T22171] overlayfs: failed to resolve './file1': -2 [ 941.719948][T22176] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 941.722368][T22176] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 941.724978][T22176] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 941.727454][T22176] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 942.093821][T22185] netdevsim netdevsim2: Direct firmware load for @ failed with error -2 [ 942.100560][T22185] netdevsim netdevsim2: Falling back to sysfs fallback for: @ [ 942.194961][T22186] random: crng reseeded on system resumption [ 942.257092][T22192] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 942.263182][T22192] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 942.275132][T22192] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 942.284154][T22192] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 942.290555][T22192] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 942.474159][T22189] chnl_net:caif_netlink_parms(): no params data found [ 942.486517][ T24] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 942.554744][T22189] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.557009][T22189] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.559563][T22189] bridge_slave_0: entered allmulticast mode [ 942.563435][T22189] bridge_slave_0: entered promiscuous mode [ 942.566971][T22189] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.569635][T22189] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.572226][T22189] bridge_slave_1: entered allmulticast mode [ 942.575229][T22189] bridge_slave_1: entered promiscuous mode [ 942.615943][T22189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.621123][T22189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.646835][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 942.650273][ T24] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 942.652942][ T24] usb 6-1: config 0 has no interface number 0 [ 942.654883][ T24] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 942.656977][T22189] team0: Port device team_slave_0 added [ 942.658516][ T24] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 942.662853][T22189] team0: Port device team_slave_1 added [ 942.663909][ T24] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 942.669963][ T24] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 942.673205][ T24] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 942.677556][ T24] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 942.681614][ T24] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 942.685700][ T24] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 942.693163][ T24] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 942.697403][ T24] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 942.705535][ T24] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 942.708458][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.711630][ T24] usb 6-1: Product: syz [ 942.713021][ T24] usb 6-1: Manufacturer: syz [ 942.714546][ T24] usb 6-1: SerialNumber: syz [ 942.722486][ T24] usb 6-1: config 0 descriptor?? [ 942.730604][T22186] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 942.733225][T22186] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 942.736584][ T24] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 942.737515][T22189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.739572][ T24] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 942.742165][T22189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.751410][ T24] scsi host6: microtekX6 [ 942.753529][T22189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.762607][T22189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.764989][T22189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.772989][T22189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.841434][T22189] hsr_slave_0: entered promiscuous mode [ 942.844057][T22189] hsr_slave_1: entered promiscuous mode [ 942.846361][T22189] debugfs: 'hsr0' already exists in 'hsr' [ 942.848320][T22189] Cannot create hsr debugfs directory [ 943.044288][T22189] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.144523][T22189] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.219610][T22189] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.303005][T22189] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.396408][ T1053] bridge_slave_1: left allmulticast mode [ 943.398834][ T1053] bridge_slave_1: left promiscuous mode [ 943.401422][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.407565][ T1053] bridge_slave_0: left allmulticast mode [ 943.410025][ T1053] bridge_slave_0: left promiscuous mode [ 943.412665][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.423036][T22216] fuse: Bad value for 'fd' [ 943.427663][ T1053] tipc: Resetting bearer [ 943.434838][ T1053] bond_slave_0: left promiscuous mode [ 943.436775][ T1053] bond_slave_1: left promiscuous mode [ 943.544482][ T1053] tipc: Disabling bearer [ 943.565120][ T1053] dvmrp1 (unregistering): left allmulticast mode [ 943.725324][ T1053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.730448][ T1053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 943.733982][ T1053] bond0 (unregistering): Released all slaves [ 943.793354][T22189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 943.797520][T22189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 943.801819][T22189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 943.808053][T22189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 943.842347][ T1053] tipc: Left network mode [ 943.889344][T22189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.910632][T22189] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.915769][T14538] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.917902][T14538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.925221][T14538] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.927446][T14538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.997807][T22233] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 944.014039][T22233] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 944.031413][T22233] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 944.041202][T22233] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 944.107310][T22189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.154059][ T1053] hsr_slave_0: left promiscuous mode [ 944.160341][ T1053] hsr_slave_1: left promiscuous mode [ 944.163597][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.167295][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.172146][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.175407][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.207496][ T1053] veth1_macvtap: left promiscuous mode [ 944.209420][ T1053] veth0_macvtap: left promiscuous mode [ 944.212411][ T1053] veth1_vlan: left promiscuous mode [ 944.214100][ T1053] veth0_vlan: left promiscuous mode [ 944.497769][ T5297] Bluetooth: hci3: command tx timeout [ 944.549814][ T60] usb 7-1: new full-speed USB device number 122 using dummy_hcd [ 944.745919][ T60] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 944.749518][ T60] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 944.754265][ T60] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 944.757771][ T60] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 944.765894][ T60] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 944.769677][ T60] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 944.772992][ T60] usb 7-1: Product: syz [ 944.775003][ T60] usb 7-1: Manufacturer: syz [ 944.776562][ T40] kauditd_printk_skb: 190 callbacks suppressed [ 944.776577][ T40] audit: type=1326 audit(1760338465.540:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22242 comm="syz.3.4197" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d579 code=0x0 [ 944.780597][T22241] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 944.790806][ T60] cdc_wdm 7-1:1.0: skipping garbage [ 944.793038][ T60] cdc_wdm 7-1:1.0: skipping garbage [ 944.796693][ T60] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 944.799274][ T60] cdc_wdm 7-1:1.0: Unknown control protocol [ 944.970514][ T1053] team0 (unregistering): Port device team_slave_1 removed [ 945.028227][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 945.031092][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 945.033889][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 945.036687][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 945.039487][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 945.042275][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 945.045085][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 945.047855][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 945.050629][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 945.053412][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 945.056230][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 945.059004][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 945.062374][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 945.065176][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 945.068110][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 945.070906][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 945.073676][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 945.076506][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 945.079217][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 945.081980][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 945.085297][ T1053] team0 (unregistering): Port device team_slave_0 removed [ 945.101241][T13276] usb 6-1: USB disconnect, device number 104 [ 945.153211][T22250] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 945.155069][T22250] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 945.167149][T22250] vhci_hcd vhci_hcd.0: Device attached [ 945.454061][T22257] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 945.456832][T22257] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 945.459861][T22257] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 945.462458][T22257] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 945.533816][ T6005] usb 41-1: new high-speed USB device number 8 using vhci_hcd [ 945.962286][T22189] veth0_vlan: entered promiscuous mode [ 945.971310][T22189] veth1_vlan: entered promiscuous mode [ 945.994896][T22189] veth0_macvtap: entered promiscuous mode [ 945.998794][T22189] veth1_macvtap: entered promiscuous mode [ 946.024814][T22189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.036817][T22189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.047213][T14538] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.055121][T14538] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.062945][T14538] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.070009][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.108605][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.118256][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.141050][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.144733][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.200614][T22268] comedi comedi2: pcl711: I/O port conflict (0x4f27,16) [ 946.464038][ T6017] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 946.625106][ T6017] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 946.625129][ T6017] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 946.625147][ T6017] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 946.625161][ T6017] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 946.625173][ T6017] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 946.625187][ T6017] usb 6-1: config 0 interface 0 has no altsetting 0 [ 946.627013][ T6017] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 946.648771][ T6017] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 946.648786][ T6017] usb 6-1: Product: syz [ 946.648797][ T6017] usb 6-1: Manufacturer: syz [ 946.648805][ T6017] usb 6-1: SerialNumber: syz [ 946.649950][ T6017] usb 6-1: config 0 descriptor?? [ 946.658923][T22268] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 946.659980][ T6017] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 946.665902][ T6017] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 946.730910][ T5297] Bluetooth: hci3: command tx timeout [ 947.088750][ T6017] usb 6-1: USB disconnect, device number 105 [ 947.093039][ T6017] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 947.400923][T22290] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 947.404748][T22290] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 947.408632][T22290] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 947.411612][T22290] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 947.502624][T22251] vhci_hcd: connection reset by peer [ 947.504743][ T1053] vhci_hcd: stop threads [ 947.506158][ T1053] vhci_hcd: release socket [ 947.507720][ T1053] vhci_hcd: disconnect device [ 947.513039][ T6119] usb 7-1: USB disconnect, device number 122 [ 947.772148][ T40] audit: type=1326 audit(1760338468.337:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22298 comm="syz.1.4207" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 947.828632][T22300] random: crng reseeded on system resumption [ 947.846716][T22304] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 947.848693][T22304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 947.851021][T22304] vhci_hcd vhci_hcd.0: Device attached [ 947.921874][ T1417] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 947.926531][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 948.009275][T22304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4206'. [ 948.164231][ T10] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 948.336555][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 948.342254][ T10] usb 9-1: config 0 has an invalid interface number: 146 but max is 0 [ 948.346624][ T10] usb 9-1: config 0 has no interface number 0 [ 948.348661][ T10] usb 9-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 948.352392][ T10] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 948.359974][ T10] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 948.363515][ T10] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 948.367020][ T10] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 948.370875][ T10] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 948.374362][ T10] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 948.380362][ T10] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 948.385183][ T10] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 948.389681][ T10] usb 9-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 948.396919][ T10] usb 9-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 948.401792][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.405056][ T10] usb 9-1: Product: syz [ 948.406576][ T10] usb 9-1: Manufacturer: syz [ 948.408140][ T10] usb 9-1: SerialNumber: syz [ 948.412420][ T10] usb 9-1: config 0 descriptor?? [ 948.414769][T22300] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 948.417318][T22300] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 948.422500][ T10] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 948.425238][ T10] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 948.430324][ T10] scsi host6: microtekX6 [ 948.484858][T22305] vhci_hcd: connection closed [ 948.485952][ T1053] vhci_hcd: stop threads [ 948.489354][ T1053] vhci_hcd: release socket [ 948.491264][ T1053] vhci_hcd: disconnect device [ 948.772587][ T6119] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 948.805295][T22318] FAULT_INJECTION: forcing a failure. [ 948.805295][T22318] name failslab, interval 1, probability 0, space 0, times 0 [ 948.809160][T22318] CPU: 3 UID: 0 PID: 22318 Comm: syz.1.4209 Not tainted syzkaller #0 PREEMPT(full) [ 948.809175][T22318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 948.809183][T22318] Call Trace: [ 948.809187][T22318] [ 948.809192][T22318] dump_stack_lvl+0x16c/0x1f0 [ 948.809211][T22318] should_fail_ex+0x512/0x640 [ 948.809228][T22318] ? __kmalloc_noprof+0xca/0x880 [ 948.809242][T22318] should_failslab+0xc2/0x120 [ 948.809253][T22318] __kmalloc_noprof+0xdd/0x880 [ 948.809265][T22318] ? __pfx___mutex_trylock_common+0x10/0x10 [ 948.809278][T22318] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 948.809294][T22318] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 948.809306][T22318] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 948.809319][T22318] ? __mutex_lock+0x1c5/0x1060 [ 948.809337][T22318] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 948.809350][T22318] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 948.809362][T22318] ? genl_get_cmd+0x194/0x580 [ 948.809376][T22318] ? ____sys_sendmsg+0xa98/0xc70 [ 948.809387][T22318] ? ___sys_sendmsg+0x134/0x1d0 [ 948.809401][T22318] ? __radix_tree_lookup+0x21f/0x2c0 [ 948.809417][T22318] genl_rcv_msg+0x55c/0x800 [ 948.809431][T22318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 948.809442][T22318] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 948.809456][T22318] ? __pfx_nl802154_get_wpan_phy+0x10/0x10 [ 948.809469][T22318] ? __pfx_nl802154_post_doit+0x10/0x10 [ 948.809482][T22318] ? __lock_acquire+0x622/0x1c90 [ 948.809495][T22318] netlink_rcv_skb+0x158/0x420 [ 948.809512][T22318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 948.809524][T22318] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 948.809547][T22318] ? netlink_deliver_tap+0x1ae/0xd30 [ 948.809565][T22318] genl_rcv+0x28/0x40 [ 948.809574][T22318] netlink_unicast+0x5aa/0x870 [ 948.809593][T22318] ? __pfx_netlink_unicast+0x10/0x10 [ 948.809616][T22318] netlink_sendmsg+0x8c8/0xdd0 [ 948.809635][T22318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.809653][T22318] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 948.809668][T22318] ____sys_sendmsg+0xa98/0xc70 [ 948.809681][T22318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 948.809692][T22318] ? get_compat_msghdr+0x11a/0x170 [ 948.809714][T22318] ___sys_sendmsg+0x134/0x1d0 [ 948.809731][T22318] ? __pfx____sys_sendmsg+0x10/0x10 [ 948.809754][T22318] ? find_held_lock+0x2b/0x80 [ 948.809777][T22318] __sys_sendmsg+0x16d/0x220 [ 948.809797][T22318] ? __pfx___sys_sendmsg+0x10/0x10 [ 948.809820][T22318] ? rcu_is_watching+0x12/0xc0 [ 948.809838][T22318] __do_fast_syscall_32+0x7c/0x300 [ 948.809856][T22318] do_fast_syscall_32+0x32/0x80 [ 948.809872][T22318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 948.809886][T22318] RIP: 0023:0xf709d579 [ 948.809894][T22318] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 948.809905][T22318] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 948.809915][T22318] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800005c0 [ 948.809922][T22318] RDX: 0000000000000810 RSI: 0000000000000000 RDI: 0000000000000000 [ 948.809928][T22318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 948.809934][T22318] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 948.809940][T22318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 948.809954][T22318] [ 948.954351][ T5297] Bluetooth: hci3: command tx timeout [ 948.956553][ T6119] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 948.960995][ T6119] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.964837][ T6119] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 948.970436][ T6119] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 948.974240][ T6119] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 948.977931][ T6119] usb 8-1: Manufacturer: syz [ 948.981979][ T6119] usb 8-1: config 0 descriptor?? [ 948.992164][ T6119] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 949.189815][ T40] audit: type=1326 audit(1760338469.665:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22328 comm="syz.2.4214" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 950.450673][T22346] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 950.453292][T22346] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 950.456004][T22346] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 950.458475][T22346] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 950.651997][ T6023] usb 9-1: USB disconnect, device number 84 [ 951.166585][ T6005] vhci_hcd: vhci_device speed not set [ 951.178850][ T5297] Bluetooth: hci3: command tx timeout [ 951.755340][ T6023] usb 8-1: USB disconnect, device number 99 [ 951.787751][T22377] FAULT_INJECTION: forcing a failure. [ 951.787751][T22377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.792329][T22377] CPU: 1 UID: 0 PID: 22377 Comm: syz.3.4226 Not tainted syzkaller #0 PREEMPT(full) [ 951.792344][T22377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 951.792350][T22377] Call Trace: [ 951.792355][T22377] [ 951.792360][T22377] dump_stack_lvl+0x16c/0x1f0 [ 951.792379][T22377] should_fail_ex+0x512/0x640 [ 951.792398][T22377] _copy_to_user+0x32/0xd0 [ 951.792410][T22377] simple_read_from_buffer+0xcb/0x170 [ 951.792425][T22377] proc_fail_nth_read+0x197/0x240 [ 951.792441][T22377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 951.792457][T22377] ? rw_verify_area+0xcf/0x6c0 [ 951.792470][T22377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 951.792485][T22377] vfs_read+0x1e4/0xcf0 [ 951.792503][T22377] ? __pfx_vfs_read+0x10/0x10 [ 951.792516][T22377] ? find_held_lock+0x2b/0x80 [ 951.792535][T22377] ? __fget_files+0x20e/0x3c0 [ 951.792553][T22377] ksys_read+0x12a/0x250 [ 951.792568][T22377] ? __pfx_ksys_read+0x10/0x10 [ 951.792583][T22377] ? rcu_is_watching+0x12/0xc0 [ 951.792600][T22377] __do_fast_syscall_32+0x7c/0x300 [ 951.792619][T22377] do_fast_syscall_32+0x32/0x80 [ 951.792635][T22377] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 951.792649][T22377] RIP: 0023:0xf705d579 [ 951.792658][T22377] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 951.792669][T22377] RSP: 002b:00000000f544d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 951.792679][T22377] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f544d620 [ 951.792686][T22377] RDX: 000000000000000f RSI: 00000000f73f5ff4 RDI: 0000000000000000 [ 951.792693][T22377] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 951.792699][T22377] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 951.792705][T22377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 951.792719][T22377] [ 952.162268][T22384] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 952.165247][T22384] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 952.168473][T22384] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 952.171067][T22384] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 952.300562][T22386] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 952.304331][T22386] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 952.308137][T22386] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 952.311434][T22386] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 952.836900][T22387] fuse: Bad value for 'fd' [ 953.103555][T22399] MTD: Couldn't look up '/dev/sg0': -15 [ 953.117510][T22398] random: crng reseeded on system resumption [ 953.174330][T22399] vlan2: entered allmulticast mode [ 953.246940][T22401] 9pnet_virtio: no channels available for device syz [ 953.251403][T22401] 9pnet_virtio: no channels available for device syz [ 953.255764][T22401] 9pnet_virtio: no channels available for device syz [ 953.259365][T22401] 9pnet_virtio: no channels available for device syz [ 953.263105][T22401] 9pnet_virtio: no channels available for device syz [ 953.271901][T22401] 9pnet_virtio: no channels available for device syz [ 953.275366][T22401] 9pnet_virtio: no channels available for device syz [ 953.280105][T22401] 9pnet_virtio: no channels available for device syz [ 953.284701][T22401] 9pnet_virtio: no channels available for device syz [ 953.292546][T22401] 9pnet_virtio: no channels available for device syz [ 953.296206][T22401] 9pnet_virtio: no channels available for device syz [ 953.301800][T22401] 9pnet_virtio: no channels available for device syz [ 953.315797][T22401] 9pnet_virtio: no channels available for device syz [ 953.319719][T22401] 9pnet_virtio: no channels available for device syz [ 953.323184][T22401] 9pnet_virtio: no channels available for device syz [ 953.327760][T22401] 9pnet_virtio: no channels available for device syz [ 953.336839][T22401] 9pnet_virtio: no channels available for device syz [ 953.344930][T22401] 9pnet_virtio: no channels available for device syz [ 953.350679][T22401] 9pnet_virtio: no channels available for device syz [ 953.356314][T22401] 9pnet_virtio: no channels available for device syz [ 953.360848][T22401] 9pnet_virtio: no channels available for device syz [ 953.365303][T22401] 9pnet_virtio: no channels available for device syz [ 953.369044][T22401] 9pnet_virtio: no channels available for device syz [ 953.372823][T22401] 9pnet_virtio: no channels available for device syz [ 953.376200][T22401] 9pnet_virtio: no channels available for device syz [ 953.379701][T22401] 9pnet_virtio: no channels available for device syz [ 953.383618][T22401] 9pnet_virtio: no channels available for device syz [ 953.387163][T22401] 9pnet_virtio: no channels available for device syz [ 953.390687][T22401] 9pnet_virtio: no channels available for device syz [ 953.395194][T22401] 9pnet_virtio: no channels available for device syz [ 953.397748][T22405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 953.398731][T22401] 9pnet_virtio: no channels available for device syz [ 953.404512][T22401] 9pnet_virtio: no channels available for device syz [ 953.473622][T22413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 954.021693][T16298] usb 6-1: new low-speed USB device number 106 using dummy_hcd [ 954.065498][T22426] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 954.068601][T22426] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 954.071824][T22426] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 954.074890][T22426] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 954.407696][T16298] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 954.410671][T16298] usb 6-1: config 0 has no interface number 0 [ 954.412595][T16298] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 954.416492][T16298] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 954.420647][T16298] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 954.423901][T16298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.428263][T16298] usb 6-1: config 0 descriptor?? [ 954.430246][T22422] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 954.436378][T16298] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 954.581845][T22434] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.4244'. [ 954.705421][ T6005] usb 6-1: USB disconnect, device number 106 [ 954.794576][ T40] audit: type=1326 audit(1760338474.903:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22443 comm="syz.4.4248" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 954.830392][T22448] fuse: Bad value for 'fd' [ 955.805737][T22474] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 955.809054][T22474] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 955.812753][T22474] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 955.815959][T22474] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 956.170737][T22478] FAULT_INJECTION: forcing a failure. [ 956.170737][T22478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.174643][T22478] CPU: 2 UID: 0 PID: 22478 Comm: syz.3.4258 Not tainted syzkaller #0 PREEMPT(full) [ 956.174658][T22478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 956.174665][T22478] Call Trace: [ 956.174669][T22478] [ 956.174673][T22478] dump_stack_lvl+0x16c/0x1f0 [ 956.174692][T22478] should_fail_ex+0x512/0x640 [ 956.174716][T22478] _copy_to_user+0x32/0xd0 [ 956.174728][T22478] simple_read_from_buffer+0xcb/0x170 [ 956.174743][T22478] proc_fail_nth_read+0x197/0x240 [ 956.174759][T22478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 956.174775][T22478] ? rw_verify_area+0xcf/0x6c0 [ 956.174788][T22478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 956.174803][T22478] vfs_read+0x1e4/0xcf0 [ 956.174821][T22478] ? __pfx_vfs_read+0x10/0x10 [ 956.174834][T22478] ? find_held_lock+0x2b/0x80 [ 956.174853][T22478] ? __fget_files+0x20e/0x3c0 [ 956.174866][T22478] ? handle_mm_fault+0x1f0/0xd10 [ 956.174883][T22478] ksys_read+0x12a/0x250 [ 956.174897][T22478] ? __pfx_ksys_read+0x10/0x10 [ 956.174913][T22478] ? rcu_is_watching+0x12/0xc0 [ 956.174930][T22478] __do_fast_syscall_32+0x7c/0x300 [ 956.174949][T22478] do_fast_syscall_32+0x32/0x80 [ 956.174965][T22478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 956.174979][T22478] RIP: 0023:0xf705d579 [ 956.174987][T22478] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 956.174998][T22478] RSP: 002b:00000000f544d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 956.175009][T22478] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f544d620 [ 956.175015][T22478] RDX: 000000000000000f RSI: 00000000f73f5ff4 RDI: 0000000000000000 [ 956.175022][T22478] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 956.175028][T22478] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 956.175034][T22478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 956.175048][T22478] [ 956.268716][T22484] netlink: 'syz.3.4260': attribute type 1 has an invalid length. [ 956.299418][T22484] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 956.303981][T22484] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 956.860606][T22502] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 956.864081][T22502] binder: 22501:22502 ioctl 4018620d 800000c0 returned -1 [ 956.871518][T22502] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 956.873588][T22502] binder: 22501:22502 ioctl 4018620d 80000040 returned -1 [ 956.877787][T22502] binder: 22501:22502 ioctl c0306201 80000240 returned -11 [ 956.957726][T22508] fuse: Bad value for 'fd' [ 957.204233][ T40] audit: type=1326 audit(1760338477.158:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.1.4268" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 957.434244][T22526] FAULT_INJECTION: forcing a failure. [ 957.434244][T22526] name failslab, interval 1, probability 0, space 0, times 0 [ 957.442831][T22526] CPU: 0 UID: 0 PID: 22526 Comm: syz.3.4270 Not tainted syzkaller #0 PREEMPT(full) [ 957.442847][T22526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 957.442854][T22526] Call Trace: [ 957.442858][T22526] [ 957.442863][T22526] dump_stack_lvl+0x16c/0x1f0 [ 957.442882][T22526] should_fail_ex+0x512/0x640 [ 957.442899][T22526] ? __kmalloc_noprof+0xca/0x880 [ 957.442914][T22526] should_failslab+0xc2/0x120 [ 957.442924][T22526] __kmalloc_noprof+0xdd/0x880 [ 957.442937][T22526] ? arch_stack_walk+0xa6/0x100 [ 957.442951][T22526] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 957.442967][T22526] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 957.442979][T22526] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 957.442995][T22526] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 957.443007][T22526] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 957.443024][T22526] ? bpf_lsm_capable+0x9/0x10 [ 957.443035][T22526] ? security_capable+0x7e/0x260 [ 957.443052][T22526] ? ns_capable+0xd7/0x110 [ 957.443069][T22526] genl_rcv_msg+0x55c/0x800 [ 957.443082][T22526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 957.443094][T22526] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 957.443108][T22526] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 957.443121][T22526] ? __pfx_nl80211_post_doit+0x10/0x10 [ 957.443134][T22526] ? __lock_acquire+0x622/0x1c90 [ 957.443147][T22526] netlink_rcv_skb+0x158/0x420 [ 957.443164][T22526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 957.443176][T22526] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 957.443198][T22526] ? netlink_deliver_tap+0x1ae/0xd30 [ 957.443217][T22526] genl_rcv+0x28/0x40 [ 957.443226][T22526] netlink_unicast+0x5aa/0x870 [ 957.443245][T22526] ? __pfx_netlink_unicast+0x10/0x10 [ 957.443261][T22526] ? __pfx___might_resched+0x10/0x10 [ 957.443281][T22526] netlink_sendmsg+0x8c8/0xdd0 [ 957.443300][T22526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 957.443318][T22526] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 957.443332][T22526] ____sys_sendmsg+0xa98/0xc70 [ 957.443346][T22526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 957.443357][T22526] ? get_compat_msghdr+0x11a/0x170 [ 957.443379][T22526] ___sys_sendmsg+0x134/0x1d0 [ 957.443399][T22526] ? __pfx____sys_sendmsg+0x10/0x10 [ 957.443422][T22526] ? find_held_lock+0x2b/0x80 [ 957.443445][T22526] __sys_sendmsg+0x16d/0x220 [ 957.443462][T22526] ? __pfx___sys_sendmsg+0x10/0x10 [ 957.443484][T22526] ? rcu_is_watching+0x12/0xc0 [ 957.443513][T22526] __do_fast_syscall_32+0x7c/0x300 [ 957.443533][T22526] do_fast_syscall_32+0x32/0x80 [ 957.443550][T22526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 957.443563][T22526] RIP: 0023:0xf705d579 [ 957.443573][T22526] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 957.443583][T22526] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 957.443594][T22526] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000240 [ 957.443601][T22526] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 957.443607][T22526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 957.443613][T22526] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 957.443619][T22526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 957.443633][T22526] [ 957.850735][T22535] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 957.853463][T22535] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 957.856220][T22535] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 957.858569][T22535] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 958.251503][T22537] tmpfs: Bad value for 'mpol' [ 958.255273][T22537] tmpfs: Bad value for 'mpol' [ 958.257040][T22537] tmpfs: Bad value for 'mpol' [ 958.258705][T22537] tmpfs: Bad value for 'mpol' [ 958.260243][T22537] tmpfs: Bad value for 'mpol' [ 958.262009][T22537] tmpfs: Bad value for 'mpol' [ 958.263900][T22537] tmpfs: Bad value for 'mpol' [ 958.267738][T22537] tmpfs: Bad value for 'mpol' [ 958.269850][T22537] tmpfs: Bad value for 'mpol' [ 958.271951][T22537] tmpfs: Bad value for 'mpol' [ 958.273497][T22537] tmpfs: Bad value for 'mpol' [ 958.275201][T22537] tmpfs: Bad value for 'mpol' [ 958.276838][T22537] tmpfs: Bad value for 'mpol' [ 958.278441][T22537] tmpfs: Bad value for 'mpol' [ 958.280014][T22537] tmpfs: Bad value for 'mpol' [ 958.281594][T22537] tmpfs: Bad value for 'mpol' [ 958.283167][T22537] tmpfs: Bad value for 'mpol' [ 958.284733][T22537] tmpfs: Bad value for 'mpol' [ 958.286460][T22537] tmpfs: Bad value for 'mpol' [ 958.288411][T22537] tmpfs: Bad value for 'mpol' [ 958.289994][T22537] tmpfs: Bad value for 'mpol' [ 958.291588][T22537] tmpfs: Bad value for 'mpol' [ 958.293195][T22537] tmpfs: Bad value for 'mpol' [ 958.294757][T22537] tmpfs: Bad value for 'mpol' [ 958.296287][T22537] tmpfs: Bad value for 'mpol' [ 958.297987][T22537] tmpfs: Bad value for 'mpol' [ 958.299659][T22537] tmpfs: Bad value for 'mpol' [ 958.301209][T22537] tmpfs: Bad value for 'mpol' [ 958.302790][T22537] tmpfs: Bad value for 'mpol' [ 958.304365][T22537] tmpfs: Bad value for 'mpol' [ 958.305947][T22537] tmpfs: Unknown parameter './bus' [ 958.925847][T22566] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 958.928340][T22566] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 958.931121][T22566] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 958.933461][T22566] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 959.901853][T22565] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 959.903977][T22565] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 959.922329][T22565] vhci_hcd vhci_hcd.0: Device attached [ 959.995533][ T40] audit: type=1326 audit(1760338479.767:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22574 comm="syz.3.4284" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d579 code=0x0 [ 960.265176][ T53] usb 46-1: SetAddress Request (90) to port 0 [ 960.267715][ T53] usb 46-1: new SuperSpeed USB device number 90 using vhci_hcd [ 960.566492][T22572] vhci_hcd: connection reset by peer [ 960.572244][ T80] vhci_hcd: stop threads [ 960.574357][ T80] vhci_hcd: release socket [ 960.577245][ T80] vhci_hcd: disconnect device [ 962.110900][T22607] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 962.114104][T22607] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 962.117717][T22607] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 962.120775][T22607] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 962.650768][ T40] audit: type=1326 audit(1760338482.256:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22622 comm="syz.2.4295" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 962.852095][ T6119] usb 9-1: new low-speed USB device number 85 using dummy_hcd [ 963.045913][ T6119] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 963.048529][ T6119] usb 9-1: config 0 has no interface number 0 [ 963.050521][ T6119] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 963.053884][ T6119] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 963.077080][ T6119] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 963.087498][ T6119] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.092809][ T6119] usb 9-1: config 0 descriptor?? [ 963.095638][T22618] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 963.110222][ T6119] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 963.419815][T22638] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 963.422393][T22638] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 963.425026][T22638] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 963.427646][T22638] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 963.519642][ T6017] usb 9-1: USB disconnect, device number 85 [ 963.664196][T22642] FAULT_INJECTION: forcing a failure. [ 963.664196][T22642] name failslab, interval 1, probability 0, space 0, times 0 [ 963.669055][T22642] CPU: 2 UID: 0 PID: 22642 Comm: syz.2.4300 Not tainted syzkaller #0 PREEMPT(full) [ 963.669070][T22642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 963.669077][T22642] Call Trace: [ 963.669081][T22642] [ 963.669086][T22642] dump_stack_lvl+0x16c/0x1f0 [ 963.669105][T22642] should_fail_ex+0x512/0x640 [ 963.669122][T22642] ? __kmalloc_cache_noprof+0x5f/0x780 [ 963.669138][T22642] should_failslab+0xc2/0x120 [ 963.669149][T22642] __kmalloc_cache_noprof+0x72/0x780 [ 963.669162][T22642] ? drm_atomic_state_alloc+0xb8/0x120 [ 963.669180][T22642] ? kasan_save_stack+0x33/0x60 [ 963.669197][T22642] ? drm_atomic_state_alloc+0xb8/0x120 [ 963.669213][T22642] drm_atomic_state_alloc+0xb8/0x120 [ 963.669230][T22642] drm_mode_atomic_ioctl+0x393/0x2600 [ 963.669255][T22642] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 963.669272][T22642] ? __lock_acquire+0xb8a/0x1c90 [ 963.669292][T22642] ? drm_is_current_master+0x2c/0x40 [ 963.669309][T22642] ? do_raw_spin_unlock+0x172/0x230 [ 963.669325][T22642] drm_ioctl_kernel+0x1f4/0x3e0 [ 963.669338][T22642] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 963.669356][T22642] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 963.669374][T22642] drm_ioctl+0x5c9/0xc30 [ 963.669390][T22642] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 963.669407][T22642] ? __pfx_drm_ioctl+0x10/0x10 [ 963.669431][T22642] drm_compat_ioctl+0x327/0x460 [ 963.669449][T22642] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 963.669466][T22642] __ia32_compat_sys_ioctl+0x242/0x370 [ 963.669481][T22642] __do_fast_syscall_32+0x7c/0x300 [ 963.669499][T22642] do_fast_syscall_32+0x32/0x80 [ 963.669516][T22642] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 963.669529][T22642] RIP: 0023:0xf709d579 [ 963.669538][T22642] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 963.669548][T22642] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 963.669559][T22642] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000c03864bc [ 963.669566][T22642] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 963.669572][T22642] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 963.669578][T22642] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 963.669585][T22642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 963.669599][T22642] [ 963.754658][ C2] vkms_vblank_simulate: vblank timer overrun [ 963.846330][ T40] audit: type=1326 audit(1760338483.369:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22643 comm="syz.3.4301" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d579 code=0x0 [ 963.852702][T22649] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 963.856315][T22649] binder: 22648:22649 ioctl 4018620d 800000c0 returned -1 [ 963.861944][T22649] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 963.864841][T22649] binder: 22648:22649 ioctl 4018620d 80000040 returned -1 [ 963.868850][T22649] binder: 22648:22649 ioctl c0306201 80000240 returned -11 [ 964.229299][T22656] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 964.232767][T22656] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 964.236695][T22656] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 964.240035][T22656] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 964.957241][T22669] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 964.960072][T22669] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 964.963081][T22669] vhci_hcd vhci_hcd.0: Device attached [ 965.280346][ T6005] usb 40-1: SetAddress Request (66) to port 0 [ 965.282366][ T6005] usb 40-1: new SuperSpeed USB device number 66 using vhci_hcd [ 965.300298][T16298] usb 7-1: new low-speed USB device number 123 using dummy_hcd [ 965.473227][T16298] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 965.475899][T16298] usb 7-1: config 0 has no interface number 0 [ 965.477871][T16298] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 965.481346][T16298] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 965.484824][T16298] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 965.487747][T16298] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.491958][T16298] usb 7-1: config 0 descriptor?? [ 965.495204][T22673] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 965.502780][T16298] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 965.528991][T22670] vhci_hcd: connection reset by peer [ 965.531013][ T62] vhci_hcd: stop threads [ 965.532409][ T62] vhci_hcd: release socket [ 965.533869][ T62] vhci_hcd: disconnect device [ 965.592804][ T40] audit: type=1326 audit(1760338485.006:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22674 comm="syz.3.4309" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d579 code=0x0 [ 965.751010][ T53] usb 46-1: device descriptor read/8, error -110 [ 965.751790][T18919] usb 7-1: USB disconnect, device number 123 [ 966.710350][T22699] netlink: 'syz.4.4315': attribute type 1 has an invalid length. [ 966.725794][T22699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 966.741434][T22699] bond1: (slave geneve2): making interface the new active one [ 966.744850][T22699] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 966.780567][T22702] netlink: 'syz.4.4316': attribute type 1 has an invalid length. [ 966.783439][T22702] netlink: 'syz.4.4316': attribute type 1 has an invalid length. [ 966.786363][T22702] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4316'. [ 966.789661][T22702] FAULT_INJECTION: forcing a failure. [ 966.789661][T22702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.794125][T22702] CPU: 3 UID: 0 PID: 22702 Comm: syz.4.4316 Not tainted syzkaller #0 PREEMPT(full) [ 966.794139][T22702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 966.794146][T22702] Call Trace: [ 966.794151][T22702] [ 966.794156][T22702] dump_stack_lvl+0x16c/0x1f0 [ 966.794176][T22702] should_fail_ex+0x512/0x640 [ 966.794196][T22702] _copy_to_user+0x32/0xd0 [ 966.794208][T22702] simple_read_from_buffer+0xcb/0x170 [ 966.794224][T22702] proc_fail_nth_read+0x197/0x240 [ 966.794265][T22702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 966.794288][T22702] ? rw_verify_area+0xcf/0x6c0 [ 966.794308][T22702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 966.794330][T22702] vfs_read+0x1e4/0xcf0 [ 966.794356][T22702] ? __pfx_vfs_read+0x10/0x10 [ 966.794375][T22702] ? find_held_lock+0x2b/0x80 [ 966.794403][T22702] ? __fget_files+0x20e/0x3c0 [ 966.794430][T22702] ksys_read+0x12a/0x250 [ 966.794450][T22702] ? __pfx_ksys_read+0x10/0x10 [ 966.794473][T22702] ? rcu_is_watching+0x12/0xc0 [ 966.794499][T22702] __do_fast_syscall_32+0x7c/0x300 [ 966.794529][T22702] do_fast_syscall_32+0x32/0x80 [ 966.794552][T22702] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 966.794572][T22702] RIP: 0023:0xf709d579 [ 966.794585][T22702] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 966.794600][T22702] RSP: 002b:00000000f548d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 966.794615][T22702] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f548d620 [ 966.794625][T22702] RDX: 000000000000000f RSI: 00000000f7435ff4 RDI: 0000000000000000 [ 966.794635][T22702] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 966.794644][T22702] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 966.794653][T22702] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 966.794676][T22702] [ 966.808332][ T53] usb usb46-port1: attempt power cycle [ 966.871786][T16298] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 966.880719][T22705] comedi comedi3: comedi_config --init_data is deprecated [ 966.925971][T22695] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 966.928364][T22695] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 966.930944][T22695] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 966.933371][T22695] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 967.043257][T16298] usb 6-1: Using ep0 maxpacket: 8 [ 967.050586][T16298] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 967.056839][T16298] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 967.060485][T16298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.063642][T16298] usb 6-1: Product: syz [ 967.065738][T16298] usb 6-1: Manufacturer: syz [ 967.067624][T16298] usb 6-1: SerialNumber: syz [ 967.073102][T22693] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 967.258382][T22712] netlink: 183 bytes leftover after parsing attributes in process `syz.4.4320'. [ 967.284324][T22712] fuse: Bad value for 'fd' [ 967.298956][T16298] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 107 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 967.482596][ T53] usb usb46-port1: unable to enumerate USB device [ 967.513562][T16298] usb 6-1: USB disconnect, device number 107 [ 967.518486][T16298] usblp0: removed [ 967.663163][ T40] audit: type=1326 audit(1760338486.942:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22713 comm="syz.3.4321" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d579 code=0x0 [ 968.460379][T22733] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 968.464034][T22733] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 968.467861][T22733] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 968.470568][T22733] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 969.142408][T22746] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 969.292675][T22754] binder: 22753:22754 ioctl c0306201 80000240 returned -11 [ 969.480591][T16298] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 969.585348][T22767] syz.2.4335 (22767): drop_caches: 2 [ 969.588108][T22767] syz.2.4335 (22767): drop_caches: 2 [ 969.662130][T16298] usb 6-1: Using ep0 maxpacket: 8 [ 969.668584][T16298] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 969.680174][T16298] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 969.681811][T22770] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 969.685693][T22770] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 969.686317][T16298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.688405][T22770] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 969.693188][T22770] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 969.700848][T16298] usb 6-1: Product: syz [ 969.702393][T16298] usb 6-1: Manufacturer: syz [ 969.704359][T16298] usb 6-1: SerialNumber: syz [ 969.735172][T22755] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 969.974758][T16298] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 108 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 970.036576][ T5991] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 970.186870][ T6119] usb 6-1: USB disconnect, device number 108 [ 970.197238][ T6119] usblp0: removed [ 970.206090][ T5991] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 970.210813][ T5991] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.214305][ T5991] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.217762][ T5991] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 970.227774][ T5991] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 970.231579][ T5991] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 970.234378][ T5991] usb 9-1: Manufacturer: syz [ 970.261078][ T5991] usb 9-1: config 0 descriptor?? [ 970.668295][ T6005] usb 40-1: device descriptor read/8, error -110 [ 970.713886][ T5991] usbhid 9-1:0.0: can't add hid device: -71 [ 970.715898][ T5991] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 971.110101][ T6005] usb usb40-port1: attempt power cycle [ 971.385258][ T5991] usb 9-1: USB disconnect, device number 86 [ 971.545635][T22795] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 971.548463][T22795] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 971.551273][T22795] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 971.554002][T22795] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 971.979451][T22810] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 971.981583][T22810] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 971.984481][T22810] vhci_hcd vhci_hcd.0: Device attached [ 972.185070][ T6005] usb 40-1: SetAddress Request (69) to port 0 [ 972.220401][ T6005] usb 40-1: new SuperSpeed USB device number 69 using vhci_hcd [ 972.468452][T22811] vhci_hcd: connection reset by peer [ 972.471219][ T1053] vhci_hcd: stop threads [ 972.473090][ T1053] vhci_hcd: release socket [ 972.477733][ T1053] vhci_hcd: disconnect device [ 972.655403][ T10] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 972.815776][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 972.818834][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 972.823926][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 972.827111][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.829821][ T10] usb 9-1: Product: syz [ 972.831443][ T10] usb 9-1: Manufacturer: syz [ 972.832895][ T10] usb 9-1: SerialNumber: syz [ 972.836949][T22827] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 972.901413][ T5297] Bluetooth: hci3: command tx timeout [ 972.933410][ T6017] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 973.060920][ T10] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 973.115149][ T6017] usb 7-1: Using ep0 maxpacket: 8 [ 973.118278][ T6017] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 973.120905][ T6017] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 973.123967][ T6017] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 973.128073][ T6017] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 973.132413][ T6017] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 973.137685][ T6017] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 973.141408][ T6017] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.274802][ T53] usb 9-1: USB disconnect, device number 87 [ 973.283204][ T53] usblp0: removed [ 973.373148][T22829] netlink: 'syz.2.4350': attribute type 3 has an invalid length. [ 973.376321][T22829] netlink: 'syz.2.4350': attribute type 3 has an invalid length. [ 973.385156][ T6017] usb 7-1: usb_control_msg returned -32 [ 973.387460][ T6017] usbtmc 7-1:16.0: can't read capabilities [ 973.590281][ T10] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 973.756603][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 973.760460][ T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 973.763012][ T10] usb 8-1: config 0 has no interface number 0 [ 973.766698][ T10] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 973.769879][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.772463][ T10] usb 8-1: Product: syz [ 973.773790][ T10] usb 8-1: Manufacturer: syz [ 973.775243][ T10] usb 8-1: SerialNumber: syz [ 973.778822][ T10] usb 8-1: config 0 descriptor?? [ 973.782592][ T10] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 973.785397][ T10] usb 8-1: selecting invalid altsetting 1 [ 973.787273][ T10] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 973.791246][ T10] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 973.794493][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 973.797107][ T10] usb 8-1: media controller created [ 973.806202][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 974.380029][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4357'. [ 974.391092][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4357'. [ 974.394859][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4357'. [ 974.404262][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4357'. [ 974.954229][ T10] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 974.959939][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 974.975610][T22843] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 975.024065][ T10] usb 8-1: USB disconnect, device number 100 [ 975.479558][ T40] audit: type=1800 audit(1760338494.257:1422): pid=22865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4359" name="bus" dev="overlay" ino=261 res=0 errno=0 [ 975.671271][T22867] overlayfs: missing 'lowerdir' [ 975.984071][T13276] usb 7-1: USB disconnect, device number 124 [ 976.503761][T22884] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 976.506927][T22884] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 976.510332][T22884] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 976.513322][T22884] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 976.696052][T22887] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 976.705526][T22887] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 976.717367][T22887] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 976.724482][T22887] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 976.868687][T22890] binder: 22889:22890 ioctl c0306201 80000240 returned -11 [ 976.974469][T18919] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 977.139389][T18919] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 977.144068][T18919] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.148686][T18919] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.152776][T18919] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 977.159818][T18919] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 977.163917][T18919] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 977.177628][T18919] usb 9-1: Manufacturer: syz [ 977.215655][T18919] usb 9-1: config 0 descriptor?? [ 977.464289][T22903] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4370'. [ 977.690797][ T6005] usb 40-1: device descriptor read/8, error -110 [ 977.695280][T18919] usbhid 9-1:0.0: can't add hid device: -71 [ 977.697941][T18919] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 977.712412][T18919] usb 9-1: USB disconnect, device number 88 [ 977.816142][ T6005] usb usb40-port1: unable to enumerate USB device [ 978.319106][T22927] binder: 22926:22927 ioctl c0306201 80000240 returned -11 [ 979.211529][T22940] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 979.214891][T22940] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 979.218729][T22940] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 979.222238][T22940] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 979.413079][T22941] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 979.420863][T22941] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 979.430556][T22941] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 979.433305][T22941] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 979.914475][ T5297] Bluetooth: hci3: command tx timeout [ 980.286203][ T40] audit: type=1326 audit(1760338498.747:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22955 comm="syz.4.4385" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 980.364590][T22959] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 980.367278][T22959] binder: 22958:22959 ioctl 4018620d 800000c0 returned -1 [ 980.371638][T22959] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 980.374560][T22959] binder: 22958:22959 ioctl 4018620d 80000040 returned -1 [ 980.377776][T22959] binder: 22958:22959 ioctl c0306201 80000240 returned -11 [ 980.449650][ T40] audit: type=1326 audit(1760338498.906:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22962 comm="syz.1.4388" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 980.534390][ T6023] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 981.315882][T22975] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4389'. [ 981.357997][ T6023] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 981.361724][ T6023] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.373461][ T6023] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.386392][ T6023] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 981.393541][ T6023] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 981.394774][T22979] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4390'. [ 981.396251][ T6023] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 981.419084][T22976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4389'. [ 981.426497][T22976] team0: No ports can be present during mode change [ 981.429509][T22976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4389'. [ 981.431826][ T6023] usb 8-1: Manufacturer: syz [ 981.440194][ T6023] usb 8-1: config 0 descriptor?? [ 981.582041][T22976] team0 (unregistering): Port device team_slave_0 removed [ 981.591430][T22976] team0 (unregistering): Port device team_slave_1 removed [ 982.044549][ T6023] usbhid 8-1:0.0: can't add hid device: -71 [ 982.046754][ T6023] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 982.050385][ T6023] usb 8-1: USB disconnect, device number 101 [ 982.160420][T22994] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 982.162984][T22994] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 982.165551][T22994] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 982.167951][T22994] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 982.704036][T23003] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 982.706551][T23003] binder: 23002:23003 ioctl 4018620d 800000c0 returned -1 [ 982.711991][T23003] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 982.716165][T23003] binder: 23002:23003 ioctl 4018620d 80000040 returned -1 [ 982.719808][T23003] binder: 23002:23003 ioctl c0306201 80000240 returned -11 [ 982.724314][T23007] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 982.726945][T23007] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 982.729746][T23007] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 982.732261][T23007] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 983.852220][T23034] netlink: 'syz.3.4403': attribute type 1 has an invalid length. [ 983.963641][T23034] netlink: 'syz.3.4403': attribute type 3 has an invalid length. [ 983.993200][T23034] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4403'. [ 984.549482][T23045] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 984.552841][T23045] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 984.556785][T23045] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 984.560451][T23045] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 984.992947][T23056] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 984.995571][T23056] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 984.998357][T23056] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 985.000904][T23056] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 985.551660][ T40] audit: type=1326 audit(1760338503.676:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23065 comm="syz.4.4412" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 986.056259][T23082] netlink: 'syz.1.4415': attribute type 21 has an invalid length. [ 986.059665][T23082] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4415'. [ 986.575778][T23090] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 986.578297][T23090] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 986.581686][T23090] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 986.585925][T23090] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 986.885283][T23099] netlink: 'syz.2.4420': attribute type 12 has an invalid length. [ 986.888929][T23099] netlink: 'syz.2.4420': attribute type 28 has an invalid length. [ 986.892537][T23099] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4420'. [ 987.078352][T23116] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 987.195840][T23122] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 987.199211][T23122] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 987.202655][T23122] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 987.206081][T23122] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 987.536809][T23133] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4431'. [ 987.539968][T23133] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4431'. [ 987.651571][T23134] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 987.654016][T23134] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 987.657773][T23134] vhci_hcd vhci_hcd.0: Device attached [ 988.045061][ T53] usb 40-1: SetAddress Request (70) to port 0 [ 988.056507][ T53] usb 40-1: new SuperSpeed USB device number 70 using vhci_hcd [ 988.292640][T23150] FAULT_INJECTION: forcing a failure. [ 988.292640][T23150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.302201][T23150] CPU: 3 UID: 0 PID: 23150 Comm: syz.3.4436 Not tainted syzkaller #0 PREEMPT(full) [ 988.302218][T23150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 988.302225][T23150] Call Trace: [ 988.302230][T23150] [ 988.302235][T23150] dump_stack_lvl+0x16c/0x1f0 [ 988.302257][T23150] should_fail_ex+0x512/0x640 [ 988.302278][T23150] _copy_to_user+0x32/0xd0 [ 988.302290][T23150] simple_read_from_buffer+0xcb/0x170 [ 988.302306][T23150] proc_fail_nth_read+0x197/0x240 [ 988.302323][T23150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 988.302340][T23150] ? rw_verify_area+0xcf/0x6c0 [ 988.302354][T23150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 988.302370][T23150] vfs_read+0x1e4/0xcf0 [ 988.302389][T23150] ? __pfx_vfs_read+0x10/0x10 [ 988.302403][T23150] ? find_held_lock+0x2b/0x80 [ 988.302424][T23150] ? __fget_files+0x20e/0x3c0 [ 988.302444][T23150] ksys_read+0x12a/0x250 [ 988.302459][T23150] ? __pfx_ksys_read+0x10/0x10 [ 988.302484][T23150] ? rcu_is_watching+0x12/0xc0 [ 988.302502][T23150] __do_fast_syscall_32+0x7c/0x300 [ 988.302522][T23150] do_fast_syscall_32+0x32/0x80 [ 988.302539][T23150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 988.302554][T23150] RIP: 0023:0xf705d579 [ 988.302563][T23150] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 988.302574][T23150] RSP: 002b:00000000f544d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 988.302586][T23150] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f544d620 [ 988.302592][T23150] RDX: 000000000000000f RSI: 00000000f73f5ff4 RDI: 0000000000000000 [ 988.302599][T23150] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 988.302605][T23150] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 988.302612][T23150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 988.302627][T23150] [ 988.431087][T23139] vhci_hcd: connection reset by peer [ 988.433055][ T12] vhci_hcd: stop threads [ 988.434948][ T12] vhci_hcd: release socket [ 988.437056][ T12] vhci_hcd: disconnect device [ 988.632889][T23153] netlink: 183 bytes leftover after parsing attributes in process `syz.3.4437'. [ 988.643642][T23153] fuse: Bad value for 'fd' [ 989.109936][T23159] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4438'. [ 989.717849][T23174] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 989.721134][T23174] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 989.724596][T23174] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 989.727167][T23174] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 990.008463][T23178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4444'. [ 990.207024][T23181] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 990.209801][T23181] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 990.213223][T23181] vhci_hcd vhci_hcd.0: Device attached [ 990.231558][ T6005] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 990.411714][T23182] vhci_hcd: connection closed [ 990.411921][ T13] vhci_hcd: stop threads [ 990.415849][ T13] vhci_hcd: release socket [ 990.417614][ T13] vhci_hcd: disconnect device [ 990.435776][ T6023] vhci_hcd: vhci_device speed not set [ 990.528535][ T6005] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 990.540817][ T6005] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.540836][ T6005] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.540847][ T6005] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 990.563725][ T6005] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 990.567161][ T6005] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 990.570198][ T6005] usb 8-1: Manufacturer: syz [ 990.582838][ T6005] usb 8-1: config 0 descriptor?? [ 990.906136][T23195] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4446'. [ 991.061127][ T6005] usbhid 8-1:0.0: can't add hid device: -71 [ 991.063581][ T6005] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 991.072700][ T6005] usb 8-1: USB disconnect, device number 102 [ 991.284562][T23206] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 991.286789][T23206] binder: 23205:23206 ioctl 4018620d 800000c0 returned -1 [ 991.292065][T23206] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 991.299006][T23206] binder: 23205:23206 ioctl 4018620d 80000040 returned -1 [ 991.304859][T23206] binder: 23205:23206 ioctl c0306201 80000240 returned -11 [ 991.799680][T23216] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4451'. [ 992.759111][ T40] audit: type=1800 audit(1760338510.421:1426): pid=23235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4454" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 992.946211][ T6023] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 993.048775][T23232] netlink: 183 bytes leftover after parsing attributes in process `syz.3.4456'. [ 993.069374][T23232] fuse: Bad value for 'fd' [ 993.106855][ T6023] usb 9-1: device descriptor read/64, error -71 [ 993.373839][ T6023] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 993.490687][T23248] fuse: Bad value for 'fd' [ 993.502435][ T53] usb 40-1: device descriptor read/8, error -110 [ 993.513151][ T6023] usb 9-1: device descriptor read/64, error -71 [ 993.641657][ T6023] usb usb9-port1: attempt power cycle [ 993.930597][ T53] usb usb40-port1: attempt power cycle [ 994.046542][ T6023] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 994.731953][ T6023] usb 9-1: device descriptor read/8, error -71 [ 994.927635][T23268] FAULT_INJECTION: forcing a failure. [ 994.927635][T23268] name failslab, interval 1, probability 0, space 0, times 0 [ 994.933024][T23268] CPU: 1 UID: 0 PID: 23268 Comm: syz.2.4465 Not tainted syzkaller #0 PREEMPT(full) [ 994.933045][T23268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 994.933056][T23268] Call Trace: [ 994.933062][T23268] [ 994.933069][T23268] dump_stack_lvl+0x16c/0x1f0 [ 994.933097][T23268] should_fail_ex+0x512/0x640 [ 994.933123][T23268] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 994.933152][T23268] should_failslab+0xc2/0x120 [ 994.933170][T23268] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 994.933196][T23268] ? __request_module+0x2cb/0x690 [ 994.933221][T23268] ? kstrdup+0x53/0x100 [ 994.933243][T23268] kstrdup+0x53/0x100 [ 994.933266][T23268] __request_module+0x2cb/0x690 [ 994.933285][T23268] ? __pfx___request_module+0x10/0x10 [ 994.933313][T23268] ? find_held_lock+0x2b/0x80 [ 994.933337][T23268] ? rtnl_link_ops_get+0x17b/0x2c0 [ 994.933369][T23268] ? __pfx_rtnl_newlink+0x10/0x10 [ 994.933399][T23268] rtnl_newlink+0x1466/0x2000 [ 994.933432][T23268] ? __pfx_rtnl_newlink+0x10/0x10 [ 994.933461][T23268] ? kmem_cache_free+0x2d4/0x6c0 [ 994.933482][T23268] ? kfree_skbmem+0x1a4/0x1f0 [ 994.933506][T23268] ? kfree_skbmem+0x1a4/0x1f0 [ 994.933529][T23268] ? rcu_is_watching+0x12/0xc0 [ 994.933562][T23268] ? find_held_lock+0x2b/0x80 [ 994.933583][T23268] ? __pfx_rtnl_newlink+0x10/0x10 [ 994.933608][T23268] ? __pfx_rtnl_newlink+0x10/0x10 [ 994.933630][T23268] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 994.933656][T23268] ? __pfx_rtnl_newlink+0x10/0x10 [ 994.933686][T23268] rtnetlink_rcv_msg+0x95e/0xe90 [ 994.933713][T23268] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 994.933744][T23268] ? ref_tracker_free+0x37c/0x830 [ 994.933762][T23268] netlink_rcv_skb+0x158/0x420 [ 994.933791][T23268] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 994.933817][T23268] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 994.933865][T23268] ? netlink_deliver_tap+0x1ae/0xd30 [ 994.933896][T23268] netlink_unicast+0x5aa/0x870 [ 994.933928][T23268] ? __pfx_netlink_unicast+0x10/0x10 [ 994.933952][T23268] ? __pfx___might_resched+0x10/0x10 [ 994.934003][T23268] netlink_sendmsg+0x8c8/0xdd0 [ 994.934035][T23268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 994.934062][T23268] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 994.934084][T23268] ____sys_sendmsg+0xa98/0xc70 [ 994.934106][T23268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 994.934124][T23268] ? get_compat_msghdr+0x11a/0x170 [ 994.934160][T23268] ___sys_sendmsg+0x134/0x1d0 [ 994.934185][T23268] ? __pfx____sys_sendmsg+0x10/0x10 [ 994.934221][T23268] ? find_held_lock+0x2b/0x80 [ 994.934258][T23268] __sys_sendmsg+0x16d/0x220 [ 994.934284][T23268] ? __pfx___sys_sendmsg+0x10/0x10 [ 994.934319][T23268] ? rcu_is_watching+0x12/0xc0 [ 994.934344][T23268] __do_fast_syscall_32+0x7c/0x300 [ 994.934374][T23268] do_fast_syscall_32+0x32/0x80 [ 994.934406][T23268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 994.934428][T23268] RIP: 0023:0xf709d579 [ 994.934442][T23268] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 994.934458][T23268] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 994.934475][T23268] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 994.934486][T23268] RDX: 0000000024044040 RSI: 0000000000000000 RDI: 0000000000000000 [ 994.934496][T23268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 994.934505][T23268] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 994.934516][T23268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 994.934540][T23268] [ 995.188627][ T53] usb usb40-port1: unable to enumerate USB device [ 995.219846][ T6023] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 995.257909][ T6023] usb 9-1: device descriptor read/8, error -71 [ 995.383763][ T6023] usb usb9-port1: unable to enumerate USB device [ 995.844320][T23299] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 995.846457][T23299] binder: 23298:23299 ioctl 4018620d 80000100 returned -1 [ 995.849427][T23299] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 995.851485][T23299] binder: 23298:23299 ioctl 4018620d 800002c0 returned -1 [ 995.919746][T23293] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 995.922064][T23293] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 995.925343][T23293] vhci_hcd vhci_hcd.0: Device attached [ 996.228368][ T53] usb 40-1: SetAddress Request (74) to port 0 [ 996.230958][ T53] usb 40-1: new SuperSpeed USB device number 74 using vhci_hcd [ 996.324052][T23302] vhci_hcd: connection reset by peer [ 996.326128][ T12] vhci_hcd: stop threads [ 996.327555][ T12] vhci_hcd: release socket [ 996.329111][ T12] vhci_hcd: disconnect device [ 996.549130][T23319] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 996.552521][T23319] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 996.556273][T23319] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 996.559651][T23319] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 996.864929][T23321] netlink: 183 bytes leftover after parsing attributes in process `syz.2.4486'. [ 996.881837][T23321] fuse: Bad value for 'fd' [ 997.419768][T23335] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4481'. [ 997.831804][ T10] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 998.284201][ T40] audit: type=1326 audit(1760338515.584:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23350 comm="syz.1.4488" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 998.337769][T23357] dlm: no local IP address has been set [ 998.340544][T23357] dlm: cannot start dlm midcomms -107 [ 998.366532][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 998.382014][ T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 998.385462][ T10] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 998.390219][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 998.395548][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 998.399187][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.439330][ T10] usbtmc 8-1:16.0: bulk endpoints not found [ 998.508234][T23365] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 998.510946][T23365] binder: 23364:23365 ioctl 4018620d 80000100 returned -1 [ 998.524067][T23365] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 998.527083][T23365] binder: 23364:23365 ioctl 4018620d 800002c0 returned -1 [ 998.590873][ T5991] usb 7-1: new full-speed USB device number 125 using dummy_hcd [ 998.753542][ T5991] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.757212][ T5991] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 998.760075][ T5991] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 998.763057][ T5991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.767929][ T5991] usb 7-1: config 0 descriptor?? [ 998.771891][ T5991] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 998.774362][ T5991] dvb-usb: bulk message failed: -22 (3/0) [ 998.781613][ T5991] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 998.784701][ T5991] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 998.787070][ T5991] usb 7-1: media controller created [ 998.789873][ T5991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 998.799916][ T5991] dvb-usb: bulk message failed: -22 (6/0) [ 998.802467][ T5991] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 998.807194][ T5991] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input60 [ 998.812041][ T5991] dvb-usb: schedule remote query interval to 150 msecs. [ 998.814523][ T5991] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 998.987756][T23357] dvb-usb: bulk message failed: -22 (23/0) [ 998.991630][ T5991] dvb-usb: bulk message failed: -22 (1/0) [ 998.992780][T13276] usb 7-1: USB disconnect, device number 125 [ 998.997647][ T5991] dvb-usb: error while querying for an remote control event. [ 999.011021][T13276] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 999.409558][T23371] netlink: 'syz.1.4493': attribute type 32 has an invalid length. [ 999.412089][T23371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4493'. [ 999.435524][T23371] bond1: Setting coupled_control to off (0) [ 999.604116][T23381] tipc: Started in network mode [ 999.606157][T23381] tipc: Node identity fffffffa, cluster identity 4711 [ 999.609016][T23381] tipc: Node number set to 4294967290 [ 999.642175][ T40] audit: type=1326 audit(1760338516.856:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 999.649281][ T40] audit: type=1326 audit(1760338516.856:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 999.658986][ T40] audit: type=1326 audit(1760338516.865:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 999.667862][ T40] audit: type=1326 audit(1760338516.865:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 999.677372][ T40] audit: type=1326 audit(1760338516.865:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 999.684731][ T40] audit: type=1326 audit(1760338516.865:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 999.694052][ T40] audit: type=1326 audit(1760338516.865:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 999.702802][ T40] audit: type=1326 audit(1760338516.865:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 999.711260][ T40] audit: type=1326 audit(1760338516.865:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.4497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 999.720420][T23384] loop6: detected capacity change from 0 to 63 [ 999.724575][T22266] buffer_io_error: 1 callbacks suppressed [ 999.724584][T22266] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.729100][T22266] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.735679][T22266] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.738437][T22266] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.741503][T22266] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.743115][T23386] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 999.744385][T22266] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.747679][T23386] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 999.750573][T22266] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.753969][T23386] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 999.756979][T22266] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.759594][T23386] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 999.762941][T22266] ldm_validate_partition_table(): Disk read failed. [ 999.768189][T22266] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.771415][T22266] Buffer I/O error on dev loop6, logical block 0, async page read [ 999.775768][T22266] Dev loop6: unable to read RDB block 0 [ 999.779500][T23387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4497'. [ 999.784146][T22266] loop6: unable to read partition table [ 999.852743][T23387] 8021q: adding VLAN 0 to HW filter on device bond2 [ 999.947905][T23384] ldm_validate_partition_table(): Disk read failed. [ 999.950695][T23384] Dev loop6: unable to read RDB block 0 [ 999.953095][T23384] loop6: unable to read partition table [ 999.955453][T23384] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1000.802460][T13276] usb 8-1: USB disconnect, device number 103 [ 1000.803901][ T6023] usb 9-1: new low-speed USB device number 93 using dummy_hcd [ 1000.825245][ T24] usb 7-1: new low-speed USB device number 126 using dummy_hcd [ 1000.854638][T23402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4501'. [ 1001.006970][ T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1001.010396][ T24] usb 7-1: config 0 has no interface number 0 [ 1001.013086][ T24] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1001.019492][ T24] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1001.023884][ T24] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1001.027522][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.039601][ T24] usb 7-1: config 0 descriptor?? [ 1001.043123][T23397] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1001.052933][ T24] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1001.059466][ T6023] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1001.063537][ T6023] usb 9-1: config 0 has no interface number 0 [ 1001.065888][ T6023] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1001.069915][ T6023] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1001.074658][ T6023] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1001.078299][ T6023] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.083933][ T6023] usb 9-1: config 0 descriptor?? [ 1001.086457][T23396] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1001.093826][ T6023] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1001.247885][T23410] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1001.250906][T23410] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1001.254094][T23410] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1001.257327][T23410] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1001.262217][T23409] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1001.266416][T23409] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1001.270032][T23409] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1001.273237][T23409] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1001.307341][ T5991] usb 7-1: USB disconnect, device number 126 [ 1001.313956][T23396] iowarrior_open - error, can't find device for minor 0 [ 1001.335215][ T24] usb 9-1: USB disconnect, device number 93 [ 1001.627085][ T53] usb 40-1: device descriptor read/8, error -110 [ 1002.016143][T23419] lo: entered allmulticast mode [ 1002.022655][T23418] netlink: 183 bytes leftover after parsing attributes in process `syz.3.4507'. [ 1002.031288][T23419] dvmrp1: entered allmulticast mode [ 1002.031695][T23418] fuse: Bad value for 'fd' [ 1002.046635][T23417] lo: left allmulticast mode [ 1002.082410][T23421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4508'. [ 1002.086141][T23421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.138338][T23421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.174041][ T53] usb usb40-port1: attempt power cycle [ 1002.674123][T23433] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1002.676796][T23433] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1002.679564][T23433] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1002.682127][T23433] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1002.904492][ T53] usb usb40-port1: unable to enumerate USB device [ 1003.010277][T23435] netlink: 183 bytes leftover after parsing attributes in process `syz.1.4513'. [ 1003.026550][T23435] fuse: Bad value for 'fd' [ 1003.059190][T23437] FAULT_INJECTION: forcing a failure. [ 1003.059190][T23437] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.064591][T23437] CPU: 1 UID: 0 PID: 23437 Comm: syz.1.4514 Not tainted syzkaller #0 PREEMPT(full) [ 1003.064607][T23437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1003.064614][T23437] Call Trace: [ 1003.064618][T23437] [ 1003.064623][T23437] dump_stack_lvl+0x16c/0x1f0 [ 1003.064643][T23437] should_fail_ex+0x512/0x640 [ 1003.064660][T23437] ? fs_reclaim_acquire+0xae/0x150 [ 1003.064673][T23437] should_failslab+0xc2/0x120 [ 1003.064697][T23437] __kmalloc_noprof+0xdd/0x880 [ 1003.064710][T23437] ? tomoyo_encode2+0x100/0x3e0 [ 1003.064728][T23437] ? tomoyo_encode2+0x100/0x3e0 [ 1003.064741][T23437] tomoyo_encode2+0x100/0x3e0 [ 1003.064758][T23437] tomoyo_encode+0x29/0x50 [ 1003.064771][T23437] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1003.064788][T23437] ? tomoyo_profile+0x47/0x60 [ 1003.064806][T23437] tomoyo_path_number_perm+0x245/0x580 [ 1003.064818][T23437] ? tomoyo_path_number_perm+0x237/0x580 [ 1003.064831][T23437] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1003.064859][T23437] ? find_held_lock+0x2b/0x80 [ 1003.064873][T23437] ? hook_file_ioctl_common+0x145/0x410 [ 1003.064890][T23437] ? __fget_files+0x20e/0x3c0 [ 1003.064908][T23437] security_file_ioctl_compat+0x9b/0x240 [ 1003.064922][T23437] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1003.064937][T23437] __do_fast_syscall_32+0x7c/0x300 [ 1003.064955][T23437] do_fast_syscall_32+0x32/0x80 [ 1003.064971][T23437] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1003.064986][T23437] RIP: 0023:0xf709d579 [ 1003.064995][T23437] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1003.065005][T23437] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1003.065016][T23437] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c020aa04 [ 1003.065023][T23437] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1003.065029][T23437] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1003.065035][T23437] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1003.065041][T23437] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1003.065055][T23437] [ 1003.065115][T23437] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1003.519383][T23450] netlink: 183 bytes leftover after parsing attributes in process `syz.1.4516'. [ 1003.539445][T23450] fuse: Bad value for 'fd' [ 1004.237488][T23456] overlayfs: failed to resolve './file0': -2 [ 1004.563232][T23462] overlayfs: invalid origin (0000) [ 1004.906918][T23476] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1004.909464][T23476] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1004.912724][T23476] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1004.915896][T23476] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1005.290864][T23469] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1005.293026][T23469] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1005.296148][T23469] vhci_hcd vhci_hcd.0: Device attached [ 1005.526517][T23486] vhci_hcd: connection closed [ 1005.526892][ T1053] vhci_hcd: stop threads [ 1005.531127][ T1053] vhci_hcd: release socket [ 1005.533204][ T1053] vhci_hcd: disconnect device [ 1005.582562][ T24] usb 40-1: enqueue for inactive port 0 [ 1005.585213][T13276] usb 7-1: new low-speed USB device number 127 using dummy_hcd [ 1005.748805][T13276] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1005.755667][T13276] usb 7-1: config 0 has no interface number 0 [ 1005.758404][T13276] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1005.762918][T13276] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1005.767676][T13276] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1005.771405][T13276] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.777714][T13276] usb 7-1: config 0 descriptor?? [ 1005.785055][T23488] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1005.794697][T13276] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1005.799049][T23495] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1005.799073][T23495] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1005.799132][T23495] vhci_hcd vhci_hcd.0: Device attached [ 1006.016860][ T5991] usb 7-1: USB disconnect, device number 127 [ 1006.118395][ T24] usb usb40-port1: attempt power cycle [ 1006.717599][ T24] usb usb40-port1: unable to enumerate USB device [ 1006.740392][T23497] vhci_hcd: connection closed [ 1006.740746][ T1146] vhci_hcd: stop threads [ 1006.743577][ T1146] vhci_hcd: release socket [ 1006.745062][ T1146] vhci_hcd: disconnect device [ 1007.433929][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 1007.433944][ T40] audit: type=1326 audit(1760338524.143:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23514 comm="syz.4.4536" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d579 code=0x0 [ 1007.713483][T23525] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1007.715958][T23525] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1007.718546][T23525] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1007.721113][T23525] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1008.028584][T23532] FAULT_INJECTION: forcing a failure. [ 1008.028584][T23532] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.033994][T23532] CPU: 0 UID: 0 PID: 23532 Comm: syz.3.4540 Not tainted syzkaller #0 PREEMPT(full) [ 1008.034010][T23532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1008.034017][T23532] Call Trace: [ 1008.034022][T23532] [ 1008.034028][T23532] dump_stack_lvl+0x16c/0x1f0 [ 1008.034049][T23532] should_fail_ex+0x512/0x640 [ 1008.034067][T23532] ? fs_reclaim_acquire+0xae/0x150 [ 1008.034080][T23532] should_failslab+0xc2/0x120 [ 1008.034091][T23532] __kmalloc_noprof+0xdd/0x880 [ 1008.034104][T23532] ? kfree+0x252/0x6d0 [ 1008.034116][T23532] ? trace_kmalloc+0x2b/0xd0 [ 1008.034125][T23532] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1008.034144][T23532] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1008.034159][T23532] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1008.034188][T23532] ? tomoyo_fill_path_info+0x233/0x420 [ 1008.034202][T23532] tomoyo_mount_acl+0x1ae/0x850 [ 1008.034215][T23532] ? bpf_ksym_find+0x124/0x1c0 [ 1008.034233][T23532] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1008.034251][T23532] ? is_bpf_text_address+0x94/0x1a0 [ 1008.034263][T23532] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1008.034277][T23532] ? unwind_get_return_address+0x59/0xa0 [ 1008.034309][T23532] ? tomoyo_domain+0xbb/0x150 [ 1008.034330][T23532] ? tomoyo_profile+0x47/0x60 [ 1008.034348][T23532] tomoyo_mount_permission+0x16d/0x420 [ 1008.034361][T23532] ? tomoyo_mount_permission+0x14f/0x420 [ 1008.034376][T23532] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1008.034399][T23532] security_sb_mount+0x9b/0x260 [ 1008.034412][T23532] path_mount+0x158/0x23a0 [ 1008.034431][T23532] ? __pfx_path_mount+0x10/0x10 [ 1008.034449][T23532] ? kmem_cache_free+0x2d4/0x6c0 [ 1008.034463][T23532] ? putname+0x154/0x1a0 [ 1008.034475][T23532] ? putname+0x154/0x1a0 [ 1008.034487][T23532] ? __ia32_sys_mount+0x291/0x310 [ 1008.034503][T23532] __ia32_sys_mount+0x291/0x310 [ 1008.034520][T23532] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1008.034538][T23532] ? rcu_is_watching+0x12/0xc0 [ 1008.034555][T23532] __do_fast_syscall_32+0x7c/0x300 [ 1008.034574][T23532] do_fast_syscall_32+0x32/0x80 [ 1008.034592][T23532] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1008.034605][T23532] RIP: 0023:0xf705d579 [ 1008.034615][T23532] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1008.034626][T23532] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 1008.034637][T23532] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800001c0 [ 1008.034644][T23532] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000080000040 [ 1008.034650][T23532] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1008.034657][T23532] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1008.034663][T23532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1008.034678][T23532] [ 1008.034806][T23532] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1008.752847][T23545] syzkaller0: create flow: hash 3614100668 index 1 [ 1008.778080][ T1146] syzkaller0: tun_net_xmit 76 [ 1008.789936][ T1146] syzkaller0: tun_net_xmit 48 [ 1008.801591][ T24] syzkaller0: tun_net_xmit 76 [ 1008.892526][T22192] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1008.899269][T22192] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1008.903075][T22192] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1008.908734][T22192] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1008.912182][T22192] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1008.932639][T23543] syzkaller0: delete flow: hash 3614100668 index 1 [ 1008.988679][T23542] vhci_hcd vhci_hcd.0: port 0 already used [ 1010.314931][T23561] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 1010.317174][T23561] binder: 23560:23561 ioctl 4018620d 800000c0 returned -1 [ 1010.506735][ T1053] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.616512][ T1053] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.618779][ T40] audit: type=1326 audit(1760338527.127:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23572 comm="syz.3.4552" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d579 code=0x0 [ 1010.633695][T23546] chnl_net:caif_netlink_parms(): no params data found [ 1010.699868][ T1053] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.705529][T23546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.707763][T23546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.710129][T23546] bridge_slave_0: entered allmulticast mode [ 1010.712733][T23546] bridge_slave_0: entered promiscuous mode [ 1010.717614][T23546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.720840][T23546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.723930][T23546] bridge_slave_1: entered allmulticast mode [ 1010.728184][T23546] bridge_slave_1: entered promiscuous mode [ 1010.789907][ T1053] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.798961][T23546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.807186][T23546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.891179][T23546] team0: Port device team_slave_0 added [ 1010.896519][T23546] team0: Port device team_slave_1 added [ 1010.978492][T23546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.981143][T23546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.991989][T23546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.000915][T23546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.004580][T23546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.014595][T23546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.120348][T22192] Bluetooth: hci4: command tx timeout [ 1011.126205][T23546] hsr_slave_0: entered promiscuous mode [ 1011.129465][T23546] hsr_slave_1: entered promiscuous mode [ 1011.133899][T23546] debugfs: 'hsr0' already exists in 'hsr' [ 1011.136388][T23546] Cannot create hsr debugfs directory [ 1011.141159][ T1053] bridge_slave_1: left allmulticast mode [ 1011.143612][ T1053] bridge_slave_1: left promiscuous mode [ 1011.146182][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.151286][ T1053] bridge_slave_0: left allmulticast mode [ 1011.153899][ T1053] bridge_slave_0: left promiscuous mode [ 1011.156455][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.234688][T23592] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1011.236978][T23592] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1011.240169][T23592] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1011.242708][T23592] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1011.325710][ T1053] dvmrp1 (unregistering): left allmulticast mode [ 1011.742234][ T1053] bond0 (unregistering): left promiscuous mode [ 1011.744367][ T1053] bond_slave_0: left promiscuous mode [ 1011.747583][ T1053] bond_slave_1: left promiscuous mode [ 1011.772153][ T1053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.778355][ T1053] bond_slave_0: left allmulticast mode [ 1011.800706][ T1053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1011.811634][ T1053] bond_slave_1: left allmulticast mode [ 1011.826827][ T1053] bond0 (unregistering): Released all slaves [ 1012.014037][ T1053] bond1 (unregistering): Released all slaves [ 1012.206925][ T1053] bond2 (unregistering): Released all slaves [ 1012.553358][ T1053] : left promiscuous mode [ 1012.882547][ T1053] tipc: Left network mode [ 1013.224235][ T40] audit: type=1326 audit(1760338529.559:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23632 comm="syz.3.4564" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d579 code=0x0 [ 1013.344229][T22192] Bluetooth: hci4: command tx timeout [ 1013.613169][ T1417] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1013.619702][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 1013.761159][ T1053] dummy0: left promiscuous mode [ 1013.767537][ T1053] hsr_slave_0: left promiscuous mode [ 1013.770529][ T1053] hsr_slave_1: left promiscuous mode [ 1013.773622][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.776659][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.780411][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.783519][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.787279][ T1053] batman_adv: batadv0: Removing interface: macvtap1 [ 1013.820536][ T1053] veth1_macvtap: left promiscuous mode [ 1013.822675][ T1053] veth0_macvtap: left promiscuous mode [ 1013.824531][ T1053] veth1_vlan: left promiscuous mode [ 1013.914771][ T10] usb 9-1: new full-speed USB device number 94 using dummy_hcd [ 1014.078016][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.083242][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1014.087284][ T10] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1014.090805][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.096580][ T10] usb 9-1: config 0 descriptor?? [ 1014.105659][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1014.110718][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1014.121602][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1014.125539][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1014.128401][ T10] usb 9-1: media controller created [ 1014.131913][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1014.146041][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 1014.148461][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1014.166214][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input61 [ 1014.173633][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 1014.176607][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1014.349987][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1014.351986][ T10] dvb-usb: error while querying for an remote control event. [ 1014.364520][ T40] audit: type=1326 audit(1760338530.625:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23643 comm="syz.4.4565" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x0 [ 1014.520358][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1014.522353][ T10] dvb-usb: error while querying for an remote control event. [ 1014.694543][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1014.697112][ T10] dvb-usb: error while querying for an remote control event. [ 1014.862374][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1014.870022][ T10] dvb-usb: error while querying for an remote control event. [ 1015.054648][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1015.061823][ T10] dvb-usb: error while querying for an remote control event. [ 1015.227291][T23665] netlink: 'syz.3.4570': attribute type 4 has an invalid length. [ 1015.238742][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1015.240988][ T10] dvb-usb: error while querying for an remote control event. [ 1015.417939][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1015.420293][ T10] dvb-usb: error while querying for an remote control event. [ 1015.572537][T22192] Bluetooth: hci4: command tx timeout [ 1015.588935][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1015.590611][ T10] dvb-usb: error while querying for an remote control event. [ 1015.760023][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1015.762046][ T10] dvb-usb: error while querying for an remote control event. [ 1015.934663][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1015.937073][ T10] dvb-usb: error while querying for an remote control event. [ 1015.964337][T23546] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1015.968739][T23546] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1015.972796][T23546] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1015.977776][T23546] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1016.040055][T23546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.061625][T23546] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.071007][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.074817][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.086020][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.089034][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.104364][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1016.106225][ T10] dvb-usb: error while querying for an remote control event. [ 1016.236248][T23546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.270453][T23546] veth0_vlan: entered promiscuous mode [ 1016.273169][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1016.275608][ T10] dvb-usb: error while querying for an remote control event. [ 1016.279514][T23546] veth1_vlan: entered promiscuous mode [ 1016.306309][T23546] veth0_macvtap: entered promiscuous mode [ 1016.312823][T23546] veth1_macvtap: entered promiscuous mode [ 1016.329861][T23546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.339179][T23546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.349723][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.352633][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.360113][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.364832][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.407843][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.410296][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.421109][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.424437][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.444662][ T6017] dvb-usb: bulk message failed: -22 (1/0) [ 1016.446485][ T6017] dvb-usb: error while querying for an remote control event. [ 1016.533595][ T40] audit: type=1326 audit(1760338532.655:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23698 comm="syz.3.4575" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d579 code=0x0 [ 1016.632710][ T6017] dvb-usb: bulk message failed: -22 (1/0) [ 1016.634647][ T6017] dvb-usb: error while querying for an remote control event. [ 1016.913819][T13276] usb 9-1: USB disconnect, device number 94 [ 1017.160580][T13276] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1017.348139][T23716] netlink: 183 bytes leftover after parsing attributes in process `syz.1.4576'. [ 1017.365086][T23716] fuse: Bad value for 'fd' [ 1017.781362][T23721] /dev/nullb0: Can't open blockdev [ 1017.791457][T22192] Bluetooth: hci4: command tx timeout [ 1018.182205][T23725] FAULT_INJECTION: forcing a failure. [ 1018.182205][T23725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.187217][T23725] CPU: 2 UID: 0 PID: 23725 Comm: syz.4.4579 Not tainted syzkaller #0 PREEMPT(full) [ 1018.187235][T23725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1018.187246][T23725] Call Trace: [ 1018.187252][T23725] [ 1018.187259][T23725] dump_stack_lvl+0x16c/0x1f0 [ 1018.187287][T23725] should_fail_ex+0x512/0x640 [ 1018.187315][T23725] _copy_to_user+0x32/0xd0 [ 1018.187330][T23725] simple_read_from_buffer+0xcb/0x170 [ 1018.187352][T23725] proc_fail_nth_read+0x197/0x240 [ 1018.187375][T23725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1018.187399][T23725] ? rw_verify_area+0xcf/0x6c0 [ 1018.187419][T23725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1018.187436][T23725] vfs_read+0x1e4/0xcf0 [ 1018.187463][T23725] ? __pfx_vfs_read+0x10/0x10 [ 1018.187482][T23725] ? find_held_lock+0x2b/0x80 [ 1018.187511][T23725] ? __fget_files+0x20e/0x3c0 [ 1018.187535][T23725] ksys_read+0x12a/0x250 [ 1018.187554][T23725] ? __pfx_ksys_read+0x10/0x10 [ 1018.187576][T23725] ? fput+0x9b/0xd0 [ 1018.187591][T23725] ? rcu_is_watching+0x12/0xc0 [ 1018.187616][T23725] __do_fast_syscall_32+0x7c/0x300 [ 1018.187638][T23725] do_fast_syscall_32+0x32/0x80 [ 1018.187661][T23725] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1018.187680][T23725] RIP: 0023:0xf709d579 [ 1018.187693][T23725] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1018.187709][T23725] RSP: 002b:00000000f548d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1018.187725][T23725] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f548d620 [ 1018.187733][T23725] RDX: 000000000000000f RSI: 00000000f7435ff4 RDI: 0000000000000000 [ 1018.187740][T23725] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1018.187749][T23725] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1018.187759][T23725] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1018.187782][T23725] [ 2011.704761][ T6296] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2011.707195][ T6296] CPU: 3 UID: 0 PID: 6296 Comm: kworker/u32:49 Not tainted syzkaller #0 PREEMPT(full) [ 2011.711694][ T6296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2011.715223][ T6296] Workqueue: netns cleanup_net [ 2011.716795][ T6296] Call Trace: [ 2011.717874][ T6296] [ 2011.718824][ T6296] dump_stack_lvl+0x3d/0x1f0 [ 2011.720297][ T6296] vpanic+0x640/0x6f0 [ 2011.721580][ T6296] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 2011.723282][ T6296] panic+0xca/0xd0 [ 2011.724518][ T6296] ? __pfx_panic+0x10/0x10 [ 2011.725980][ T6296] ? check_panic_on_warn+0x1f/0xb0 [ 2011.727631][ T6296] check_panic_on_warn+0xab/0xb0 [ 2011.729260][ T6296] __warn+0xf6/0x3c0 [ 2011.730553][ T6296] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 2011.732264][ T6296] report_bug+0x3c3/0x580 [ 2011.733646][ T6296] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 2011.735328][ T6296] handle_bug+0x184/0x210 [ 2011.736757][ T6296] exc_invalid_op+0x17/0x50 [ 2011.738275][ T6296] asm_exc_invalid_op+0x1a/0x20 [ 2011.739844][ T6296] RIP: 0010:xfrm6_tunnel_net_exit+0x9f/0x160 [ 2011.741724][ T6296] Code: 00 00 00 49 8d 3c dc 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 bd 00 00 00 89 e8 49 8b 04 c4 48 85 c0 74 ab e8 22 19 99 f7 90 <0f> 0b 90 eb a0 4d 8d ac 24 00 08 00 00 31 db 49 be 00 00 00 00 00 [ 2011.747685][ T6296] RSP: 0000:ffffc90002f7fa90 EFLAGS: 00010293 [ 2011.749570][ T6296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: fffff520005eff23 [ 2011.752025][ T6296] RDX: ffff88804b49a480 RSI: ffffffff8a238f3e RDI: ffff88805ae04000 [ 2011.754493][ T6296] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 2011.756975][ T6296] R10: ffffffff908363d7 R11: 0000000000000001 R12: ffff88805ae04000 [ 2011.759459][ T6296] R13: dffffc0000000000 R14: fffffbfff2060af0 R15: ffffffff90305760 [ 2011.761932][ T6296] ? xfrm6_tunnel_net_exit+0x9e/0x160 [ 2011.763613][ T6296] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 2011.765443][ T6296] ops_undo_list+0x2ee/0xab0 [ 2011.766921][ T6296] ? __pfx_ops_undo_list+0x10/0x10 [ 2011.768568][ T6296] ? cleanup_net+0x347/0x8b0 [ 2011.770036][ T6296] ? idr_destroy+0x62/0x2e0 [ 2011.771470][ T6296] cleanup_net+0x41b/0x8b0 [ 2011.772892][ T6296] ? __pfx_cleanup_net+0x10/0x10 [ 2011.774455][ T6296] ? rcu_is_watching+0x12/0xc0 [ 2011.775981][ T6296] process_one_work+0x9cf/0x1b70 [ 2011.777567][ T6296] ? __pfx_process_one_work+0x10/0x10 [ 2011.779273][ T6296] ? assign_work+0x1a0/0x250 [ 2011.780755][ T6296] worker_thread+0x6c8/0xf10 [ 2011.782232][ T6296] ? __pfx_worker_thread+0x10/0x10 [ 2011.783834][ T6296] kthread+0x3c5/0x780 [ 2011.785139][ T6296] ? __pfx_kthread+0x10/0x10 [ 2011.786591][ T6296] ? rcu_is_watching+0x12/0xc0 [ 2011.788112][ T6296] ? __pfx_kthread+0x10/0x10 [ 2011.789553][ T6296] ret_from_fork+0x675/0x7d0 [ 2011.790991][ T6296] ? __pfx_kthread+0x10/0x10 [ 2011.792368][ T6296] ret_from_fork_asm+0x1a/0x30 [ 2011.793858][ T6296] [ 2011.795392][ T6296] Kernel Offset: disabled [ 2011.796864][ T6296] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:08:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000002f8896d RBX=0000000000000000 RCX=ffffffff8b6302a9 RDX=ffffed1005646656 RSI=ffffffff8db0011e RDI=ffffffff8bf1e7c0 RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff908363d0 R15=0000000000000000 RIP=ffffffff8b62ed5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001a5f CR3=0000000074067000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=f6bc0eb8 EBX=ffffffff ECX=8a0549c4 EDX=ffffffff ESI=8a0549c4 EDI=f6bc0ec0 EBP=f6bc0ec0 ESP=ffa2a050 EIP=f706f46c EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 57821440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002ffdeff8 CR3=0000000058291000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff88802ad99428 RBX=0000000000000023 RCX=1ffffffff2107286 RDX=1ffff110055b3285 RSI=ffffffff8bf1e740 RDI=ffff88801287da50 RBP=ffffc90000538d50 RSP=ffffc90000538c20 R8 =0000000000000001 R9 =fffff520000a7172 R10=0000000000000003 R11=0000000000000001 R12=dffffc0000000000 R13=ffff88805f742140 R14=ffff88802ad99428 R15=ffff88805f742160 RIP=ffffffff84b0fba6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0ba458d300 ffffffff 00c00000 GS =0000 ffff8880979e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000556eaa8b5f40 CR3=0000000049c25000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=47d119b105ec18dd 34ef59ca974ac75e 47d119b105ec18dd 34ef59ca974ac75e 47d119b105ec18dd 34ef59ca974ac75e 47d119b105ec18dd 34ef59ca974ac75e ZMM18=afede3fbbcf7accf 556b7ebe00e91b8a afede3fbbcf7accf 556b7ebe00e91b8a afede3fbbcf7accf 556b7ebe00e91b8a afede3fbbcf7accf 556b7ebe00e91b8a ZMM19=f145000000000000 0000000000000004 f145000000000000 0000000000000003 f145000000000000 0000000000000002 f145000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697001ffffffffff fffffff108038003 0030656c69662f2e 01ffffffffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffef080280030030 656c69662f2e01ff ffffffffffffffef 0801800300080001 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000806010800 060103f008080205 0800000500080000 0204014bfa3c0000 ZMM24=00e91b8a00e91b8a 00e91b8a00e91b8a 00e91b8a00e91b8a 00e91b8a00e91b8a 00e91b8a00e91b8a 00e91b8a00e91b8a 00e91b8a00e91b8a 00e91b8a00e91b8a ZMM25=556b7ebe556b7ebe 556b7ebe556b7ebe 556b7ebe556b7ebe 556b7ebe556b7ebe 556b7ebe556b7ebe 556b7ebe556b7ebe 556b7ebe556b7ebe 556b7ebe556b7ebe ZMM26=bcf7accfbcf7accf bcf7accfbcf7accf bcf7accfbcf7accf bcf7accfbcf7accf bcf7accfbcf7accf bcf7accfbcf7accf bcf7accfbcf7accf bcf7accfbcf7accf ZMM27=afede3fbafede3fb afede3fbafede3fb afede3fbafede3fb afede3fbafede3fb afede3fbafede3fb afede3fbafede3fb afede3fbafede3fb afede3fbafede3fb ZMM28=000000700000006f 0000006e0000006d 0000006c0000006b 0000006a00000069 0000006800000067 0000006600000065 0000006400000063 0000006200000061 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ee450000ee450000 ee450000ee450000 ee450000ee450000 ee450000ee450000 ee450000ee450000 ee450000ee450000 ee450000ee450000 ee450000ee450000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852db115 RDI=ffffffff9adf1e40 RBP=ffffffff9adf1e00 RSP=ffffc90002f7f2d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9adf1e00 R15=ffffffff852db0b0 RIP=ffffffff852db13f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ae1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd982117200 CR3=0000000058c35000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002f10 00000000000be0f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000