last executing test programs: 15m46.639188356s ago: executing program 32 (id=664): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4000000f, 0x7c60}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xf5ad9000) setreuid(0xffffffffffffffff, 0xee00) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={'rose', 0x0}, 0x2439, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x101, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 7m38.171370267s ago: executing program 33 (id=1877): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000340)={0x80, 0x8, 0xc6, 0x0, 0x0, 0x10, 0x0}) 7m21.726365451s ago: executing program 34 (id=1919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 5m54.325085949s ago: executing program 0 (id=2064): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x12, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$inet(r1, 0x0, 0x0) 5m52.645927838s ago: executing program 0 (id=2066): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000840), 0x20002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a80)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000a00)="8b47b37239cf24b87994e4286f4633ab1d2dd6adc950ba59376d5db3c41fffd8a309cd2dc750573bdcbfb3969c1d382004219e8d0d70d9ecd764388b0aec964a357ae32705345336f0c30968b262ed5e3526e288d87aae925cef2af512d6e68cbb2ff1571e9e8388abb7e820d99fb9778fa6172053faf72a", 0x78, r0}, 0x68) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x100, 0x7, 0x2, 0x49, "c46e9fd1a84b7fa0bf2cca6beb5563a680f652a8a6d8d701a3ba00000000b97800001022f987617c3185000000000000000000f0ffffffffff7f00", 0x20000000000000d}, 0x60) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="77a8e6178f8876b661af82cb0b0b00000000000000000b00000051"], 0x14}}, 0x0) (async) getsockopt$inet_buf(r1, 0x118, 0x4, 0x0, &(0x7f00000000c0)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="985adf09f2c2cb92c211720287f557d66843ded4774697b70dab9e62b6a1ab3112435896aeb0e4ed54b0a76cc942bcfabe4c8598a13a3cded0ebab9082ac8349a43f7086fe5cd0f7fab66575c7009abd66f309c293e2f09a86241f505881dcec0464335ac4763784f3b97e54bcfba4a93a149d6f2c63226c9ab222bac973a4037b3934e858421bbcbe6ea93924f62885b2eeec62301505ceea93c9d58fd5ad7b7aff2a1b2779d37e1ffa27225b71f18267abd8f06ca80cd7fe9027a889de", @ANYBLOB="00000000000000000000000000000057df02cd52c38c8400170000007837794f676fbbb2054b73a8651bcfe0cd4e"], 0x48) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r5) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cb20000", @ANYRES16=r6, @ANYBLOB="040025bd7000fddbdf25120000000500380000000000080039000800000008003a0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4001050) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="2c00000206", @ANYRES16=r7, @ANYBLOB="010026bd7000fbdbdf2509000000180001801400020076657468305f746f5f62726964676500"], 0x2c}}, 0x40000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) setrlimit(0x2, &(0x7f00000000c0)={0x2, 0x314}) (async) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xb, 0x6}, {0x3, 0xfff9}, {0x2, 0x3}}}, 0x24}}, 0x0) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x13, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4c}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@alu={0x7, 0x0, 0x2, 0x3, 0x5, 0xffffffffffffffc0}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @generic={0x7, 0x4, 0x5, 0x1, 0x593}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0xa4, 0x44, &(0x7f0000000580)=""/68, 0x41100, 0x13, '\x00', r11, 0x25, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x2, 0xffffffff, 0x5, 0xfffffffe}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[r4, r4, r4, r4], &(0x7f0000000740)=[{0x0, 0x5, 0x9, 0xb}], 0x10, 0x3}, 0x94) (async) r13 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) (async) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000b80)="1adaa179f11eec110c0000af781292f11f0c32e652056c9be59041552e11d46a08e3efa5b5592dc1eebede4b6c318df25e912ca967cdf15c3694adbcd7a6c6d9b7d5c7e00e1477ea21f021a14df90a775e1bce967641fe04b73ef5f906652282e6cd85", 0x63) (async) ioctl$LOOP_CONFIGURE(r13, 0x4c0a, &(0x7f00000002c0)={r14, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) (async) connect$rose(r14, &(0x7f0000000500)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) syz_emit_ethernet(0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000e00844242f3f4"], 0x0) 5m52.078701263s ago: executing program 0 (id=2067): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500004000000000000190780a010102acfb14aa030490780100000049000000000000000011000000000000e000000244070000000000"], 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r1 = dup(r0) sendfile(r1, r1, 0x0, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) 5m50.095375241s ago: executing program 35 (id=2051): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, 0x0, 0x0) 5m49.388805125s ago: executing program 0 (id=2071): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r1}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 5m49.174579385s ago: executing program 0 (id=2072): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 5m49.040575679s ago: executing program 0 (id=2073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002f61afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 5m35.671405874s ago: executing program 5 (id=2084): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES8, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 5m35.598616787s ago: executing program 5 (id=2085): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x12, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$inet(r1, 0x0, 0x0) 5m34.646022441s ago: executing program 5 (id=2086): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) sendfile(r3, r3, 0x0, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kmem_cache_free\x00'}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000048040)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) lseek(0xffffffffffffffff, 0x1, 0x0) 5m33.505868996s ago: executing program 36 (id=2073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002f61afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 5m32.245223453s ago: executing program 5 (id=2088): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$SG_GET_COMMAND_Q(r7, 0x2270, &(0x7f0000001100)) 5m29.043924265s ago: executing program 5 (id=2089): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x8b7848, 0x0) 5m28.942231526s ago: executing program 5 (id=2090): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) sendfile(r2, r2, 0x0, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kmem_cache_free\x00'}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000048040)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) lseek(0xffffffffffffffff, 0x1, 0x0) 5m13.597707265s ago: executing program 37 (id=2090): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) sendfile(r2, r2, 0x0, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kmem_cache_free\x00'}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000048040)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) lseek(0xffffffffffffffff, 0x1, 0x0) 4m42.015835721s ago: executing program 9 (id=2112): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500004000000000000190780a010102acfb14aa030490780100000049000000000000000011000000000000e00000024407000000000000004b000044040001"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) sendfile(r3, r3, 0x0, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r6, &(0x7f0000048040)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r7, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x6}, 0x94) lseek(0xffffffffffffffff, 0x1, 0x0) 4m39.585900305s ago: executing program 9 (id=2115): syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) gettid() r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0xcf53b91a6f43f8f5, 0x0) pread64(r0, &(0x7f00000000c0)=""/70, 0x46, 0x2b) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)={0x60, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {{{}, {}, @device_b}, 0x0, @default, 0x1, @void, @val, @void, @void, @val={0x6, 0x2, 0x9}, @val={0x5, 0x3, {0x9, 0x9, 0x4}}, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) mount$afs(&(0x7f00000019c0)=ANY=[@ANYBLOB='#'], 0x0, &(0x7f0000001a40), 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000048040)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) lseek(0xffffffffffffffff, 0x1, 0x0) pipe2(&(0x7f0000000600), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') fsopen(&(0x7f0000000280)='9p\x00', 0x0) r5 = gettid() process_vm_readv(r5, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000600)=""/166, 0xa6}, {&(0x7f00000006c0)=""/209}], 0x2, &(0x7f0000000040)=[{0xffffffffffffffff, 0x3}, {&(0x7f0000000140)=""/88, 0xbc}], 0x2, 0x0) 4m38.393002028s ago: executing program 9 (id=2119): r0 = fsopen(&(0x7f0000000040)='pvfs2\x00', 0x0) r1 = fsmount(r0, 0x0, 0x82) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x80c}}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, @multicast1, @loopback}, "0018636dae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x50) fchdir(r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x810) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4850}, 0x40) 4m37.387164043s ago: executing program 8 (id=2121): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x3d89, &(0x7f0000000580)={0x0, 0x8b2, 0x80, 0xfffffffe, 0x314}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1) 4m37.289267962s ago: executing program 8 (id=2122): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getegid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) io_setup(0x6, &(0x7f0000000540)) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 4m35.817203998s ago: executing program 9 (id=2123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$SG_GET_COMMAND_Q(r7, 0x2270, &(0x7f0000001100)) 4m35.480277805s ago: executing program 8 (id=2125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) 4m34.449143483s ago: executing program 8 (id=2126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff00000000020000008500000020000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x200000000000000}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 4m34.078100601s ago: executing program 8 (id=2127): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = signalfd(r0, &(0x7f0000000340)={[0x1]}, 0x8) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000400)={0x1, @raw_data="4deaaea29c6b94749ba12cd8a5c058ade3f11054cc1857dd9399a55919f3939c8591fbdf4761a09228fb715ec3a67b67ff833ff00bfc91d394131591c82fd453558173aac2eef60306814ce05896f09ec0c98e22bf4807ad8faaef2db1ba5bee5a2a4ed0104b09e323f5b675c08206257d640950e114e60bcd6d51c37103972556c047047c391254cb80503db0f378989475c36f19157767a2131b0b21911367f95244dea8f6f60ead47016df6c9f4097ba88bbd912c8a38d5eb3ec59e1a2710223a6449825f75da"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000540)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073040000000000000000030073797a30000000003c000000060a010400000000000000000500400008000b4000000000200004801c0001800b00010074756e6e656c00000c0002800800034000000000140000001100010000000000000000000000000a"], 0xb0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@getneightbl={0x14, 0x42, 0x10, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c004}, 0x8004) setsockopt$inet6_tcp_int(r6, 0x6, 0x9, &(0x7f0000000040)=0x9, 0x4) 4m32.359296772s ago: executing program 8 (id=2128): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000580)={&(0x7f00000005c0)=[r1], 0x1, 0x80800}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) 4m30.859958251s ago: executing program 9 (id=2130): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x3d89, &(0x7f0000000580)={0x0, 0x8b2, 0x80, 0xfffffffe, 0x314}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1) 4m30.726225422s ago: executing program 9 (id=2131): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = signalfd(r0, &(0x7f0000000340)={[0x1]}, 0x8) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000400)={0x1, @raw_data="4deaaea29c6b94749ba12cd8a5c058ade3f11054cc1857dd9399a55919f3939c8591fbdf4761a09228fb715ec3a67b67ff833ff00bfc91d394131591c82fd453558173aac2eef60306814ce05896f09ec0c98e22bf4807ad8faaef2db1ba5bee5a2a4ed0104b09e323f5b675c08206257d640950e114e60bcd6d51c37103972556c047047c391254cb80503db0f378989475c36f19157767a2131b0b21911367f95244dea8f6f60ead47016df6c9f4097ba88bbd912c8a38d5eb3ec59e1a2710223a6449825f75da"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000540)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@getneightbl={0x14, 0x42, 0x10, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c004}, 0x8004) setsockopt$inet6_tcp_int(r6, 0x6, 0x9, &(0x7f0000000040)=0x9, 0x4) 4m16.990467074s ago: executing program 38 (id=2128): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000580)={&(0x7f00000005c0)=[r1], 0x1, 0x80800}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) 4m14.983522029s ago: executing program 39 (id=2131): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = signalfd(r0, &(0x7f0000000340)={[0x1]}, 0x8) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000400)={0x1, @raw_data="4deaaea29c6b94749ba12cd8a5c058ade3f11054cc1857dd9399a55919f3939c8591fbdf4761a09228fb715ec3a67b67ff833ff00bfc91d394131591c82fd453558173aac2eef60306814ce05896f09ec0c98e22bf4807ad8faaef2db1ba5bee5a2a4ed0104b09e323f5b675c08206257d640950e114e60bcd6d51c37103972556c047047c391254cb80503db0f378989475c36f19157767a2131b0b21911367f95244dea8f6f60ead47016df6c9f4097ba88bbd912c8a38d5eb3ec59e1a2710223a6449825f75da"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000540)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@getneightbl={0x14, 0x42, 0x10, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c004}, 0x8004) setsockopt$inet6_tcp_int(r6, 0x6, 0x9, &(0x7f0000000040)=0x9, 0x4) 3m34.273984959s ago: executing program 6 (id=2180): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x3, 0x1}, @window={0x3, 0x6, 0x6}, @mss={0x2, 0x2}, @mss={0x2, 0x1}, @sack_perm, @timestamp, @sack_perm, @window={0x3, 0x2401, 0x5}], 0x8) r1 = socket$inet6(0x10, 0x2, 0x4) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB]) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r5}, 0x10) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 3m30.899521496s ago: executing program 6 (id=2181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 3m30.676569764s ago: executing program 6 (id=2182): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = signalfd(r0, &(0x7f0000000340)={[0x1]}, 0x8) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000400)={0x1, @raw_data="4deaaea29c6b94749ba12cd8a5c058ade3f11054cc1857dd9399a55919f3939c8591fbdf4761a09228fb715ec3a67b67ff833ff00bfc91d394131591c82fd453558173aac2eef60306814ce05896f09ec0c98e22bf4807ad8faaef2db1ba5bee5a2a4ed0104b09e323f5b675c08206257d640950e114e60bcd6d51c37103972556c047047c391254cb80503db0f378989475c36f19157767a2131b0b21911367f95244dea8f6f60ead47016df6c9f4097ba88bbd912c8a38d5eb3ec59e1a2710223a6449825f75da"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000540)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073040000000000000000030073797a30000000003c000000060a010400000000000000000500400008000b4000000000200004801c0001800b00010074756e6e656c00000c0002800800034000000000140000001100010000000000000000000000000a"], 0xb0}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@getneightbl={0x14, 0x42, 0x10, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c004}, 0x8004) setsockopt$inet6_tcp_int(r6, 0x6, 0x9, &(0x7f0000000040)=0x9, 0x4) 3m29.470529409s ago: executing program 6 (id=2183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3m29.319522042s ago: executing program 6 (id=2184): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = signalfd(r0, &(0x7f0000000340)={[0x1]}, 0x8) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000400)={0x1, @raw_data="4deaaea29c6b94749ba12cd8a5c058ade3f11054cc1857dd9399a55919f3939c8591fbdf4761a09228fb715ec3a67b67ff833ff00bfc91d394131591c82fd453558173aac2eef60306814ce05896f09ec0c98e22bf4807ad8faaef2db1ba5bee5a2a4ed0104b09e323f5b675c08206257d640950e114e60bcd6d51c37103972556c047047c391254cb80503db0f378989475c36f19157767a2131b0b21911367f95244dea8f6f60ead47016df6c9f4097ba88bbd912c8a38d5eb3ec59e1a2710223a6449825f75da"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x8) 3m27.976889876s ago: executing program 6 (id=2185): syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$bpf(0x0, &(0x7f0000000180)='./file1/file2\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6d31f0653d30303030303030303030303030303030303030303031363e00ca068ec7481e9c7d8eefc2b378a46d"]) socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) close(r0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0xfffffffffffffea6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000007000000000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000182b0000", @ANYRES32, @ANYBLOB="0000000005000000851000000600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x28fd, 0xbf, &(0x7f0000000100)=""/191, 0x40f00, 0x40, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xe, 0x5, 0x80040}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000002c0)=[{0x1, 0x1, 0xa, 0x6}, {0x7, 0x1, 0xf, 0x5}, {0x2, 0x4, 0x4, 0x8}, {0x5, 0x3, 0x9, 0xb}, {0x4, 0x1, 0xd, 0x3}, {0x3, 0x4, 0x80000, 0x5}, {0x4, 0x1, 0xe, 0x7}, {0x3, 0x1, 0x6, 0x6}], 0x10, 0xc}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0xb0e2, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x80}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) fsopen(&(0x7f0000009c40)='erofs\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000020000103000000000000000080"], 0x24}}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4074) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000010000008e00", @ANYRES32, @ANYBLOB='\x00'/10, @ANYBLOB='\x00'/13], 0x48) ftruncate(0xffffffffffffffff, 0x6) syz_emit_ethernet(0xb1, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaa416cee93a4a60800450000a300000000fd06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c04000290780000080a0000000600004000220f3abc69030300000000000000000303ac0802000002000000000902000000220e54df942f7e09586180bbb068040222058537c8fe04f989003416af759b3c6a17234d4c2152b5ae2e004fddd386c9b64ad6f215535cc63e143334edc421ad322c3793882feede389339787a3cc5a091c2d78de63e8588f086d7fe064934297cc6493b4059f6b47f0a24885d64b52972c0f7c33466e0443655aecd0c9d24145f9b91e33a6d72426d9a7392a5aef4bdd90ec148ff3c9cef291fdac0e72b1e0b2de022eeda0dea51151bd4a7eeca1144bee79d194bd1d1c5af16e6a425a62a17517a2a4ae27f2ddc11283ef134b171d0ef7d97be2374a1d1e0e8668dd95cbe0f964dee5bd0222362674bd2512785371359ab77f54041d847a555fad93730234cbbc423b7cbe0cf05a3a77e4b07b4e8e967f25ca8178615c8599912f7db5d272968271574d90d637eaf10f0ea819fe74262e0e5150abd70ad4a65c8d655"], 0x0) accept4$tipc(r4, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x0) 3m12.878938096s ago: executing program 40 (id=2185): syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$bpf(0x0, &(0x7f0000000180)='./file1/file2\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6d31f0653d30303030303030303030303030303030303030303031363e00ca068ec7481e9c7d8eefc2b378a46d"]) socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) close(r0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0xfffffffffffffea6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000007000000000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000182b0000", @ANYRES32, @ANYBLOB="0000000005000000851000000600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x28fd, 0xbf, &(0x7f0000000100)=""/191, 0x40f00, 0x40, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xe, 0x5, 0x80040}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000002c0)=[{0x1, 0x1, 0xa, 0x6}, {0x7, 0x1, 0xf, 0x5}, {0x2, 0x4, 0x4, 0x8}, {0x5, 0x3, 0x9, 0xb}, {0x4, 0x1, 0xd, 0x3}, {0x3, 0x4, 0x80000, 0x5}, {0x4, 0x1, 0xe, 0x7}, {0x3, 0x1, 0x6, 0x6}], 0x10, 0xc}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0xb0e2, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x80}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) fsopen(&(0x7f0000009c40)='erofs\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000020000103000000000000000080"], 0x24}}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4074) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000010000008e00", @ANYRES32, @ANYBLOB='\x00'/10, @ANYBLOB='\x00'/13], 0x48) ftruncate(0xffffffffffffffff, 0x6) syz_emit_ethernet(0xb1, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaa416cee93a4a60800450000a300000000fd06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) accept4$tipc(r4, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x0) 1m1.33250899s ago: executing program 4 (id=2538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, &(0x7f00000026c0), 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000d40)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r5, 0x0, 0x3fff, 0x1, &(0x7f0000000100)='\x00', 0x4}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x240, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r7, r6, 0x0, 0x4000000053d2) ioctl$UFFDIO_POISON(r6, 0xc020aa08, &(0x7f0000000040)={{&(0x7f00007c3000/0x1000)=nil, 0x1000}, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) gettid() 59.891830133s ago: executing program 4 (id=2540): prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_FLUSH(r1, 0x100000, 0xd4, &(0x7f0000000000)=0xe, 0x4) 56.304615685s ago: executing program 1 (id=2565): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000540)={0x2b, @loopback, 0x4e22, 0x0, 'wrr\x00', 0x1, 0x8, 0x22}, 0x2c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x4, 0x6, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00'}) close_range(r0, 0xffffffffffffffff, 0x400000000000000) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="08b4fffffede", &(0x7f0000002240)=""/4103, 0xfffffffe, 0x0, 0x0, 0x0}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setrlimit(0xb, &(0x7f0000000000)) timer_create(0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x24010102}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x1002, 0x8}, 0x48) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x42}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x1, 0x8fa}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000140)={r7, 0xffffffff}, &(0x7f0000000180)=0x8) 56.288484992s ago: executing program 1 (id=2566): socket$netlink(0x10, 0x3, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x820040, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) 56.22001977s ago: executing program 1 (id=2567): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) 56.128395919s ago: executing program 1 (id=2568): write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x0, 0x20, 0x6}, 0x2f) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022"], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffef2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022, 0x1}]}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 56.09571061s ago: executing program 1 (id=2569): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) sendfile(r2, r2, 0x0, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1fff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0xfe, 0x60000000}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000048040)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x6}, 0x94) lseek(0xffffffffffffffff, 0x1, 0x0) 56.048234222s ago: executing program 1 (id=2570): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000001480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x288}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)='2', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xfb3, 0x9}, 0x90) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x8d) r2 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000000)='e', 0x3f}]) socket$alg(0x26, 0x5, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r1, &(0x7f0000001480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x288}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)='2', 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r1, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xfb3, 0x9}, 0x90) (async) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x8d) (async) accept4$alg(r0, 0x0, 0x0, 0x80000) (async) io_setup(0x42, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4, 0x2}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000000)='e', 0x3f}]) (async) 53.300801586s ago: executing program 4 (id=2573): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="e916f0c03c05cabd024cf3534e0161560d51ded23d6621591e9ac385738bbaa78e2b6e605829abb444e8d108821b34136ab1f56b255f2b50b31a73c4c75636b96ca69b506dbacee237fdbdb241688cf93e74634bc66e096bcb5e5db98f4cc0d6f39064b70ae89ad24d5ef13dc7c04c6dcf99f42a1273664dfb3f853f03e05acecf865cddd1650c859cf47cbc2455cdd20941fcf04936228535bd8d2b65144bb2c22ec5f9c62a4ffa2277881812ce1f1059054f91acc063a1f620df6c0522a7fe6522aa15424e465e67b176533e67b40a8d92", 0xd2}], 0x1) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) fcntl$getown(r1, 0x9) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x3, 0xf, 0x4, 0x8fa, 0x13, "08be8f698ef1cc23ff4e4501509f0e23b71923"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x7, 0x208081) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000380)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000013c0)={&(0x7f00000003c0)="87addfffe698e106c1c62876b0693bc09705a29dfcb73b5b64fe310ad04eb3dc460f15573d8de4c177b76184f8a8de2e15da82429d04aabaa57743db13e363e53c4d7b5eeb55dc7743202fac4247104786e4af70115117a377353fda6f34e1f938679d659a824024bb7e8c1c18b91efa629d06a58ea76e072041da176c79fc3c430a9c8c55bc2f7b77440fb389715431b16929c4dbe9827d8068c296978287418e18a22ad43c8a13ac655ced465af86a4d19364a338a737013b702fb98c724bd6c10b4ae8e42faee05c394a42e0797e4ddf3369d37366fdb8dc106c228a4385edbea784aed10b25a9fd62004ffda37567ff3087d9222cfc91e4887f8f1c4523240ff5e2a330d39d41680b6b6ef2f64aba80cece2e04067b18d1ea4fadbbdeed8b414c2c6f2c98a449d60ee7a41f2d4e99ad43a7b6b883fa7ef3db028ae47a201a69ef29511bc1404c0f509f09b768459051cba80819354419aed3672fb88a677f9fd37edd7c55ca4361e486d526629590d25015046831316a94df6901d13fab1203d49dd71fdb4215572760d15798638429b14a44be426be6d43670e01ce72a5d1bf8de0ddfecada5645df177ef8937fe202918e70c08b7cddf4fd3bf383448d3081871e2db5c12297d384d7727fbcddba23cd89bd0692d31ee6c5e7748bfebf013d40bf4dcba0e7dee852be8c67e65cadb8bc527ef36b39e44fb759a34a8d8e07579bd749730b186bc1b7a3686a4791de6c726c12b76108fd955091fd20f2e51d7eeded994f288c67e28b7a4f029b1b9ebd98467f0ef5fe19dbf0bf46cb136937881a9d7341172377dd45daa89329b0210911b360153aa0906571d2074bdf0b06e51ca019639a1508c363e7db36483e7d9b9a34a51221c0a3672918bb05437069237c3edd2b458bce0ad2ef39fc420f8ba280e6e21cb85998994d89f0785ec286bdfa00fa275c69de9cf0a9561116f989802f9e32f4a1420f95204f4c60f2cbe67f682c10b0e446fa6a1115f5117ea72a362715c69cbde26471eaf0516fbcffe756af2345ec8209172d994e59c8bdaf282a011ba8cf48214fa17ee94113a975744fe2918f0906189e413cfdb49cb4dba83ea2ce61bce31ecf6ebc4f6b8c28b4a2931a00ae0da567cc92397e999505d0d9531b2423092bb64d6da4b41e8761760516088656326995d43adff0997e22935d3f05acbf430b366cffd5379efbc569af7f3444c19ae95120461b61026bf68718f3c8fce180142733acbd3fa4ca0ffd5240628dfe2f57be2091e26a0a8fefdd44a49ee8c71cd235c87e328037dbfde8ae7e3791a3f620794fa289e9ff74d263df403e7b934e68f757140feb32fd890ff6c16d07648e99d761580272b675bafff0e8cfaeb024c78e94f1fb2e29efc39fe4741498137abe1254da7e0069d7a7fe9bfcfafb076cabf04d7e3c9a1dcb6d8e6fb60bdf1a73a99f672fb8fce2d4928c7806dd53521a86e40c9c7c2f81f82ae55d2f5cd08423df7af153462fcf2769e3d7701cd70741e0c44d9179ae0a9755060d191268f0c4f0099ea02b301c05e40e2ec2698779c26b4ee48b94823a270c2aeaf8174f20ca5b77f723a33da2e68da4d622ec47fc22a3e7e770d81982f550130505e0614b090d7b09bf260d413fe6adbbeb86e29bf32d7199115129361ef926655f41122ade404a120e58db14608b1ff2bf3198a7de97b1dec0759035de80d849fbe158de2d6371babafbea227a3b06aa90f51319854f3c3f8a70be78f9e623236d26acd9f5af959866e1342b6bff4e42655af6b5cbd456aca2646e79c89a2dbc95fcf42264d5898d3e2892ac33c4f70e9f543dd4bbb5b935877e055dd4a0790be033ee033660814f1db27141009f551b8445226c420644ecdc44989e8b275139879362c48a4af7f1e7dfd276c8477d310e34bb3739e640aa1c8a6d44c57a595e1153f8917fda0a8f2189491fef03b4688dc7790c04e92be5b4730fcacb9a2f38f0239b54a2896f7921ef71af87c62967202a036a77bf5be8ae734595a3b6ecc4c371dd14048802ab7801eba759b157666b0b00553515ad4ae845f7d6daca3b9f2604f333912fb8f7f92278fc2b6598cb11f8c3d9f354971d77faa0b531788e460d1df342714470ce21f57b4e67d62bc7c256edc9ac2a7814cbe7180f2954adcd7af6feedd54423f9358c63e34b2b796efb118f438b5b2c9d9c295a903542bab87ca6b9cc6d93161137f9347b17d49061db8fe312cbc5f5724a4cdb60049f84c9301d589c2a555b1f6adcad6f458ac24d34829bce6f7a98752d82fc9ee456b7333cee4f2ee0d84e7063196c41d751f3603c64a5121764e6a60b510b4149d460e3c55d4b9ceb7fdb7e2ce3423634ae719f54c82adc3466d700f3cffa09048ed34279891ac85a815efc14de8f4a79b1e4ae2d4bea9f7f536d8e40fb3c13b3839c4f7dba2ccbb1ac0dd0ed26e7dd647fa05d8b6d0115d6781629d013a46d4c3f6b9eab7244cce66e5e5644843cdf9bde3379cdefb9e770e2dd81204a2c99488e3c8a08d580cc0af73d866da7fb799b48466dfe139edc848722e46ec6c242632475754f53f0bca6fc16e799874cd5cb3ced4bae8fc03e1baad3a181f6722e613af8fe888868d9c2615e5b547f77475f52e1e92326d224718101fe83d956750a7247584929a5ffa4f908d69ebf2e3063dc6556887ac20ae3990dd5ee687641e2505dd3932a68dc7398b304587d920be19ef0e428e7ca8da3306bb8c2c482ce5e85e7f932b78db5272b57bedfc646c25182c0e27735c053ae9b2c7a86812355c5d30ff60226dc6a798ae28f18891a2c1667ec2916f6c630b5dc92c144fcf0b37793b7918026c1a39f45f2371842c22b3375a68bc8afdcbb8c42570cca8a19df9587a2f6ebaa03be70738e56830bf1854b9ff4a795092ab5e2b74125cc647ed644d6e86c72f2462f0c3c7e1c06e7c2eda8fcef866d132ce3113e1a8de1393c7d4d5982fa69a2d231838b79f497fd44d9048c01ba54765115043a7529426d8fa19b0d1f5ce02213a868957b378be7bca1a184e04269d96c315bd197a400f84f64721d94e2fc42462f9efaab45cf23e48d1672b23962773d33a1680bfe5134dd96aa666720028184f5e3fe4fd5947033c75821d21b7cce86fd30bfa18440dc642b1908b6fdd0c763a12cfc0b8f94f3c3faa7b8344c5aa839f4cf6030eee023cb6300774bb1866193b2af915bbea586332561e9330c59ab02f6097646e507134bc6ba07b82015e377373cea3e6ceb5ad493907a36d042d5498311dd02ce52c01ea509e7ee7161c2d5db62ef882f4cb441e256e53474da73071da822654f2faa540f2d139a9bf8b1df135270955f121e19d75c80d350e922894313600d993fc3978d6740160a8fd4425c0d41c1e2d13ee62aeae17b1e6f7efe972f8b79eafd4d2920c516f930955996132e71b8302b4ccd1ba060694272bc8062da719c2d3b415245c80e713ac1cb51ff94ffc4607dc97b3de98c508b47d4a5f577e4fdd3aeebe63e3a9f791c4521ce2af638963f446e0dc7077f5e3e7792d2473b3ad2faf80a35a54b058bc876c285ac8c8265896b732ead01f15c739950ef36e21a491e82275492aa48e366c4e7612a22603526ac4dd69c487aea3055d63725d36865c5ed0faf9a67a07038f71e40c30df36d1a576cec350cf611046828f28ab8f5b0cc2c3d67b9750d76b59b9c16a7629a5a7e91f2d68885d39f634bd56d6c55aa7d5fe92cfdaf5ffe77befaede0fab7a2b790a53149e22c5be8ac13ba8a25134e678e474f152a01d24eed10b5ae0ad4aea880d1c03bd11cb59c6743c23da75148ff9a6a67c91a75235ad2e544ee04ed5366332a801b56d2c9c9c5b013e1553a0a2906cd0c6a174b09e830ad5a7c0e8bf21b88ba6b8c88c21ae2e3f5b15329fb8ddc963894d37fe59b615a80bec27041e77fa11edc984b18fd3eee40b4f626159880b6bd490ad91369125ef51d45d33532f0dd8eb6efadb37d645f344ae491e9c4e575021078efa4fe78bbf8b8786422dff8f9b8b10957529beccbe130120f243ee14e3e23d0ecac58a89866fbdaa11b13b356525f62c8a3a81ad0619e93201ea9806191ddb890903ef3b446c20ca957941668b9bdbf8e2995cfb9934471f1d8b9700950c3d652ca1acd4a6ee996ec149b7db44289316b103647296118d2562d3afdd72a26d068e5b751951823d58f17e6a812b8833f259a487344f46e880264fbeda6f7c20d8297e8d4599af36fee97fbedfa44b33754f9c62857afacf2ac9a04dc19d5e48c529ebb4b773d8bc4819bb4be08e205b073e04fded41701209de2de14bbe37022605a893800ba91b48b26d9f8fe803987f36664f459329a13bcb732059fc875f4294d2d9aa9810275daca7f042ae410d8806f033def4dcaffb39ef4d9f104ee56555cde64638d66dd9f9189c74dc16cd0d2de08cb41e95632bdbc6431367ea7f10d11860edfb7c2c8b58153cf2dae6879010b7a6f488a7ee8e012bc5903786958272e9acec6d8d4077ee545d4c8763df8e348dc1f357261734ee1c567aaf1aa43a77986ebe2c677c035f187b88ec901af553b841a9c6a86902b399546913eb6329f2412066d32d5693fa41c8c92d740a53ade8095e7142418823cff8a354a5ade382748b3390d5db7c65a4285aed910b6a9083b238e397a3316ca9b4f286fac2025963a21c31805050ef149113e3cfec7f42a244fe9139be7ee9650e0c50aea51d2fd4f94a1b4afa89fafd2bbbf0b55fdb7432f10905bd42c7068a6163cbeb78fbe1bd15dbeae103a419a1e96f8cd9d3a6e539acda417848df23712408596cb46e43bf166c15f2e2967efac42c0ed6d55a58b76e543299c54b17a66c9d23d27571e008335670102e20abf0ab612b481c1aac31b65aff7ebe32bbcc79312ec472aa53cf07486314c028f61951bba095372e64f93574d805998dfde72e94a6b82923f932f38615e772fe7c04ffd004ffe445c35f4cb9ab1a3c641f91525dd56ae937055abca04d0aa112c1ebab3ccbe7bc5ee6e6e711452e0b4e400571ab0d4aa799b6059d13cb20f094bfc72ad08abafd2bb6d097f1632a1076a0adeef09014a815fddfe7de9dc83897fea834b2578413f4a9926a7444ea65b43a38cec90a497a89c738fa74d1b1f56c72526aef9426e2a700dfaa575c0cfad1d1fafda7a68f0fd94f88b9a8735cc0fb3cc2f11c0be1dbfad48304a995b73ebe19af44b0b35e296a3d2252066459e771e317e90aee216a7c7213e73833101b681ff98fcba010bd71d89277ff316d48a75b58414557fbc1908ad07325ddd6309bef493cc9a62fb61846c5e720f10480f1933ad9f97b2e5849eba0278c3e0475742a41a537669a72572f604bba46eb921ac86cddd9c1a4f92dc4c74e13c6544f9f3f28564a57601223e755a50378c1315a66cb9e6e4b184ffb41f7bf53cc2423b43e04203ebbede4ff7cd7477b1eb9be0ac869671c749a6845fdf72e6910ef506c67f74b8957f577a66924d5fb4a2056db585293ac6a15a41b0d8961de1c74f352062754e1ea66293c1aa2ebebd7bc6de9e6631ee16782fe428b84774ae221dbaa504acf41cab0ff0bdfcddd2ff4804129bb455b456613399dad3e2b57b3b710fdfc548bb4f6672d4c3987ffd21946c42519f9690ca573b792ab856cc9777a3c7c288f509ab21c6a155f914c8918c07caf86a3753b908b7a0ecfa52a29cac64fa8980fc7fddbf0a048421f06a79c5c252164d5a2c08f72a51e98e5cb4b28f52e4de731adfc9e344f4cecdc1fb", 0x1000, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x80100) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r7, 0xc01064ac, &(0x7f0000000000)={r8, 0x1000, &(0x7f0000002a80)=""/4096}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000001480)={&(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0], 0x8, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001500)={&(0x7f00000014c0)=[r3, r4, r5, r6, r8, r9], 0x6, 0x800}) 51.545450058s ago: executing program 4 (id=2577): socket$netlink(0x10, 0x3, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x820040, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) 50.17558294s ago: executing program 4 (id=2580): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) sendfile(r2, r2, 0x0, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1fff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0xfe, 0x60000000}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000048040)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x6}, 0x94) lseek(0xffffffffffffffff, 0x1, 0x0) 48.377029291s ago: executing program 4 (id=2587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getegid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r5 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) io_submit(r4, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x8885}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x18500, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x80006) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1e, 0x8, @private0, 0x8}, 0x1c) 43.67955787s ago: executing program 2 (id=2600): mknod(&(0x7f0000000340)='./file0\x00', 0x200, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x482202, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x11, 0x2, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r4, 0x0, 0x0) unshare(0x2c020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x21, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2212, 0x18f1, 0x22, 0x0, 0x0) ppoll(&(0x7f00000002c0)=[{r0, 0x9584}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0xfe91) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008800) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000002d40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ppoll(&(0x7f00000001c0)=[{r0}, {r6, 0xd105}, {r5, 0x8}, {r0, 0xc8}, {r0, 0x2100}, {r7, 0x8000}, {r8}, {r5, 0x51}, {r5, 0x4000}], 0x9, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000280)={[0x4]}, 0x8) 40.612736587s ago: executing program 41 (id=2570): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000001480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x288}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)='2', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xfb3, 0x9}, 0x90) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x8d) r2 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000000)='e', 0x3f}]) socket$alg(0x26, 0x5, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r1, &(0x7f0000001480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x288}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)='2', 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r1, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xfb3, 0x9}, 0x90) (async) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x8d) (async) accept4$alg(r0, 0x0, 0x0, 0x80000) (async) io_setup(0x42, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4, 0x2}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000000)='e', 0x3f}]) (async) 39.337483407s ago: executing program 7 (id=2610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0xfff, 0x1) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x200000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000380)={r2, 0xe, {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x4, 0x12, 0x1, "37be9dee8618a83194410bc10ea9b1528e936eff60e69e6250a8bdb6d817f548bbc66f0d1cb8287fb5e6d4d5d079365e362fb7999d8f594d0cecca7c47b11687", "79837efedbfcdd94fb032c6bf451976061979aea7dbfe1fa45bc27890e566ce1ff1ff341a5bea2ca66905dabc9a517bc7330286fd02e5cae95a61721ca49fadf", "f1fca64168169122bc29e35d7f25861c19e8ea2f398d92428582b610df4c8b9f", [0x7, 0x6]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000100000d030000000000000000000000000000000000000b00000000000000000000000604"], 0x0, 0x46, 0x0, 0x1}, 0x28) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = signalfd(r3, &(0x7f0000000080)={[0x6]}, 0x8) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0xd00, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x2c38, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2b8, 0x3, 0x0, 0x1, [{0x2b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x13c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc1, 0x1, "92444050ad2cbd8d421652cc38cc7ce39a7c63330c091ce7bcd79cf24e9e07dc418783b58ec4d620cb3a59d4e5d41cb3952943e94f42b88b893602a15277df8627c55a7049c799b51a22160e8847acb178867861a9635261d18a722137507a4834a0c9aff4205add77234b26ec6d79ad7293fd2c339a9ba87405aa8abbfee997b90b631538ceaee29e095fc42a66479e7d816d187a24bf718d82d12ada527825a1ebc87d9d64516572ee5852cad0f756790e25606f3e9184c1d57c2957"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x16c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x4c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x5c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x5}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}, {0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3d}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x24}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xd8}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x46f3}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2940, 0x3, 0x0, 0x1, [{0x158, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x144, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7f, 0x1, "84ae556f6bfc9d16bbd5f7e4f8863f4f5e0358ebf45a2c49abfbc871b84c1e66432fff6b6000a19b62757d62e9c8158c4f4ce6c0b69aea031e03ea716a5a933878cee8d41b924aab115c1fc10070b55a09af950a84742542e63a70f6fb3032cd43d53f6e8d04bffac3ea765e7250539f67410abf5d96ea36fbe305"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x97, 0x1, "10c62c8496647e61136e466e8454a93d871a58591bacb38e03e2838f6ace7d8dd35cb5c11f72878351f24b8482925bc36b89e4d90831e9c47eddac04946b6825728197b175e4d9a5ff4a7062794a6b33570e0a6973016e28e4b44d84f01a64aac8569693ba75972b954c4ffb11938dfe46b63480785f177f7e71451060131bb1bd9a8f38413bc170de23f921f252c5d7151a2b"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}]}, {0x2278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x2154, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfe, 0x1, "6198ca70ebea8720e8a70c4a77938a02e313b3e5e62135cfa830aee98049f1765c9baa79e3909b0b0363c9e8111fdd576e0d89bbfeeec443f933c65ed7437b96dd074a397dc74a4f6041551dabff8e0dc1cf5b345c6a3e230050ff4b9556ab5ea971bc6f65cbd53581c91b3067b2b7b6150eba03f65662db2b740efac262fa039b73833290f6f3b61aac802b219dbd62755ec5749b56b23e9aa798b83463978ce1622761f6731676c4248834248e28ba372c1f50aa1e88293a44f6d26d2f997dc11fc77b49ab96fac25d2149831b583e29e73f5df125e49d75de5a7552868b86639ee69f5cf7fa59d74ada30180f70c406114538a90808a66406"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_DATA={0xcc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xa8, 0x1, "3cf3c047fe3bcb59b9c5c6da4cadfd58566b20c18ea7b2116107f0d890518c38cf8b184a867c27fa42a1623663ebce3d3772e70c3c350137995f2cb88a4b4144f04a1fc7900db680c8edd979222ae957adbcd9289be5271a3bbf27a8f37e9da77c25327aa66dfcc6dad627a584715212d6e0d07ffac32c30b25f2270703ab6f11f1382fcd60bc5b00e615f4e11baca00aa58ec8cef8402a0d77abe94b6a492ba8c425b46"}]}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @last={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}]}}}]}, {0xac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "2929ee38f64dab23be22c75fa0e40ba659"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}, {0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x45, 0x6, 0x1, 0x0, "8f5fa09ea6c82900c73df24496da8f568944132c93c52a68b7cf0767a9471ca92d66f83a74aca092b7cb48d1cb4307213a28f44f1eb24111921bed2867c3717bad"}, @NFTA_SET_ELEM_USERDATA={0x32, 0x6, 0x1, 0x0, "37c54810a407cba70342ff57f50f2615fd056d5b439195f6639793defde9bfd5bf08e6fed31493768e4eb1ab3429"}]}, {0x3f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7695}, @NFTA_SET_ELEM_KEY={0x134, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1b, 0x1, "04ac353b1c54293c89b9e623698d523a717df5b860f253"}, @NFTA_DATA_VALUE={0x35, 0x1, "2eff35010d67d153a7f3e9ebcba3733489828ed551d09c88f05b8cb3a0c46de4750101a568da01dc42fc47c96fa2235c03"}, @NFTA_DATA_VALUE={0xb7, 0x1, "678ab7f4a4c7fa1588a79e20d6ff12b808099eecedeba92eb3869e7e3decbf048cb6ef9281b4c31b77ea2523f0244368a028a781a9cd8dfb2b2069c9c6610217fbc0f2f488619a7886c0cb8262215aa5a4c2f3f62c5ecef6011cea03da5c4d5243961be66119f7d3e60a64c784f9680eecee94155ade7ee3137f51b93c57c75d27ddcb7d488615761a90b509af70e3206834108ddf9421e63b3d9bb92c6a867ba4eb900ba55e8642aa6609b03fded412a90409"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @lookup={{0xb}, @void}}, @NFTA_SET_ELEM_KEY={0x1ac, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "d35fbe126d05602f9d56594c8e166ac3ff48d4442c79719a0fa9a2fbbc8f6a6a30310de359eba5435db9522926687bf2ef503b0d496b15b2ab29f9186bcb71db556389f6e4b18649eff19306d9a7c561d7f72bb1848b98daf17898728dd28dc84c365a5282c9246be4229210a7447c22f326cfc5d124e82775ed0eb08f3c569b673c2cf2347717af19bc"}, @NFTA_DATA_VALUE={0xce, 0x1, "be8674a30baf01875312160004ef3b3d76a31d224d0cd5b7e2504e10761323a1e6b9ac84a30b5371aad70a937062bc85c4f5eb2f0cbc1775a5e45796602793b8d7baf37bf9cfc0fbfdfa869334bbf342d213840c670de2fde504c56e86965a5df21533595507241c2dd351ad5f8771a2f5ab6380773315ac43c0d432fececdb0f2a5b2660556f02bd3118be3cf1cebbb939cd0c49fb92d125f7c8d18fcbe35d244310e50e0a1b514e6801655fba3fd532ea3b8c5c43d0fdcadc1b2a0b68ba171ed0e6b9394d09e71f31d"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000001}, @NFTA_SET_ELEM_KEY={0xd4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2e, 0x1, "a4767d10be311f5dca391711c90abff2101b7f27f82064cb7434a5848f0cb66367b335c563ce622f4f7b"}, @NFTA_DATA_VALUE={0x25, 0x1, "53da8721f19a4879112d68e55d203f9a9bab968c2094311953fe3f525edf0b0575"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xf, 0x1, "6dad7a0fea485cdaeb43e8"}]}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @log={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xe8, 0x6, 0xa, 0x500, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1410, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x101}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xab}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8000}, @NFTA_SET_USERDATA={0x2e, 0xd, 0x1, 0x0, "7b1ebc764ec3c7c0775c840ab63b634d9175160c854a83bdbc3ccdc7c527dce1d84f48fb234dbeb55c9e"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0x1390, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x12f0, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x12e0, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_BITWISE_MASK={0x1058, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_BITWISE_MASK={0x38, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x77d}, @NFTA_BITWISE_XOR={0x48, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "3c4b052aa2d24dba7ec15f6c8c966d64563c75468d4194"}]}, @NFTA_BITWISE_MASK={0x1f4, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xb7, 0x1, "184ac163c8611d9fa2e9112cdd7992ed518e03539d6dcd6c9507b624d36c89e403565cd5790c951de19d9691710c4459eaf399b4fcc3d50e8956fcfe60fe456ac6b06b999b68fd98a84b22f70da5fe94626beee9c0f142091053f50449083913787e83206f5d088ceb7063b2352ef9f396e5705491c7098650dc19cbf93f7e3d19fa3fb7f86a87db68c2f1e0318bfd6d1cdea66f30e196fdae7c9432f8280c5de7eb4ab48d9e4bae1ccd8141daca83ba7e52ed"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xc5, 0x1, "3672cbe3f9be4cdf5a1cd815977711b7290e5831e92c4f5f3e748cc346119c62db98d20cf83e4757a1bba7609a53292f11dc374295ad59689a6487ffa867f2cd55728539d028ef859b0dda08345b8bf9516eaa93c4908997e69f485df660d5f7413c5e3e4d79eb135263fa0e1577a5436e427e507e41e1b715665599ec5971689cffe0387500cd54be5b0d9149a04576fb704cc9d5af97a3d09b20de497bd461c09dce8715c9e38cacf403f85efa49740f57759786f033f2265a88bea58ffb8cd9"}]}]}}}, {0x48, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0x8, 0x1, 'set\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}]}, @NFT_MSG_DELFLOWTABLE={0xd8, 0x18, 0xa, 0xa3fecfe63baa8c8b, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x35ab}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWSETELEM={0x283c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x27dc, 0x3, 0x0, 0x1, [{0x398, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x374, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf3, 0x1, "6ab9394af69616d6f91b7ad2baf7a820ac26554842b2d98178091854350d55825f40d595d478c974efc94faa0909f409f90f8bd59605ea04d00d81b3d6cb50232075c722dfdd85fa683020332d0a7d088d47355ab861c8340b11287f5489e1baa7f04e924382058b9810eac6cda513dd4be2b332147a98aa0840342c0a77f91b00a94fc38a74c1a766ad3c17940268814ff37888f3317d6192560aa062baccff83877b31e51e200e28a6c6b50f1bdfb1004add16dff4a937876e90f6672885825f833b59faddf2e33a85c40e804fdc035e900246f085e1ebc92637511f45d34688606f4fa112442a18ca355eaad2ef"}, @NFTA_DATA_VALUE={0x51, 0x1, "09b5b2997d963e9ae55bb8547d4649d6878e9b88f730440eb0f9aa3977026cc22ba3b53c4ca31077de598ca31bfdd3cf90d0ec620ac81bc31b6b25072de0e2cbd1b279b7518949764396cd23d7"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "5a961a8ecb4a23654829d4ef2d9a194a9d887b03c2a1de4fd83957c5c94bd6c3619588e2bc795c4f2c9ab8faae938e8cd7514980d617b094d0054121e1c43f667de3652f799e148bcbca5125147e5e018052bc4f2ea0ee1de70837f958a0c397394d1a951fdb1474954398e8fd5339a0d0276b164274101cef4e095ad7995e667e713d70b98cae086feae86e8b9153500a57017787c956fd6988c6b167fafe2d7383870047eb0cad9bb976bda45dd18183191dfd6076191d0aa0da7e44cbaaaa49342c251ae0075076f589bc1718832d311526ca91d96afb9cfa16be10af1be90e92"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x8, 0x1, "d87f1e04"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x20, 0x1, "61876543f48e354abbc7235559439bf330fa8121f5c674c4ae78a84f"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x3cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0x284, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "ffcbc3c0952c7ceeb49d0fa451dc14a362e9e07d2b896320af26ec449f8543058e56fce8db5253369655f3218ccbfa49f1585e2b3695d9dcc2a84fc9b93136e7454c5cac7768f4426a68a7c8ef2c8b7d28341a8c0af05c5e4ce1642791f349bb527039f6d2c4a3f573e93ce264f365ed8cc860a491c628066ca9b1739443f2d86730b877b26469770dbb5f7a9cd484dbe8cb7da6b41e38e838e3bda9e23fab4ab8c8e029452554ed07d087c430b936b7"}, @NFTA_DATA_VALUE={0xb3, 0x1, "bdac1932aecce8333432b26221975a98eacf7ae4e0f5fdd3f1618c0e7b6f6532b46e994239aa3f61ddda7acf77fecfa236568e5460e99323ecb86ea29715ab19e58033bbac8066944694d9c29dc3311c8d02558341eb1b0a7f4c9f1db2ccf78e851db24bd75dbee7fbf0b8d77e24151387b65a4ff713b0b6c8b815ab464bf1362aec94fcd4645efd8486f8fac74914a5206a2f12b2a6cb31b8ff3e43b5e57329cfef4197dc2a50ef73778ad6cfd402"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x62, 0x1, "d5cb4363ccb28d71741893f6caf24062965fefd79942ae5a3dcb4197faaebd5909e55b9d904fcbe098fdffb1185a59a2ca1e2859be796ad3a30c15b71f805b1ec2a8cd9951de82d6eec5a7abc37fe6fa27a77cf35286261e8ad5c40f6855"}, @NFTA_DATA_VALUE={0xd, 0x1, "05c1ba96c68cb0d2ef"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x52, 0x1, "23436d48494680667d2746c205111adab93eeed42b1fb61b5104f5c702567e1f057b3a1ded26acd9134f3ff2999a2a5174d58026153e4fad2a7e1b31fd383154c2bb59f0dabec2989ca32cc7716d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8bb1}, @NFTA_SET_ELEM_DATA={0x12c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x30, 0x1, "24869ec4933fbf3b0ad3ff9e540975eb072aa0e9d96494f8cf461a179f10441b82b4df803abfb91ecbe0bf93"}, @NFTA_DATA_VALUE={0xbc, 0x1, "8aada6bf8ca106145c56959462146ed60be73b947c4dbe9057e789fd4f4093da10b6c72ab4c34ef72ad985110443eb4efb8007255f546ad60f72f99a06a55f07c3b881b94b95b71180e8af334ae70e84cd5c38971f0c4f46f9f3a882e50c81d1dc67823671861d81d6a58fe0a4de6b36f70b26b702e50b3c454d6a4390516a8aeb472f7141b85bf9804bb21bbcc8e330a2a49fdb2dbd1709e378183bc158352d5e39c8b164cc77e89c7ef7b40cdb4f9bf1266eb28c7877c3"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x1658, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xf8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000005}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x1140, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5c0a}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xb6, 0x1, "d3a696c9b59ff8d0b3fb1a351a006577bc9c5be4d65bcb180cb4ff44025c195f9a748081b7f7d285fe34a0b834c660e6c56c1da0a85083086b2f64d8a377031d9a90efeea216e33202147387129cca418557cd1e72c4d9fb105a2f711d1319da0c64f5a125170ff5fefd9da1db1afae271e1ffaf51a8d50cd5b082f06a2a3e18535df2307f4e3e63f3aca070c989168266526b21ea9a9f7d352cd2f3d05a653cd66db8f39b54573a020796a840a65608775b"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x378, 0x7, 0x0, 0x1, @cmp={{0x8}, @val={0x36c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x368, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xda, 0x1, "b501bc632a2b7a11cf58daa602eebb290ff42aab73c507aa7830b7035790d6c7dcfcfb149d2094e3e0029c1144d29b720cfc2fed4d3d7fa1e711a3b2fc08d9d2bb9bc74994d8b661f185bf01641daaea66c213903df22b321957db93a3986abd3112a22ac0cc91eec7b06290642df30252527c561a3af5a2a1c9a4406f74fe4ace932d6f3498b6f15510ad0665210493ae0b20e7006ae519bab88786ae7f67fc1eceff9f1d648e652640d12aa725a2e7fb7be94c71a44e4fe50c9bd8713e8d8aebfe42745bd8183877ed20379fc983df2bdec99b0edc"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "552d9849d0aa8873fd8aab3a53d9941b50e1a605fe14dd80e58bc5a6f90671959d9f53d9f78134b609da960abde04f7132592911dd8be29fb8db425722b9356e6f4d09afcd08c13de0d93033ebc00dd2ef3a4670786f65e25886ae7a1f91b396109e02dc54badc5283e6f054123aecdeca9e4efe40876774063193b6450a1da6b467e06946a771f24e64b3c1380c10c8bf33abf95c3875758a8191e671"}, @NFTA_DATA_VALUE={0x77, 0x1, "f6ca5bae41f1b76c3e5fbfc15af82c5923aa38286f67b926c536d4c735da8a528eab3eff7e8c1367b4fcbd732814d258a17917755fc5a4a79ec145574b6cf6fbd6b7f4684e271ee063beb9c124f59ddf96e30bfc6564f18c71270f365178ad092bffe83356228e47c45ca63f8b2c1ef7d29d1c"}, @NFTA_DATA_VALUE={0x5d, 0x1, "4d4e1087ad714d2256002980288ef8caf9951b37a0d40c7b68fd90b4f79ceba8967244b6a9b7c1171346210ff0b5b1f858de1c6099e95fd907a7afc42b9c023f28166c8097f6e5bfa03073bc722f4e8b771aa551b7a481e3de"}]}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", "", ""]}}}, {0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4c4f}]}, {0x2cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x40, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x24, 0x1, "1fd220a56e73a225414e677d65db0b97594dcd5579f679d3c41c64425b0f75cf"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY={0x170, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x86, 0x1, "54c380c9781c4900770bf863aefbc14f114b94c95452de23cfe464a83ff3474bd07529a57014134063bf675723f1277cc4cb11c7e008659ba002ff60236898fdcbef4c27c9b8b34d379e5e1b7d1f91bf189face587596a30164d5521c01fdff381f71ff274f43b3bd11f31125f181304dd1ea8ff5a31a81ec9b0335b91f616fbc22d"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xf4, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8}]}}}, {0x68, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xc4}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}]}, {0x4a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xf2, 0x1, "682e290380967446df8ee5b15a37c346fc089912820473f47e53947ac100bac42937d9d0283ded6cd84f16e1be96a160b768392ac17c4a1c84d8daef79aef70097f2d0f6d11829127ec35b9b0a81969bbb534a69494ca6a1a9ee38f9993c8a3e8e4187bad29a6e596b4f531cd3d7d0992e4d9915fc92f87bd941a1aaaaf72d4ccf75be892289961beb5875d035994794906ac1e96c39332042551e4a56bb494661a67ac4ba889ef21d96fdf46835b4727a69d1b151245d9de0e05365842b599bec67d1c62159d625dc398bbb7c89faf448476ff78f7a212646d553915fc4ad421c6e687b179a58073a9cc2b4410d"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xb4, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa933c4148b885cf9}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x26}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1e}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x2c4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7e, 0x1, "6fce60de4504c750b6ea65cca22b361213ab822fe9128ebc35c7cac958dd845afe7f62fa8e496d4b9b249039bcc6859261cf458270ca2ef9c0b5e5353512407c7e6a89c2e6c6c7886939e6a1d37fe109e9c8e9d086c60eba40f5c73faec829d4fb00bf3c11249fafea67c4c31cc20e8f0dc635d9684f1c5a5b17"}, @NFTA_DATA_VALUE={0x2a, 0x1, "21191507fe82bbe02bf49d6ef342b8a0d2542ff0c2289ed63d6e1949eeaa6cd81c622c9219db"}, @NFTA_DATA_VALUE={0x83, 0x1, "77dcbd17e12c778b522ca4185a525c1ed4bfa250b5232796eef54d68f620bfe127ebb9b05f46e1bfa59fcc94211b24aa63d91c8a2ee31e3716ee408b6fc5af0b5aebefece4349d2bddbf6d86f8722bee4e2ce2b44dd0decdadad32305d806e72be17696e0129a0fa4d9e7016a3d2be3d9c3b5984ab28a7142764eccf5ddf72"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "9949b591a5c22118123701d93aa5e44dbd110a56ff0556b0fa8e95f1adec7745bac172938e9d30af5f05bc58a3e036aa4bc71b3165a5607eb626cffebd4b4baebe3f17ea9d9dcc948afd21e8b093069bb1c8094228bb2e9fb24c7754f3ac048a0fce36c3fd777988c9104b1fa0879a5ac822b2b2c5e63659148f918b5a2ec482b3ec9e947b8b643dc6b56833c72cb69d6143a418e3da1282f066340e88df83a4959648f359df4bdf9bc20fd82f3eed9401379edf2883e0d3ef93a9aa7cb89337a2bf3112e066f47ad0daf9c205bb425d1af1b8ebc52c3b4fda54470be62e23eb51e253bd84d4514807f9b693584e3ee47cac"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x298, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x250, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xbe, 0x1, "f7a81e7d18237f4d8a8eab2d7a1e5a86445a6564af947e8e60e5fd586438e7fe17807639d4e92a06f8ee1f147fbbe8fd2509428573bc27cbc6a163f610bf4960f6fe9d0a6810666988b5c79d4909de9d206357180f47db3f7d111d71183397a18e63a2fff53a2a1314c6c0fcfce51bf80b55527009873dcc6c0728c77fa01103359d72f2680d8c3ebd299b67777d18bc3bb3f44d5a9746430858f560f06a32f7b662c33f5887ad9f60b235a22acbe33634222ac0ee5a85138432"}, @NFTA_DATA_VALUE={0xae, 0x1, "a0145da40aecb4efb66f7724432c79bad50b74ec14ba03e7b134c214346816571d5f0e902483c053bfe3ba754653c783f60dc2df7dc7dd95574ae84155b7b2282a66738d1f51b2231a452235f2440a6258c33ca87a3a0b2fe1912a5cf68361824272fa18b026e9713b656f0c269bfbe47591083f4a1f08cb8d9248e837326eade35c635715054782fa8b2316e3ae53c4eb5a3b64c0d1442d953e5328e0ee21c27732e5487e4355631e00"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "b5593069dee97703cea2a1a22c722b4446424428b7cb08aaca380e1a06ed9e97b14f21ae988e568d41e817f5cdfeaf76ec65a8316d076a187e60ebc96bc827424843e7df8ac292bbd76c975602b291d4d757d8d53c9ba52688b9abd967e7e19012708445c49b552338060bee6f1ed954126d25bcad77a04db8520061a7a8a63f991d0757f4be32"}]}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x20, 0x1, "4e9b6ae1d708e9e657f955e6f5e950401bf3d8f7f40913c53c961c08"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000001}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6b48}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000900"/24]) 39.043574261s ago: executing program 7 (id=2611): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010004bc5937a6d2c8fa01e2e71040000", @ANYRES32=0x0, @ANYBLOB="4018000000000000300012800800010067726500240002800600180005000000080004001affffff06000e000300000008000500"], 0x50}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1ff, 0x204800) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000000c0)=""/19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) times(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x74}}, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, 0x0, 0x4a}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x296, 0xc, &(0x7f0000000100)=0x1) 38.70042952s ago: executing program 2 (id=2612): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0xc00, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) 38.26301152s ago: executing program 2 (id=2613): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) sendfile(r2, r2, 0x0, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1fff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0xfe, 0x60000000}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000048040)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x6}, 0x94) lseek(0xffffffffffffffff, 0x1, 0x0) 36.409412988s ago: executing program 2 (id=2614): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0xd0, 0x1d8, 0xd0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @empty, 0xff000000, 0xffffff00, 'veth0_vlan\x00', 'ip6erspan0\x00', {0xff}, {}, 0x21, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x0, 0xa, [0x15, 0x1d, 0x3, 0x3b, 0x5, 0x16, 0x26, 0xa, 0x2b, 0x20, 0x29, 0x3, 0x25, 0x15, 0x32, 0x24], 0x0, 0x100, 0x10001}}}, {{@ip={@broadcast, @multicast1, 0x0, 0xffffff00, 'veth1\x00', 'batadv0\x00', {0xff}, {0xff}, 0x16, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x0, 0x0, 0x5, 0x2], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x5, 0x7, 0x2, 0x1], 0x2, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000be5000/0x1000)=nil, 0x1000, 0x1, 0x12, r1, 0x838a3000) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xfda86) syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000000)=ANY=[], 0x0) 35.660786878s ago: executing program 7 (id=2617): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000980)={0x20, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x8}]}, 0x20}}, 0x0) 35.272863835s ago: executing program 7 (id=2619): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xd4}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="3135fa", 0x3}], 0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x260}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)=@can, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000500)="ea8b1cb74879009e4b954b46ff711d8343bd92be97b4d9b4d10f515c66744ec630e9270667aaca332927132163042160f1fe9550a640e7c8e453c1a95ecacbae8946ebc797be958157f344af36c0abb6d7f4474065d783f276998ab7e875392d8d1559accb62701f77fd", 0x6a}, {0x0}, {&(0x7f0000000580)="9b2edf758b39a7c87d1d7473e6a745c766759f711d4078690d328212ff8961d68f82d9f3fa2dce355db0831fabb9cc6f6e60b18c31ecc0f1cdb08c4876044f95575379d29c456b362d865e0a6151da3b3cbcf1c691d565a10d7823fe4dfeb4a6305de6a9", 0x64}, {&(0x7f0000000600)="e05dde45f184e5303fbaa2ef38ab0e4ded2a0dfa3bac07703161a7c5d30948a655c6992ffc4ae21131cfbefcbeab6e474974960d39ebe4bdfd3d7d7cc4de7862ec82b46eaf848ee97dacea7cf1ea3a8a49af5fe74b8d2d07edd9f080e115c17da20f0bbabaadda52d6f5b83101b75f831cafc528345df6199256571c09d9a72e44709c9fe49488ebd5da590a56fe7abec780cad7d95d482aea6a1c313f7cdfeb9eb1943caa2889fbeaf3ec59e6e76947dae0da8dc682f0fc668e7158ba296a01", 0xc0}, {&(0x7f00000006c0)}, {&(0x7f0000000740)="699f25cb96b87044f1bdef2b94f77597fe8e061ca46f83c61186c702b2ec8f4b791680ebed3fd708f3660403a7bd60886e0e16934dc1b1f9dcc1066682416272fc55377eeea72c26e4d3b2f26fd0d600e6ec82c86fda1d9f6b125c73a88e955e11bc6d7d8e544bdee1ac256e85d401cd80a30bdd7d2961c744d19fc8522c95ea6564e7e115f8f89a957eb67c844dc0590ee54d357ec15a4f79ddc1db514e6898117c962ed1b50d42863bb43e05520d1dad1ebfd80e571e7a58c3d77ccfa326cddba2013beb85270f6f12401a9a", 0xcd}], 0x6, &(0x7f0000001940)}, 0x4084024) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 34.945330043s ago: executing program 7 (id=2621): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x20000000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 32.130826952s ago: executing program 42 (id=2587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getegid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r5 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) io_submit(r4, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x8885}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x18500, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x80006) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1e, 0x8, @private0, 0x8}, 0x1c) 31.778925104s ago: executing program 7 (id=2625): timer_create(0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xe08}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4040) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000080)={0x6, 0x8002, 0x3, 0x80000005, r4}, &(0x7f00000000c0)=0x10) fsopen(&(0x7f0000000140)='incremental-fs\x00', 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x1, 0x7f, 0x8, r6}, &(0x7f00000001c0)=0x10) 31.698121316s ago: executing program 2 (id=2626): syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040341a056f7b8eb000000109022400010000000409040000010300000009210000000122070009058103"], 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000100)=0x100000001, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x18) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000200)={0xc}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe9a8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x11, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000080) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') pread64(r8, &(0x7f0000000100)=""/253, 0xfd, 0xadc) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x48, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x840) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) open(&(0x7f00000002c0)='./file1\x00', 0x2c000, 0x80) 30.872839508s ago: executing program 3 (id=2627): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x0) listen(r1, 0x9) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYRESDEC], 0x178}, 0x548) readv(r0, &(0x7f0000000b40)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x2) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 28.948513495s ago: executing program 3 (id=2628): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000980)={0x20, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x8}]}, 0x20}}, 0x0) 28.759965912s ago: executing program 3 (id=2629): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@allocspi={0x114, 0x16, 0x61bb1f11be440ab3, 0x70bd26, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, 0x4e24, 0x8, 0x4e20, 0x5, 0xa, 0xa0, 0x1a0, 0x2a}, {@in6=@mcast2, 0x4d5, 0x33}, @in=@multicast2, {0x0, 0xa, 0xfffffffffffffff9, 0x3, 0x2, 0x9, 0x200000000009, 0x4}, {0xfffffffffffffffb, 0x860a, 0x310, 0x7}, {0x7fffffff, 0x8, 0x2ed9}, 0x70bd2b, 0x0, 0xa, 0x0, 0x1, 0x1}, 0x3, 0xffff}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2c, 0xc3b, 0x70bd29, 0x101}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) 27.555603439s ago: executing program 2 (id=2630): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x80200003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000c00000/0x1000)=nil, 0x1000, 0x16) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r2, r5, &(0x7f0000000080)=0x9ac, 0x1) close_range(0xffffffffffffffff, r1, 0x0) r6 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x20000) preadv(r6, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) 21.185257927s ago: executing program 3 (id=2631): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = dup(r5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x10, 0x7ffc0002}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x400000000002]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r8, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x34, 0x874fd42a7836ef63, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$UHID_INPUT(r6, &(0x7f0000001980)={0xf, {"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", 0x1000}}, 0x1006) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x7800, 0x7, 0x3, 0x8, {{0x21, 0x4, 0x3, 0x9, 0x84, 0x64, 0x0, 0x1, 0x2f, 0x0, @remote, @remote, {[@generic={0x89, 0x10, "06d5f1cb3de4e2c6bad1e0711b60"}, @timestamp_prespec={0x44, 0x14, 0x63, 0x3, 0x0, [{@private=0xa010101, 0x7fffffff}, {@local, 0x9}]}, @lsrr={0x83, 0xf, 0xd8, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @timestamp_addr={0x44, 0x14, 0x2b, 0x1, 0xb, [{@loopback, 0x80000000}, {@broadcast, 0xd}]}, @rr={0x7, 0x17, 0x5b, [@broadcast, @local, @multicast1, @multicast2, @local]}, @lsrr={0x83, 0xf, 0x1d, [@empty, @loopback, @empty]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'dvmrp1\x00', 0x0}) sendmmsg$inet(r6, &(0x7f0000003c40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)="b8", 0x1}, {&(0x7f0000000140)="c7e3f78445185637792acdb1988edfeff28a89ab2fe26932dbfa3036d98b905ea70f48155e2eb93fbfe5ca6481b6bf3ad39d016c6c94d356", 0x38}, {&(0x7f0000000180)="ce54f0619d0e905bc901a7fd6574c34b6ca15fa6613298175fe6f1e823b9c7e49d3cc8c03a8439f2c2515317d6bb72583c4af1c306a99894354de855f90d7946e25843c7da35ad2fabb472b7d96c1fffbfb0f47a44402087d03318380b6ec19205ea8ef4ffbd531fb1ec3f9829886f4b23dc45e363b7e7b24cbe0b48c4f1f29c42b5c32d3946275fd671eb07f9e311f01c4f840e73acf6ed5a0f", 0x9a}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000240)="92d4d8250bc73fa1", 0x8}], 0x5, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010102, @rand_addr=0x64010102}}}], 0x58}}, {{&(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000018c0)=[{&(0x7f00000005c0)="4a58e0db1e360a54d137c1e8f33e75c93488bfbf475effa39c43425233b0a9f0a395514074e344841398b69d16b9e6cca7427df6de", 0x35}, {&(0x7f0000001640)="4407c339c9e2", 0x6}, {&(0x7f0000001680)="37d43d3cf72183c03cf7bc42b74f9e30c531a0bcff734ed3534a9c9536f4604fdd793be2d456710feaf504397ba60ae76a5b9851ddc96b346691709a7064020427c7ab1cb57c2e68d69ad28be99aa77767374eb47b35047d2eb2399f54f2cb5051c525f19a8f4070ac00764bb0f0cb", 0x6f}, {&(0x7f00000029c0)="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", 0x1000}, {&(0x7f0000001700)="d9f44691def6c56c32889611bfa4caa7ede72288a10f3ccc530d893b38b4a5df8e45e07e495d0e5f0660630fe947f9a941d1a10233854cd9f8c8a6530fd12713712624853c2c6661ffabef4b568c35e9d514ea9e60a1a1ab241e454dd9e25991df8089e4acbf6ce3ee250ef8bce86497da6a0393ca10c431eb631e86a701b8c94e4be957a778d0107342bc0fdedcd8cef956e060b17234bc10594bf5597bc32302feca3ccb1e5f5d22d0de68aad80c816f9fc2195a3d9d82313a0b83dc7557d97daf61b903f73d5425583fd290774343c22d6c0c03da4a4156ffaa358f7c0cc190b1d8a721bf2238643d34b01488b6bc1096f21b2952", 0xf6}, {&(0x7f0000001800)="a4756ffeb8fe5b9cb5665bef28b159c6a716a8f69ca9402d721adc68bb015f295a049b6a877b7055ea6afd350ea8a81ca4545c419493c4f9ab5790a8452be649c25fc52f716c71a3f7301d9f7d1d06a41c88f5f8a6de1c3d7abeb6d0096551c127a14a85dc02b1f7d6da7226d118282bd5385d1010dc6c31d58b0e638a8c9a8ac2ff9b24d1f46ae90bfdd17586594b254d1ab918295340199aa7930dc209985626aa05d4340cb2ac", 0xa8}], 0x6, &(0x7f00000039c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5d}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast1, @local}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0x10, "bce16b5795051820b9efb5ce759b"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0xc8}}, {{&(0x7f0000001940)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003c00)=[{&(0x7f0000003ac0)="d096aee00756d2fbbfc960e3ea923bb9f813e867b1c6d53ae9259b7ba309dc6c6a", 0x21}, {&(0x7f0000003b00)="f31a4c57c3ed5bc021d0679642a5c1cfd47d8d13da7ad44b8e918633754b3c5cc92cd14fe43a1fe5e74fbd8226cb26d66b1c43a19cb711840c9dac967698d9573961ef4f83f098195f7b81629e6c35b4117111b6f06bb11253d46b71ea92fbeed1e8e21d7a353b8a0d3156c2605213cca0298a3f3cc4663d1fe4bf7324094446710192091ee2c7972c883e420b37737d1133d7cbce0b829ec5b88e6ae666bc0d2750fcf2ef48e60af156320c196e7342b7680f5554933f6d4ee669a1583e448c98cd98ba3a50ece678d12c2472dfcfe7980427b99aa61ec5851377b1a13cf167a1fe6ab9651b0e225abb73a0a401d1ba64e3cc2ad43d79c19ded8a790e1d", 0xfe}], 0x2}}], 0x3, 0x40488e4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 17.83452331s ago: executing program 3 (id=2632): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) socket$key(0xf, 0x3, 0x2) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000225708140d8131000728f010203010902"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) bind(r3, &(0x7f0000000000)=@hci={0xa, 0x2}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 16.789066645s ago: executing program 43 (id=2625): timer_create(0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xe08}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4040) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000080)={0x6, 0x8002, 0x3, 0x80000005, r4}, &(0x7f00000000c0)=0x10) fsopen(&(0x7f0000000140)='incremental-fs\x00', 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x1, 0x7f, 0x8, r6}, &(0x7f00000001c0)=0x10) 15.055977878s ago: executing program 3 (id=2634): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x90000}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xb66}, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYRES8=r4, @ANYRES64=r2, @ANYRES16=r1, @ANYBLOB="02c718a6f3907ab531a8fc937d526d16b8e907548b30547603f985ad767d8d7b5336a0fb8a8aa5a6a29d325ff752fc69cf533a86bf03743315c9c4cdf43182c08e89ce5bd90102b2bb44655e8eb9cb53f4cffa675000d4bc71a2babc2fbd6af5ad561096f8c934059eef30d476b7b081656baf6fa45e35d37820555533c3d080c18fbd54a0628654667e9934aeecae82423c0066e2234c451728eeb9eb93671a6b0a67741c2cfde3935ed1882fe0bc3050c1d9840e31e88cb4ae28", @ANYBLOB="14005e800800010000000e00080002"], 0x30}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x1d3, 0x4}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[@ANYBLOB="4001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201410153b3c220e71a2505d574010203013802240001000010000904300702b68eb1000905060240000d00060905820300020001101898b568fd39ab76b2230787e6d551e14274e2136ecf08d3be6cc2749e56ba1c980cd6da0464e0a6f471be211420917a6d89b9d1809e9fe19b62c034830c46dc66ceb7ed652687d826affd5cd9aa2f0b9426c14f0a5f7b94cb8e9b93c1590a1290f2538f2257bd2599891ffc73a1350d36927f7fb59584783284631110e3425b585a43f1e24c055e1475135b26e2cf9fbcf7a84c71b7e2ebd5b1c9aa346a35dc16c44da887dd5c80f027f535248da2f2ffca635a23"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) syz_clone(0x8a140600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000140)=ANY=[@ANYBLOB='\b']) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.446853945s ago: executing program 44 (id=2630): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x80200003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000c00000/0x1000)=nil, 0x1000, 0x16) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r2, r5, &(0x7f0000000080)=0x9ac, 0x1) close_range(0xffffffffffffffff, r1, 0x0) r6 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x20000) preadv(r6, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) 0s ago: executing program 45 (id=2634): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x90000}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xb66}, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYRES8=r4, @ANYRES64=r2, @ANYRES16=r1, @ANYBLOB="02c718a6f3907ab531a8fc937d526d16b8e907548b30547603f985ad767d8d7b5336a0fb8a8aa5a6a29d325ff752fc69cf533a86bf03743315c9c4cdf43182c08e89ce5bd90102b2bb44655e8eb9cb53f4cffa675000d4bc71a2babc2fbd6af5ad561096f8c934059eef30d476b7b081656baf6fa45e35d37820555533c3d080c18fbd54a0628654667e9934aeecae82423c0066e2234c451728eeb9eb93671a6b0a67741c2cfde3935ed1882fe0bc3050c1d9840e31e88cb4ae28", @ANYBLOB="14005e800800010000000e00080002"], 0x30}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x1d3, 0x4}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[@ANYBLOB="4001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201410153b3c220e71a2505d574010203013802240001000010000904300702b68eb1000905060240000d00060905820300020001101898b568fd39ab76b2230787e6d551e14274e2136ecf08d3be6cc2749e56ba1c980cd6da0464e0a6f471be211420917a6d89b9d1809e9fe19b62c034830c46dc66ceb7ed652687d826affd5cd9aa2f0b9426c14f0a5f7b94cb8e9b93c1590a1290f2538f2257bd2599891ffc73a1350d36927f7fb59584783284631110e3425b585a43f1e24c055e1475135b26e2cf9fbcf7a84c71b7e2ebd5b1c9aa346a35dc16c44da887dd5c80f027f535248da2f2ffca635a23"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) syz_clone(0x8a140600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000140)=ANY=[@ANYBLOB='\b']) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): e the problem. [ 1055.240878][T13505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.244087][T13509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.244099][T13509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.244126][T13509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.480541][T13511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.480561][T13511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.480591][T13511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.623042][T13511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.623055][T13511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.623076][T13511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.642626][T13502] hsr_slave_0: entered promiscuous mode [ 1055.643755][T13502] hsr_slave_1: entered promiscuous mode [ 1055.899531][T13499] hsr_slave_0: entered promiscuous mode [ 1055.900841][T13499] hsr_slave_1: entered promiscuous mode [ 1055.901526][T13499] debugfs: 'hsr0' already exists in 'hsr' [ 1055.901544][T13499] Cannot create hsr debugfs directory [ 1056.089463][T13505] hsr_slave_0: entered promiscuous mode [ 1056.090821][T13505] hsr_slave_1: entered promiscuous mode [ 1056.091544][T13505] debugfs: 'hsr0' already exists in 'hsr' [ 1056.091566][T13505] Cannot create hsr debugfs directory [ 1056.156432][T13509] hsr_slave_0: entered promiscuous mode [ 1056.157532][T13509] hsr_slave_1: entered promiscuous mode [ 1056.158304][T13509] debugfs: 'hsr0' already exists in 'hsr' [ 1056.158324][T13509] Cannot create hsr debugfs directory [ 1056.518206][T13511] hsr_slave_0: entered promiscuous mode [ 1056.519984][T13511] hsr_slave_1: entered promiscuous mode [ 1056.521128][T13511] debugfs: 'hsr0' already exists in 'hsr' [ 1056.521156][T13511] Cannot create hsr debugfs directory [ 1059.270313][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.270396][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.324021][ T58] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.600507][ T58] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.849062][ T58] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.098395][ T58] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.744734][ T58] bridge_slave_1: left allmulticast mode [ 1063.745585][ T58] bridge_slave_1: left promiscuous mode [ 1063.745840][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.795900][ T58] bridge_slave_0: left allmulticast mode [ 1063.795924][ T58] bridge_slave_0: left promiscuous mode [ 1063.796134][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.858180][ T58] bridge_slave_1: left allmulticast mode [ 1063.858204][ T58] bridge_slave_1: left promiscuous mode [ 1063.858383][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.925958][ T58] bridge_slave_0: left allmulticast mode [ 1063.925989][ T58] bridge_slave_0: left promiscuous mode [ 1063.926178][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.018052][ T58] bridge_slave_1: left allmulticast mode [ 1064.018077][ T58] bridge_slave_1: left promiscuous mode [ 1064.018255][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.075959][ T58] bridge_slave_0: left allmulticast mode [ 1064.075985][ T58] bridge_slave_0: left promiscuous mode [ 1064.076162][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.138050][ T58] bridge_slave_1: left allmulticast mode [ 1064.138074][ T58] bridge_slave_1: left promiscuous mode [ 1064.138267][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.195918][ T58] bridge_slave_0: left allmulticast mode [ 1064.195941][ T58] bridge_slave_0: left promiscuous mode [ 1064.196113][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.257834][ T58] bridge_slave_1: left allmulticast mode [ 1064.257859][ T58] bridge_slave_1: left promiscuous mode [ 1064.258055][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.315824][ T58] bridge_slave_0: left allmulticast mode [ 1064.315849][ T58] bridge_slave_0: left promiscuous mode [ 1064.316040][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.364308][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1066.444344][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.505624][ T58] bond0 (unregistering): Released all slaves [ 1067.273953][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.353840][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.445306][ T58] bond0 (unregistering): Released all slaves [ 1067.993579][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.073714][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.134866][ T58] bond0 (unregistering): Released all slaves [ 1069.832567][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1069.913329][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.934656][ T58] bond0 (unregistering): Released all slaves [ 1070.262669][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.342269][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.403948][ T58] bond0 (unregistering): Released all slaves [ 1072.433811][T13502] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1072.739517][T13502] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1072.803539][T13502] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1072.868647][T13502] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1073.060423][ T58] hsr_slave_0: left promiscuous mode [ 1073.080378][ T58] hsr_slave_1: left promiscuous mode [ 1073.081146][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.121034][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.270355][ T58] hsr_slave_0: left promiscuous mode [ 1073.290297][ T58] hsr_slave_1: left promiscuous mode [ 1073.291229][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.360889][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.500106][ T58] hsr_slave_0: left promiscuous mode [ 1073.540179][ T58] hsr_slave_1: left promiscuous mode [ 1073.541171][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.580746][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.789972][ T58] hsr_slave_0: left promiscuous mode [ 1073.810019][ T58] hsr_slave_1: left promiscuous mode [ 1073.810796][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.810817][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.851065][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.851096][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.009859][ T58] hsr_slave_0: left promiscuous mode [ 1074.029892][ T58] hsr_slave_1: left promiscuous mode [ 1074.030704][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.070527][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.155616][ T58] veth1_macvtap: left promiscuous mode [ 1074.155690][ T58] veth0_macvtap: left promiscuous mode [ 1074.155861][ T58] veth1_vlan: left promiscuous mode [ 1074.155980][ T58] veth0_vlan: left promiscuous mode [ 1075.090887][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1075.219911][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1076.709050][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1076.869019][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1078.078582][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1078.218293][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1080.927088][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1081.167806][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1084.255213][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1084.385292][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1085.140880][T13499] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1085.183229][T13499] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1085.219627][T13499] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1085.279607][T13499] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1085.474741][T13505] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1085.510207][T13505] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1085.577343][T13505] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1085.672132][T13505] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1085.802492][T13509] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1085.853145][T13509] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1085.916065][T13509] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1086.012888][T13509] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1086.086038][T13502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.151122][T13511] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1086.186173][T13511] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1086.247530][T13511] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1086.301899][T13511] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1086.359877][T13502] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.398483][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.398642][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.407051][T13499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.436606][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.436741][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.537224][T13499] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.599296][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.599459][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.652115][T13505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.677913][ T5012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.678070][ T5012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.752652][T13505] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.825203][T13509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.869028][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.869768][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.958227][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.959149][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.072140][T13509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.109794][T13511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.128629][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.128857][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.179933][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.185102][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.297819][T13511] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.369011][ T1374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.369264][ T1374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.437657][ T1374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.437818][ T1374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.495280][T13502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.681776][T13499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.839812][T13502] veth0_vlan: entered promiscuous mode [ 1087.925880][T13502] veth1_vlan: entered promiscuous mode [ 1088.029763][T13505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.277226][T13502] veth0_macvtap: entered promiscuous mode [ 1088.315384][T13502] veth1_macvtap: entered promiscuous mode [ 1088.368491][T13505] veth0_vlan: entered promiscuous mode [ 1088.480271][T13505] veth1_vlan: entered promiscuous mode [ 1088.484913][T13502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1088.511050][T13509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.556977][T13502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.578391][T13511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.633532][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.652069][ T5012] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.666800][ T5012] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.681238][ T5012] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.957585][T13505] veth0_macvtap: entered promiscuous mode [ 1089.042708][T13505] veth1_macvtap: entered promiscuous mode [ 1089.124175][T13499] veth0_vlan: entered promiscuous mode [ 1089.244718][T13509] veth0_vlan: entered promiscuous mode [ 1089.250819][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.250839][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.263623][T13499] veth1_vlan: entered promiscuous mode [ 1089.267867][T13505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.334861][T13505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.335511][T13509] veth1_vlan: entered promiscuous mode [ 1089.380646][ T2180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.380670][ T2180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.382357][ T1374] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.388980][ T1374] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.397997][ T1374] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.423993][ T1374] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.798013][T13511] veth0_vlan: entered promiscuous mode [ 1090.211077][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2142'. [ 1090.842214][T13499] veth0_macvtap: entered promiscuous mode [ 1090.879875][T13509] veth0_macvtap: entered promiscuous mode [ 1090.896628][T13511] veth1_vlan: entered promiscuous mode [ 1090.910678][T13499] veth1_macvtap: entered promiscuous mode [ 1090.960924][T13509] veth1_macvtap: entered promiscuous mode [ 1091.042983][ T5012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.043007][ T5012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.164612][T13499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.167093][T13509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.167902][ T5012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.167921][ T5012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.206685][T13499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.208663][T13509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.272001][T13511] veth0_macvtap: entered promiscuous mode [ 1091.293784][ T5012] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.298369][ T5012] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.300050][ T5012] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.328527][T13511] veth1_macvtap: entered promiscuous mode [ 1091.329688][ T5012] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.341838][ T5012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.348107][ T5012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.358752][ T5012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.364804][ T5012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.587756][T13616] Bluetooth: MGMT ver 1.23 [ 1091.614882][T13511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.764850][T13511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.973982][ T87] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.223768][ T1374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.223793][ T1374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.226021][ T87] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.227163][ T5943] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 1093.142216][ T87] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.193564][ T5800] Bluetooth: hci9: command 0x0405 tx timeout [ 1093.282675][ T5943] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.282721][ T5943] usb 2-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 1093.282762][ T5943] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1093.282790][ T5943] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1093.284152][ T5943] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1093.284180][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1093.284200][ T5943] usb 2-1: SerialNumber: syz [ 1093.290362][ T87] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.292891][ T5943] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1093.292913][ T5943] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 1093.292953][ T5943] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 1093.448692][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.448716][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.754360][T13150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.761246][T13150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.958635][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.958658][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.087200][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.087222][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.424553][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1094.446495][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1094.457311][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1094.469666][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1094.470747][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1094.861175][ T44] usb 2-1: USB disconnect, device number 34 [ 1094.998233][T13640] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1094.998263][T13640] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1095.063616][T13640] vhci_hcd vhci_hcd.0: Device attached [ 1095.369163][ T6191] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1095.519007][ T5934] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1095.668918][ T5934] usb 5-1: Using ep0 maxpacket: 16 [ 1095.671899][ T5934] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 1095.671920][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.671935][ T5934] usb 5-1: config 0 has no interfaces? [ 1095.671957][ T5934] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1095.671975][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.731096][ T5934] usb 5-1: config 0 descriptor?? [ 1095.956439][ T5882] usb 5-1: USB disconnect, device number 66 [ 1095.960704][T13642] usb 41-1: recv xbuf, 0 [ 1096.068139][ T5012] vhci_hcd: stop threads [ 1096.079099][ T5012] vhci_hcd: release socket [ 1096.085464][ T5012] vhci_hcd: disconnect device [ 1096.098789][ T6191] vhci_hcd: vhci_device speed not set [ 1096.846701][ T5800] Bluetooth: hci1: command tx timeout [ 1097.144051][ T43] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.206442][T13673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2201'. [ 1097.628076][ T37] kauditd_printk_skb: 32 callbacks suppressed [ 1097.628096][ T37] audit: type=1400 audit(2000001091.661:1831): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=13679 comm="syz.2.2202" daddr=::ffff:172.20.20.4 [ 1098.028978][ T6191] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1098.101599][ T43] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.177665][ T6191] usb 5-1: device descriptor read/64, error -71 [ 1098.368308][ T37] audit: type=1326 audit(2000001092.162:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13686 comm="syz.1.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee799efc9 code=0x7ffc0000 [ 1098.368371][ T37] audit: type=1326 audit(2000001092.162:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13686 comm="syz.1.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee799efc9 code=0x7ffc0000 [ 1098.368430][ T37] audit: type=1326 audit(2000001092.162:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13686 comm="syz.1.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f3ee799efc9 code=0x7ffc0000 [ 1098.368478][ T37] audit: type=1326 audit(2000001092.172:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13686 comm="syz.1.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee799efc9 code=0x7ffc0000 [ 1098.368526][ T37] audit: type=1326 audit(2000001092.172:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13686 comm="syz.1.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee799efc9 code=0x7ffc0000 [ 1098.368573][ T37] audit: type=1326 audit(2000001092.172:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13686 comm="syz.1.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3ee799efc9 code=0x7ffc0000 [ 1098.413930][ T37] audit: type=1326 audit(2000001092.442:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13686 comm="syz.1.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee799efc9 code=0x7ffc0000 [ 1098.413988][ T37] audit: type=1326 audit(2000001092.442:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13686 comm="syz.1.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee799efc9 code=0x7ffc0000 [ 1098.436889][ C1] vkms_vblank_simulate: vblank timer overrun [ 1098.442820][ T37] audit: type=1326 audit(2000001092.482:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13686 comm="syz.1.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3ee799efc9 code=0x7ffc0000 [ 1098.524427][ C1] vkms_vblank_simulate: vblank timer overrun [ 1098.579468][T13691] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2204'. [ 1098.591846][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.199512][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.200830][ T5800] Bluetooth: hci1: command tx timeout [ 1099.417070][ T6191] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1099.550853][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.550964][ T6191] usb 5-1: device descriptor read/64, error -71 [ 1099.635818][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.657397][ T6191] usb usb5-port1: attempt power cycle [ 1099.673360][ T43] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.820163][T13632] chnl_net:caif_netlink_parms(): no params data found [ 1100.006739][ T6191] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1100.526619][ T6191] usb 5-1: device descriptor read/8, error -71 [ 1100.561483][ T43] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.253968][ T5800] Bluetooth: hci1: command tx timeout [ 1101.255679][ T6191] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1101.604092][ T6191] usb 5-1: device descriptor read/8, error -71 [ 1101.742674][ T6191] usb usb5-port1: unable to enumerate USB device [ 1103.326592][ T5800] Bluetooth: hci1: command tx timeout [ 1103.864907][ T5934] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1104.000549][T13736] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1104.000587][T13736] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1104.001106][T13736] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1104.001123][T13736] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1104.045548][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.045714][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.045760][ T5934] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1104.045785][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.074762][T11535] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1104.244620][T11535] usb 5-1: Using ep0 maxpacket: 32 [ 1104.248461][T11535] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1104.248501][T11535] usb 5-1: can't read configurations, error -61 [ 1104.293444][ T5934] usb 4-1: config 0 descriptor?? [ 1104.415548][T11535] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1104.617374][T13632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.618063][T13632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.618665][T13632] bridge_slave_0: entered allmulticast mode [ 1104.623388][T13632] bridge_slave_0: entered promiscuous mode [ 1104.624679][T11535] usb 5-1: Using ep0 maxpacket: 32 [ 1104.664767][T11535] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1104.664842][T11535] usb 5-1: can't read configurations, error -61 [ 1104.666585][T11535] usb usb5-port1: attempt power cycle [ 1104.752194][T13632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.752479][T13632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.752887][T13632] bridge_slave_1: entered allmulticast mode [ 1104.810555][T13632] bridge_slave_1: entered promiscuous mode [ 1105.056125][T11535] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1105.097182][T11535] usb 5-1: Using ep0 maxpacket: 32 [ 1105.121478][T11535] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1105.121518][T11535] usb 5-1: can't read configurations, error -61 [ 1105.244386][T11535] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1105.265037][T11535] usb 5-1: Using ep0 maxpacket: 32 [ 1105.268467][T11535] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1105.269148][T11535] usb 5-1: can't read configurations, error -61 [ 1105.271285][T11535] usb usb5-port1: unable to enumerate USB device [ 1105.385802][T13632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.500768][T13632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.000885][ T5934] usbhid 4-1:0.0: can't add hid device: -71 [ 1106.000993][ T5934] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1106.024195][ T5934] usb 4-1: USB disconnect, device number 31 [ 1106.066289][ C1] vkms_vblank_simulate: vblank timer overrun [ 1106.234692][ C1] vkms_vblank_simulate: vblank timer overrun [ 1106.617147][ C1] vkms_vblank_simulate: vblank timer overrun [ 1106.959485][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 1106.959505][ T37] audit: type=1326 audit(2000001100.996:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1106.959558][ T37] audit: type=1326 audit(2000001100.996:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1107.154882][ T37] audit: type=1326 audit(2000001100.996:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1107.154924][ T37] audit: type=1326 audit(2000001100.996:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1107.154957][ T37] audit: type=1326 audit(2000001100.996:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1107.154990][ T37] audit: type=1326 audit(2000001100.996:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1107.155025][ T37] audit: type=1326 audit(2000001101.176:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1107.155065][ T37] audit: type=1326 audit(2000001101.176:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1107.155098][ T37] audit: type=1326 audit(2000001101.186:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1107.155131][ T37] audit: type=1326 audit(2000001101.186:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.2222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1107.295665][T13758] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2222'. [ 1107.523642][ C1] vkms_vblank_simulate: vblank timer overrun [ 1107.933720][ C1] vkms_vblank_simulate: vblank timer overrun [ 1108.122717][T13132] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1108.184596][ T43] bridge_slave_1: left allmulticast mode [ 1108.184621][ T43] bridge_slave_1: left promiscuous mode [ 1108.184838][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.252690][T13132] usb 3-1: device descriptor read/64, error -71 [ 1108.398744][ T5800] Bluetooth: hci9: unexpected event for opcode 0x0c1b [ 1108.414929][ C1] vkms_vblank_simulate: vblank timer overrun [ 1108.436276][ T43] bridge_slave_0: left allmulticast mode [ 1108.436297][ T43] bridge_slave_0: left promiscuous mode [ 1108.436511][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.524311][T13132] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1108.662585][T13132] usb 3-1: device descriptor read/64, error -71 [ 1108.783000][T13132] usb usb3-port1: attempt power cycle [ 1109.018188][ C1] vkms_vblank_simulate: vblank timer overrun [ 1109.132389][T13132] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1109.164406][T13132] usb 3-1: device descriptor read/8, error -71 [ 1109.436137][T13132] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1109.493322][T13132] usb 3-1: device descriptor read/8, error -71 [ 1109.556803][ C1] vkms_vblank_simulate: vblank timer overrun [ 1109.610921][T13132] usb usb3-port1: unable to enumerate USB device [ 1109.732661][ C1] vkms_vblank_simulate: vblank timer overrun [ 1110.051433][ C1] vkms_vblank_simulate: vblank timer overrun [ 1110.178205][T13782] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2231'. [ 1110.184183][ C1] vkms_vblank_simulate: vblank timer overrun [ 1110.807165][ C1] vkms_vblank_simulate: vblank timer overrun [ 1112.630451][T13132] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1112.813696][T13132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.813733][T13132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.813772][T13132] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1112.813789][T13132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.817566][T13132] usb 3-1: config 0 descriptor?? [ 1112.872675][T13798] gfs2: error -5 reading superblock [ 1113.880726][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.940709][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1114.114941][ T43] bond0 (unregistering): Released all slaves [ 1114.682001][T11535] usb 5-1: new low-speed USB device number 75 using dummy_hcd [ 1115.023596][T13632] team0: Port device team_slave_0 added [ 1115.028845][T13632] team0: Port device team_slave_1 added [ 1115.040341][T11535] usb 5-1: device descriptor read/64, error -71 [ 1116.239000][T13132] usbhid 3-1:0.0: can't add hid device: -71 [ 1116.239134][T13132] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1116.279205][T13132] usb 3-1: USB disconnect, device number 80 [ 1116.389445][ T5882] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1116.389525][T11535] usb 5-1: new low-speed USB device number 76 using dummy_hcd [ 1116.483575][ C1] vkms_vblank_simulate: vblank timer overrun [ 1116.579179][ C1] vkms_vblank_simulate: vblank timer overrun [ 1116.580492][T11535] usb 5-1: device descriptor read/64, error -71 [ 1116.689982][T11535] usb usb5-port1: attempt power cycle [ 1116.716903][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.716941][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.716983][ T5882] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1116.717008][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.735061][ T5882] usb 4-1: config 0 descriptor?? [ 1117.038284][T11535] usb 5-1: new low-speed USB device number 77 using dummy_hcd [ 1117.078189][T13132] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1117.088382][T11535] usb 5-1: device descriptor read/8, error -71 [ 1117.217873][ C1] vkms_vblank_simulate: vblank timer overrun [ 1117.308382][T13132] usb 3-1: Using ep0 maxpacket: 8 [ 1117.311789][T13132] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1117.313568][T13132] usb 3-1: config 4 has an invalid interface number: 187 but max is 0 [ 1117.313593][T13132] usb 3-1: config 4 has no interface number 0 [ 1117.313626][T13132] usb 3-1: config 4 interface 187 has no altsetting 0 [ 1117.316944][T13132] usb 3-1: New USB device found, idVendor=04cb, idProduct=0119, bcdDevice=fa.6b [ 1117.317030][T13132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.317053][T13132] usb 3-1: Product: ဌ [ 1117.317067][T13132] usb 3-1: Manufacturer: 䣵⮽ᙛ耬æˆá±”㉑ڿ⦺볼쮆㢃ᕻ䭩櫵톶虦ತℨ既塢擶塾滓湓à¿î—»ä ¢ê·‘塹歒຅ꃛ袔헒̑篮왽á·ç‰”㮡빲橞扰ቊࣟ㎈鬊ë”ᗅ俾Ģ䯒ቺ蚱ಊ௧礆ꆖ퓻㼠髉뿟哪”í’㸧ã¢ïŠê¾šë¸¨í—€å‰‹ÏŠé”Ÿæ ˜â©§î㙒쥽뇖휋軜縉猲㦃暿 [ 1117.317095][T13132] usb 3-1: SerialNumber: 霱êƒè¯„簠얉煿緅ä§ï¤»éƒ£æ¼©ç…­âƒ‘䴕Ჲè¦ß…䧶噑袜ã‹á¦†ç‡¼ê’­å˜“鵬켉梛뒀⥌猂 [ 1117.332314][ C1] vkms_vblank_simulate: vblank timer overrun [ 1117.400272][T11535] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 1117.471999][T13632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.472018][T13632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.472993][T13632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1117.549336][T13632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1117.550834][T13632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.550941][T13632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.607896][T11535] usb 5-1: device not accepting address 78, error -71 [ 1117.608515][T11535] usb usb5-port1: unable to enumerate USB device [ 1117.862782][T13132] gspca_main: finepix-2.14.0 probing 04cb:0119 [ 1117.888181][T13132] usb 3-1: USB disconnect, device number 81 [ 1118.217835][ T43] hsr_slave_0: left promiscuous mode [ 1118.257750][ T43] hsr_slave_1: left promiscuous mode [ 1118.258873][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1118.258937][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.289371][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1118.289394][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.371186][ T5882] usbhid 4-1:0.0: can't add hid device: -71 [ 1118.371319][ T5882] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1118.412008][ T5882] usb 4-1: USB disconnect, device number 32 [ 1118.607707][ T43] veth1_macvtap: left promiscuous mode [ 1118.625741][ T43] veth0_macvtap: left promiscuous mode [ 1118.626101][ T43] veth1_vlan: left promiscuous mode [ 1118.626290][ T43] veth0_vlan: left promiscuous mode [ 1119.506742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1119.962213][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.377503][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.460101][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.683321][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.683425][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.155611][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.187164][T13857] erofs (device loop2): cannot find valid erofs superblock [ 1122.270918][T13886] FAULT_INJECTION: forcing a failure. [ 1122.270918][T13886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.270958][T13886] CPU: 1 UID: 0 PID: 13886 Comm: syz.3.2265 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1122.270996][T13886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1122.271011][T13886] Call Trace: [ 1122.271021][T13886] [ 1122.271031][T13886] dump_stack_lvl+0x189/0x250 [ 1122.271070][T13886] ? __pfx____ratelimit+0x10/0x10 [ 1122.271098][T13886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1122.271131][T13886] ? __pfx__printk+0x10/0x10 [ 1122.271156][T13886] ? __might_fault+0xb0/0x130 [ 1122.271219][T13886] should_fail_ex+0x46c/0x600 [ 1122.271256][T13886] _copy_from_user+0x2d/0xb0 [ 1122.271282][T13886] do_ip_vs_get_ctl+0x29a/0xd10 [ 1122.271314][T13886] ? __pfx_do_ip_vs_get_ctl+0x10/0x10 [ 1122.271353][T13886] ? lockdep_hardirqs_on+0x9c/0x150 [ 1122.271383][T13886] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1122.271413][T13886] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1122.271445][T13886] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1122.271475][T13886] ? lockdep_hardirqs_on+0x9c/0x150 [ 1122.271508][T13886] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1122.271535][T13886] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1122.271577][T13886] ? nf_getsockopt+0x224/0x290 [ 1122.271611][T13886] nf_getsockopt+0x26e/0x290 [ 1122.271646][T13886] ip_getsockopt+0x1c4/0x220 [ 1122.271691][T13886] ? __pfx_ip_getsockopt+0x10/0x10 [ 1122.271728][T13886] ? sock_common_getsockopt+0x2d/0xb0 [ 1122.271762][T13886] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1122.271794][T13886] smc_getsockopt+0x1ba/0x380 [ 1122.271826][T13886] ? __pfx_smc_getsockopt+0x10/0x10 [ 1122.271861][T13886] ? __pfx_smc_getsockopt+0x10/0x10 [ 1122.271891][T13886] do_sock_getsockopt+0x372/0x450 [ 1122.271919][T13886] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1122.271943][T13886] ? do_syscall_64+0xa0/0xfa0 [ 1122.271971][T13886] ? __fget_files+0x2a/0x420 [ 1122.271999][T13886] ? __fget_files+0x3a6/0x420 [ 1122.272027][T13886] ? __fget_files+0x2a/0x420 [ 1122.272065][T13886] __x64_sys_getsockopt+0x1ab/0x250 [ 1122.272088][T13886] ? do_syscall_64+0xa0/0xfa0 [ 1122.272117][T13886] ? do_syscall_64+0xa0/0xfa0 [ 1122.272148][T13886] do_syscall_64+0xfa/0xfa0 [ 1122.272191][T13886] ? lockdep_hardirqs_on+0x9c/0x150 [ 1122.272219][T13886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.272241][T13886] ? clear_bhb_loop+0x60/0xb0 [ 1122.272268][T13886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.272289][T13886] RIP: 0033:0x7f10e4afefc9 [ 1122.272309][T13886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1122.272329][T13886] RSP: 002b:00007f10e2d5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1122.272353][T13886] RAX: ffffffffffffffda RBX: 00007f10e4d55fa0 RCX: 00007f10e4afefc9 [ 1122.272369][T13886] RDX: 0000000000000484 RSI: 0000000000000000 RDI: 0000000000000003 [ 1122.272383][T13886] RBP: 00007f10e2d5e090 R08: 0000200000000000 R09: 0000000000000000 [ 1122.272397][T13886] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001 [ 1122.272411][T13886] R13: 00007f10e4d56038 R14: 00007f10e4d55fa0 R15: 00007ffc6e5fd218 [ 1122.272447][T13886] [ 1123.612252][T13913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2278'. [ 1124.036682][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1124.036702][ T37] audit: type=1400 audit(2000001118.085:1856): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=13929 comm="syz.1.2287" daddr=::ffff:0.0.0.0 dest=20002 [ 1124.124715][T13132] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1124.286934][T13132] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1124.286968][T13132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.292429][T13132] usb 4-1: config 0 descriptor?? [ 1124.327041][T13132] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1124.723402][T13923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.723864][T13923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.741933][T13132] gspca_spca508: reg_read err -71 [ 1124.742412][T13132] gspca_spca508: reg_read err -71 [ 1124.743552][T13132] gspca_spca508: reg_read err -71 [ 1124.743982][T13132] gspca_spca508: reg_read err -71 [ 1124.744539][T13132] gspca_spca508: reg write: error -71 [ 1124.744633][T13132] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 1124.784171][T13132] usb 4-1: USB disconnect, device number 33 [ 1125.126671][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1125.578134][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1126.749518][T14003] trusted_key: encrypted_key: insufficient parameters specified [ 1127.002987][ T5934] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1127.175821][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 1127.175857][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 95, setting to 64 [ 1127.175903][ T5934] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1127.175928][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.181246][ T5934] usb 4-1: config 0 descriptor?? [ 1127.182440][T14003] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1127.432147][ T5934] ath6kl: Failed to submit usb control message: -71 [ 1127.432185][ T5934] ath6kl: unable to send the bmi data to the device: -71 [ 1127.432196][ T5934] ath6kl: Unable to send get target info: -71 [ 1127.447091][ T5934] ath6kl: Failed to init ath6kl core: -71 [ 1127.448575][ T5934] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1127.462987][ T5934] usb 4-1: USB disconnect, device number 34 [ 1127.490856][ C0] vkms_vblank_simulate: vblank timer overrun [ 1127.627404][ C0] vkms_vblank_simulate: vblank timer overrun [ 1127.871477][ C0] vkms_vblank_simulate: vblank timer overrun [ 1128.049364][ C0] vkms_vblank_simulate: vblank timer overrun [ 1128.307860][ C0] vkms_vblank_simulate: vblank timer overrun [ 1128.395355][ C0] vkms_vblank_simulate: vblank timer overrun [ 1128.517538][T14046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2338'. [ 1128.739245][ C0] vkms_vblank_simulate: vblank timer overrun [ 1129.623701][ C0] vkms_vblank_simulate: vblank timer overrun [ 1129.656198][ C0] vkms_vblank_simulate: vblank timer overrun [ 1129.748852][ C0] vkms_vblank_simulate: vblank timer overrun [ 1129.814559][ C0] vkms_vblank_simulate: vblank timer overrun [ 1129.878504][ C0] vkms_vblank_simulate: vblank timer overrun [ 1129.947155][ C0] vkms_vblank_simulate: vblank timer overrun [ 1129.951850][ T5934] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 1130.112456][ C0] vkms_vblank_simulate: vblank timer overrun [ 1130.134679][ T5934] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1130.134711][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.139867][ T5934] usb 4-1: config 0 descriptor?? [ 1130.214624][ C0] vkms_vblank_simulate: vblank timer overrun [ 1130.246625][T14072] FAULT_INJECTION: forcing a failure. [ 1130.246625][T14072] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1130.246654][T14072] CPU: 1 UID: 0 PID: 14072 Comm: syz.1.2352 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1130.246672][T14072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1130.246683][T14072] Call Trace: [ 1130.246689][T14072] [ 1130.246697][T14072] dump_stack_lvl+0x189/0x250 [ 1130.246728][T14072] ? __pfx____ratelimit+0x10/0x10 [ 1130.246748][T14072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1130.246773][T14072] ? __pfx__printk+0x10/0x10 [ 1130.246794][T14072] ? fs_reclaim_acquire+0x7d/0x100 [ 1130.246824][T14072] should_fail_ex+0x46c/0x600 [ 1130.246850][T14072] prepare_alloc_pages+0x213/0x670 [ 1130.246880][T14072] __alloc_frozen_pages_noprof+0x123/0x370 [ 1130.246904][T14072] ? rcu_is_watching+0x15/0xb0 [ 1130.246921][T14072] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1130.246945][T14072] ? __schedule+0x1709/0x4c20 [ 1130.246975][T14072] alloc_pages_mpol+0xd1/0x380 [ 1130.247002][T14072] alloc_pages_noprof+0xcf/0x1e0 [ 1130.247028][T14072] __pud_alloc+0x3f/0x450 [ 1130.247067][T14072] handle_mm_fault+0x2149/0x3400 [ 1130.247090][T14072] ? mt_find+0x15c/0x5e0 [ 1130.247111][T14072] ? __pfx_mt_find+0x10/0x10 [ 1130.247132][T14072] ? handle_mm_fault+0xdb/0x3400 [ 1130.247158][T14072] ? __pfx_handle_mm_fault+0x10/0x10 [ 1130.247194][T14072] ? lock_mm_and_find_vma+0x9c/0x300 [ 1130.247220][T14072] do_user_addr_fault+0x764/0x1380 [ 1130.247250][T14072] exc_page_fault+0x82/0x100 [ 1130.247272][T14072] asm_exc_page_fault+0x26/0x30 [ 1130.247287][T14072] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1130.247302][T14072] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1130.247315][T14072] RSP: 0018:ffffc90005077d58 EFLAGS: 00050212 [ 1130.247329][T14072] RAX: 00007ffffffff001 RBX: 0000000000000010 RCX: 0000000000000010 [ 1130.247347][T14072] RDX: 0000000000000001 RSI: 0000200000000180 RDI: ffffc90005077dc0 [ 1130.247357][T14072] RBP: ffffc90005077ea8 R08: ffffc90005077dcf R09: 1ffff92000a0efb9 [ 1130.247369][T14072] R10: dffffc0000000000 R11: fffff52000a0efba R12: 0000200000000180 [ 1130.247380][T14072] R13: ffff88802ed6ce00 R14: ffffc90005077dc0 R15: 0000200000000180 [ 1130.247405][T14072] _copy_from_user+0x7a/0xb0 [ 1130.247423][T14072] __sys_bind+0x19f/0x3e0 [ 1130.247448][T14072] ? __pfx___sys_bind+0x10/0x10 [ 1130.247481][T14072] ? __pfx_ksys_write+0x10/0x10 [ 1130.247505][T14072] __x64_sys_bind+0x7a/0x90 [ 1130.247529][T14072] do_syscall_64+0xfa/0xfa0 [ 1130.247547][T14072] ? lockdep_hardirqs_on+0x9c/0x150 [ 1130.247566][T14072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.247581][T14072] ? clear_bhb_loop+0x60/0xb0 [ 1130.247600][T14072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.247615][T14072] RIP: 0033:0x7f3ee799efc9 [ 1130.247628][T14072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1130.247643][T14072] RSP: 002b:00007f3ee5bfe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1130.247658][T14072] RAX: ffffffffffffffda RBX: 00007f3ee7bf5fa0 RCX: 00007f3ee799efc9 [ 1130.247669][T14072] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 1130.247679][T14072] RBP: 00007f3ee5bfe090 R08: 0000000000000000 R09: 0000000000000000 [ 1130.247689][T14072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1130.247698][T14072] R13: 00007f3ee7bf6038 R14: 00007f3ee7bf5fa0 R15: 00007fffef9b1448 [ 1130.247723][T14072] [ 1130.664714][ C0] vkms_vblank_simulate: vblank timer overrun [ 1130.715683][ C0] vkms_vblank_simulate: vblank timer overrun [ 1130.722490][ T5943] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1130.780396][ T5934] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1130.780604][ T5934] asix 4-1:0.0: probe with driver asix failed with error -32 [ 1130.851373][ T5943] usb 2-1: device descriptor read/64, error -71 [ 1131.112132][ C0] vkms_vblank_simulate: vblank timer overrun [ 1131.113795][ T5943] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1131.212538][ C0] vkms_vblank_simulate: vblank timer overrun [ 1131.291128][ T5943] usb 2-1: device descriptor read/64, error -71 [ 1131.401467][ T5943] usb usb2-port1: attempt power cycle [ 1131.771204][ T5943] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1131.791590][ T5943] usb 2-1: device descriptor read/8, error -71 [ 1132.030731][ T5943] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1132.051622][ T5943] usb 2-1: device descriptor read/8, error -71 [ 1132.083246][T13632] hsr_slave_0: entered promiscuous mode [ 1132.084664][T13632] hsr_slave_1: entered promiscuous mode [ 1132.085685][T13632] debugfs: 'hsr0' already exists in 'hsr' [ 1132.085711][T13632] Cannot create hsr debugfs directory [ 1132.146402][ C0] vkms_vblank_simulate: vblank timer overrun [ 1132.161333][ T5943] usb usb2-port1: unable to enumerate USB device [ 1132.411671][ T5934] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1132.445020][ C0] vkms_vblank_simulate: vblank timer overrun [ 1132.490018][T11535] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1132.589725][ T5934] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1132.589757][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.621064][ T5934] usb 3-1: config 0 descriptor?? [ 1132.670558][T11535] usb 5-1: Using ep0 maxpacket: 32 [ 1132.675690][T11535] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1132.675715][T11535] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1132.675735][T11535] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1132.675811][T11535] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1132.675829][T11535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.737883][T11535] usb 5-1: config 0 descriptor?? [ 1132.762226][T14089] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1132.780714][T11535] hub 5-1:0.0: USB hub found [ 1132.805406][ T3118] usb 4-1: USB disconnect, device number 35 [ 1133.084220][T11535] hub 5-1:0.0: 3 ports detected [ 1133.343342][T11535] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1133.343603][T11535] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1133.380581][T11535] usbhid 5-1:0.0: can't add hid device: -71 [ 1133.380741][T11535] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1133.412731][T11535] usb 5-1: USB disconnect, device number 79 [ 1133.890050][ T5934] usb 3-1: Cannot set autoneg [ 1133.890318][ T5934] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1133.942183][ T5934] usb 3-1: USB disconnect, device number 82 [ 1134.058082][T14091] delete_channel: no stack [ 1134.174293][T13632] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1134.248458][T13632] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1134.974022][T13632] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1135.112275][T13632] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1135.429007][ T3118] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 1136.717596][T13632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.722907][ T3118] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1136.722944][ T3118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.733313][ T3118] usb 4-1: config 0 descriptor?? [ 1137.634304][T13632] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.662790][ T9736] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1137.723644][T13164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.724601][T13164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.810309][ T9736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.810346][ T9736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.810384][ T9736] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1137.810406][ T9736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.826708][ T9736] usb 3-1: config 0 descriptor?? [ 1137.891510][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.892036][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.211087][ T3118] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1138.211331][ T3118] asix 4-1:0.0: probe with driver asix failed with error -32 [ 1138.757646][T11535] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1138.872083][T13632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.921090][T11535] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1138.921141][T11535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.945074][T11535] usb 5-1: config 0 descriptor?? [ 1139.347475][ T3118] usb 4-1: USB disconnect, device number 36 [ 1139.480733][ T9736] usbhid 3-1:0.0: can't add hid device: -71 [ 1139.480870][ T9736] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1139.511569][ T9736] usb 3-1: USB disconnect, device number 83 [ 1140.599222][T11535] usb 5-1: Cannot set autoneg [ 1140.599498][T11535] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1140.614184][T11535] usb 5-1: USB disconnect, device number 80 [ 1140.872381][T13632] veth0_vlan: entered promiscuous mode [ 1140.937561][T13632] veth1_vlan: entered promiscuous mode [ 1141.100796][T13632] veth0_macvtap: entered promiscuous mode [ 1141.151380][T13632] veth1_macvtap: entered promiscuous mode [ 1141.215475][T13632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1141.243392][T13632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1141.318143][ T5012] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.318411][ T5012] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.318472][ T5012] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.318511][ T5012] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.031407][ T6096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.031430][ T6096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.159154][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.159176][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.451674][ C1] vkms_vblank_simulate: vblank timer overrun [ 1142.714753][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.110318][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.629349][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.786404][T14231] netlink: 'syz.3.2405': attribute type 1 has an invalid length. [ 1144.014739][ T5943] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 1144.081626][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.325135][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.371386][ T5943] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1144.371418][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.409672][ T5943] usb 3-1: config 0 descriptor?? [ 1145.597012][T13738] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1146.392868][T13738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.392905][T13738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.392950][T13738] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1146.392976][T13738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.502746][T13738] usb 4-1: config 0 descriptor?? [ 1146.644704][ T5943] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1146.645004][ T5943] asix 3-1:0.0: probe with driver asix failed with error -61 [ 1148.146042][T13738] usbhid 4-1:0.0: can't add hid device: -71 [ 1148.146177][T13738] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1148.279556][T14288] FAULT_INJECTION: forcing a failure. [ 1148.279556][T14288] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.279629][T14288] CPU: 0 UID: 0 PID: 14288 Comm: syz.7.2420 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1148.279655][T14288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1148.279670][T14288] Call Trace: [ 1148.279680][T14288] [ 1148.279690][T14288] dump_stack_lvl+0x189/0x250 [ 1148.279728][T14288] ? __pfx____ratelimit+0x10/0x10 [ 1148.279757][T14288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1148.279818][T14288] ? __pfx__printk+0x10/0x10 [ 1148.279847][T14288] ? rcuref_put+0x1b7/0x210 [ 1148.279880][T14288] ? __pfx_call_rcu+0x10/0x10 [ 1148.279911][T14288] should_fail_ex+0x46c/0x600 [ 1148.279948][T14288] ? dst_alloc+0x105/0x170 [ 1148.279973][T14288] should_failslab+0xa8/0x100 [ 1148.280009][T14288] ? dst_alloc+0x105/0x170 [ 1148.280034][T14288] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 1148.280075][T14288] dst_alloc+0x105/0x170 [ 1148.280109][T14288] ipv4_blackhole_route+0x32/0x680 [ 1148.280148][T14288] xfrm_lookup_route+0xd7/0x1c0 [ 1148.280185][T14288] ip4_datagram_release_cb+0x87f/0xbb0 [ 1148.280215][T14288] ? ip4_datagram_release_cb+0x82/0xbb0 [ 1148.280247][T14288] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 1148.280273][T14288] ? rt_spin_lock+0x1f4/0x3e0 [ 1148.280308][T14288] ? rt_spin_unlock+0x161/0x200 [ 1148.280334][T14288] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 1148.280364][T14288] release_sock+0x1cd/0x210 [ 1148.280397][T14288] ? release_sock+0x2f/0x210 [ 1148.280435][T14288] udp_connect+0x4f/0x1f0 [ 1148.280465][T14288] __sys_connect+0x323/0x450 [ 1148.280487][T14288] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1148.280517][T14288] ? __pfx___sys_connect+0x10/0x10 [ 1148.280571][T14288] __x64_sys_connect+0x7a/0x90 [ 1148.280596][T14288] do_syscall_64+0xfa/0xfa0 [ 1148.280627][T14288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.280650][T14288] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1148.280672][T14288] ? clear_bhb_loop+0x60/0xb0 [ 1148.280701][T14288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.280724][T14288] RIP: 0033:0x7f3363e2efc9 [ 1148.280745][T14288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1148.280765][T14288] RSP: 002b:00007f336204c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1148.280797][T14288] RAX: ffffffffffffffda RBX: 00007f3364086180 RCX: 00007f3363e2efc9 [ 1148.280814][T14288] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 000000000000000b [ 1148.280830][T14288] RBP: 00007f336204c090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.280844][T14288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1148.280858][T14288] R13: 00007f3364086218 R14: 00007f3364086180 R15: 00007ffc9b8f5e38 [ 1148.280899][T14288] [ 1148.668052][ C1] vkms_vblank_simulate: vblank timer overrun [ 1148.953886][ T5943] usb 3-1: USB disconnect, device number 84 [ 1148.992266][T13738] usb 4-1: USB disconnect, device number 37 [ 1149.241500][T14297] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2426'. [ 1149.241536][T14297] block nbd0: not configured, cannot reconfigure [ 1149.941821][ T5943] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1150.022006][ C1] vkms_vblank_simulate: vblank timer overrun [ 1150.122876][ T5943] usb 2-1: Using ep0 maxpacket: 8 [ 1150.125331][ T5943] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.125407][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1150.125439][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1150.125463][ T5943] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1150.125490][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1150.125534][ T5943] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1150.125560][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.241397][ T5943] usb 2-1: config 0 descriptor?? [ 1150.308753][T14311] netlink: 'syz.7.2434': attribute type 12 has an invalid length. [ 1150.483405][T14315] netlink: 'syz.7.2434': attribute type 4 has an invalid length. [ 1150.535863][T14304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.536291][T14304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.577805][T14304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.596546][T14304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.597806][T14316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.641772][T14316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.646799][T13738] usb 2-1: USB disconnect, device number 39 [ 1151.148620][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.651805][T14350] FAULT_INJECTION: forcing a failure. [ 1152.651805][T14350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1152.651843][T14350] CPU: 1 UID: 0 PID: 14350 Comm: syz.4.2443 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1152.651868][T14350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1152.651882][T14350] Call Trace: [ 1152.651891][T14350] [ 1152.651901][T14350] dump_stack_lvl+0x189/0x250 [ 1152.651942][T14350] ? __pfx____ratelimit+0x10/0x10 [ 1152.651970][T14350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1152.652003][T14350] ? __pfx__printk+0x10/0x10 [ 1152.652031][T14350] ? __might_fault+0xb0/0x130 [ 1152.652075][T14350] should_fail_ex+0x46c/0x600 [ 1152.652111][T14350] _copy_from_user+0x2d/0xb0 [ 1152.652137][T14350] kstrtouint_from_user+0xc4/0x170 [ 1152.652173][T14350] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1152.652224][T14350] proc_fail_nth_write+0x88/0x200 [ 1152.652249][T14350] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1152.652281][T14350] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1152.652308][T14350] vfs_write+0x287/0xb40 [ 1152.652346][T14350] ? __pfx_vfs_write+0x10/0x10 [ 1152.652371][T14350] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1152.652406][T14350] ? mutex_lock_nested+0x154/0x1d0 [ 1152.652427][T14350] ? fdget_pos+0x253/0x320 [ 1152.652478][T14350] ksys_write+0x14b/0x260 [ 1152.652510][T14350] ? __pfx_ksys_write+0x10/0x10 [ 1152.652541][T14350] ? do_syscall_64+0xbe/0xfa0 [ 1152.652572][T14350] do_syscall_64+0xfa/0xfa0 [ 1152.652597][T14350] ? lockdep_hardirqs_on+0x9c/0x150 [ 1152.652624][T14350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.652648][T14350] ? clear_bhb_loop+0x60/0xb0 [ 1152.652676][T14350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.652700][T14350] RIP: 0033:0x7fe0ec92da7f [ 1152.652719][T14350] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1152.652739][T14350] RSP: 002b:00007fe0eab6d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1152.652764][T14350] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe0ec92da7f [ 1152.652780][T14350] RDX: 0000000000000001 RSI: 00007fe0eab6d0a0 RDI: 0000000000000003 [ 1152.652795][T14350] RBP: 00007fe0eab6d090 R08: 0000000000000000 R09: 0000000000000000 [ 1152.652810][T14350] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1152.652824][T14350] R13: 00007fe0ecb86128 R14: 00007fe0ecb86090 R15: 00007ffda10bb418 [ 1152.652863][T14350] [ 1153.700637][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.350096][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.736490][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.786395][T14370] FAULT_INJECTION: forcing a failure. [ 1154.786395][T14370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1154.786432][T14370] CPU: 0 UID: 0 PID: 14370 Comm: syz.1.2450 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1154.786458][T14370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1154.786471][T14370] Call Trace: [ 1154.786481][T14370] [ 1154.786490][T14370] dump_stack_lvl+0x189/0x250 [ 1154.786529][T14370] ? __pfx____ratelimit+0x10/0x10 [ 1154.786564][T14370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1154.786598][T14370] ? __pfx__printk+0x10/0x10 [ 1154.786641][T14370] should_fail_ex+0x46c/0x600 [ 1154.786677][T14370] _copy_to_user+0x31/0xb0 [ 1154.786703][T14370] simple_read_from_buffer+0xe1/0x170 [ 1154.786739][T14370] proc_fail_nth_read+0x1b6/0x220 [ 1154.786766][T14370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1154.786794][T14370] ? rw_verify_area+0x2ac/0x4e0 [ 1154.786820][T14370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1154.786846][T14370] vfs_read+0x206/0xa30 [ 1154.786883][T14370] ? __pfx_vfs_read+0x10/0x10 [ 1154.786906][T14370] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1154.786939][T14370] ? mutex_lock_nested+0x154/0x1d0 [ 1154.786959][T14370] ? fdget_pos+0x253/0x320 [ 1154.787000][T14370] ksys_read+0x14b/0x260 [ 1154.787030][T14370] ? __pfx_ksys_read+0x10/0x10 [ 1154.787061][T14370] ? do_syscall_64+0xbe/0xfa0 [ 1154.787094][T14370] do_syscall_64+0xfa/0xfa0 [ 1154.787120][T14370] ? lockdep_hardirqs_on+0x9c/0x150 [ 1154.787149][T14370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.787171][T14370] ? clear_bhb_loop+0x60/0xb0 [ 1154.787199][T14370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.787220][T14370] RIP: 0033:0x7f3ee799d9dc [ 1154.787240][T14370] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1154.787260][T14370] RSP: 002b:00007f3ee5bfe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1154.787283][T14370] RAX: ffffffffffffffda RBX: 00007f3ee7bf5fa0 RCX: 00007f3ee799d9dc [ 1154.787300][T14370] RDX: 000000000000000f RSI: 00007f3ee5bfe0a0 RDI: 0000000000000004 [ 1154.787315][T14370] RBP: 00007f3ee5bfe090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.787329][T14370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.787343][T14370] R13: 00007f3ee7bf6038 R14: 00007f3ee7bf5fa0 R15: 00007fffef9b1448 [ 1154.787378][T14370] [ 1156.010700][T14385] FAULT_INJECTION: forcing a failure. [ 1156.010700][T14385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.010740][T14385] CPU: 1 UID: 0 PID: 14385 Comm: syz.1.2456 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1156.010770][T14385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1156.010785][T14385] Call Trace: [ 1156.010795][T14385] [ 1156.010806][T14385] dump_stack_lvl+0x189/0x250 [ 1156.010846][T14385] ? __pfx____ratelimit+0x10/0x10 [ 1156.010875][T14385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1156.010911][T14385] ? __pfx__printk+0x10/0x10 [ 1156.010939][T14385] ? __might_fault+0xb0/0x130 [ 1156.010984][T14385] should_fail_ex+0x46c/0x600 [ 1156.011032][T14385] _copy_from_user+0x2d/0xb0 [ 1156.011058][T14385] snd_seq_write+0x30b/0x820 [ 1156.011105][T14385] ? __pfx_snd_seq_write+0x10/0x10 [ 1156.011136][T14385] ? do_raw_spin_lock+0x121/0x290 [ 1156.011169][T14385] ? rw_verify_area+0x25b/0x4e0 [ 1156.011215][T14385] ? __lock_acquire+0xab9/0xd20 [ 1156.011261][T14385] ? __pfx_snd_seq_write+0x10/0x10 [ 1156.011297][T14385] vfs_write+0x287/0xb40 [ 1156.011335][T14385] ? __pfx_vfs_write+0x10/0x10 [ 1156.011366][T14385] ? __fget_files+0x2a/0x420 [ 1156.011400][T14385] ? __fget_files+0x2a/0x420 [ 1156.011431][T14385] ? __fget_files+0x3a6/0x420 [ 1156.011461][T14385] ? __fget_files+0x2a/0x420 [ 1156.011509][T14385] ksys_write+0x14b/0x260 [ 1156.011541][T14385] ? __pfx_ksys_write+0x10/0x10 [ 1156.011573][T14385] ? do_syscall_64+0xbe/0xfa0 [ 1156.011609][T14385] do_syscall_64+0xfa/0xfa0 [ 1156.011637][T14385] ? lockdep_hardirqs_on+0x9c/0x150 [ 1156.011666][T14385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.011689][T14385] ? clear_bhb_loop+0x60/0xb0 [ 1156.011717][T14385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.011739][T14385] RIP: 0033:0x7f3ee799efc9 [ 1156.011759][T14385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1156.011780][T14385] RSP: 002b:00007f3ee5bfe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1156.011803][T14385] RAX: ffffffffffffffda RBX: 00007f3ee7bf5fa0 RCX: 00007f3ee799efc9 [ 1156.011820][T14385] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003 [ 1156.011836][T14385] RBP: 00007f3ee5bfe090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.011851][T14385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.011864][T14385] R13: 00007f3ee7bf6038 R14: 00007f3ee7bf5fa0 R15: 00007fffef9b1448 [ 1156.011902][T14385] [ 1157.605142][T14402] 9pnet_fd: Insufficient options for proto=fd [ 1157.619276][T14409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2464'. [ 1158.570519][T13514] Bluetooth: hci2: command 0x0406 tx timeout [ 1158.763548][ T37] audit: type=1804 audit(2000001152.822:1857): pid=14438 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2472" name="file0" dev="ramfs" ino=64566 res=1 errno=0 [ 1158.764129][T14437] netlink: 'syz.7.2475': attribute type 2 has an invalid length. [ 1158.799321][T14430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2472'. [ 1158.830202][T14430] bridge1: entered allmulticast mode [ 1160.668600][T14465] mmap: syz.3.2476 (14465) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1160.681477][T14465] dlm: non-version read from control device 0 [ 1160.946450][ T5887] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1161.099929][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 1161.104311][ T5887] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1161.104338][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.104360][ T5887] usb 5-1: config 0 has no interface number 0 [ 1161.111286][ T5887] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1161.111320][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.111345][ T5887] usb 5-1: Product: syz [ 1161.111365][ T5887] usb 5-1: Manufacturer: syz [ 1161.111383][ T5887] usb 5-1: SerialNumber: syz [ 1161.135488][ T5887] usb 5-1: config 0 descriptor?? [ 1161.486461][T14492] tmpfs: Bad value for 'mpol' [ 1162.653441][T14518] fuse: blksize only supported for fuseblk [ 1162.682201][T14520] fuse: blksize only supported for fuseblk [ 1162.701145][T14518] 9pnet_fd: p9_fd_create_unix (14518): problem connecting socket: ./file0: -111 [ 1163.733261][T12772] Bluetooth: hci5: command 0x0406 tx timeout [ 1163.741295][T12772] Bluetooth: hci9: command 0x0405 tx timeout [ 1163.741421][T12772] Bluetooth: hci3: command 0x0406 tx timeout [ 1165.157165][ T9736] usb 5-1: USB disconnect, device number 81 [ 1165.473743][T14540] nbd: must specify an index to disconnect [ 1165.724632][ T5804] Bluetooth: hci9: unexpected event for opcode 0x1002 [ 1165.778933][T14548] FAULT_INJECTION: forcing a failure. [ 1165.778933][T14548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1165.778968][T14548] CPU: 1 UID: 0 PID: 14548 Comm: syz.2.2516 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1165.778993][T14548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1165.779008][T14548] Call Trace: [ 1165.779017][T14548] [ 1165.779028][T14548] dump_stack_lvl+0x189/0x250 [ 1165.779065][T14548] ? __pfx____ratelimit+0x10/0x10 [ 1165.779092][T14548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1165.779126][T14548] ? __pfx__printk+0x10/0x10 [ 1165.779153][T14548] ? __might_fault+0xb0/0x130 [ 1165.779196][T14548] should_fail_ex+0x46c/0x600 [ 1165.779232][T14548] _copy_from_user+0x2d/0xb0 [ 1165.779257][T14548] update_filter+0x90/0x4f0 [ 1165.779285][T14548] ? tun_get+0x1c/0x2f0 [ 1165.779315][T14548] ? __pfx_update_filter+0x10/0x10 [ 1165.779344][T14548] ? tun_get+0x1c/0x2f0 [ 1165.779377][T14548] __tun_chr_ioctl+0x1346/0x1df0 [ 1165.779413][T14548] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1165.779449][T14548] ? __fget_files+0x3a6/0x420 [ 1165.779479][T14548] ? __fget_files+0x2a/0x420 [ 1165.779512][T14548] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1165.779534][T14548] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1165.779561][T14548] __se_sys_ioctl+0xff/0x170 [ 1165.779588][T14548] do_syscall_64+0xfa/0xfa0 [ 1165.779615][T14548] ? lockdep_hardirqs_on+0x9c/0x150 [ 1165.779643][T14548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.779665][T14548] ? clear_bhb_loop+0x60/0xb0 [ 1165.779693][T14548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.779714][T14548] RIP: 0033:0x7fa57cd4efc9 [ 1165.779742][T14548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1165.779761][T14548] RSP: 002b:00007fa57afb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1165.779783][T14548] RAX: ffffffffffffffda RBX: 00007fa57cfa5fa0 RCX: 00007fa57cd4efc9 [ 1165.779819][T14548] RDX: 0000200000000040 RSI: 00000000400454d1 RDI: 0000000000000003 [ 1165.779834][T14548] RBP: 00007fa57afb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.779848][T14548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.779862][T14548] R13: 00007fa57cfa6038 R14: 00007fa57cfa5fa0 R15: 00007ffdcde76b18 [ 1165.779900][T14548] [ 1166.775962][T13132] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1166.927693][T13132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.927729][T13132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.927770][T13132] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1166.927794][T13132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.987852][T13132] usb 5-1: config 0 descriptor?? [ 1167.523898][ T5943] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1167.673045][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 1167.682049][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1167.682085][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1167.726740][ T5943] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1167.727323][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.727346][ T5943] usb 2-1: Product: syz [ 1167.727362][ T5943] usb 2-1: Manufacturer: syz [ 1167.727376][ T5943] usb 2-1: SerialNumber: syz [ 1167.797505][ T5943] usb 2-1: config 0 descriptor?? [ 1167.834295][ T5943] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1167.834328][ T5943] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1167.943071][T14578] trusted_key: encrypted_key: insufficient parameters specified [ 1168.272630][ T44] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1168.683169][ T5943] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1168.684420][ T5943] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1168.685622][ T5943] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1168.685641][ T5943] em28xx 2-1:0.0: No AC97 audio processor [ 1169.362779][ T5943] usb 2-1: USB disconnect, device number 40 [ 1169.365195][ T5943] em28xx 2-1:0.0: Disconnecting em28xx [ 1169.370288][ T5943] em28xx 2-1:0.0: Freeing device [ 1169.880254][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 1169.880291][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 95, setting to 64 [ 1169.880339][ T44] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1169.880365][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.565760][ T44] usb 4-1: config 0 descriptor?? [ 1170.675796][T14578] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1170.676448][T13132] usbhid 5-1:0.0: can't add hid device: -71 [ 1170.676578][T13132] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1170.750979][T13132] usb 5-1: USB disconnect, device number 82 [ 1172.161004][ T44] ath6kl: Failed to submit usb control message: -110 [ 1172.161070][ T44] ath6kl: unable to send the bmi data to the device: -110 [ 1172.161088][ T44] ath6kl: Unable to send get target info: -110 [ 1172.167269][ T44] ath6kl: Failed to init ath6kl core: -110 [ 1172.168672][ T44] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1172.260616][ T44] usb 4-1: USB disconnect, device number 38 [ 1172.399221][T14612] pimreg: entered allmulticast mode [ 1174.820378][ T37] audit: type=1326 audit(2000001168.900:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3363e2efc9 code=0x7ffc0000 [ 1174.820436][ T37] audit: type=1326 audit(2000001168.900:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3363e2efc9 code=0x7ffc0000 [ 1174.821025][ T37] audit: type=1326 audit(2000001168.900:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f3363e2efc9 code=0x7ffc0000 [ 1175.112364][T14647] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2557'. [ 1175.183261][ T37] audit: type=1326 audit(2000001168.900:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3363e2efc9 code=0x7ffc0000 [ 1175.183318][ T37] audit: type=1326 audit(2000001168.900:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3363e2efc9 code=0x7ffc0000 [ 1175.183373][ T37] audit: type=1326 audit(2000001168.900:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3363e2efc9 code=0x7ffc0000 [ 1175.183422][ T37] audit: type=1326 audit(2000001169.170:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3363e2efc9 code=0x7ffc0000 [ 1175.183469][ T37] audit: type=1326 audit(2000001169.170:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3363e2efc9 code=0x7ffc0000 [ 1175.183518][ T37] audit: type=1326 audit(2000001169.190:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3363e2efc9 code=0x7ffc0000 [ 1175.183564][ T37] audit: type=1326 audit(2000001169.190:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.7.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3363e2efc9 code=0x7ffc0000 [ 1178.834670][T14684] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2571'. [ 1180.292174][ C0] vkms_vblank_simulate: vblank timer overrun [ 1180.745299][ C0] vkms_vblank_simulate: vblank timer overrun [ 1181.090665][ C0] vkms_vblank_simulate: vblank timer overrun [ 1181.321806][ C0] vkms_vblank_simulate: vblank timer overrun [ 1181.411126][ C0] vkms_vblank_simulate: vblank timer overrun [ 1182.081705][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.081791][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.230227][T14718] netlink: 'syz.2.2581': attribute type 2 has an invalid length. [ 1182.310004][T14724] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2581' sets config #0 [ 1183.517166][ C0] vkms_vblank_simulate: vblank timer overrun [ 1183.725490][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2582'. [ 1183.727197][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2582'. [ 1183.789701][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 1183.789723][ T37] audit: type=1326 audit(2000001177.864:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14737 comm="syz.4.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ec92efc9 code=0x7ffc0000 [ 1183.790327][ T37] audit: type=1326 audit(2000001177.864:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14737 comm="syz.4.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fe0ec92efc9 code=0x7ffc0000 [ 1183.790681][ T37] audit: type=1326 audit(2000001177.864:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14737 comm="syz.4.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ec92efc9 code=0x7ffc0000 [ 1183.791558][ T37] audit: type=1326 audit(2000001177.864:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14737 comm="syz.4.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe0ec92efc9 code=0x7ffc0000 [ 1184.266162][ T37] audit: type=1326 audit(2000001178.345:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14742 comm="syz.7.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3363e2efc9 code=0x7ffc0000 [ 1184.266219][ T37] audit: type=1326 audit(2000001178.345:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14742 comm="syz.7.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3363e2efc9 code=0x7ffc0000 [ 1184.269228][ T37] audit: type=1326 audit(2000001178.345:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14742 comm="syz.7.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f3363e2efc9 code=0x7ffc0000 [ 1184.269283][ T37] audit: type=1326 audit(2000001178.345:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14742 comm="syz.7.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3363e2efc9 code=0x7ffc0000 [ 1184.269333][ T37] audit: type=1326 audit(2000001178.345:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14742 comm="syz.7.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3363e2efc9 code=0x7ffc0000 [ 1184.272979][ T37] audit: type=1326 audit(2000001178.345:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14742 comm="syz.7.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f3363e2efc9 code=0x7ffc0000 [ 1184.779216][ C0] vkms_vblank_simulate: vblank timer overrun [ 1185.231539][T14748] ERROR: Out of memory at tomoyo_memory_ok. [ 1185.893834][T13132] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1186.046322][T13132] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1186.046354][T13132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.122232][T14764] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2587'. [ 1186.536036][T13132] usb 3-1: config 0 descriptor?? [ 1186.968447][T13132] usb 3-1: Cannot set MAC address [ 1186.968642][T13132] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1186.999717][T13132] usb 3-1: USB disconnect, device number 85 [ 1188.347056][T14773] kAFS: unable to lookup cell '' [ 1189.188911][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 1189.188932][ T37] audit: type=1400 audit(2000001183.267:1904): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=14780 comm="syz.3.2602" daddr=::1c9a:e7ff:fe9a:6f34 dest=1 [ 1189.222094][ T37] audit: type=1400 audit(2000001183.297:1905): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=14780 comm="syz.3.2602" daddr=::ffff:127.0.0.1 dest=20004 [ 1194.141039][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1194.147677][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1194.149043][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1194.163544][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1194.169149][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1195.984978][T14826] autofs: Bad value for 'fd' [ 1196.008685][ T37] audit: type=1326 audit(2000001190.091:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14825 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1196.098669][ T9736] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1196.228700][ T5800] Bluetooth: hci0: command tx timeout [ 1196.244114][ T9736] usb 3-1: device descriptor read/64, error -71 [ 1196.322534][T14813] chnl_net:caif_netlink_parms(): no params data found [ 1196.515720][ T9736] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1196.648614][ T9736] usb 3-1: device descriptor read/64, error -71 [ 1196.769077][ T9736] usb usb3-port1: attempt power cycle [ 1196.860791][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2619'. [ 1196.889232][ T37] audit: type=1400 audit(2000001190.981:1907): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="@!@" requested=w pid=14837 comm="syz.7.2619" daddr=::ffff:172.20.20.20 dest=20001 [ 1197.014655][T14843] netlink: 'syz.3.2620': attribute type 2 has an invalid length. [ 1197.014680][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2620'. [ 1197.471900][ T9736] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1197.489102][ T9736] usb 3-1: device descriptor read/8, error -71 [ 1198.466313][ T5800] Bluetooth: hci0: command tx timeout [ 1198.632570][ T9736] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 1198.651371][ T9736] usb 3-1: device descriptor read/8, error -71 [ 1198.797530][ T9736] usb usb3-port1: unable to enumerate USB device [ 1199.967394][T14813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.967558][T14813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.969791][T14813] bridge_slave_0: entered allmulticast mode [ 1200.004710][T14813] bridge_slave_0: entered promiscuous mode [ 1200.021250][T14813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.022264][T14813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.022484][T14813] bridge_slave_1: entered allmulticast mode [ 1200.054216][T14813] bridge_slave_1: entered promiscuous mode [ 1200.357703][T14856] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2624'. [ 1200.546625][ T5800] Bluetooth: hci0: command tx timeout [ 1200.706592][ T9736] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 1200.875426][ T9736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1200.875463][ T9736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.905410][ T9736] usb 3-1: New USB device found, idVendor=1a34, idProduct=6f05, bcdDevice=8e.7b [ 1200.905442][ T9736] usb 3-1: New USB device strings: Mfr=176, Product=0, SerialNumber=0 [ 1200.905464][ T9736] usb 3-1: Manufacturer: syz [ 1200.964096][ T9736] usb 3-1: config 0 descriptor?? [ 1201.018419][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1201.085409][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1201.094620][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1201.130689][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1201.134208][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1202.877418][ T5804] Bluetooth: hci0: command tx timeout [ 1202.973299][T14813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.039277][T14813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.265613][ T5800] Bluetooth: hci4: command tx timeout [ 1203.896633][T14813] team0: Port device team_slave_0 added [ 1203.942354][T14813] team0: Port device team_slave_1 added [ 1204.467093][ T9736] usbhid 3-1:0.0: can't add hid device: -71 [ 1204.467240][ T9736] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1204.497022][ T9736] usb 3-1: USB disconnect, device number 90 [ 1205.344287][ T5800] Bluetooth: hci4: command tx timeout [ 1207.433153][ T5800] Bluetooth: hci4: command tx timeout [ 1209.091175][T14813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1209.091195][T14813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.091224][T14813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1209.148136][T14813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.148156][T14813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.148186][T14813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.502151][ T5800] Bluetooth: hci4: command tx timeout [ 1210.058233][T14813] hsr_slave_0: entered promiscuous mode [ 1210.071360][T14813] hsr_slave_1: entered promiscuous mode [ 1210.072867][T14813] debugfs: 'hsr0' already exists in 'hsr' [ 1210.072897][T14813] Cannot create hsr debugfs directory [ 1211.077557][ T37] audit: type=1326 audit(2000001205.168:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14888 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1211.077962][ T37] audit: type=1326 audit(2000001205.168:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14888 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1211.078117][ T37] audit: type=1326 audit(2000001205.168:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14888 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1211.078265][ T37] audit: type=1326 audit(2000001205.168:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14888 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1211.078445][ T37] audit: type=1326 audit(2000001205.168:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14888 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1211.078750][ T37] audit: type=1326 audit(2000001205.168:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14888 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1211.095670][ T37] audit: type=1326 audit(2000001205.188:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14888 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1211.095736][ T37] audit: type=1326 audit(2000001205.188:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14888 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1211.142310][ T37] audit: type=1326 audit(2000001205.238:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14888 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1211.142379][ T37] audit: type=1326 audit(2000001205.238:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14888 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e4afefc9 code=0x7ffc0000 [ 1212.767467][T14867] chnl_net:caif_netlink_parms(): no params data found [ 1214.449743][ T5943] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1214.612497][ T5943] usb 4-1: config 0 has no interfaces? [ 1214.628981][ T5943] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 1214.629015][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.629037][ T5943] usb 4-1: Product: syz [ 1214.629054][ T5943] usb 4-1: Manufacturer: syz [ 1214.629070][ T5943] usb 4-1: SerialNumber: syz [ 1214.682250][ T5943] usb 4-1: config 0 descriptor?? [ 1215.014737][T14893] loop2: detected capacity change from 0 to 7 [ 1215.053190][T14893] Dev loop2: unable to read RDB block 7 [ 1215.053251][T14893] loop2: unable to read partition table [ 1215.053898][T14893] loop2: partition table beyond EOD, truncated [ 1215.053983][T14893] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1215.101912][ T5943] usb 4-1: USB disconnect, device number 39 [ 1215.724016][ T5804] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1215.745369][ T5804] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1215.748136][ T5804] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1215.768486][ T5804] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1215.776387][ T5804] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1216.823463][T14867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.828465][T14867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.828728][T14867] bridge_slave_0: entered allmulticast mode [ 1216.853837][T14867] bridge_slave_0: entered promiscuous mode [ 1216.869535][T14867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.869874][T14867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.870123][T14867] bridge_slave_1: entered allmulticast mode [ 1216.873269][T14867] bridge_slave_1: entered promiscuous mode [ 1217.348111][T13132] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1217.501600][T14867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.526195][T13132] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1217.526230][T13132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.526252][T13132] usb 4-1: Product: syz [ 1217.526268][T13132] usb 4-1: Manufacturer: syz [ 1217.526284][T13132] usb 4-1: SerialNumber: syz [ 1217.575127][T14867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.819201][ T5804] Bluetooth: hci6: command tx timeout [ 1218.061718][T13132] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1218.061784][T13132] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1218.706443][T14901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.716810][T14901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.897009][ T5804] Bluetooth: hci6: command tx timeout [ 1219.987078][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 1220.633853][ T5800] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1220.647973][ T5800] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1220.650887][ T5800] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1220.666826][ T5800] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1220.703564][ T5800] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1221.243492][T14867] team0: Port device team_slave_0 added [ 1221.270557][T14867] team0: Port device team_slave_1 added [ 1221.975783][ T5804] Bluetooth: hci6: command tx timeout [ 1222.865561][ T5804] Bluetooth: hci7: command tx timeout [ 1224.064888][ T5804] Bluetooth: hci6: command tx timeout [ 1224.135300][T13132] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -ETIMEDOUT [ 1224.135363][T13132] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1224.137641][T13132] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1224.596659][T13132] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -110 [ 1224.934346][ T5804] Bluetooth: hci7: command tx timeout [ 1225.548459][T14867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.548478][T14867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.548509][T14867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.565167][T14867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.565190][T14867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.565226][T14867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.013570][ T5804] Bluetooth: hci7: command tx timeout [ 1227.360441][T14867] hsr_slave_0: entered promiscuous mode [ 1227.362241][T14867] hsr_slave_1: entered promiscuous mode [ 1227.363661][T14867] debugfs: 'hsr0' already exists in 'hsr' [ 1227.363690][T14867] Cannot create hsr debugfs directory [ 1229.092254][ T5804] Bluetooth: hci7: command tx timeout [ 1232.504093][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1232.519888][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1232.529345][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1232.547219][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1232.548266][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1233.336419][T14898] chnl_net:caif_netlink_parms(): no params data found [ 1234.609481][ T5804] Bluetooth: hci2: command tx timeout [ 1236.688496][ T5804] Bluetooth: hci2: command tx timeout [ 1238.569365][T14898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.569565][T14898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.569815][T14898] bridge_slave_0: entered allmulticast mode [ 1238.573073][T14898] bridge_slave_0: entered promiscuous mode [ 1238.647785][T14898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.647955][T14898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.648603][T14898] bridge_slave_1: entered allmulticast mode [ 1238.651574][T14898] bridge_slave_1: entered promiscuous mode [ 1238.767682][ T5804] Bluetooth: hci2: command tx timeout [ 1240.846434][ T5804] Bluetooth: hci2: command tx timeout [ 1241.585716][T14898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.597704][T14905] chnl_net:caif_netlink_parms(): no params data found [ 1241.634959][T14898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1243.491898][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.491973][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.676122][T14898] team0: Port device team_slave_0 added [ 1246.454257][T14898] team0: Port device team_slave_1 added [ 1247.904427][T14898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.904446][T14898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1247.904500][T14898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1248.789127][T14898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1248.789148][T14898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1248.789179][T14898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1248.789981][T14905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.790204][T14905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.790426][T14905] bridge_slave_0: entered allmulticast mode [ 1248.858713][T14905] bridge_slave_0: entered promiscuous mode [ 1248.919673][T14905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.920613][T14905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.920854][T14905] bridge_slave_1: entered allmulticast mode [ 1248.945015][T14905] bridge_slave_1: entered promiscuous mode [ 1251.924842][T14905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.957842][T14898] hsr_slave_0: entered promiscuous mode [ 1251.959462][T14898] hsr_slave_1: entered promiscuous mode [ 1251.981254][T14898] debugfs: 'hsr0' already exists in 'hsr' [ 1251.981284][T14898] Cannot create hsr debugfs directory [ 1251.984345][T14911] chnl_net:caif_netlink_parms(): no params data found [ 1252.016631][T14905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.478203][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1252.514029][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1252.515747][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1252.517029][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1252.517903][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1254.599742][ T5804] Bluetooth: hci3: command tx timeout [ 1256.670091][T14905] team0: Port device team_slave_0 added [ 1256.685502][ T5804] Bluetooth: hci3: command tx timeout [ 1257.232163][T14905] team0: Port device team_slave_1 added [ 1258.757949][ T5804] Bluetooth: hci3: command tx timeout [ 1259.983599][T14905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.983619][T14905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.983648][T14905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.461868][T14905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1260.461886][T14905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.461916][T14905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1260.844331][ T5804] Bluetooth: hci3: command tx timeout [ 1261.024887][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1261.050075][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1261.051612][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1261.052916][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1261.053833][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1261.281172][T14911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.281356][T14911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.281897][T14911] bridge_slave_0: entered allmulticast mode [ 1261.285640][T14911] bridge_slave_0: entered promiscuous mode [ 1261.355808][T14911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.363237][T14911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.363910][T14911] bridge_slave_1: entered allmulticast mode [ 1261.381465][T14911] bridge_slave_1: entered promiscuous mode [ 1263.155290][ T5800] Bluetooth: hci5: command tx timeout [ 1265.215807][T14905] hsr_slave_0: entered promiscuous mode [ 1265.217339][T14905] hsr_slave_1: entered promiscuous mode [ 1265.218475][T14905] debugfs: 'hsr0' already exists in 'hsr' [ 1265.218501][T14905] Cannot create hsr debugfs directory [ 1265.246824][ T5800] Bluetooth: hci5: command tx timeout [ 1265.261898][T14911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1265.321183][T14911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1267.313177][ T5800] Bluetooth: hci5: command tx timeout [ 1267.819021][T14911] team0: Port device team_slave_0 added [ 1268.857819][T14911] team0: Port device team_slave_1 added [ 1269.392362][ T5800] Bluetooth: hci5: command tx timeout [ 1271.993229][T14911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.993250][T14911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.993281][T14911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.071351][T14911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.071370][T14911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.071401][T14911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.224544][T14911] hsr_slave_0: entered promiscuous mode [ 1275.226250][T14911] hsr_slave_1: entered promiscuous mode [ 1275.227353][T14911] debugfs: 'hsr0' already exists in 'hsr' [ 1275.227380][T14911] Cannot create hsr debugfs directory [ 1276.585276][ T5804] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1276.601117][ T5804] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1276.602746][ T5804] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1276.603987][ T5804] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1276.604853][ T5804] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1278.667638][ T5800] Bluetooth: hci8: command tx timeout [ 1280.575612][T14926] chnl_net:caif_netlink_parms(): no params data found [ 1280.751217][ T5800] Bluetooth: hci8: command tx timeout [ 1281.271794][ T5804] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1281.314786][ T5804] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1281.326401][ T5804] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1281.327659][ T5804] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1281.328498][ T5804] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1281.692316][T14932] chnl_net:caif_netlink_parms(): no params data found [ 1282.825476][ T5800] Bluetooth: hci8: command tx timeout [ 1283.385390][ T5800] Bluetooth: hci9: command tx timeout [ 1284.904473][ T5800] Bluetooth: hci8: command tx timeout [ 1285.464389][ T5800] Bluetooth: hci9: command tx timeout [ 1286.540969][T14926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.541111][T14926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.541367][T14926] bridge_slave_0: entered allmulticast mode [ 1286.554838][T14926] bridge_slave_0: entered promiscuous mode [ 1287.460339][T14926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.460477][T14926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.460727][T14926] bridge_slave_1: entered allmulticast mode [ 1287.462754][T14926] bridge_slave_1: entered promiscuous mode [ 1287.543340][ T5800] Bluetooth: hci9: command tx timeout [ 1288.150525][T14926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1288.769862][T14926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1289.622425][ T5800] Bluetooth: hci9: command tx timeout [ 1291.588903][T14932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.589061][T14932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.589317][T14932] bridge_slave_0: entered allmulticast mode [ 1291.594449][T14932] bridge_slave_0: entered promiscuous mode [ 1292.666161][ T5804] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1292.674171][ T5804] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1292.686310][ T5804] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1292.688482][ T5804] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1292.689348][ T5804] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1292.753082][T14932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.753217][T14932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.753488][T14932] bridge_slave_1: entered allmulticast mode [ 1292.756318][T14932] bridge_slave_1: entered promiscuous mode [ 1292.772660][T14926] team0: Port device team_slave_0 added [ 1293.574025][T14926] team0: Port device team_slave_1 added [ 1294.739681][ T5800] Bluetooth: hci10: command tx timeout [ 1295.413989][T14932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.818644][ T5800] Bluetooth: hci10: command tx timeout [ 1297.195825][T14932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.197555][T14926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1297.197572][T14926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.197603][T14926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.897497][ T5800] Bluetooth: hci10: command tx timeout [ 1299.532139][T14926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.532159][T14926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.532190][T14926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1300.328458][T14932] team0: Port device team_slave_0 added [ 1300.415560][T14932] team0: Port device team_slave_1 added [ 1300.976460][ T5800] Bluetooth: hci10: command tx timeout [ 1303.768363][T14939] chnl_net:caif_netlink_parms(): no params data found [ 1304.958806][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1304.958920][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.596691][T14932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1307.596710][T14932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.596742][T14932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1307.871244][T14926] hsr_slave_0: entered promiscuous mode [ 1307.878780][T14926] hsr_slave_1: entered promiscuous mode [ 1307.879981][T14926] debugfs: 'hsr0' already exists in 'hsr' [ 1307.880008][T14926] Cannot create hsr debugfs directory [ 1307.949713][T14932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1307.949732][T14932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.949762][T14932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.143766][T14943] chnl_net:caif_netlink_parms(): no params data found [ 1313.496779][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1313.509687][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1313.519407][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1313.536510][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1313.537407][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1315.611347][ T5800] Bluetooth: hci1: command tx timeout [ 1315.640946][T14932] hsr_slave_0: entered promiscuous mode [ 1315.646310][T14932] hsr_slave_1: entered promiscuous mode [ 1315.647515][T14932] debugfs: 'hsr0' already exists in 'hsr' [ 1315.647543][T14932] Cannot create hsr debugfs directory [ 1317.222094][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 1317.711897][ T5800] Bluetooth: hci1: command tx timeout [ 1319.767187][ T5804] Bluetooth: hci1: command tx timeout [ 1321.570802][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1321.598987][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1321.600720][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1321.602690][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1321.604160][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1321.850620][ T5800] Bluetooth: hci1: command tx timeout [ 1322.944899][T14939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.945539][T14939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.945882][T14939] bridge_slave_0: entered allmulticast mode [ 1322.949148][T14939] bridge_slave_0: entered promiscuous mode [ 1323.026361][T14939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.026517][T14939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.026836][T14939] bridge_slave_1: entered allmulticast mode [ 1323.030285][T14939] bridge_slave_1: entered promiscuous mode [ 1323.685420][ T5800] Bluetooth: hci3: command tx timeout [ 1325.764081][ T5800] Bluetooth: hci3: command tx timeout [ 1327.443418][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 1327.843065][ T5804] Bluetooth: hci3: command tx timeout [ 1328.767060][T14939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.749853][T14939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.822358][T14943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.822495][T14943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.822761][T14943] bridge_slave_0: entered allmulticast mode [ 1329.826063][T14943] bridge_slave_0: entered promiscuous mode [ 1329.921998][ T5804] Bluetooth: hci3: command tx timeout [ 1330.887548][T14943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.888061][T14943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.888320][T14943] bridge_slave_1: entered allmulticast mode [ 1330.913392][T14943] bridge_slave_1: entered promiscuous mode [ 1333.521713][T14939] team0: Port device team_slave_0 added [ 1333.909047][T14939] team0: Port device team_slave_1 added [ 1334.385063][T14943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1334.405417][T14954] chnl_net:caif_netlink_parms(): no params data found [ 1335.477946][T14943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.614013][T14939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1336.614034][T14939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.614064][T14939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.177056][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1337.214500][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1337.217148][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1337.246994][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1337.248250][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1337.374443][T14939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.374461][T14939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.374488][T14939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1338.370355][T14943] team0: Port device team_slave_0 added [ 1338.413205][T14943] team0: Port device team_slave_1 added [ 1339.357099][ T5800] Bluetooth: hci5: command tx timeout [ 1341.436976][ T5804] Bluetooth: hci5: command tx timeout [ 1341.661102][T13514] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1341.666866][T13514] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1341.682627][T13514] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1341.683951][T13514] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1341.684814][T13514] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1342.795430][ T5804] Bluetooth: hci6: command 0x0406 tx timeout [ 1343.514974][ T5804] Bluetooth: hci5: command tx timeout [ 1343.754777][ T5800] Bluetooth: hci8: command tx timeout [ 1345.157847][T14954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.158072][T14954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.158337][T14954] bridge_slave_0: entered allmulticast mode [ 1345.161569][T14954] bridge_slave_0: entered promiscuous mode [ 1345.594020][ T5800] Bluetooth: hci5: command tx timeout [ 1345.838031][ T5804] Bluetooth: hci8: command tx timeout [ 1347.365157][T14954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.365322][T14954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.365612][T14954] bridge_slave_1: entered allmulticast mode [ 1347.368723][T14954] bridge_slave_1: entered promiscuous mode [ 1347.912710][ T5800] Bluetooth: hci7: command 0x0406 tx timeout [ 1347.913050][ T5800] Bluetooth: hci8: command tx timeout [ 1349.286638][T14954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.381625][T14954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.991777][ T5804] Bluetooth: hci8: command tx timeout [ 1350.729911][T14954] team0: Port device team_slave_0 added [ 1350.738389][T14965] chnl_net:caif_netlink_parms(): no params data found [ 1350.808595][T14954] team0: Port device team_slave_1 added [ 1352.544748][T14969] chnl_net:caif_netlink_parms(): no params data found [ 1353.153269][ T5800] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1353.176310][ T5800] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1353.177888][ T5800] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1353.179121][ T5800] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1353.214975][ T5800] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1354.326199][T14954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1354.326217][T14954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.326245][T14954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1355.269595][ T5800] Bluetooth: hci9: command tx timeout [ 1357.348446][ T5800] Bluetooth: hci9: command tx timeout [ 1357.537164][T14965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.537307][T14965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.537636][T14965] bridge_slave_0: entered allmulticast mode [ 1357.541319][T14965] bridge_slave_0: entered promiscuous mode [ 1358.159925][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 1358.655269][T14965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.655504][T14965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.655791][T14965] bridge_slave_1: entered allmulticast mode [ 1358.659493][T14965] bridge_slave_1: entered promiscuous mode [ 1359.427274][ T5804] Bluetooth: hci9: command tx timeout [ 1359.851404][T14969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.851578][T14969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.851868][T14969] bridge_slave_0: entered allmulticast mode [ 1359.854909][T14969] bridge_slave_0: entered promiscuous mode [ 1360.903946][T14969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.904089][T14969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.904382][T14969] bridge_slave_1: entered allmulticast mode [ 1360.908241][T14969] bridge_slave_1: entered promiscuous mode [ 1360.915410][T14965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.506071][ T5804] Bluetooth: hci9: command tx timeout [ 1361.726130][T14965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.780083][T14977] chnl_net:caif_netlink_parms(): no params data found [ 1363.329375][T14969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1364.533691][T14969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1364.537062][T14965] team0: Port device team_slave_0 added [ 1366.207201][T14965] team0: Port device team_slave_1 added [ 1366.208446][T14985] chnl_net:caif_netlink_parms(): no params data found [ 1366.310753][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.310833][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.077219][T14969] team0: Port device team_slave_0 added [ 1370.061148][T14969] team0: Port device team_slave_1 added [ 1370.069156][T14965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1370.069173][T14965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1370.069201][T14965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1372.745627][T14965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1372.745641][T14965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1372.745662][T14965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1373.724070][ T5800] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1373.728047][ T5800] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1373.739874][ T5800] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1373.756299][ T5800] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1373.757147][ T5800] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1375.818912][ T5804] Bluetooth: hci10: command tx timeout [ 1378.529358][ T38] INFO: task syz.1.2570:14681 blocked for more than 144 seconds. [ 1378.529387][ T38] Not tainted syzkaller #0 [ 1378.529400][ T38] Blocked by coredump. [ 1378.529407][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1378.529418][ T38] task:syz.1.2570 state:D stack:25496 pid:14681 tgid:14674 ppid:13502 task_flags:0x40044c flags:0x00080001 [ 1378.529485][ T38] Call Trace: [ 1378.529493][ T38] [ 1378.529510][ T38] __schedule+0x16f3/0x4c20 [ 1378.529576][ T38] ? __pfx___schedule+0x10/[ 1378.529576][ T38] ? __pfx___schedule+0x10/0x10 [ 1378.529625][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1378.529658][ T38] rt_mutex_schedule+0x77/0xf0 [ 1378.529682][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1378.529705][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1378.529748][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1378.529775][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1378.529800][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1378.529821][ T38] ? __lock_acquire+0xab9/0xd20 [ 1378.529863][ T38] ? rcu_barrier+0x4c/0x570 [ 1378.529910][ T38] ? rcu_barrier+0x4c/0x570 [ 1378.529932][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1378.529953][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1378.529977][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1378.530007][ T38] rcu_barrier+0x4c/0x570 [ 1378.530036][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1378.530064][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1378.530092][ T38] netdev_run_todo+0x327/0xea0 [ 1378.530126][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 1378.530160][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1378.530188][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1378.530229][ T38] ? netdev_state_change+0x1ca/0x220 [ 1378.530254][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1378.530283][ T38] tun_chr_close+0x13f/0x1c0 [ 1378.530312][ T38] __fput+0x45b/0xa80 [ 1378.530349][ T38] task_work_run+0x1d4/0x260 [ 1378.530376][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1378.530399][ T38] ? do_exit+0x6b0/0x2300 [ 1378.530432][ T38] ? do_exit+0x6b0/0x2300 [ 1378.530470][ T38] do_exit+0x6b5/0x2300 [ 1378.530503][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1378.530547][ T38] ? __pfx_do_exit+0x10/0x10 [ 1378.530577][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1378.530599][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 1378.530639][ T38] do_group_exit+0x21c/0x2d0 [ 1378.530661][ T38] ? rt_spin_unlock+0x161/0x200 [ 1378.530687][ T38] get_signal+0x125d/0x1310 [ 1378.530739][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 1378.530770][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1378.530796][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1378.530836][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 1378.530871][ T38] exit_to_user_mode_loop+0x72/0x130 [ 1378.530908][ T38] ? ret_from_fork+0x532/0x870 [ 1378.530935][ T38] ret_from_fork+0x53f/0x870 [ 1378.530965][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1378.531001][ T38] ? __switch_to_asm+0x39/0x70 [ 1378.531024][ T38] ? __switch_to_asm+0x33/0x70 [ 1378.531049][ T38] ret_from_fork_asm+0x1a/0x30 [ 1378.531091][ T38] [ 1378.531102][ T38] INFO: task syz-executor:14813 blocked for more than 144 seconds. [ 1378.531118][ T38] Not tainted syzkaller #0 [ 1378.531129][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1378.531139][ T38] task:syz-executor state:D stack:22448 pid:14813 tgid:14813 ppid:1 task_flags:0x480140 flags:0x00080003 [ 1378.531215][ T38] Call Trace: [ 1378.531223][ T38] [ 1378.531237][ T38] __schedule+0x16f3/0x4c20 [ 1378.531290][ T38] ? __pfx___schedule+0x10/0x10 [ 1378.531341][ T38] rt_mutex_schedule+0x77/0xf0 [ 1378.531364][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1378.531401][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1378.531429][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1378.531454][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1378.531479][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1378.531501][ T38] ? __lock_acquire+0xab9/0xd20 [ 1378.531543][ T38] ? rcu_barrier+0x4c/0x570 [ 1378.531582][ T38] ? rcu_barrier+0x4c/0x570 [ 1378.531603][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1378.531624][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1378.531651][ T38] rcu_barrier+0x4c/0x570 [ 1378.531686][ T38] netdev_run_todo+0x327/0xea0 [ 1378.531721][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1378.531746][ T38] ? kasan_quarantine_put+0xdd/0x220 [ 1378.531774][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1378.531807][ T38] ? nsim_destroy+0x38d/0x680 [ 1378.531839][ T38] ? kfree+0x197/0x950 [ 1378.531863][ T38] ? nsim_destroy+0x38d/0x680 [ 1378.531910][ T38] nsim_destroy+0x3ae/0x680 [ 1378.531953][ T38] __nsim_dev_port_del+0x14d/0x1b0 [ 1378.531984][ T38] nsim_dev_reload_destroy+0x288/0x490 [ 1378.532009][ T38] ? nsim_drv_remove+0x50/0x160 [ 1378.532038][ T38] nsim_drv_remove+0x58/0x160 [ 1378.532062][ T38] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1378.532098][ T38] device_release_driver_internal+0x46f/0x800 [ 1378.532139][ T38] bus_remove_device+0x355/0x420 [ 1378.532171][ T38] device_del+0x515/0x8e0 [ 1378.532206][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1378.532240][ T38] ? __pfx_device_del+0x10/0x10 [ 1378.532282][ T38] device_unregister+0x20/0xc0 [ 1378.532312][ T38] del_device_store+0x2aa/0x360 [ 1378.532352][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1378.532385][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1378.532421][ T38] ? sysfs_kf_write+0x166/0x260 [ 1378.532447][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1378.532466][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 1378.532506][ T38] vfs_write+0x5d5/0xb40 [ 1378.532540][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1378.532573][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1378.532612][ T38] ? do_sys_openat2+0x154/0x1c0 [ 1378.532647][ T38] ksys_write+0x14b/0x260 [ 1378.532675][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1378.532704][ T38] ? do_syscall_64+0xbe/0xfa0 [ 1378.532747][ T38] do_syscall_64+0xfa/0xfa0 [ 1378.532775][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.532795][ T38] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1378.532819][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1378.532847][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.532869][ T38] RIP: 0033:0x7f5b6d68da7f [ 1378.532888][ T38] RSP: 002b:00007ffcf38c7db0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1378.532917][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f5b6d68da7f [ 1378.532933][ T38] RDX: 0000000000000001 RSI: 00007ffcf38c7e00 RDI: 0000000000000005 [ 1378.532947][ T38] RBP: 00007f5b6d713256 R08: 0000000000000000 R09: 00007ffcf38c7c07 [ 1378.532963][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1378.532976][ T38] R13: 00007ffcf38c7e00 R14: 00007f5b6e414620 R15: 0000000000000003 [ 1378.532980][ T5804] Bluetooth: hci10: command tx timeout [ 1378.533012][ T38] [ 1378.533031][ T38] INFO: task syz.3.2634:14900 blocked for more than 144 seconds. [ 1378.533047][ T38] Not tainted syzkaller #0 [ 1378.533058][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1378.533070][ T38] task:syz.3.2634 state:D stack:25160 pid:14900 tgid:14900 ppid:13509 task_flags:0x400040 flags:0x00080003 [ 1378.533121][ T38] Call Trace: [ 1378.533127][ T38] [ 1378.533140][ T38] __schedule+0x16f3/0x4c20 [ 1378.533195][ T38] ? __pfx___schedule+0x10/0x10 [ 1378.533241][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1378.533274][ T38] rt_mutex_schedule+0x77/0xf0 [ 1378.533295][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1378.533319][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1378.533360][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1378.533386][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1378.533410][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1378.533431][ T38] ? __lock_acquire+0xab9/0xd20 [ 1378.533472][ T38] ? rcu_barrier+0x4c/0x570 [ 1378.533503][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1378.533532][ T38] ? rcu_barrier+0x4c/0x570 [ 1378.533553][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1378.533574][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1378.533602][ T38] rcu_barrier+0x4c/0x570 [ 1378.533628][ T38] ? rt_write_unlock+0x191/0x230 [ 1378.533658][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 1378.533695][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 1378.533728][ T38] kvm_put_kvm+0x6ca/0xa80 [ 1378.533768][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 1378.533795][ T38] kvm_vm_release+0x46/0x50 [ 1378.533823][ T38] __fput+0x45b/0xa80 [ 1378.533857][ T38] task_work_run+0x1d4/0x260 [ 1378.533882][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1378.533914][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 1378.533946][ T38] exit_to_user_mode_loop+0xe9/0x130 [ 1378.533975][ T38] do_syscall_64+0x2bd/0xfa0 [ 1378.534005][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.534026][ T38] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1378.534049][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1378.534076][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.534099][ T38] RIP: 0033:0x7f10e4afefc9 [ 1378.534117][ T38] RSP: 002b:00007ffc6e5fd378 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1378.534139][ T38] RAX: 0000000000000000 RBX: 00000000001292a6 RCX: 00007f10e4afefc9 [ 1378.534155][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1378.534169][ T38] RBP: 00007f10e4d57da0 R08: 0000000000000001 R09: 0000001e6e5fd66f [ 1378.534184][ T38] R10: 0000001b30420000 R11: 0000000000000246 R12: 00007f10e4d55fac [ 1378.534199][ T38] R13: 00007f10e4d55fa0 R14: ffffffffffffffff R15: 00007ffc6e5fd490 [ 1378.534249][ T38] [ 1378.534309][ T38] [ 1378.534309][ T38] Showing all locks held in the system: [ 1378.534326][ T38] 6 locks held by ksoftirqd/1/30: [ 1378.534340][ T38] 1 lock held by khungtaskd/38: [ 1378.534353][ T38] #0: ffffffff8d5aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1378.534418][ T38] 3 locks held by kworker/u8:7/1012: [ 1378.534429][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1378.534489][ T38] #1: ffffc900048efba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1378.534543][ T38] #2: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1378.534615][ T38] 2 locks held by getty/5555: [ 1378.534628][ T38] #0: ffff88823bf660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1378.534681][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 1378.534743][ T38] 3 locks held by kworker/u9:3/5804: [ 1378.534756][ T38] 2 locks held by kworker/0:4/5882: [ 1378.534770][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1378.534825][ T38] #1: ffffc900051dfba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1378.534915][ T38] 1 lock held by syz.1.2570/14681: [ 1378.534929][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.534979][ T38] 1 lock held by syz.4.2587/14763: [ 1378.534993][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.535042][ T38] 7 locks held by syz-executor/14813: [ 1378.535055][ T38] #0: ffff888033e24480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1378.535110][ T38] #1: ffff88805de08478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1378.535169][ T38] #2: ffff888144768d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1378.535232][ T38] #3: ffffffff8e0f3c58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1378.535292][ T38] #4: ffff8880601070d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 1378.535353][ T38] #5: ffff888033545300 (&devlink->lock_key#13){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1378.535408][ T38] #6: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.535459][ T38] 3 locks held by kworker/u8:17/14818: [ 1378.535473][ T38] #0: ffff888030263938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1378.535524][ T38] #1: ffffc900075bfba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1378.535577][ T38] #2: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 1378.535636][ T38] 1 lock held by syz.7.2625/14859: [ 1378.535647][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.535695][ T38] 4 locks held by syz-executor/14867: [ 1378.535708][ T38] #0: ffff888033e24480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1378.535765][ T38] #1: ffff888035d51478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1378.535823][ T38] #2: ffff888144768d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1378.535885][ T38] #3: ffffffff8e0f3c58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1378.535952][ T38] 1 lock held by syz.2.2630/14879: [ 1378.535965][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.536016][ T38] 4 locks held by syz-executor/14898: [ 1378.536030][ T38] #0: ffff888033e24480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1378.536082][ T38] #1: ffff8880310fa478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1378.536135][ T38] #2: ffff888144768d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1378.536198][ T38] #3: ffffffff8e0f3c58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1378.536260][ T38] 1 lock held by syz.3.2634/14900: [ 1378.536272][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.536324][ T38] 4 locks held by syz-executor/14905: [ 1378.536337][ T38] #0: ffff888033e24480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1378.536396][ T38] #1: ffff88803548a478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1378.536453][ T38] #2: ffff888144768d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1378.536510][ T38] #3: ffffffff8e0f3c58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1378.536568][ T38] 4 locks held by syz-executor/14911: [ 1378.536579][ T38] #0: ffff888033e24480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1378.536635][ T38] #1: ffff88804c2d8478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1378.536689][ T38] #2: ffff888144768d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1378.536752][ T38] #3: ffffffff8e0f3c58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1378.536814][ T38] 1 lock held by syz-executor/14926: [ 1378.536827][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.536880][ T38] 1 lock held by syz-executor/14932: [ 1378.536893][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.536957][ T38] 1 lock held by syz-executor/14939: [ 1378.536970][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.537020][ T38] 1 lock held by syz-executor/14943: [ 1378.537032][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.537083][ T38] 1 lock held by syz-executor/14954: [ 1378.537095][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1378.537147][ T38] 4 locks held by syz-executor/14965: [ 1378.537161][ T38] #0: ffff888081b74e88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1378.562024][ T38] #1: ffff888081b740a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1378.562109][ T38] #2: ffffffff8e9cb138 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1378.562188][ T38] #3: ffff888031d97358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1378.562266][ T38] 2 locks held by syz-executor/14969: [ 1378.562281][ T38] #0: ffffffff8dfecfa0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1378.562347][ T38] #1: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 1378.562420][ T38] 1 lock held by syz-executor/14977: [ 1378.562435][ T38] #0: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 1378.562505][ T38] 2 locks held by syz-executor/14985: [ 1378.562520][ T38] #0: ffffffff8ed64208 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1378.562581][ T38] #1: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 1378.562652][ T38] 1 lock held by syz-executor/14993: [ 1378.562667][ T38] #0: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 1378.562737][ T38] 1 lock held by syz-executor/15011: [ 1378.562753][ T38] #0: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1378.562820][ T38] [ 1378.562827][ T38] ============================================= [ 1378.562827][ T38] [ 1378.562839][ T38] NMI backtrace for cpu 1 [ 1378.562859][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1378.562887][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1378.562904][ T38] Call Trace: [ 1378.562913][ T38] [ 1378.562927][ T38] dump_stack_lvl+0x189/0x250 [ 1378.562971][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1378.563010][ T38] ? __pfx__printk+0x10/0x10 [ 1378.563057][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1378.563086][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1378.563114][ T38] ? __pfx__printk+0x10/0x10 [ 1378.563150][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1378.563189][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1378.563218][ T38] watchdog+0xf60/0xfa0 [ 1378.563261][ T38] ? watchdog+0x1e2/0xfa0 [ 1378.563301][ T38] kthread+0x711/0x8a0 [ 1378.563341][ T38] ? __pfx_watchdog+0x10/0x10 [ 1378.563375][ T38] ? __pfx_kthread+0x10/0x10 [ 1378.563406][ T38] ? rt_spin_unlock+0x150/0x200 [ 1378.563437][ T38] ? rt_spin_unlock+0x161/0x200 [ 1378.563461][ T38] ? __pfx_kthread+0x10/0x10 [ 1378.563498][ T38] ret_from_fork+0x4bc/0x870 [ 1378.563531][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1378.563570][ T38] ? __switch_to_asm+0x39/0x70 [ 1378.563593][ T38] ? __switch_to_asm+0x33/0x70 [ 1378.563616][ T38] ? __pfx_kthread+0x10/0x10 [ 1378.563652][ T38] ret_from_fork_asm+0x1a/0x30 [ 1378.563698][ T38] [ 1378.563708][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1378.563738][ C0] NMI backtrace for cpu 0 [ 1378.563755][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1378.563788][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1378.563806][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1378.563838][ C0] Code: e8 de 09 ba fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5f c1 1b fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 0a 4b bf 05 cc 44 89 f9 80 e1 07 [ 1378.563855][ C0] RSP: 0018:ffffc90000167870 EFLAGS: 00000202 [ 1378.563872][ C0] RAX: 1ffffffff31d1700 RBX: 00000000000003fd RCX: 0000000000000000 [ 1378.563885][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1378.563897][ C0] RBP: ffffffff98e8c0f0 R08: 0000000000000000 R09: 0000000000000000 [ 1378.563915][ C0] R10: dffffc0000000000 R11: ffffffff8504b3d0 R12: dffffc0000000000 [ 1378.563930][ C0] R13: 0000000000000000 R14: ffffffff98e8be60 R15: 0000000000000000 [ 1378.563943][ C0] FS: 0000000000000000(0000) GS:ffff888126dfc000(0000) knlGS:0000000000000000 [ 1378.563957][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1378.563971][ C0] CR2: 00007f74393620fd CR3: 0000000036176000 CR4: 00000000003526f0 [ 1378.563988][ C0] Call Trace: [ 1378.563995][ C0] [ 1378.564004][ C0] wait_for_lsr+0x1aa/0x2f0 [ 1378.564038][ C0] serial8250_console_write+0x11bd/0x1b40 [ 1378.564072][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1378.564098][ C0] ? console_flush_all+0x13a/0xb40 [ 1378.564123][ C0] ? console_flush_all+0x476/0xb40 [ 1378.564146][ C0] console_flush_all+0x666/0xb40 [ 1378.564168][ C0] ? console_flush_all+0x13a/0xb40 [ 1378.564192][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1378.564223][ C0] __console_flush_and_unlock+0x9b/0x160 [ 1378.564243][ C0] ? legacy_kthread_func+0x136/0x1a0 [ 1378.564268][ C0] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 1378.564287][ C0] ? schedule+0x91/0x360 [ 1378.564314][ C0] legacy_kthread_func+0x13b/0x1a0 [ 1378.564338][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1378.564362][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1378.564387][ C0] ? __kthread_parkme+0x7b/0x200 [ 1378.564411][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1378.564438][ C0] kthread+0x711/0x8a0 [ 1378.564467][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1378.564490][ C0] ? __pfx_kthread+0x10/0x10 [ 1378.564516][ C0] ? rt_spin_unlock+0x150/0x200 [ 1378.564537][ C0] ? rt_spin_unlock+0x161/0x200 [ 1378.564554][ C0] ? __pfx_kthread+0x10/0x10 [ 1378.564582][ C0] ret_from_fork+0x4bc/0x870 [ 1378.564605][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1378.564630][ C0] ? __switch_to_asm+0x39/0x70 [ 1378.564648][ C0] ? __switch_to_asm+0x33/0x70 [ 1378.564666][ C0] ? __pfx_kthread+0x10/0x10 [ 1378.564694][ C0] ret_from_fork_asm+0x1a/0x30 [ 1378.564722][ C0] [ 1378.619584][ T5786] ------------[ cut here ]------------ [ 1378.619607][ T5786] WARNING: CPU: 1 PID: 5786 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 1378.619658][ T5786] Modules linked in: [ 1378.619679][ T5786] CPU: 1 UID: 0 PID: 5786 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1378.619704][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1378.619718][ T5786] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1378.619749][ T5786] Code: c7 c7 78 2d c5 8e 48 c7 c6 78 06 da 8c 48 c7 c2 2e dc d8 8c 4c 89 f9 e8 02 38 f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 24 ce 03 09 0f 1f 40 00 90 90 [ 1378.619769][ T5786] RSP: 0018:ffffc90004affd00 EFLAGS: 00010287 [ 1378.619788][ T5786] RAX: dd1031be1adaaa00 RBX: ffff8881432be100 RCX: 0000000000000000 [ 1378.619805][ T5786] RDX: 0000000000000000 RSI: ffffffff8b3ddbc0 RDI: 00000000ffffffff [ 1378.619822][ T5786] RBP: ffffc90004affe68 R08: 0000000000000000 R09: ffffffff8ac28b41 [ 1378.619839][ T5786] R10: dffffc0000000000 R11: fffffbfff1dac52f R12: 1ffff110052efa6d [ 1378.619856][ T5786] R13: 0000000000004300 R14: ffff8881432be108 R15: ffff88803206bc00 [ 1378.619874][ T5786] FS: 00005555604d9500(0000) GS:ffff888126efc000(0000) knlGS:0000000000000000 [ 1378.619893][ T5786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1378.619909][ T5786] CR2: 00007f743c137d60 CR3: 0000000036176000 CR4: 00000000003526f0 [ 1378.619928][ T5786] Call Trace: [ 1378.619937][ T5786] [ 1378.619950][ T5786] do_exit+0x105/0x2300 [ 1378.619993][ T5786] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1378.620023][ T5786] ? __pfx_do_exit+0x10/0x10 [ 1378.620065][ T5786] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1378.620099][ T5786] ? rt_spin_unlock+0x161/0x200 [ 1378.620125][ T5786] do_group_exit+0x21c/0x2d0 [ 1378.620161][ T5786] __x64_sys_exit_group+0x3f/0x40 [ 1378.620182][ T5786] x64_sys_call+0x21f7/0x2200 [ 1378.620207][ T5786] do_syscall_64+0xfa/0xfa0 [ 1378.620235][ T5786] ? lockdep_hardirqs_on+0x9c/0x150 [ 1378.620265][ T5786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.620289][ T5786] ? clear_bhb_loop+0x60/0xb0 [ 1378.620317][ T5786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.620339][ T5786] RIP: 0033:0x7f743b3aefc9 [ 1378.620359][ T5786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1378.620377][ T5786] RSP: 002b:00007ffd75178128 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1378.620399][ T5786] RAX: ffffffffffffffda RBX: 00007f743b44e5f7 RCX: 00007f743b3aefc9 [ 1378.620417][ T5786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 1378.620431][ T5786] RBP: 00007f743b44e615 R08: 00007ffd75175ec7 R09: 0000000000000004 [ 1378.620446][ T5786] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000009 [ 1378.620460][ T5786] R13: 0000000000000004 R14: 00007ffd7517824c R15: 00007ffd751782e0 [ 1378.620496][ T5786] [ 1378.620517][ T5786] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1378.620533][ T5786] CPU: 1 UID: 0 PID: 5786 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1378.620559][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1378.620573][ T5786] Call Trace: [ 1378.620582][ T5786] [ 1378.620591][ T5786] dump_stack_lvl+0x99/0x250 [ 1378.620625][ T5786] ? __asan_memcpy+0x40/0x70 [ 1378.620649][ T5786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1378.620686][ T5786] ? __pfx__printk+0x10/0x10 [ 1378.620737][ T5786] vpanic+0x237/0x6d0 [ 1378.620762][ T5786] ? __pfx_vpanic+0x10/0x10 [ 1378.620801][ T5786] panic+0xb9/0xc0 [ 1378.620824][ T5786] ? __pfx_panic+0x10/0x10 [ 1378.620869][ T5786] __warn+0x31b/0x4b0 [ 1378.620891][ T5786] ? kcov_task_exit+0x13c/0x150 [ 1378.620929][ T5786] ? kcov_task_exit+0x13c/0x150 [ 1378.620962][ T5786] report_bug+0x2be/0x4f0 [ 1378.620994][ T5786] ? kcov_task_exit+0x13c/0x150 [ 1378.621027][ T5786] ? kcov_task_exit+0x13c/0x150 [ 1378.621062][ T5786] ? kcov_task_exit+0x13e/0x150 [ 1378.621095][ T5786] handle_bug+0x84/0x160 [ 1378.621132][ T5786] exc_invalid_op+0x1a/0x50 [ 1378.621178][ T5786] asm_exc_invalid_op+0x1a/0x20 [ 1378.621202][ T5786] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1378.621236][ T5786] Code: c7 c7 78 2d c5 8e 48 c7 c6 78 06 da 8c 48 c7 c2 2e dc d8 8c 4c 89 f9 e8 02 38 f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 24 ce 03 09 0f 1f 40 00 90 90 [ 1378.621259][ T5786] RSP: 0018:ffffc90004affd00 EFLAGS: 00010287 [ 1378.621280][ T5786] RAX: dd1031be1adaaa00 RBX: ffff8881432be100 RCX: 0000000000000000 [ 1378.621299][ T5786] RDX: 0000000000000000 RSI: ffffffff8b3ddbc0 RDI: 00000000ffffffff [ 1378.621317][ T5786] RBP: ffffc90004affe68 R08: 0000000000000000 R09: ffffffff8ac28b41 [ 1378.621335][ T5786] R10: dffffc0000000000 R11: fffffbfff1dac52f R12: 1ffff110052efa6d [ 1378.621356][ T5786] R13: 0000000000004300 R14: ffff8881432be108 R15: ffff88803206bc00 [ 1378.621383][ T5786] ? rt_spin_lock+0x1c1/0x3e0 [ 1378.621421][ T5786] do_exit+0x105/0x2300 [ 1378.621469][ T5786] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1378.621500][ T5786] ? __pfx_do_exit+0x10/0x10 [ 1378.621538][ T5786] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1378.621575][ T5786] ? rt_spin_unlock+0x161/0x200 [ 1378.621605][ T5786] do_group_exit+0x21c/0x2d0 [ 1378.621634][ T5786] __x64_sys_exit_group+0x3f/0x40 [ 1378.621659][ T5786] x64_sys_call+0x21f7/0x2200 [ 1378.621686][ T5786] do_syscall_64+0xfa/0xfa0 [ 1378.621717][ T5786] ? lockdep_hardirqs_on+0x9c/0x150 [ 1378.621748][ T5786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.621774][ T5786] ? clear_bhb_loop+0x60/0xb0 [ 1378.621807][ T5786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.621832][ T5786] RIP: 0033:0x7f743b3aefc9 [ 1378.621854][ T5786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1378.621875][ T5786] RSP: 002b:00007ffd75178128 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1378.621899][ T5786] RAX: ffffffffffffffda RBX: 00007f743b44e5f7 RCX: 00007f743b3aefc9 [ 1378.621918][ T5786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 1378.621933][ T5786] RBP: 00007f743b44e615 R08: 00007ffd75175ec7 R09: 0000000000000004 [ 1378.621951][ T5786] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000009 [ 1378.621968][ T5786] R13: 0000000000000004 R14: 00007ffd7517824c R15: 00007ffd751782e0 [ 1378.622007][ T5786] [ 1378.622321][ T5786] Kernel Offset: disabled